Archived from groups: microsoft.public.win98.gen_discussion (More info?)

I had taken note on 7/19/05 of this critical update, which I was going
to update later on. Today this critical update is no longer at the
Windows Update site. Checked my installed updates, in case I had
updated it but forgot about it, but the update is no longer there.

Below is the note I had written down:

Security Update for JView Profiler (KB903235), 105 kb.
MS05-037
Issued: July 12, 2005
Version: 1.0
JView Profiler (Javaprxy.dll)
This update sets the "kill Bit" for JView Profiler (Javaprxy.dll).

My question: Is this ciritcal update for Windows 98 SE, and if so,
where can it be updated from?

Thanks to all for your help.

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

Not sure what's up with the update, I'm checking into that. However, the
update performs a relatively simple registry hack that you can do yourself.
Note the following paragraph from MS05-037 (the pertaining Security
Bulletin):

------------------------------------------------------
Does this update contain any changes to functionality?
No. Since the JView Profiler COM object was not designed to be accessed
through Internet Explorer, this update sets the kill bit for the JView
Profiler (Javaprxy.dll) COM object. To help protect customers who have this
object installed, this update prevents it from being instantiated in
Internet Explorer. For more information about kill bits, see Microsoft
Knowledge Base Article 240797. The class identifier (CLSID) for this object
is '03D9F3F2-B0E3-11D2-B081-006008039BF0'.
------------------------------------------------------

In short: Open REGEDIT and navigate to HKLM\Software\Internet
Explorer\ActiveX Compatibility. Look at the CLSID keys under that for a key
named "03D9F3F2-B0E3-11D2-B081-006008039BF0'" If that key doesn't exist,
create it. In that key, create a new DWORD named "Compatibility Flags", make
the value 400.

Should result in a value that looks like this: 0x000000400 (1024)

--
Gary S. Terhune
MS-MVP Shell/User


"Just me" <Justme489@myLink.com> wrote in message
news:5ltbg1l8a3i1dra4adsip58cofhobrpslq@4ax.com...
>I had taken note on 7/19/05 of this critical update, which I was going
> to update later on. Today this critical update is no longer at the
> Windows Update site. Checked my installed updates, in case I had
> updated it but forgot about it, but the update is no longer there.
>
> Below is the note I had written down:
>
> Security Update for JView Profiler (KB903235), 105 kb.
> MS05-037
> Issued: July 12, 2005
> Version: 1.0
> JView Profiler (Javaprxy.dll)
> This update sets the "kill Bit" for JView Profiler (Javaprxy.dll).
>
> My question: Is this ciritcal update for Windows 98 SE, and if so,
> where can it be updated from?
>
> Thanks to all for your help.
>
>

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

| In short: Open REGEDIT and navigate to HKLM\Software\Internet
| Explorer\ActiveX Compatibility.

HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\ActiveX
Compatibility\{03D9F3F2-B0E3-11D2-B081-006008039BF0}
Compatibility Flags 0x00000400 (1024) <<DWORD Value

Without "Microsoft", all is lost.


--
Thanks or Good Luck,
There may be humor in this post, and,
Naturally, you will not sue,
should things get worse after this,
PCR
pcrrcp@netzero.net
"Gary S. Terhune" <grystnews@mvps.org> wrote in message
news:ukeOlKOpFHA.3408@tk2msftngp13.phx.gbl...
| Not sure what's up with the update, I'm checking into that. However,
the
| update performs a relatively simple registry hack that you can do
yourself.
| Note the following paragraph from MS05-037 (the pertaining Security
| Bulletin):
|
| ------------------------------------------------------
| Does this update contain any changes to functionality?
| No. Since the JView Profiler COM object was not designed to be
accessed
| through Internet Explorer, this update sets the kill bit for the JView
| Profiler (Javaprxy.dll) COM object. To help protect customers who have
this
| object installed, this update prevents it from being instantiated in
| Internet Explorer. For more information about kill bits, see Microsoft
| Knowledge Base Article 240797. The class identifier (CLSID) for this
object
| is '03D9F3F2-B0E3-11D2-B081-006008039BF0'.
| ------------------------------------------------------
|
| In short: Open REGEDIT and navigate to HKLM\Software\Internet
| Explorer\ActiveX Compatibility. Look at the CLSID keys under that for
a key
| named "03D9F3F2-B0E3-11D2-B081-006008039BF0'" If that key doesn't
exist,
| create it. In that key, create a new DWORD named "Compatibility
Flags", make
| the value 400.
|
| Should result in a value that looks like this: 0x000000400 (1024)
|
| --
| Gary S. Terhune
| MS-MVP Shell/User
|
|
| "Just me" <Justme489@myLink.com> wrote in message
| news:5ltbg1l8a3i1dra4adsip58cofhobrpslq@4ax.com...
| >I had taken note on 7/19/05 of this critical update, which I was
going
| > to update later on. Today this critical update is no longer at the
| > Windows Update site. Checked my installed updates, in case I had
| > updated it but forgot about it, but the update is no longer there.
| >
| > Below is the note I had written down:
| >
| > Security Update for JView Profiler (KB903235), 105 kb.
| > MS05-037
| > Issued: July 12, 2005
| > Version: 1.0
| > JView Profiler (Javaprxy.dll)
| > This update sets the "kill Bit" for JView Profiler (Javaprxy.dll).
| >
| > My question: Is this ciritcal update for Windows 98 SE, and if so,
| > where can it be updated from?
| >
| > Thanks to all for your help.
| >
| >
|
|

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

If you actually have it, it will show up at...

(1) IE6, Help, About...
SP1, Q313829, Q328970, Q328389, Q324929, Q810847, Q813951, Q816506,
Q813489, Q330994, Q818529, Q822925, Q828750, Q824145, Q832894,
Q837009, Q831167, Q823353, Q867801, Q833989, Q834707, Q889293, Q867282,
Q891781, Q890923, Q883939, Q903235, & Q896727.

(2) "Control Panel, Add/Remove Programs"...
(a) Internet Explorer Q896727
(was Q883939, Q890923, Q891781, Q889293, Q834707, Q867801,
Q831167, Q832894, Q824145, Q828750, Q822925, Q818529)
(b) Internet Explorer Q903235 (was Q883939).

I took it when offered. Now, I cannot even see it in the Catalog...
http://v4.windowsupdate.microsoft. [...] efault.asp
....but, go look for yourself.

Here it is from my WU folder. (I take them into there, although I always
let the site do it's auto-download/install.)...
http://www.microsoft.com/technet/s [...] 5-037.mspx
....BUT looks like it says you must get it from the Windows Update site.

I think this is the Registry key Terhune means to say...

HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\ActiveX
Compatibility\{03D9F3F2-B0E3-11D2-B081-006008039BF0}
Compatibility Flags 0x00000400 (1024) <<DWORD Value

....Do you have it?


--
Thanks or Good Luck,
There may be humor in this post, and,
Naturally, you will not sue,
should things get worse after this,
PCR
pcrrcp@netzero.net
"Just me" <Justme489@myLink.com> wrote in message
news:5ltbg1l8a3i1dra4adsip58cofhobrpslq@4ax.com...
| I had taken note on 7/19/05 of this critical update, which I was going
| to update later on. Today this critical update is no longer at the
| Windows Update site. Checked my installed updates, in case I had
| updated it but forgot about it, but the update is no longer there.
|
| Below is the note I had written down:
|
| Security Update for JView Profiler (KB903235), 105 kb.
| MS05-037
| Issued: July 12, 2005
| Version: 1.0
| JView Profiler (Javaprxy.dll)
| This update sets the "kill Bit" for JView Profiler (Javaprxy.dll).
|
| My question: Is this ciritcal update for Windows 98 SE, and if so,
| where can it be updated from?
|
| Thanks to all for your help.
|
|

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

Thanks, PCR. Been looking at too much Registry stuff this morning. Eyes
started getting blurry.

--
Gary S. Terhune
MS-MVP Shell/User

"PCR" <pcrrcp@netzero.net> wrote in message
news:uMII9SPpFHA.320@TK2MSFTNGP09.phx.gbl...
>| In short: Open REGEDIT and navigate to HKLM\Software\Internet
> | Explorer\ActiveX Compatibility.
>
> HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\ActiveX
> Compatibility\{03D9F3F2-B0E3-11D2-B081-006008039BF0}
> Compatibility Flags 0x00000400 (1024) <<DWORD Value
>
> Without "Microsoft", all is lost.
>
>
> --
> Thanks or Good Luck,
> There may be humor in this post, and,
> Naturally, you will not sue,
> should things get worse after this,
> PCR
> pcrrcp@netzero.net
> "Gary S. Terhune" <grystnews@mvps.org> wrote in message
> news:ukeOlKOpFHA.3408@tk2msftngp13.phx.gbl...
> | Not sure what's up with the update, I'm checking into that. However,
> the
> | update performs a relatively simple registry hack that you can do
> yourself.
> | Note the following paragraph from MS05-037 (the pertaining Security
> | Bulletin):
> |
> | ------------------------------------------------------
> | Does this update contain any changes to functionality?
> | No. Since the JView Profiler COM object was not designed to be
> accessed
> | through Internet Explorer, this update sets the kill bit for the JView
> | Profiler (Javaprxy.dll) COM object. To help protect customers who have
> this
> | object installed, this update prevents it from being instantiated in
> | Internet Explorer. For more information about kill bits, see Microsoft
> | Knowledge Base Article 240797. The class identifier (CLSID) for this
> object
> | is '03D9F3F2-B0E3-11D2-B081-006008039BF0'.
> | ------------------------------------------------------
> |
> | In short: Open REGEDIT and navigate to HKLM\Software\Internet
> | Explorer\ActiveX Compatibility. Look at the CLSID keys under that for
> a key
> | named "03D9F3F2-B0E3-11D2-B081-006008039BF0'" If that key doesn't
> exist,
> | create it. In that key, create a new DWORD named "Compatibility
> Flags", make
> | the value 400.
> |
> | Should result in a value that looks like this: 0x000000400 (1024)
> |
> | --
> | Gary S. Terhune
> | MS-MVP Shell/User
> |
> |
> | "Just me" <Justme489@myLink.com> wrote in message
> | news:5ltbg1l8a3i1dra4adsip58cofhobrpslq@4ax.com...
> | >I had taken note on 7/19/05 of this critical update, which I was
> going
> | > to update later on. Today this critical update is no longer at the
> | > Windows Update site. Checked my installed updates, in case I had
> | > updated it but forgot about it, but the update is no longer there.
> | >
> | > Below is the note I had written down:
> | >
> | > Security Update for JView Profiler (KB903235), 105 kb.
> | > MS05-037
> | > Issued: July 12, 2005
> | > Version: 1.0
> | > JView Profiler (Javaprxy.dll)
> | > This update sets the "kill Bit" for JView Profiler (Javaprxy.dll).
> | >
> | > My question: Is this ciritcal update for Windows 98 SE, and if so,
> | > where can it be updated from?
> | >
> | > Thanks to all for your help.
> | >
> | >
> |
> |
>
>

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

Thanks for responding, Gary.

I'm using Windows 98SE with IE SP2 and now I'm not sure whether it
applies to me. But a month ago I'm sure I saw the update at the
Windows Update site as applying to me. I had made a note of it for a
later update. Today, however, the update was no longer there implying,
to me, that I may not need it afterall.

Below is what MS05-037 says under "Affected Components" at
http://www.microsoft.com/technet/s [...] 5-037.mspx
It reads in part:

"Internet Explorer 5.5 Service Pack 2 on Microsoft Windows Millennium
Edition -- Review the FAQ section of this bulletin for details about
these operating systems."

"Internet Explorer 6 Service Pack 1 on Microsoft Windows 98, on
Microsoft Windows 98 SE or on Microsoft Windows Millennium Edition
Review the FAQ section of this bulletin for details about these
operating systems."

From the above, seems that I may not need the update since I'm using
Win 98 SE with IE5.5. Am I correct in this?

I have all of the critical updates except the above and the Security
Update 891711 (MS05-002), which I've read that this latter may create
problems.

Again, thanks for responding.

John






On Fri, 19 Aug 2005 10:22:57 -0700, "Gary S. Terhune"
<grystnews@mvps.org> wrote:

>Not sure what's up with the update, I'm checking into that. However, the
>update performs a relatively simple registry hack that you can do yourself.
>Note the following paragraph from MS05-037 (the pertaining Security
>Bulletin):
>
>------------------------------------------------------
>Does this update contain any changes to functionality?
>No. Since the JView Profiler COM object was not designed to be accessed
>through Internet Explorer, this update sets the kill bit for the JView
>Profiler (Javaprxy.dll) COM object. To help protect customers who have this
>object installed, this update prevents it from being instantiated in
>Internet Explorer. For more information about kill bits, see Microsoft
>Knowledge Base Article 240797. The class identifier (CLSID) for this object
>is '03D9F3F2-B0E3-11D2-B081-006008039BF0'.
>------------------------------------------------------
>
>In short: Open REGEDIT and navigate to HKLM\Software\Internet
>Explorer\ActiveX Compatibility. Look at the CLSID keys under that for a key
>named "03D9F3F2-B0E3-11D2-B081-006008039BF0'" If that key doesn't exist,
>create it. In that key, create a new DWORD named "Compatibility Flags", make
>the value 400.
>
>Should result in a value that looks like this: 0x000000400 (1024)

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

I saw that myself, but was able to look for Class Identifier
"03D9F3F2-B0E3-11D2-B081-006008039BF0'", which was not there.

On Fri, 19 Aug 2005 15:32:28 -0400, "PCR" <pcrrcp@netzero.net> wrote:

>| In short: Open REGEDIT and navigate to HKLM\Software\Internet
>| Explorer\ActiveX Compatibility.
>
>HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\ActiveX
>Compatibility\{03D9F3F2-B0E3-11D2-B081-006008039BF0}
>Compatibility Flags 0x00000400 (1024) <<DWORD Value
>
>Without "Microsoft", all is lost.

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

On Fri, 19 Aug 2005 15:33:02 -0400, "PCR" <pcrrcp@netzero.net> wrote:

>If you actually have it, it will show up at...
>
>(1) IE6, Help, About...
>SP1, Q313829, Q328970, Q328389, Q324929, Q810847, Q813951, Q816506,
>Q813489, Q330994, Q818529, Q822925, Q828750, Q824145, Q832894,
>Q837009, Q831167, Q823353, Q867801, Q833989, Q834707, Q889293, Q867282,
>Q891781, Q890923, Q883939, Q903235, & Q896727.

Not there.
>
>(2) "Control Panel, Add/Remove Programs"...
> (a) Internet Explorer Q896727
> (was Q883939, Q890923, Q891781, Q889293, Q834707, Q867801,
> Q831167, Q832894, Q824145, Q828750, Q822925, Q818529)
> (b) Internet Explorer Q903235 (was Q883939).
>

Not in Add/Remove either.

>I took it when offered. Now, I cannot even see it in the Catalog...
>http://v4.windowsupdate.microsoft.com/catalog/en/default.asp
>...but, go look for yourself.
>
Also, not in Catalog

>Here it is from my WU folder. (I take them into there, although I always
>let the site do it's auto-download/install.)...

My WUpdate folder in C:\ is empty. The one in D: drive got wiped when
D: drive was replaced a month ago due to problems.

Is there a file where it shows all my Windows Updates, besided lokking
in the Catalog? And how do you copy the updates from the Help->About
Internet Explorer and the Add/Remove listing.

>http://www.microsoft.com/technet/security/Bulletin/MS05-037.mspx
>...BUT looks like it says you must get it from the Windows Update site.
>
>I think this is the Registry key Terhune means to say...
>
>HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\ActiveX
>Compatibility\{03D9F3F2-B0E3-11D2-B081-006008039BF0}
>Compatibility Flags 0x00000400 (1024) <<DWORD Value
>
>...Do you have it?

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

I've punted the issue upstairs. We'll see what they say. Regardless of
whether it applies to your system or not, the patch *should_be* available at
WU Catalog.

Your logic is faulty. The patch isn't offered for versions of IE earlier
than 5.5 because those versions simply aren't supported any longer. Haven't
been for some time. That does *not* mean that earlier versions aren't
vulnerable, particularly earlier versions of IE5 (not sure about IE4.) I
would bet that your IE *is* vulnerable, and in any case, the kill-bit fix I
suggested won't harm your installation. The Active-X control involved isn't
supposed to be used in IE, anyway. This issue is a common one--Active-X
controls that aren't meant to be accessed by IE but manage to be hooked by
malware into doing so, with all the security issues that suggests. Setting
the kill-bit is the common solution. Pretty much that entire ActiveX
Compatibility key of the Registry consists of kill-bits. A similar issue is
currently top news in security circles regarding MSDDS.DLL (an Office 2000
file), and the same solution is suggested.

As for KB891711 (MS05-002), that *did* have problems when it was first
issued. A replacement patch was issued within a short time and no longer
causes any problems that I'm aware of. You *should* install KB891711 without
delay.

--
Gary S. Terhune
MS-MVP Shell/User

"Just me" <Justme489@myLink.com> wrote in message
news:29dcg1ditrlneoat46k4tci2d0nol6rupr@4ax.com...
> Thanks for responding, Gary.
>
> I'm using Windows 98SE with IE SP2 and now I'm not sure whether it
> applies to me. But a month ago I'm sure I saw the update at the
> Windows Update site as applying to me. I had made a note of it for a
> later update. Today, however, the update was no longer there implying,
> to me, that I may not need it afterall.
>
> Below is what MS05-037 says under "Affected Components" at
> http://www.microsoft.com/technet/s [...] 5-037.mspx
> It reads in part:
>
> "Internet Explorer 5.5 Service Pack 2 on Microsoft Windows Millennium
> Edition -- Review the FAQ section of this bulletin for details about
> these operating systems."
>
> "Internet Explorer 6 Service Pack 1 on Microsoft Windows 98, on
> Microsoft Windows 98 SE or on Microsoft Windows Millennium Edition
> Review the FAQ section of this bulletin for details about these
> operating systems."
>
> From the above, seems that I may not need the update since I'm using
> Win 98 SE with IE5.5. Am I correct in this?
>
> I have all of the critical updates except the above and the Security
> Update 891711 (MS05-002), which I've read that this latter may create
> problems.
>
> Again, thanks for responding.
>
> John
>
>
>
>
>
>
> On Fri, 19 Aug 2005 10:22:57 -0700, "Gary S. Terhune"
> <grystnews@mvps.org> wrote:
>
>>Not sure what's up with the update, I'm checking into that. However, the
>>update performs a relatively simple registry hack that you can do
>>yourself.
>>Note the following paragraph from MS05-037 (the pertaining Security
>>Bulletin):
>>
>>------------------------------------------------------
>>Does this update contain any changes to functionality?
>>No. Since the JView Profiler COM object was not designed to be accessed
>>through Internet Explorer, this update sets the kill bit for the JView
>>Profiler (Javaprxy.dll) COM object. To help protect customers who have
>>this
>>object installed, this update prevents it from being instantiated in
>>Internet Explorer. For more information about kill bits, see Microsoft
>>Knowledge Base Article 240797. The class identifier (CLSID) for this
>>object
>>is '03D9F3F2-B0E3-11D2-B081-006008039BF0'.
>>------------------------------------------------------
>>
>>In short: Open REGEDIT and navigate to HKLM\Software\Internet
>>Explorer\ActiveX Compatibility. Look at the CLSID keys under that for a
>>key
>>named "03D9F3F2-B0E3-11D2-B081-006008039BF0'" If that key doesn't exist,
>>create it. In that key, create a new DWORD named "Compatibility Flags",
>>make
>>the value 400.
>>
>>Should result in a value that looks like this: 0x000000400 (1024)
>

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

It looks like to me you can download it here as per:

System Requirements
This update applies to Internet Explorer 6 Service Pack 1 (SP1) with the
following operating systems:
Windows XP SP1
Windows 2000 SP4
Windows 98
Windows 98SE
Windows Millennium
http://www.microsoft.com/downloads [...] laylang=en

Rick



Just me wrote:
> I had taken note on 7/19/05 of this critical update, which I was going
> to update later on. Today this critical update is no longer at the
> Windows Update site. Checked my installed updates, in case I had
> updated it but forgot about it, but the update is no longer there.
>
> Below is the note I had written down:
>
> Security Update for JView Profiler (KB903235), 105 kb.
> MS05-037
> Issued: July 12, 2005
> Version: 1.0
> JView Profiler (Javaprxy.dll)
> This update sets the "kill Bit" for JView Profiler (Javaprxy.dll).
>
> My question: Is this ciritcal update for Windows 98 SE, and if so,
> where can it be updated from?
>
> Thanks to all for your help.

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

Ah, the reason why they pulled it as I look through my software install
tracker history is that this last W98SE - MS05-038 896727 Cumulative
Security Update for IE6 also sets that:
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\ActiveX
Compatibility\{03D9F3F2-B0E3-11D2-B081-006008039BF0}
Compatibility Flags 0x00000400 (1024) <<DWORD Value
already, along with "48" other ActiveX Compatibility keys too!
....anyway, I imagine the new IE supercedes that KB903235 and so is why
they pulled it.

Rick


Rick Chauvin wrote:
> It looks like to me you can download it here as per:
>
> System Requirements
> This update applies to Internet Explorer 6 Service Pack 1 (SP1) with the
> following operating systems:
> Windows XP SP1
> Windows 2000 SP4
> Windows 98
> Windows 98SE
> Windows Millennium
>
http://www.microsoft.com/downloads [...] laylang=en
>
> Rick
>
>
>
> Just me wrote:
>> I had taken note on 7/19/05 of this critical update, which I was going
>> to update later on. Today this critical update is no longer at the
>> Windows Update site. Checked my installed updates, in case I had
>> updated it but forgot about it, but the update is no longer there.
>>
>> Below is the note I had written down:
>>
>> Security Update for JView Profiler (KB903235), 105 kb.
>> MS05-037
>> Issued: July 12, 2005
>> Version: 1.0
>> JView Profiler (Javaprxy.dll)
>> This update sets the "kill Bit" for JView Profiler (Javaprxy.dll).
>>
>> My question: Is this ciritcal update for Windows 98 SE, and if so,
>> where can it be updated from?
>>
>> Thanks to all for your help.

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

Sorry, I got the history wrong in your case. Somehow thought you had IE
5.01. Anyway, the end-point is that you *do* need to set the kill-bit, and
the patch doesn't seem to be available. So do it manually.

Did I understand you correctly? Did you previously see this patch listed at
WU? Because the response from MS is to quote the following paragraph from
the Security Bulletin:

"Note Critical security updates for these operating systems may not
be available at the same time as the other security updates that
are included with this security bulletin. They will be made available as
soon as possible following the release. When these security updates are
available, you will be able to download them only from the Windows
Update Web site."

That would indicate that the patch has not yet been posted for Win9x
systems.

--
Gary S. Terhune
MS-MVP Shell/User


"Gary S. Terhune" <grystnews@mvps.org> wrote in message
news:%23EG1q4PpFHA.708@TK2MSFTNGP09.phx.gbl...
> I've punted the issue upstairs. We'll see what they say. Regardless of
> whether it applies to your system or not, the patch *should_be* available
> at WU Catalog.
>
> Your logic is faulty. The patch isn't offered for versions of IE earlier
> than 5.5 because those versions simply aren't supported any longer.
> Haven't been for some time. That does *not* mean that earlier versions
> aren't vulnerable, particularly earlier versions of IE5 (not sure about
> IE4.) I would bet that your IE *is* vulnerable, and in any case, the
> kill-bit fix I suggested won't harm your installation. The Active-X
> control involved isn't supposed to be used in IE, anyway. This issue is a
> common one--Active-X controls that aren't meant to be accessed by IE but
> manage to be hooked by malware into doing so, with all the security issues
> that suggests. Setting the kill-bit is the common solution. Pretty much
> that entire ActiveX Compatibility key of the Registry consists of
> kill-bits. A similar issue is currently top news in security circles
> regarding MSDDS