MouseTrap - does your computer have MICE?

Website - Freeware

reviewed by ClifNotes, Jan 2006

comments?

Notes from Clif

You may have recently heard of the Windows Metafile vulnerablilty. Steve Gibson at GRC.com has written the definitive tool to detect if your system is still affected. He calls this vulnerability "Metafile Image Code Execution" or "MICE" and he calls his detection tool, "MouseTrap".

Do you still have MICE? Most of you are already protected by a Windows Update. Even so, I recommend you download and run MouseTrap, to be certain that your computer doesn't have MICE. If the MouseTrap shows you do have MICE, Steve's article on the WMF page contains tips on how to get rid of your little rodents.

http://www.grc.com/wmf/wmf.htm

Screenshot

larger pictures 1 2

Quote from GRC.com

• What versions of Windows have MICE?

Microsoft introduced Metafile Image Code Execution (MICE) into Windows NT4. Every version of Windows since NT4, including their not-yet-released Windows Vista (aka Longhorn), incorporated this code. Microsoft removed it immediately after it was discovered by clever hackers. Also remember that any fresh installation of Windows will initially be vulnerable to MICE exploitation until it is patched to eliminate this behavior.

• What about Windows 95, 98, 98SE and ME?

Contrary to Microsoft's dynamically changing and frightening statements about the vulnerability of these earlier versions of Windows, they completely lack the MICE facility that was engineered into all later versions of Windows. There is no possibility that any of the earlier versions are vulnerable, and no need for any security patching.