|
|
 |
SecureComputing
Stay behind the wall with
Compu-Docl
This is where we'll announce the most
current issues for secure computing, for your network, your PC and
your identity!
 
 | Now that there is no more Win9x/Me support, 3rd parties to the
rescue! Zeroday Emergency Response Team, ZERT has come up with a
patch for the lastest Internet Explorer security hole. Find
it here. Install at your own risk! |
| AoL 9.0 Badware? Malware? Spyware?? You decide. Read
all about it here. And check out http://www.StopBadware.org |
| Windows 98 and Windows Melennium end of
life. |
| Payback- 3 companies frozen like their software
on Windows PC! The assets of Enternet Media Inc. and Conspy & Co. Inc.,
both of California, and Iwebtunes, based in Ohio, have been frozen pending further court action, the FTC said. |
| Days after Macromedia posted fixes to its Flash player, Microsoft late Wednesday posted a security advisory directing users of its Windows XP, XP SP2, 95, 98, and Me to the third-party patches.
"Microsoft recommends that customers who use Macromedia Flash Player follow the guidance documented in Macromedia’s
Security Bulletin to help protect themselves," a Microsoft spokesperson said.
The advisory was called for, the spokesperson said, because Flash is re-distributed by Microsoft in several of those operating systems. The flaw in
Flash can be used by attackers to grab control of a PC running the player.
The advisory also listed several workarounds that can be applied in lieu of patching; these range from preventing the Flash ActiveX control from running in Internet Explorer to removing the player.
Microsoft occasionally rolls out security advisories on vulnerability issues with its own software, but this is the first that details problems with a third-party program. |
| WASHINGTON - The latest threat to computer users doesn't destroy data or steal passwords — it locks up a person's electronic documents, effectively holding them hostage, and demands $200 over the Internet to get them back.
Hold your files ransom? Latest badware - after visiting
malicious web site with unnamed web browser, user's files are
locked on their PC and held for ransom! Story on Yahoo.com |
| Standard support for Windows 2000 Personal and Server editions ends on
June 30 2005, although companies can pay for an extended version. Support for Windows 98 and NT4 has officially ended, although some patches are still being released.
For more information, visit Microsoft.com. Security updates will
continue for Win2k. |
| Microsoft Windows XP is vulnerable to a DoS (Denial of Service)
vulnerability, which can be exploited when e.g. a vulnerable user
visits a malicious web site using Internet Explorer.
Successful exploitation would cause the system to crash.
Currently, no solution is available from the vendor. |
TERMS
Dialer: this is a program that is often used to maliciously redirect
connections from the web to alternate service. The dialer software
redirects the phone connection away from the Internet provider and
connects via a premium number, 011-overseas or to a pay service
number. Why? The profit motive is at work here. Some company makes
money off this.
If the computer is trying to dial a phone number when the user
first turns it on, that can be sign of this malware. Unfortunately,
usually the first indication a user has of this activity is an extremely expensive phone
bill (can be 4 figures!).
"Zombie" computers waiting for orders. There are worms -such as Gaobot.OD- which after they are installed on a computer, connect to an IRC server and await orders to carry out certain actions, including distributed denial of service attacks (DDoS). When computers are infected by this kind of malware they can be used as "zombies", executing the orders of malicious users. When all such
computers are "woke up" at the same time, they create a network known as a "botnet". These resources
can be rented for up to $125 per hour (US) to send large numbers of messages -such as spam or phishing- and even to launch sabotage attacks.
Email
Spoofing,
here is a good explanation on C|Net.
History
of Spyware
Home
computing security,
comprehensive and thorough, with checklists, courtesy of CERT.
| Instant
Messenger Security Software: IMsecure Pro by Zone Labs |
| Peer-to-peer,
file sharing software is a great source for all this malware.
Click here for a rundown on all the different types, KaZaa,
iMesh, etc. |
| New
Internet Browser security hole for new adware toolbars and
trojans. |
| http://reviews-zdnet.com.com/4520-3513_16-5134965-1.html
Reviews of some of the top spyware removal programs, free and
paid. |
| Sasser
worm, see Microsoft page (Security Bulleting MS04-011) for
download for your version (Win98/ME not affected). Norton
removal tool here. |
| Browser
hijacked? Try Toolbar Cop. Proceed at your own risk, and don't
forget to backup! |
| Some spyware tools are actually worse than the syware they are
supposed to be removing. Story
here. |
| Users of Real Player: Note. Security patches are available
that prevent downloading and running of malware on your
computer. http://www.service.real.com/help/faq/security/040123_player/EN/ |
| Phishing, it is sort of what it sounds like. Unfortunately
it's the bad guys taking advantage of an Internet Explorer
unpatched security hole and fishing for your confidential
passwords, credit card info, etc. If you personally
receive one, usually you can forward it to fraud@whatever name.
I personally have received some of these emails, and they are
very, very authentic looking. Story
here. The actual email I received is here. |
| An anti-virus activation horror story. They should pay you to
load this software, story
here. With Compu-Doc, our anti-virus software is loaded and
current when we leave! |
| Internet Explorer Malware update(1-30-04)
With all the Worm hoopla, you might have missed another major security liability
uncovered this week. A huge hole has been discovered in Internet Explorer that could let an
attacker hide the extension of a file download, masking a virus or spyware file as a movie, song or
PDF, for example.
While Microsoft works on the fix, be careful -- you're at risk! |
| New patch! Microsoft released new critical security updates. MS03-043 is a flaw in the Windows Messenger Service (not MSN Messenger) with the possibility of a remote attacker gaining complete control of a Windows NT/2000/XP/2003 based PC remotely.
Click
here for the download. |
| Microsoft's new patch for Internet Explorer which prevents
malicious code running on your PC. Anyone using Internet
Explorer browser should IMMEDEDIATELY apply the patch and stay
protected! This roll up patch includes all prior patches. Click
here for the link and download for MS03-040. Here is the
story on the security hole: ZD
Net. |
| Get the jump on Hackers!!! Get the patch before the worm is written!
Newly discovered hole in Microsoft's operating systems can make
you vulnerable to a Blaster-like worm. Lovsans/MS Blaster
worm was designed to infect Windows PCs (NT, Windows 2000 and
WinXP) connected to the Internet! Click
here to get the latest Microsoft patch MS03-039. |
| Blaster worm hits Windows computers. Looks to infect Windows
NT/2000 and XP machines connected to the Internet. No
downloading or clicking required. Click
here for the Microsoft security patch to plug the hole,
security bulletin MS03-026. |
|
Profile: virus writers, who writes those things?
In almost all
cases, virus writers were computer-obsessed males between the
ages of 14 to 34 years. They have a chronic lack
of girlfriends, are usually socially inadequate and are drawn
compulsively to write self-replicating codes.
|
|
Its taxing. Turbo Tax's new registration rules... Some accuse
Intuit of installing spyware, a program called, SafeCast, used
to register your PC with Intuit. Read the entire story here.
|
|
Virus Alert!
SoBig worm is still big! Remote control of your PC! See the article
at PC World.
|
Mozilla updates here.
Software &
hardware small-medium business surf control solutions.
Some virus identification
sites:
http://www.viruslist.com/eng/index.html
http://www.symantec.com/avcenter/vinfodb.html
Click here for tools.
|
|
|
Latest News |
Breaking news:
now with remote desktop support! High speed internet
recommended.
|
|
|
More News |
Anti virus expiring? Great
new AVG Product, the full suite Internet Security for 3 users, PowerPoint
presentation here
(6MB download, hi speed recomd). Contact Compu-Doc for great pricing!!!
|
|
|
