BigFix Inc. Helps Users Automatically Plug Major Windows XP Security Hole.

Business Editors/High-Tech Writers

EMERYVILLE, Calif.--(BUSINESS WIRE)--Dec. 21, 2001

BigFix Inc. announced today that users of Windows-based computers who use the BigFix(R) i-prevention(TM) support system were able -- over the past 24 hours -- to fix the newly discovered Windows XP security flaw that can expose a PC to hackers. Those users with the BigFix software were alerted immediately and able to remedy the problem with a single click. PC users who currently do not use the BigFix software can download it from http://www.bigfix.com.

The patented BigFix i-prevention system identifies vulnerable Windows machines, proactively alerts their users and allows them to plug the security hole automatically. Microsoft posted the patch on its website on Dec. 20 for users who know where to look for it and who are confident they can install it correctly. However, many more Windows XP users, unaware of the existence of the security hole or its patch, will not have the benefit of the fix, clearly demonstrating the critical need and efficacy of the proactive BigFix i-prevention support system.

Users of Microsoft Windows XP can fall victim to an extremely serious hacker attack by doing nothing more than logging onto the Internet. The problem stems from software called Universal Plug and Play, or UPnP, which lets Windows identify remote devices, such as printers or Internet-enabled televisions, and automatically install drivers for such devices. Unfortunately, hackers can also introduce hostile drivers to the operating system. When Windows "detects" the hostile drivers, it then downloads and installs them, allowing the hacker to take control.

Some versions of Windows ME and Windows 98 are also susceptible, if the users have installed UPnP updates to their systems.

A key benefit of the BigFix i-prevention system is its ability to precisely identify only those users affected by a problem, proactively alert them to the existence of the problem and provide a one-click solution. Therefore, users can keep their computers running at their healthiest state at all times.

When a problem is detected, a small, unobtrusive alert allows the affected user to display a Fixlet(R) message, which is a pop-up box written in natural language offering the automatic one-click action to fix the problem. Automated actions include plugging security holes, defending against virus attacks, modifying registry keys and downloading and installing patches and updates to a variety of Windows software packages. Throughout the process, no information about the user or the PC is sent to anyone, including BigFix, Inc.

For more about BigFix, Inc. and to download the BigFix Client for free, go to www.bigfix.com. The BigFix client is also available at www.download.com. Enter "BigFix" in the search box to go to the download page. Downloaders at that popular site are currently giving BigFix v1.6.1.6 a 90% approval rating.

About BigFix, Inc.

BigFix, Inc. was founded in 1997 to deal with the looming crisis in technical support -- a world with a billion computing devices, running thousands of software products interacting with thousands of hardware products, producing an infinite number of conflicts that threaten to outstrip the industry's ability to provide an acceptable level of customer service. The BigFix(R) i-prevention(TM) process -- patented, implemented and in use worldwide -- is a highly proactive technical support technology that is revolutionizing the industry by solving PC problems before they cause failures. Headquartered in Emeryville, California, BigFix is privately held and venture funded. Visit our website at www.bigfix.com.

BigFix(R) and Fixlet(R) are registered trademarks, and "Fix it before it fails(TM)," i-prevention(TM), and the BigFix logo are trademarks of BigFix, Inc. All other trademarks are the property of their respective owners.