Internet Security Companies Warn about Patch Tuesday and Valentines Day.
Comments OffWith Tomorrow being released some very highly rated Remote Code Execution to become Zero day in very short time. Some researchers are speculating about more viruses will be released in conjunction to Valentines day. According to this one post it will be likely to be E-cards being sent to try to lure you into downloading Malware.
Various security vendors, including CA Inc, MX Logic Inc., Trend Micro Inc., and Panda Security, have issued alerts about new Valentine’s Day-themed spam campaigns that try to dupe users into installing the Waledec bot.Researchers note that many websites which are affiliated to Waledac e-card scam have been recently updated with content based on the Valentine’s Day theme.
Web sites distribute Trojan files which are commonly named love.exe; onlyyou.exe; you.exe; youandme.exe; and meandyou.exe and the list is not exhaustive.
[Via Express Buzz]
Fix Shutdown Problems in Vista!
Comments Off
In the Patch Tuesday update, Microsoft quietly released the patch to fix Windows Vista machine shut problems. This patch should of came sooner.
Update for Windows Server 2008 and Windows Vista
Install this update to resolve a set of known application compatibility issues with Windows Server 2008. After you install this item, you may have to restart your computer.
This was not a critical update and it seems to resolve so many issues with compatibility. One thing it seemed to fix on my system has been the shutdown time. It is now quite fast, it would normally take me 2 to 3 mins to shutdown, now it does it in less than a Minute. So if you’ve not installed this update please install it soon. I would like to know if people are seeing the same thing I am. I’ve found a great resource on fixing it if you are still having problem, it talks about how to check your system performance. Although this is been doing it lately with these programs not loaded or even running, they still seem to cause problems so now I get the feeling it has to do with legacy programs. This should fix most of the problem with older programs.
trojan.zlob removal tricks!!
Comments OffAliases:
Trojan-Downloader.Win32.Zlob.qyl (Kaspersky)
Trojan-Downloader.Win32.Zlob.qzs (Kaspersky)
Trojan-Downloader.Win32.Zlob.qzn (Kaspersky)
Trojan.Zlob.CPP (BitDefender)
Puper (McAfee)
SystemDefender (Symantec)Trojan:Win32/Zlob.G is a component of Win32/Zlob that downloads rogue security programs, adware, and additional Win32/Zlob components.
[Via Windows Live OneCare]
Some program Vulnebilities Detected!!
Comments OffJust got done looking at some of my security sites and according to SecuriTeam there are are several programs that have vulnerabilities. here are the Ones that I’ve found:
Google chrome is vulnerable to URI Obfuscation vulnerability.
An attacker can easily perform malicious redirection by manipulating the browser functionality. The link can not be traversed properly in status address bar.This could facilitate the impersonation of legitimate web sites in order to steal sensitive information from unsuspecting users. The URI specified with @ character with or without NULL character causes the vulnerability.iPhone Configuration Web Utility for Windows Directory Traversal
iPhone Configuration Web Utility lets “you easily create, sign and distribute configuration profiles using a web browser”. A vulnerability in iPhone Configuration Web Utility allows remote attackers to access files that reside outside the bounding root directory of the program’s files folder.Streamripper Multiple Buffer Overflows
Streamripper “records Shoutcast and Live365 MP3 streams to a hard disk, creating separate files for each track. Runs under Unix and Windows.” Secunia Research has discovered some vulnerabilities in Streamripper, which can be exploited by malicious people to compromise a user’s system.
Microsoft kills a fake antivirus tool from 994,061 computers!
Comments Off
According to Arstechnica and I’ll quote:Win32/FakeSecSen has gone by various names, including Micro Antivirus 2009, MS Antivirus, Spyware Preventer, Vista Antivirus 2008, Advanced Antivirus, System Antivirus 2008, Ultimate Antivirus 2008, Windows Antivirus, XPert Antivirus, Power Antivirus, and Ultra Antivirus 2009. Furthermore, it is skinnable, so each of these variants has a different GUI, although the basic functionality is the same: bother users with warnings of malware until they pay up.The Microsoft Malware Protection Center recently released some data on how the removal tool performed this month: FakeSecSen was removed from 994,061 machines. That number isn’t the highest Microsoft has recorded before, and the number of removals depends on which malware Microsoft adds each month and how widespread it is.
[via Arstechnica]
This seemed to of happened this month with the usual Windows update. If you haven’t updated your system just yet you should. This troublesome fake virus seems to have been killed from several systems. This could effectively make it harder for these guys who ever designed this program to make money. I hope microsoft does even more virus removals in next month. If you still want to try to get rid of these viruses don’t forget to check out my tips on Virus removal.
Vista has a new Vulnebility!
Comments OffAccording to Techworld.com, Vista has a new Vulnerability that could let a hacker infect a Vista machine with a rootkit. The talk from them is quite intriguing. I will quote it to better let you know what the Vulnerability is:
The vulnerability could allow a hacker to install a rootkit, a small piece of malicious software that is very difficult to detect and remove from a computer, Unterleitner said.
Phion notified Microsoft about the problem on 22 October. Microsoft indicated to Phion that it would issue a patch with Vista’s next service pack. Microsoft released a beta version of Vista’s second service pack to testers last month. Vista’s Service Pack 2 is due for release by June 2009.
[via Techworld.com]
The way they could do this is through the Device IO Control which in turn could corrupt the Kernel of Windows Vista. Now we all know that Microsoft will release a patch quicker than 6 months away. According to this article, people are already looking for the exploit and want to know more about it. I would be willing to bet they will have a patch out sooner than later. Probably January or Febuary, which will be a big deal because no one will expect it. I would also imagine hackers will start trying to figure out how they could install software as quick as possible before Microsoft pushes out the patch. So what can you do to protect yourself, Get a firewall, a Antivirus and learn how to protect yourself to prevent yourself from getting a computer virus.
A good free VPN Client — OpenVPN & more
Comments OffI’ve been doing some research on what might be good to use in case, I was away from my home network. I was thinking how safe am I at Starbucks or other places that I might doing my web. So I did a little looking around to see which one I liked and I came to the conclusions that only one I need right now is:
The nice thing about this was the simple installation of the software and how easy it was to set it up. This service is in beta but seems to be really well done with regards to the end users. When you install this software and want to connect it uses the OpenVPN software with there configurations. OpenVPN, is a open sourced SSL VPN solution and is free to use. The way this this free is of Ad Supported banners. Now it is cheaper than paying monthly for a VPN service. The ones I’ve found so far are these few:
- OpenVPN (FREE)(*advertisement)(Linux, and Windows)
- Always VPN (Prepay) (5 GB to 80 GB limit) (Linux, Mac and Windows)*Out of Beta
- Hotspot Shield (FREE) (*advertisement) (Windows) (3 gig Cap)
Avg detected Trojan Horse Generic 12.htc?
Just got a warning from AVG about, trojan horse generic 12.HTC, haven’t heard of it, anyone out there hear if this one? apparently it infects explore.exe, and after months of explore.exe crashing I’d say it’s a legit virus.
[Via Answer Bag]
Some tricks and tips to remove this little virus is quite simple. It is embedded in your system so how do you remove this threat? Easy follow these steps and you will have a better chance of getting rid of the virus:
- Find out all you can on the virus – Finding out the extent of where the virus lays is really a good idea. Just because you found one place doesn’t mean it isn’t also hiding some other place. Some good ways to figure out where it might be is to download Hijackthis and Then onces you download it and install. Run it, and when you get the LOG file you will want to go to HijackThis Log Analysis Site 1 and HijackThis Log Analysis Site 2, and see what it says.
Alien Ware Extreme Gaming Notebook M17 17 Inch
Looks like they are out of stock on this Laptop but they do have Alienware M17x-2857DSB 17-Inch Laptop (Black) which looks to be an upgraded version of this one!!!
- Windows Vista® Home Premium (32- and 64-bit)(default)
- Windows Vista® Ultimate (32- and 64-bit)
- Intel® Core™2 Duo Or Quad and Extreme Processors (12MB Cache, 1066MHz FSB)
Intel® PM45 + ICH9M-E Chipset up to 4 GB
ATI Mobility Radeon™ HD 3870 (Also Comes with CrossfireX Enabled) - Dual Harddrive In Raid 0 Config or you can have a single hard drive
- 5400 RPM – Up to 1TB (2 x 500GB)
- 7200 RPM – Up to 640GB (2 x 320GB)
So I saw this and had to tell people this is a sweet laptop for people who like to go and play games in a large group. You would be able to play for hours on end, all you would need is an power cord. I would love one of these to try out. If you want to go check it out or buy it. Here’s the Alienware M17x-2857DSB 17-Inch Laptop (Black).
Find Other Alienware Products
Windows update is getting a revision!
Comments Off“Over the next couple of months, we’ll be rolling out another infrastructure update to the Windows Update agent (client code),” said an unidentified Microsoft employee on the Windows Update team’s official blog. “This update makes it possible for users to install more than 80 updates at the same time.”
[via Computer World]
Now if your like me and have several computers who need to be updated at a given schedule, you sometimes worry about these updates that come along that might just break your system. I have been using a program call Offline Updater, which does what Autopatcher does really nicely. So why is Microsoft sending out this patch? Two reasons, one they want you to be able to update your operating System without hurting your system integrity.
Now lets talk about the integrity of having to reboot your system. You see, every time you reboot the system, it causes the system hardware some strain. It is something like having starting up a car, sooner or later you will have the starter go out, because of to much start up.
Some bloggers are Hyping Windows 7 operating System.
After looking around the blogosphere, I’ve come to the realization that people are starting to get hyped up over Windows 7. In one blog post from it.toolbox.com:
Windows 7 is due to hit beta and release in 2009, and odds are likely that if the pundits, all of us on the blogosphere and other places like PC World, Cnet, and others all agree that this works the way a computer was supposed to work will help drive sales. What is also interesting is that Microsoft is really pushing to get this puppy out. Along with the bloat are gone the five years of development.
[Via It.Toolbox.com]
I totally agree with what he is saying on the possibility to have an operating system actually do what it is told. Some things people have been looking for in there Searches in regards to Windows Vista are:
Microsoft Releases MS08-062 to the Public a Month Early!
Comments Off
Vulnerability in Windows Internet Printing Service Could Allow Remote Code Execution (KB953155)
This update resolves a privately reported vulnerability in the Windows Internet Printing Service that could allow remote code execution. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts.
This update is rated Important for all supported editions of Microsoft Windows 2000, Windows XP, Windows Server 2003, and Windows Server 2008. For more information, see the subsection, Affected and Non-Affected Software, in this section.
The security update addresses this vulnerability by changing the way that memory is allocated within the Internet Printing Protocol (IPP) service. For more information about the vulnerability, see the Frequently Asked Questions (FAQ) subsection for the specific vulnerability entry under the next section, Vulnerability Information.
[via Microsoft Bulletin]
Now from what I understand, if you have a Network attached printer on your system this would make you more vulnerable to someone taking control over your system. So this patch is supposed to fix that. I am recommending to all to update this and fix this update ASAP. I do not know if you don’t have one what that would do so just install this update, because you will undoubtedly still be runing the Internet Printer Protocol even if you don’t have a printer.
Toshiba Rolls out the Mobile Gaming Laptop!
Comments Off
o Genuine Windows Vista Ultimate (SP1, 64-bit7 version) (default)
o Genuine Windows Vista Home Premium (SP1, 32-bit version)
* Intel Core 2 Extreme Processor1 QX9300* 4096MB PC38500 DDR3 1066MHz SDRAM3
* 128GB Serial ATA SSD3
* 320GB (7200 RPM) Serial ATA HDD3
* DVD SuperMulti (+/- double layer) with Labelflash drive
* NVIDIA GeForce 9800M GTS graphics with NVIDIA SLI technology 512MBx2, GDDR3 discrete graphics memory
* Atheros 802.11 b/g/n wireless-LAN
This looking so sweet, to get the full picture check out the Toshiba Gaming website : Qosmio: X305 Let me know if anyone wants to buy me one!! 
I wouldn’t mind one these myself!!
Silverlight 2.0.31005.0 Is release today.
Comments OffI woke up this morning and found there was an update. I thought to myself this isn’t the second Tuesday, that was last week. So I click on my update tab to see what it was all about? Wouldn’t you know it, an update to Silverlight 2.
I will be looking into the new Microsoft Silverlight. I have heard on the wind, that this might be due to the PDC coming Oct 27-30. This has something to do with Windows 7, I’m almost sure of it. I am sure as you can see this is most interesting. I’m also sure this has to do with some security fix but why push it out now when there is no need too. This update effects Windows Xp/Vista/and 2000 so we will see what they have in mind the coming weeks.
