PDF Zero Day Vulnerability in the Wild

From sources all over the internet, Adobe made a sent out a Security bulletin yesterday:

APSA09-01 (Buffer overflow issue in versions 9.0 and earlier of Adobe Reader and Acrobat)

A critical vulnerability has been identified in Adobe Reader 9 and Acrobat 9 and earlier versions. This vulnerability would cause the application to crash and could potentially allow an attacker to take control of the affected system. There are reports that this issue is being exploited.

Adobe Plans on patching this March 11, 2009

and According to some other reports are saying:

Symantec Security Response has received several PDF files that actively exploit a vulnerability in Adobe Reader. We are continuing to remain in contact with Adobe on this vulnerability in order to ensure the security of our mutual customers.

[via Symantec]

Offline Update 5.0, Clone of Autopatcher to Some!!

Offline updater 5.0 has been released a couple months ago and I just realized it now.  This is an excellent tool for IT professionals who want to keep all your Systems up-to-date with the last patches from Microsoft.  The systems it supports are Windows 2000, Windows XP, Windows Server 2003, Windows Server 2003 x64, And Windows Vista / Server 2008.(32 bit and 64 Bit updates).

I find this a very useful program for people who have a multitude of problems, from not being able to get on the net to computer virus infections.  This is really good for big businesses that want to update a lot of systems in easy way without having to wait for downloads of updates to install.   You can take a DVD and update on the fly within Mins.   DVD being Cheap or buying them in bulk helps saves time and money for the company.   Less time spent downloading the updates and more time actually getting work done.  As with the Conflicker, Downadup, and to some the Conflickr Trojan, if you got infected with that little worm.  This would help install the updates that it prevented you from doing in the first place.  I also found that once you download do the update the files are kept on the hard drive so you no longer have to redownload them again.  You just update the updates every second Tuesday of the month and it downloads the newest patches and creates a whole new ISO for you to burn.

Fix Shutdown Problems in Vista!

In the Patch Tuesday update, Microsoft quietly released the patch to fix Windows Vista machine shut problems. This patch should of came sooner.

KB957388

Update for Windows Server 2008 and Windows Vista

Install this update to resolve a set of known application compatibility issues with Windows Server 2008. After you install this item, you may have to restart your computer.

This was not a critical update and it seems to resolve so many issues with compatibility.  One thing it seemed to fix on my system has been the shutdown time.  It is now quite fast, it would normally take me 2 to 3 mins to shutdown, now it does it in less than a Minute.   So if you’ve not installed this update please install it soon.   I would like to know if people are seeing the same thing I am.   I’ve found a great resource on fixing it if you are still having problem, it talks about how to check your system performance. Although this is been doing it lately with these programs not loaded or even running, they still seem to cause problems so now I get the feeling it has to do with legacy programs.  This should fix most of the problem with older programs.

The Important Windows patches Released Today

As many of you know we talked about the Non-critical patches that Microsoft will release today.  IF you want to read those please go and check it out.   I’ll be talking about the REALLY important ones that Microsoft has kept tight until now.    These are the more important ones but I will list the ones that I previous talked about to better help people recognize the non-important ones:

KB955839

KB957388

KB890830

KB905866

These are just the tip of the iceberg. although this list are not A lot.  I’d wanted to let people know about what people coin “Exploit Wednesday“.  I really don’t know if this is a Myth or actually does exist but I’d figure we discuss the problems associated with installing the critical updates and try to tell you which ones should be installed As soon as possible.  Though people have in the past used a Virtual Machine to see if there is any problem, that should be your first step if you don’t want to have any problems with these updates.  I don’t suggest testing it more than a couple days.  Here are some good Virtual Machine software to try out yourself:

sinowal.trojan Problems.

Trojan-PSW:W32/Sinowal.CP drops and loads a password stealing component on the infected system and tries to steal account information from it. It also tries to steal information that is required to access certain online banks’ and online payment systems’ websites.

[via F-secure]

It seems to be a very hard virus to remove but there are ways to get rid of this virus.   Some tips and tricks to get rid are:

• Check out my Anti-Virus Page
• Computing.net
• The Geek Police
• How to Detect Sinowal

This are the beginning steps to get rid of a Virus but it will be a really hard virus because it wants to stay in your system.  You should also Restart in Safe mode and Try to remove that virus that one.   You will also want to disable your system restore due to the fact that it will be in there and might come back if you restore your system.  Just some simple tips to help keep you safe on the net.

Adobe Lays off 600 people

Adobe might also hire new workers within Europe, he said. The cuts will be formally announced on Dec. 15 when the company releases its fourth-quarter financial report.

[via Infoworld]

This is another technology company to lay off people, there are some talks that it would be around 600 workers on some blogs. Others are just talking about the Management shakedown, and some workers are going to be moved around. I don’t know who is going to be laid off, or if there will be a tremendous amount of people who will need to start looking for a job. I do know that Adobe is looking for ways to cut cost, and I expect they are having problems just because of the Recession.  If you want to check out other jobs that have laid people off, just click this link.

Adobe also announced the implementation of a restructuring program, and has taken steps to reduce its headcount by approximately 600 full-time positions globally. The restructuring will result in anticipated pre-tax charges totaling approximately $44 million to $50 million. The Company expects approximately $28 million to $30 million of the restructuring charges to be recorded in the fourth quarter of fiscal year 2008.

Microsoft issues Vista patches out of Monthly Patch Cycle!

Microsoft issues Out of cycle patch for Vista.   These patches are as Followed:

Kb957321

An update rollup is available for the Microsoft Windows Imaging Component (WIC) in Windows Vista or in Windows Server 2008. This update rollup resolves the problems that are documented in the following articles in the Microsoft Knowledge Base:

954708 An update to add support for the serialization of complex Extensible Metadata Platform (XMP) data types in the Windows Imaging Component

945060 There may be inconsistencies in the Extensible Metadata Platform (XMP) and Exchangeable Image File (EXIF) values for an image file in Windows Vista and in Windows XP

KB959108

The Windows Portable Device (WPD) API collects and transfers Software Quality Metrics (SQM) data to Microsoft servers. The SQM data is collected only on an opt-in basis through the Microsoft Customer Experience Improvement Program. An update is available that disables the collection and transfer of SQL data to Microsoft servers.

This update affects Windows Vista-based computers, Windows Vista Service Pack 1 (SP1)-based computers, and Windows Server 2008-based computers that are in the Microsoft Windows Media Player Customer Experience Improvement Program.

Podcasters are in up in arms over Ustream.tv

REVISED:

Podcasters and LifeCasters alike are not so happy with Ustream.tv right now. They have started to introduce there own ads overlay to where the lifecaster or podcast involved doesn’t get any revenue. One such Podcast right now is Mike Smith, Host of the Miketechshow Podcast, and Also Todd Cochrane, Host of Geeknewscentral.  In a Recent post from Todd, he stated he is going to leave Ustream.tv.

Mike Smith in his last Podcast talked about this subject and why he is really unhappy with Ustream.tv.  He says that the ads could possible violate his TOS with Techpodcast Network.  He also would like to share the revenue because he was one of the founding podcasters that started to use Ustream.tv.   He’s worried that there will be adult theme ads showing on his video stream and that He wants this to be family friendly.  He’s said before the show if he has to he’ll go to other networks.   Some of the networks that might help him out:

• Mogulus
• Stickam
• Ustream.tv
• Blogtv

Cricket USB UM100 Broadband Wireless Modem Review.

The UM100c is No Longer Available, Please check out the Cricket A600 Modem Review Or the UM185 Broadband modem. The UM185 modem might be a replacement to the UM100.

After a full week of playing around with this USB wireless, I wanted to talk about it. So let’s break it down into pieces.

1. (USB Broadband A600 Modem card for Free after Instant online rebates and Mail in rebate Free shipping & first month free! Shop today.)
2. Installation –  The installation of the USB was not to difficult.  I did have to do some more steps than this:  Install the Software, then hooked up the USB device to the USB port.
3. Manual Activated the Broadband –  For some reason in my area they had several people have problems with the broadband activation.  So I had to activate it manually!!

After that all went well, I was on the internet just a cruising along.  I did however wonder why I was getting such a slow response speed.  When I went traveling I thought I would share some of my local results with you to better show you my speed.  All these test were done at

Did the Xbox Experience break netflix on Demand activation?

According to Google Trends people are trying to activate there Xbox Experience with Netflix.  This could be a problem for Netflix, I just tried and they are extremely slow in response.   I am willing to guess that later on tonight the Netflix will go down when everyone comes home from work and tries the new Xbox Experience with Netflix.   I’ve heard of problems with activating the Netflix on the Xbox 360, this will become 10 times as bad tonight when people want to hook up and try out this new service from Netflix.   Microsoft should of released this one day at a time for each time zone.   Some blogs talking about the problems that might come along with the update are:

• Columbia Tribune
• The Standard
• Joystiq
• Venture Beat

Although this is just a few that talks about the experience and Netflix problems there are going to be more tonight when people start to come home from work wanting this service.   I would bet over 100$ it will probably go down because to many request to sign up!! I hope they have the IT guys ready for this tonight or it will be a long night!!

You have an undelivered UPS/FEDEX Package. (Virus)

From what I’ve seen so far. There seems to be a new rash of email going around with the heading that makes it look and feel like either UPS or Fedex. Saying that you have an undelivered package from them and to either print the order confirmation or to click a link. I will say this once, if you get this delete it. Fedex and UPS will never hide the link and tell you have an package waiting in the email. They will leave a note your door. You must ask yourself how Fedex/UPS found out your email address to tell you have a package waiting? They don’t and they won’t, just a fact.

UPS/FedEx Delivery Failure : Snopes

TROJ_DLOADR.GG and TSPY_ZBOT.NM Trojan, which will Monitor and try to steal your data. The other one is a ZBot and will try to steal you data also. If you need help removing this virus, I’d suggest checking out my other virus article Avg detected Trojan Horse Generic 12.htc?. There are a lot of ways to remove this virus but the first step is never click on any links in your emails. I also wrote about Some Important programs to prevent yourself from having viruses and Malware!! This will help prevent and fix the common virus problems you might have.

Mattel introduces the new Welfare Barbie.

Mattel will be introducing the new welfare barbie doll,or laying off 1,000 jobs. According to Bloomberg and I’ll quote:

Mattel Inc., the world’s largest toymaker, said it would cut about 1,000 jobs, or 3 percent of its global workforce, as it faces higher manufacturing costs amid the worst financial crisis since the Great Depression.

[via Bloomberg]

If you’re like me and you want to cringe every time you hear another place is laying off people. I say we are still in a downward spiral. Everyone is saying that even Jason Calacanis, in his recent email he sent to all his fellow readers, he talked about the Rich not buying anything they didn’t need. He said that is good, I however wonder how far the hole goes before we hit rock bottom.

According to some analysts, they are talking about this lasting another year or more. On another note, according to Kotaku and I’ll quote on this one to:

We have received a letter purportedly sent by THQ CEO Brian Farrell to explain to his employees the reasoning behind the company closing five studios and laying off staff from two others. The closed studios are Helixe, Sandblast Games, Locomotive, Mass Media and Paradigm.

Some bloggers are Hyping Windows 7 operating System.

After looking around the blogosphere, I’ve come to the realization that people are starting to get hyped up over Windows 7.   In one blog post from it.toolbox.com:

Windows 7 is due to hit beta and release in 2009, and odds are likely that if the pundits, all of us on the blogosphere and other places like PC World, Cnet, and others all agree that this works the way a computer was supposed to work will help drive sales. What is also interesting is that Microsoft is really pushing to get this puppy out. Along with the bloat are gone the five years of development.

[Via It.Toolbox.com]

I totally agree with what he is saying on the possibility to have an operating system actually do what it is told. Some things people have been looking for in there Searches in regards to Windows Vista are:

• Vista Shutdown Problems
• User Account Control
• Vista SuperFetch
• Vista and Battery Life
• What Microsoft Doesn’t want you to know!!

Are you asking to be scammed?

As we go further into the economic death, we are faced with the most undesirable aspect of the human culture.  That is to say, scammers are going to use the chance to find people to scam.  I don’t say this lightly because scammers have become more cunning and dubious through the years.  They are actually using the internet as well as most companies.  They are going to sites like Monster.com, Careerbuilder.com, and other hiring sites to get people to apply for jobs.

<<See Previous Post – Nationwide Marketing Scam

Having said that, I recently had a problem with being tried to be scammed.  I applied to a job posted on Careerbuilder and that is how they got a hold of my home address.  I did not think about the security problems associated with applying for jobs on line, until recently.

As you can see that is how they got a hold of my information and have made myself vulnerable to scams and also, other potential problems.  I am talking about Theft ID and also spam.  Although spam is to be expected with anything we do online.  I’ve come to the conclusion that we will always have to deal with spam.   I wanted to talk about how to be careful when you apply for online jobs and  put your information out on the internet.  I’ve started taking some steps to prevent this from happening again.

Taking Safety out of the Equation

Sermon is “Consumed for Safety”

Pastor Dr. Bill Boyd

[display_podcast]

Roman 8:28 “And we know that in all things God works for the good of those who love him, whohave been called according to his purpose.“

Yes you can see this is a test to find out the problems and or recommendations to get a podcast going for this church.  I’m using you to test this out.  I want to know if you like it/hate it or just don’t care.  I’d also like to know if the sound quality is good, what I might do differently, if any?   You see, I’m planning on creating a podcast feed outside of this blog for just there sermons for the congregation to see or anyone else but before we go that far.  I am needing to see how well this works with podpress.  So if you want to hear more, please email me and I’ll be more than glad to put you on the email list once it is finally finished.  You can find my email address from the about me page.

Backup your Mozzila Thunderbird profiles

So you have all this mail you want to back up in case something terrible happens to your hard drive.  So here is ways to backup your email and other programs in Vista.  I think Vista has a new way of keeping program profiles in an hierarchical setup.  So what is the HIDDEN directory it is:

C:\Users\[USER]\AppData\Roaming\Thunderbird\Profiles

Now as you can see your Thunderbird profile is in a hidden directory in the AppData Directory.  You can easily get to the hidden directory by typing %appdata% {enter} in the search bar of Vista.  Now How do you backup and restore.   The program I use to backup is GoodSync.  I send the data to the cloud and when I need it I can restore it back to the directory. Now what about restoring, if you have to do a complete re-install of Thunderbird you can always copy over the back up to the Thunderbird Profiles directory and install Mozilla Thunder bird and it should see it.   If by chance you load up Thunderbird and you have to re add everything you would have to delete everything in that directory and then restore from the back up.

Economic Death?

Are we having an Economic Death?  If so how could we change that?  Is it to Late?  In a recent CNN release President Bush talk about the Economic Depression of the US.

And you know what. I am not sure how to feel about this. Should I be worried or do I have any reason to worry? Having said that I like to talk about the problems that we might face if we go into a more economic depression and how might that affect your lifestyle.

Having seen this coming the past year, I have been growing more and more uneasy with the way the U.s. Economy is turning out. Worried about paying bills off and earning enough money for my kids and wife. The typical situation for the average family. If your like me you have been struggling to pay bills and deciding on what is more important. You fixing your car or upgrading your PC/Laptop. These questions are undoubtedly going to cause problems with people who do work on computers to become almost non-existent. Not saying that is going to be to difficult to become truth.

Taking back Program Controls : For the Beginners!

So, let’s face it, this is one of the most annoying problems there are with programs.   Programs that you think are shut down but are actually still active in the Taskmanager.  So I figured I’d talk about some of the most common fixes for these problems.    Now as you know there can be any number of programs or glitches as they say, causing the problems.  So let’s talk about the why, shall we.

Most of the time programs don’t quit because they are waiting for some kind of response from the system or the System is waiting for the program to close by itself.  It could also be a problem with a Virus or Root kit?  How do you fix it?

Fixing the problem is somewhat just trial and Error.  It isn’t always the hardest thing to do but sometimes people overlook the easiest solutions.   So here are some easy ones:

• Check to see if one of the Microsoft updates are causing the problem –  Sometimes you might not realize it, but having installed an update can cause problems like KB951748.  That one caused a major Headache for Zonealarm.  So it is wise to check each months updates when you start seeing problems, sometimes it could of been happening for a while but it can sometimes cause troubles.

Fixing the Adobe Problem!!

If your have been having problems with Flash Players stoping after 2 seconds of playing.  I have a few ideas to try to get rid of the problem.  It used to happen all the time with Vista in the early days.  Here’s what I did to occasionally get the flash player to work:

• Cleaning out the Prefetch Directory! — Having seen this from time to time. If you have programs startup that might need to be refreshed this will refresh them so that they run like new. You occasionally can get programs that will load in a odd way and this will fix that also.

• You want to be more anonymous? — Cleaning out your cache on your browser can sometimes fix the problem. It’s like anything else it can sometimes be corrupted.

• Some Important programs to prevent yourself from having viruses and Malware!! — Having seen this with my own two eyes, if you have a viruses or malware on your system that too can cause problems with playback of flash media.  So just double check making sure you don’t have any viruses.
  

Bandwidth Tools For Monitoring your bandwidth

<<See Previous Post

So I’ve done some looking around for bandwidth programs.  So here’s what I found so far.  The programs I’ve got listed are not test and are therefore your responsible for any and all use of the programs.

• FreeMeter Bandwidth Monitor For Windows – Monitor network bandwidth (C#.NET 2k/XP+). Desktop and Systray graph. Configurable connection speed, update interval, color, transparency. Monitor any or all network interfaces. Ping/Trace/UPnP utilities. Email notifier (POP/IMAP). Requires .NET 2.0.

• Pipelog – Windows Bandwidth Meter — Pipelog is a Windows bandwidth meter that gives live statistics of accumulated bandwidth usage. It is written in C# and runs on the .NET Framework.

• Windows Service Monitor – Monitor and automatically restart Windows Services with this small Win32 command line utility. Windows Service Monitor (WinSMon) can monitor several services, restart services that stop/fail and limit the number of restart times.

• iptotal — iptotal is an IP traffic monitor. It listens to a network interface in non-promiscuous mode, and measures IP bandwidth usage. After the specified number of seconds, the average throughput is printed at total, input and output usage.

Running old programs on Vista (tips and tricks)

So We’ve talked about how to get Vista to shut down better.  So I thought we talk about getting Windows XP programs to run on Vista and be more stable.  You can do this with Windows XP, ME, 2000, NT,. and 95 programs.

• Run the program in compatibility mode – This is something Vista comes with now for running old programs in Vista. To do this you will have to do some minor things.  Go to where the program is and right click on the program.  Select properties>compatibility.  Select “Run this program in compatibility  mode for:” Select  windows Operating System that you think would work with the program.

• Run the program as Administrator –  This is a really good tip and trick to sometimes get programs to run with vista.  It goes hand in hand with the last one.  Right click on the program and select “Run as Administrator”.  I find some old programs don’t know about the kernel protection in Vista and you need to give them permission to use the kernel for the program to work.

Four Graphical User Interfaces in Vista that just needs fixed:

The First and foremost is the User Access Control, UAC for short. The UAC is never been ready for Windows. Microsoft knew this and so did most of the Beta testers who were formerly known as LongHorn Project. The UAC has several shortcommings. The one that really burns my biscuit is after you disable the UAC. The way you disable the UAC is by Start, type msconfig.exe [ENTER]. Once Msconfig loads up you click on the tools tabs, Looking for [Disable UAC] hightlight it. Click Launch. That’s it no more UAC, btw You have to have ADMIN for all users to be able to disable UAC for all accounts. Now everytime I boot up it comes up with a Security alert saying, your system is not protected(A scare tactic that I do not like). So you have to google to find the other reg code needed to disable that little icon from showing up. Go google and find out how.