Friday, May 27, 2005

Basic Spyware, Trojan And Virus Removal

MajorGeeks Support Forums - READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

Major Geeks offers this list of steps you should take to remove spyware, viruses and other malware before seeking aid from one of the many free computer advice sites. It can be a complicated task, just another reason to strive to keep the bad stuff off of your computer to begin with.

But, if you are ever infected by something that you are finding it difficult to get rid of - this advice can come in handy.

Firefox Users Fight Phishing

PCWorld.com - Firefox Users Fight Phishing

For those computer users concerned about phishing - false websites that purport to be run by credit card companies, ebay other businesses, Netcraft offers a free toolbar both for Firefox and Internet Exporer to help verify that a web site is, in fact, the real deal.

If you are interested in the additional security, you might look into this further.

Wednesday, May 25, 2005

Why Government officials should be concerned

A Matter Of Public Record

Betty [BJ] Ostergren is posting social security numbers belonging to government officials on the Internet in an attempt to get lawmakers to better protect such personal information.

I don't know whether it will work, but one can hope that it will lead the government officials to take a greater interest - if only to protect themselves.

Database Hackers Reveal Tactics

Wired News: Database Hackers Reveal Tactics

Wired is offering a very interesting article about the hackers who broke into LexisNexis. The article is more interesting for expressing the attitude of the hackers than for any particular techniques.

However, the article notes that the initial security breach occured because someone foolishly downloaded an e-mail attachment that contained a Trojan virus. Another security breach took place because someone foolishly reset a password without getting proper authorization. It just goes to show that any security plan is only as effective as the people who use it.

Bugbear.B Worm

McAfee Inc.

The Bugbear.B has been rated as a medium threat. It appears as an e-mail attachment. The best protection is keeping anti-virus software updated and not downloading suspicious attachments. If you think someone may have sent you the Bugbear or you have been infected, check the link for additional information and guide to removing it.

U.S. House Passes Two Antispyware Bills

PCWorld.com - U.S. House Passes Two Antispyware Bills

The House of Representatives is taking an active role in the war on spyware. One bill would fine spyware distributers up to 3 million dollars another would prohibit advertising that is difficult to close or the fraudulent obtaining of personal information. These are good steps, let's see what happens in the Senate.

Tuesday, May 24, 2005

Virus Hold Computer Files 'Hostage' for $200

FOXNews.com - U.S. & World - Virus Hold Computer Files 'Hostage' for $200

A virus that infects computers visiting the wrong websites blocks out user access from important files unless the computer user pays to get the electronic key. While they think that they will catch the criminal, the best bet is safety through anti-virus programs and avoiding websites likely to have problems.

Deleting Email Leads to $1.45billion Judgement Against Company

Deleting Email Leads to $1.45billion Judgement Against Company - Reported by Aunty Spam's Net Patrol

Be careful when you delete your e-mails! It could cost you billions.

Biggest Bank Breach Beleaguers Bank of America, Others

Biggest Bank Breach Beleaguers Bank of America, Others - Reported by Aunty Spam's Net Patrol

Another case of the fraudulent theft of personal information from several banks across America as a result of employees selling this information to companies engaging in illegal activity. If you use Bank of America, Wachovia, Commerce Bancorp or PNC Financial services you may wish to see if your information is safe.

FTC plans international 'zombie'-awareness campaign

FTC plans international 'zombie'-awareness campaign | InfoWorld | News | 2005-05-23 | By Robert McMillan, IDG News Service

In an attempt to help make the internet safer, the FTC is working to educate Internet Service Providers about the dangers of internet zombies - those computers that have been infected with various worms/trojans/virus that cause them to act under the control of someone besides their lawful users.

Zombie computers send out tremendous amounts of spam and are also used to attack various web sites. The FTC will notify ISP about zombie computers on their networks. What the ISP's will do is not mandated, but I expect that the ISP will zombie computers from their systems. So, make sure your computer is clean with a working firewall and anti-virus program or you could find yourself losing your internet access.

Monday, May 23, 2005

MCI Employee Data Stolen

BetaNews | MCI Employee Data Stolen

Another case of possible identity theft, this time of the private information of MCI employees after a laptop computer was stolen. This is another reason why if you keep private information on your computer you need to keep it password protected and, preferably, encrypted.

Reviewing Internet browsers

IE vs. the world: six Web browsers compared - CNET reviews

CNet has reviewed several web browsers for cost, tabbed browsing, rss, anti-spyware functionality and pop up blocking. Check out their reviews to see if you might improve your experience on the internet with a new browser - Firefox was rated highest.

Yet another e-mail worm - WORM_WURMARK.J

WORM_WURMARK.J - Description and solution

Another worm is making the rounds identifiable by its .zip attachment called "girls.zip". As with all suspicious attachments, do not download - delete the e-mail immediately. Be sure to keep your anti-virus updated. If you happen to get infected, you can check the above link for help.

Beware the Fake Microsoft Windows Update Patch W32.Pinfi!

Beware the Fake Microsoft Windows Update Patch W32.Pinfi! - Reported by Aunty Spam's Net Patrol

Criminals are sending out fake e-mails purporting to contain Microsoft security updates but in fact contain viruses. Microsoft never sends out updates via e-mail, but only provides updates directly from the Microsoft Update site. It is important to keep your computer updated but make sure that you do it safely and securely.

Yahoo! chat bug gives scope for mischief

Yahoo! chat bug gives scope for mischief | The Register

A new bug in Yahoo! Instant Messager is more likely to cause irritation than loss of control over computer data. As the article notes, while it is possible to fix the bug by editing your registry, unless you know what you are doing you risk making your computer unoperable. Best to wait for the new patch.

FBI makes database hacker raids

BBC NEWS | World | Americas | FBI makes database hacker raids

The primary reason that the break-ins to these databases took place was because someone revealed confidential information over the phone to one of the hackers. Social engineers will often call businesses pretending to be people authorized to have certain information and the unsuspecting will give out that information freely. Remember, just because someone claims to be an authorized individual on the phone doesn't make it so.

Thursday, May 19, 2005

Data theft involving four banks could affect 500,000 customers

Data theft involving four banks could affect 500,000 customers - Computerworld

Yet another case of data theft involving a large number of people and again stressing the importance of much better security for any institution or business that maintains computer records of personal data - the threat to customers is just too great.

Wednesday, May 18, 2005

Spam and Malware Detections at 100,000 per Hour

BetaNews | Spam and Malware Detections at 100,000 per Hour

This article demonstrates how serious the problem of spam and other malware is not only in terms of amounts, but the likelyhood that much spam is being sent out by infected computers. Since infected computers are likely to be prohibited from sending out any e-mail, it is important that people work actively to keep their computers clean of malware with anti-virus tools and firewalls.

Washington has a new anti-spyware law

Gregoire also signed a bill toughening penalties against spyware - programs that secretly monitor what you do on your computer. The new spyware law will allow the state attorney general to seek damages up to $100,000 per violation or actual damages, whichever is greater. Washington courts can choose to triple the damages for companies or people who spread spyware, up to $2 million.

I don't know how effective this will be in slowing the spread of spyware but it does make me feel better that government has recognized the seriousness of the spyware problem and hopefully it will make some people think twice before spreading these malicious programs. One big problem might be defining what spyware is.

Tuesday, May 17, 2005

Protecting your PC

5 Tips: Protecting your PC - May. 11, 2005

Good list of five things you should do to protect your computer and the information stored on it. The article also includes some good links for making your computer use more secure.

DDoS being used in extortion schemes

DDoS being used in extortion schemes | InfoWorld | News | 2005-05-16 | By Denise Pappalardo and Ellen Messmer, Network World

This is something that may not at first concern you. Criminals are threatening various web sites - usually those which are making lots of money such as gambling sites or other large sites - demanding money or else they will shut down the site with what is called a DDoS or Direct Denial of Service. Such an attack involves having hundreds of thousands of computers which they have taken over with trojans or worms make requests of the site and thus overloading it.

Most often, such extortion is met by having the site pay off the criminal rather than seek to fight against it. The site deems that it is better to pay $100,000 than it is to suffer lost business which may cost the company millions.

This problem concerns you becuase if businesses continue to pay extortion money they will only increase the prices that they charge you in order to make up for their losses.

'Geek speak' confuses net users

BBC NEWS | Technology | 'Geek speak' confuses net users

Another good article about the difficulty of modern computer language. The problem with computer warnings about worms, trojans, phishing, farming, etc. is that most people don't know what these terms mean. People don't want someone else to take over their computer, but they don't know what a trojan is. This article, in addition to talking about this problem, also give information about these different terms and why you should be familiar with them.

Monday, May 16, 2005

New IM worm is coming to get you

Techworld.com - New IM worm is coming to get you

Users of AOL's AIM need to be on the alert for a virus traveling through instant messaging that asks people to "Hey check this out!" and click on a link in the message. The link sends people to a site where they can be infected by a worm allowing criminals access to their computers. Don't click on links that look suspicious.

Two students investigated for identity theft at high school

ABC7Chicago.com: Two students investigated for identity theft at high school

Two high school students have been accused of stealing the social security numbers of students and staff by breaking into their school's computer. The students said that they did it just to show that it could be done, but did not intend to do anything with the social security numbers. Yet, what they did was criminal and they may face prosecution.

Asside from the fact that what the student's did was wrong and the importance of keeping up adequate security, it also further demonstrates that student id numbers should never be social security numbers, this would go a long way to helping protect against identity theft at schools.

Sober Worm Spawns German Spam

PCWorld.com - Sober Worm Spawns German Spam

A new worm is causing victims to be subjected to racist messages as a sign that infections are becoming more than simply computer problems. Some are calling this "propaganda spam". In addition to subjecting people to racist messages, the spam also includes links to racist web sites. The best way to stop this spread of hatred is to keep your anti-virus updated and also to use the spam filters of your e-mail program set up to block messages if your start to receive them.

Sunday, May 15, 2005

New Trojan Horse - The Lorac

Symantec Security Response - Backdoor.Lorac

A new Backdoor Trojan Horse that can allow someone else to control your computer is on the loose called Lorac. It comes in an attachment to an e-mail. The attachment is called Message.zip. Keep your anti-virus software up to date and don't download any suspicious attachments. For further information check the above Symantec link.

Saturday, May 14, 2005

Oops!

Quickie Google Search Lays Out "Brothels

Internet Week is reporting a curious and perhaps disturbing aspect of Google Maps. If you type in a zip code for Google Maps and look for "brothel" without the quotes, several businesses are listed - none of which have any connection with the requested search term. At least one business has wondered whether this explains the presence of some strange men. As of yet, Google has not explained why some businesses may be misclassified with this search term. But if you run a business, you may want to make sure that yours doesn't turn up in the wrong place.

DoD Hacker Sentenced To 21 Months Hard Time > May 12, 2005

Internet Week > News > DoD Hacker Sentenced To 21 Months Hard Time > May 12, 2005

A 21-year old who broke into the Department of Defenses computers has been sentenced to 21 months of prison and fined 12,000 dollars. I hope that it persuades him to follow another line of work. In any case, it just goes to show - if the DoD can be hacked, so can anyone and all the more reason to be pro-active in trying to keep our computers free. MajorGeeks.com was even advertising a free keylogger today as if we needed more privacy invasive programs out there.

I wonder whether they will let this young man use a computer while he is in prison?

Microsoft Readies Its Antivirus App

PCWorld.com - Microsoft Readies Its Antivirus App

Microsoft is getting into the anti-virus business. On the plus side, this could mean better protected computers - especially if it promotes healthy competition with the other anti-virus companies such as Norton and TrendMicro. On the other hand, wouldn't it be better if Microsoft simply produced better computers that didn't need all of this additional software?

Wednesday, May 11, 2005

Firefox fixes are up!

Firefox - Rediscover the web

For those who use Firefox and have been wondering when the latest problems would be fixed, wait no more - the new and improved Firefox awaits downloading at the above link - both problems have been taken care of.

Fix in for Windows flaw

Fix in for Windows flaw | CNET News.com

The new windows updates are up, so hurry over to the site to make sure your computer is updated - be sure to check both windows updates and office updates if you use them.

Password for a cup of coffee

Americans are pants at password security | The Register

Not surprisingly, but unfortunately many people are not very good at keeping their passwords secure as indicated by this survey in which many revealed their passwords for a cup of coffee. No word on how many of them told the truth about their passwords. But, how much better computer security would be if people were a little less trusting.

Another Worm - the MYTOB.ED

Secunia - Virus Information - MYTOB.ED



Another worm alert, listed by Secunia as of medium risk. According to Trend Micro, it is currently spreading in Australia and Japan. The worm comes as an attachment to an e-mail purporting to relate problems with your e-mail account. Keep those anti-virus programs updated and watch out for suspicious attachments. If you receive an e-mail like this, before opening any attachment you should check with your e-mail provider directly.

Virus writers resort to gorilla tactics

Virus writers resort to gorilla tactics - vnunet.com

A new e-mail worm is making the rounds. Wurmark-K shows a picture of an albino gorilla as it gives your computer an infection. The worm comes as an attachment to an email with the subject - "Hehehe LOL!!" and "Your Photo Is On A Webpage!"

Keep that anti-virus updated and don't download suspicious attachments.

Monday, May 09, 2005

Internet Attack Called Broad and Long Lasting by Investigators

The New York Times > Technology > Internet Attack Called Broad and Long Lasting by Investigators

Major break-in at government sites, possibly by a sixteen year old. Just goes to show you how much a young person can know about computing and how much damage they can cause. Much damage was caused by trojans, so keep your anti-virus up to date and as the story notes, don't upset the hacker.

Banking Trojan spreading rapidly

Banking Trojan spreading rapidly

A new Trojan virus is sweeping the internet seeking to get your account numbers and passwords by pretending to send you to legitimate bank sites. The trojan is being spread through P2P,, adware and spyware so keep your anti-virus software updated and check often for ad and spyware.

Sunday, May 08, 2005

Mozilla Firefox Two Vulnerabilities

Secunia - Advisories - Mozilla Firefox Two Vulnerabilities

Firefox users should pay attention to this extremely critical vulnerability especially as the means of exploiting it have been posted publicly.

If you use Firefox, you need to either turn off Java Script or, better, click on Tools, Options, Web Features, and then click off "Allow web sites to install software" in order to protect yourself from the bug that allows malicious sites to automatically install software in your browser by appearing to be trusted sites.

When a fix is made, Isidore's Corner will let you know.

Saturday, May 07, 2005

Google speed bump draws scorn

Google speed bump draws scorn | CNET News.com

Google has released its Web Accelerator which is intended to make Internet surfing faster but has revealed some major security flaws by allowing people to see private discussion groups or password protected pages of other individuals. So, I wouldn't use this software yet and if you have already downloaded it, I would uninstall it until these problems are repaired.

Thursday, May 05, 2005

Hackers Keep Up With Every High-Tech Development

Newhouse A1

The world of the Internet continues to be a dangerous place. This article offers some good advice on protecting yourself both with what you can install on your computer as well as smart ways to use your computer to limit the opportunities of the bad guys.

Yahoo! email is up to 1 Gb

Yahoo has now raised its storage capacity to 1 Gb for its free email accounts. This is still substantially less than Gmail that offers 2 Gb for its email accounts.

eBay fraud boy detained for year

BBC NEWS | Wales | eBay fraud boy detained for year

Philip Shortman has been sentenced to a year in detention for selling non-existant products on eBay and defrauding victims of thousands of dollars. Mr. Shortman is now 18 years old and, according to his attorney, "has admitted his guilt...is relishing fatherhood and looking forward to the responsibility of being married." He's eighteen and he's looking forward to the responsibility of being married? I think that it is far more likely that Mr. Shortman has not moved past his view, "This is my buisiness - I make people fools."

Spying on the spyware makers

Spying on the spyware makers | Tech News on ZDNet

This is a very interesting article about Ben Edelman who has been making a living fighting the companies that produce and support spyware. Many companies make a lot of money off of spyware, including the biggest companies in America. For obvious reasons, the supporters of spyware don't want you to have effective spyware removal, thankfully we have Mr. Edelman working for us.

Unpatched Machines Seen As Major Security Threat

Security Pipeline | Unpatched Machines Seen As Major Security Threat

It is very important that you keep your computer software fully updated and patched, especially if you are using Windows. Whenever a company posts new patches, criminals will use those patches to program new means of attacking computer that target the problems the patches are supposed to fix. So, your vulnerability to problems is high as long as you leave your computer unpatched.

This article also talks about how the rise of phishing could lead to the demise of spam as people - fearful that a spam mail is actually a phishing attempt could keep people from replying to any one trying to sell over e-mail.

8th grade students hack into school computer

KGPE - CBS TV47 || NEWS

Your never to young to learn how to commit computer crime. I hope that the school upgrades their security. It sounds like the students sent the school administrators e-mails with trojans or key-loggers rather than the "spy-ware" mentioned in the article. This, could have been avoided if the adminstrators kept their virus protection up and not downloaded the attachments. I wonder if the students will get hired by one of the computer security companies?

Monday, May 02, 2005

SANS Top 20 Vulnerabilities - The Experts Consensus

SANS Top 20 Vulnerabilities - The Experts Consensus

This is a good list of major internet security problems with various computer programs and systems as well as advice on protecting yourself. Not surprisingly Microsoft is one of the most affected.

Attack of the Sober.P virus

I received five virus laden e-mails today - each with the Sober.P virus. The e-mails all tried to get me to open variously named .zip files claiming to hold account or password information or e-mails that could not be sent. Hotmail's virus checker picks up on the virus and rightly refuses to allow you to download the attachment.

Apparently this virus is on the upsurge and additional information can be found at Secunia.

Keep your anti-virus program updated and never download suspicious attachments.