Being a Bad BOT!

By Paul | Feb 23, 2009

I had the strangest thing happen today, Seemed a Bad Bot was Crawling my pages. I was getting at least 60 page views an hour from this bad Bot!! The individual IP’s of this Bad Are:

65.208.151.112
65.208.151.113
65.208.151.114
65.208.151.115
65.208.151.116
65.208.151.117
65.208.151.118
65.208.151.119

After the first initial hour of this going on, I started wondering what this bot was doing. I did some more research into this little bot. I did find out it is owned by Kintiskton LLC. (Twitter Search)

Anyways It bothers me that when you do a Google Search for this company, it comes back with no company. Some people have already did there research and have come up with very little.

I dug even more and some are saying this might be Homeland Security, and I have my own thoughts on this. I might be paranoid myself but if there is no company out there and the IP keeps coming back, I assume it is BAD mojo. Some people worry that it is a hacker probing for vulnerabilities and that worried me.

I decided with the Help from Godaddy, to ban the lot of IPs. I figure someone is trying to get information or trying something they shouldn’t, I’ll stop it myself. If you have Wordpress and are also having problems with this ip, you can ban it by adding this to your HtAccess file:

Xbox Zune? or A Zune Phone?

By Paul | Dec 10, 2008

Comments Off

Could Microsoft be planning to talk about the Zune. Some blogs are talking about how this will be talked about in next month at CES. According to some posts and I’ll quote:

The Tech Trader Daily column earlier this week on Barron’s reports that Global Equities Research analyst Trip Chowdhry predicts Microsoft will reveal a Zune phone next month at CES. Chowdry expects that much like Apple’s iPhone the device will combine music player capabilities with, he says, “some motion enhancement features.”

[Via 1UP]

Although this is a theory, and I can see this happening due to the fact that Microsoft has always like to tie together there products. So what makes this even more tangible is the fact that Microsoft hinted about this in the past:

Dated Dec 20, 2006

Xbox European boss Chris Lewis has admitted for the first time that Microsoft is considering games content for the recently released portable multimedia player Zune.

[via Gamasutra]

As you can see Microsoft did hint this and probably will be fact sooner or later. Some sources are claiming they have this already in the works but it’s still a rumor. I’ll let you decide for yourself.

Trojan.PWS.ChromeInject.A is not a Firefox plugin.

By Paul | Dec 5, 2008

Comments Off

A new type of malware designed to harvest web passwords has been detected in-the-wild by BitDefender’s antivirus research labs. This latest e-threat – called Trojan.PWS.ChromeInject.A – is intended to be delivered onto a compromised computer system by other malware for subsequent download into Mozilla Firefox’s Plugin folder. Once installed it gets to work every time Firefox is started.

[Via Bitdefender]

So having seen this I thought I’d come up with ways around this to better protect yourself. One way to prevent this from getting your sensitive data is to get a program like Sandboxie. You could stop using Firefox that would be silly, because right now Firefox is more secure than Chrome and Internet Explorer. I’d also suggest checking out my Anti-spyware page and Anti-Virus page and get some more protection.

The key to this virus protection is just be cautious of where you go and keep all you system update to date to prevent all this from happening. It is also advisable to not have your passwords saved on Firefox, you should use something like Roboform, it is free to download and try. It will encrypt your passwords so if they don’t know the master password then they are out of luck. Roboform is also good for coming up with some strong passwords. Just some suggestions to prevent from people seeing your sensitive data, you don’t want anyone to get that data.

Some program Vulnebilities Detected!!

By Paul | Nov 25, 2008

Comments Off

Just got done looking at some of my security sites and according to SecuriTeam there are are several programs that have vulnerabilities. here are the Ones that I’ve found:

Google chrome is vulnerable to URI Obfuscation vulnerability.
An attacker can easily perform malicious redirection by manipulating the browser functionality. The link can not be traversed properly in status address bar.This could facilitate the impersonation of legitimate web sites in order to steal sensitive information from unsuspecting users. The URI specified with @ character with or without NULL character causes the vulnerability.

iPhone Configuration Web Utility for Windows Directory Traversal
iPhone Configuration Web Utility lets “you easily create, sign and distribute configuration profiles using a web browser”. A vulnerability in iPhone Configuration Web Utility allows remote attackers to access files that reside outside the bounding root directory of the program’s files folder.

Streamripper Multiple Buffer Overflows
Streamripper “records Shoutcast and Live365 MP3 streams to a hard disk, creating separate files for each track. Runs under Unix and Windows.” Secunia Research has discovered some vulnerabilities in Streamripper, which can be exploited by malicious people to compromise a user’s system.

A good free VPN Client — OpenVPN & more

By Paul | Nov 12, 2008

Comments Off

I’ve been doing some research on what might be good to use in case, I was away from my home network. I was thinking how safe am I at Starbucks or other places that I might doing my web. So I did a little looking around to see which one I liked and I came to the conclusions that only one I need right now is:

The nice thing about this was the simple installation of the software and how easy it was to set it up. This service is in beta but seems to be really well done with regards to the end users. When you install this software and want to connect it uses the OpenVPN software with there configurations. OpenVPN, is a open sourced SSL VPN solution and is free to use. The way this this free is of Ad Supported banners. Now it is cheaper than paying monthly for a VPN service. The ones I’ve found so far are these few:

OpenVPN (FREE)(*advertisement)(Linux, and Windows)
Always VPN (Prepay) (5 GB to 80 GB limit) (Linux, Mac and Windows)*Out of Beta
Hotspot Shield (FREE) (*advertisement) (Windows) (3 gig Cap)

Is Vista just Windows 7?

By Paul | Nov 7, 2008

Comments Off

According to Steven J. Vaughan-Nichols from Computer World, He talks about how Microsoft is scared on Linux and that people are flocking to remove Vista off there Machines. I say otherwise, you see according to some experts like Mark Hall from Computer World, he states Vista is better than Mac OS X. So why do people say one thing and do another?

Now I know Vista isn’t what people expected and that it had high expectations when they first released it. I think that is due to the fact Microsoft tried so hard to make Vista seem more than it actually was. Now According to Ina Fried from CNET her post was about Windows 7: A better Vista?. In her post she talked about the features of Windows 7, and how Windows 7 is almost like Vista. I tend to agree because of the look from screenshots I’ve seen to make me think it will be Version 2 of Vista. I don’t think it is anything that will change from Vista to Windows 7. It will however be more ready to boot up and shutdown that is according to what Microsoft said to Ina.

Reports are coming in that WPA is no longer secure!

By Paul | Nov 7, 2008

Comments Off

According to a media reports, Erik Tews and Martin Beck claim that they have found a way to unlock the Temporal Key Integrity Protocol (TKIP) key, used by WPA, to read data sent from a wireless router to laptop computers. According to the researchers, the key can be cracked in 12-15 minutes.

[via Sophos]

According to Sophos, they are claim that people can now watch what you are doing on a Wireless router to a laptop. Although this isn’t to be unexpected this is a very serious out come. It is now easier to watch what people are doing online. So does that mean people can see everything you do? Not necessary. According to some people this is harder than it seems, most of the websites you visit are not encrypted, but websites that use the “https” protocol are more safer to use online. You should be safe if you are buying things online as long as you are sure it is secure. Some other steps to take to help make it harder to unencrypte your wireless single is to use Roboform promotion codes you will get for 10% or 20% off the purchase price!!

Peek Email tops Time Gadget of the Year!

By Paul | Nov 3, 2008

Comments Off

I’ve not seen this yet, I will do my research on this Peek Email Device. This is fascinating that I didn’t know that there was something I’ve never heard of. Anyways, I can’t beleive they don’t have a netbook or the new Gaming Laptop. Please, a WII fit, Now how did they get there too? How did The T-Mobile G1 get number 5th in the list. I’m surprised that the GameBoy Advanced wasn’t one to be on there, After all they sold so many this year. Why not the Xbox 360? It seems people can still vote but don’t expect anything to change.

Go Vote and lets make our voice heard!!

Sites that you need not Visit:

By Paul | Nov 2, 2008

Comments Off

I’ve had some Anti-virus problems in the past few weeks and have been trying to see if it is my system or if it was just luck of the draw. So I did some research and found some sites that you should not go to, or download from. These sites have been know to spread the fake anti-virus malware software. So I wanted to warn people of some common websites that have been known to have viruses on them:

hxxp://movieportal2008q.com/freemovie/Movie/xxxx/x/ — this site usually tries to send you the “Trojan.HTML.Zlob.AG” Virus.

hxxp://porntubedot.com/xxxxxxxx/WatchFreeMovie.php –This site usually tries to send you the “Trojan.Dropper.SMN” Virus.

hxxp://handballfondi.it/xxxxxx1.php — This site is one of the new Malware sites that looks like Youtube, When you go to this site they say you need a special to play a video clip. Most of the time when you get something like this, it is going to try to install Malware. A good broad set of Codecs that you may want to download is called Klite Mega Codec, which if you us that you should never need to download any other codec to play a movie clip from any site online.

Microsoft Windows Server Service Vulnerability (MS08-067)

By Paul | Oct 23, 2008

Comments Off

A vulnerability has been identified in Microsoft Windows, which could be exploited by attackers to take complete control of an affected system. This issue is caused by an error in the Server service that does not properly handle specially crafted RPC requests, which could be exploited by attackers to crash an affected system or execute arbitrary code via a specially crafted request.

On Windows Vista and Windows Server 2008, the vulnerability is only exploitable by authenticated users.

Note: This vulnerability is being exploited in targeted attacks.

[via FrSirt]

This was just discovered and needs to let people know. I will do more research on it and maybe come up with a way to fix the problem. According to my sources there is a patch that will fix the problem!!

*UPDATE*
According to Microsoft:

This security update resolves a privately reported vulnerability in the Server service. The vulnerability could allow remote code execution if an affected system received a specially crafted RPC request. On Microsoft Windows 2000, Windows XP, and Windows Server 2003 systems, an attacker could exploit this vulnerability without authentication to run arbitrary code. It is possible that this vulnerability could be used in the crafting of a wormable exploit. Firewall best practices and standard default firewall configurations can help protect network resources from attacks that originate outside the enterprise perimeter.
[Via Microsoft Security Bulletin]

AVG detected trojan ; Generic11.BEOG

By Paul | Oct 17, 2008

Comments Off

I had a Friend tell me his system detected this Trojan GENERIC11.BEOG. I did my research and right now. It looking like Adobe added something to there recent updates *see updates below*. I’ll Have to check with some other sources but it looking like AVG over did it again and found something that might just be an AVG issue. (correction)

I usually wait before updating something like adobe. It is sure to be some minor change to adobe but if your are worried here’s the link to watch and see what people are asking or talking about this false positive:

Malwarebytes Security Forums

It seems that AVG is calling this possible virus but yet it looks like it is a false positive. So don’t you worry. If it was a true virus you’d probably would never know!!

*UPDATE*

I installed Adobe 9.0 and updated the virus scan database for AVG. It hasn’t found any thing yet but I am still scanning my system. I’ll let you know if it finds this false positive on my Vista machine!! I’m doing this to test it out!!! Come back later to find out the results of the test. (if you like this website by all means google this website so it too can be on google trends. I want to see it be up on google trends for a day or two.)