Rogue Fake Codecs on the Rise

Panda Labs has been talking about Adware/VideoPlay and they are seeing a lot of variants on this.   They even play a game, find the difference in the installation screen:



Now as you can see this look to be the same agreement in all those difference installation.  Some things to consider Never install any software from a website that you don't know Nothing about about.

Panda Labs also talks about these new variants in regards to what they do:

This file spreads by making copies of itself in the removable drives and it also creates an autorun.inf in order to be run when they are accessed. This file collects the data stored in the browsers, such as cookies, passwords, profiles, email accounts, etc, and connects to a remote address to send the information.
[Via Panda Labs Blog]

[ad#ad2-right]As you can see this makes you have very little security with your system.  I talk about Identity theft, and why you should always worry about your identity.   This however will make your passwords less secure and maybe even compromise you system to the point of having a data breach.   You need to be careful when you come by this, some fake codecs have been know to be scareware.  In which, the fake codecs installs a Trojan to tell you have a virus and try to make you buy a fake program to get rid of the Virus.  In one of my recent posts about Codecs and Facebook, I talked about the K-Lite Mega Codec Pack and how that will prevent you from installing these sociable links from friends and family.  The nice thing about this pack is it install all the really good codecs that you might come across on the web.  If you have this installed and there's a website that says you need a special codec, you'd know that it is either a fake codec or the author who made the video doesn't standardize.   In which case you will be more willing to leave that site without installing that codec.

If you follow these steps and also consider installing an Anti-virus and Firewall, you will be in a much better shape then when you first started out. Remember only you can prevent from getting a virus. You should also consider doing the registry edit that will prevent Autorun. As you can tell these new variants also are spread through USB and other removable media. This is the other way these programs are using to infect other systems.

Polymorphic w32/Scribble and what that is:

Having read the Graham Cluley's Blog about "Court halted by fast-spreading virus". I wanted to talk about this one because of the need to let people know about this little Virus and what you see when you are infected.

This virus modifies the Windows Host file so it redirects the host to a loopback address. It also uses the I-frame Injection into HTM, PHP or ASP file extensions. W32/Scribble-a, also known as Virus.Win32.Virut.ce, PE_VIRUX.A, or Virus:Win32/Virut.BM allows a users to control the machine through IRC.
[ad#ad2-right]

Although originally misidentified at the time of the initial infection on 4th February as the Conficker worm, the infection was ultimately declared by officials to be "W32/Virut.n" (which Sophos has detected as the W32/Scribble-A virus since 3rd February).

[Via Graham Cluley's Blog]

Sopho's Has a removal tool for this to help disinfect a system that is infected. I also want to remind people about the need for backups and the need for Anti-virus Software, including a free firewall, will not protect you 100% of the time but will help you identify and possibliy remove a virus, Trojan, and worm from you system. Just like the seriousness of the Conflicker Worm, this too should be taken seriously due to how it is easily spreading. And with Valentines Day just a few days and some Other Holidays that will be coming up, you can bet this virus will start infecting even more systems. You should also backup your data weekly if not monthly. I'd suggest doing a backup on a Early Sunday Morning before 4am so the system won't be used.  I'll update you if there is anything else about this virus on my blog later.  Just wanted to let people know to be watching for this little virus on and offline!!

Viacom might be going to HULU

According to some of the news post people are worried about Viacom leaving Time Warner. Now Here's where Viacom might be going digital. What do I mean Digital, I am talking about going to HULU. If Viacom doesn't sign a deal with Time Warner, that would leave a space ope for someone else like Hulu.

So Viacom isn't happy with Time Warner, or They want to go IPTV. Some of the Headlines I'm seeing are:

[ad#tim-right-free-cell-1]
• Time Warner Cable Loses Viacom: MTV, Nickelodeon, Comedy Central To Go Dark


• Dispute Between Time Warner and Viacom May Affect Cable Shows


• Viacom could pull MTV off Time Warner Cable


• Viacom And Time Warner Cable Play Chicken; Programmer To Pull Networks Over Fee Dispute

These are just a few that I am seeing pop up around the internet.  So what does that mean to the internet user?  Well On one of there show's like Dora the Explorer on Nickelodeon will begin to stream some of the shows previews on Dec 29, 2009 for it's next show.  When you go to Nickelodeon Site you get this:



[ad#ad2-right]Although this just means they want as much money as possible this does give Hulu the chance to start streaming this type of content easier and probably be able to sign a contract with them without much of a fuss. After all Viacom wants to make money some how. So what can you do to get them to go to Hulu. Email Hulu and tell them and tell them you want Viacom to come to Hulu. If this happens so many things will happen with regards to online media.

Panatech PX-500 PCMCIA Sprint EVDO BroadBand Card

[ad#tmi-right-1-1]The Pantech PX-500 wireless mobile broadband card for Sprint gives you data communication access for your PC laptop anywhere you roam on the Sprint network at faster speeds than ever before. EV-DO rev A compatibility gives you download speeds of up to 3.1 Mbps and beefy upload speeds of up to 1.8 Mbps. Simple to use, the Pantech PX-500 wireless mobile broadband card lets you surf the Internet, send and receive email and text messages, and connect to corporate networks from just about anywhere.

Technical Specs:

• Dimensions - 4.57 in x 2.13 in x 0.51 in


• Weight - 1.8 oz


• Data Download Speed - EV-DO rev A (Up to 3.1 Mbps Down/1.8 Mbps Up), EV-DO rev 0 (2.4 Mbps Down/153 Kbps Up), 1xRTT


• Download Protocol - CDMA 850, 1900


• Compatible Carrier - Sprint PCS


• Network Compatibility - CDMA 850, 1900


• 3G Data Speeds - Yes

Compatibility Features

• Device Supports Data Plans - Yes


• Available For Purchase Without Service Plan - Yes

Saw this card and did a little digging.  I looks like the newest updated software and drivers for this card can also make it Vista and Linux compatible.   Although with any card you will use up more battery life but it is a small price to pay to check email and surf the web. Also if you have an newer laptop or am about to upgrade I'd suggest Getting a Sierra Wireless Compass 597 USB Modem from Sprint! This is good for anyone who wants to surf the web and not have to buy the hardware to do it with.  Both are free to buy and ship with a two year contract. If in doubt please get the USB card that way you know you know you will be able to use it.

Disaster preparation 101 -- Data backup

In this one I will talk about Disaster, it happens to all of us from time to time. A fire, a earthquake, a stolen laptop or any number of ways. So what happens to your data, is it stored on the laptop? Is it important very sensitive data? Could you get fired if you lost that data?

[ad#ad2-right]These are all questions you must ask yourself when you have laptop. How do you backup your data or even do you have a backup? Having seen this with my own clients, I must wonder if there are people out there who just don't care. I had a client the other day who gotten a virus and this was a really mean virus. Deleted some very important files when you tried to clean the virus out. She called me in a panic because she couldn't load up windows? I asked if she had any backups, she said "what's a backup" . So I sat there discussing this with the client for over 20 minutes. Finally she started to understand, she said she had the OEM Backup DVD but nothing else. She also said she needed help with getting data off the computer. I told her that I would be able to come the next day and I was lucky the virus didn't do anything else to her data. We were able to retrieve the data from her system. That is where I start my rant , Why would anyone not have backup of there most important data?

So How do you backup your data? This is controversial and somewhat depends on how much people want to spend to keep there data safe and not loose pictures or music. There are several ways to do it, each way has it's pitfalls or short comings and requires a little more effort:

Kinds of Backup

Hard Medium - DVD, CD, External Hard drive

• Wikipedia's List of DVD backup Software -- This is good for beginners who want to explore how to backup options.


• Free Hard Disk Backups and Restore Software -- Gives you a list of great free backups and restore software to help you backup your system.


• GoodSync Backup --  This isn't free but helps you backup your software to an external drive and makes sure you have the most current files on your system.


• Some other Backup Software -- This is a variety of good backup software from Amazon.

Although,  The hard medium is usually used that doesn't mean you can have a backup other than hard.   Here are some ways to back up on the internet.

Internet Medium:

• Jungle Disk -- Provides online storage through the Amazon s3 service.   Only pay for what you use.   It works well with most Operating system.  I've used it on Vista so it is really nice.


• Carbonite Online backup --Another good Online storage.


• Some Other Online backup -- Here a list from Amazon to better help you find the type of software that you might need.

These are just a few options, if you want to look for other you can.  The important thing to do is BACKUP because if you need some data that gets wiped or destroyed.  You will be kicking yourself for not backing up.

Bank of America Slashes 35,000 Jobs in 3 Years

This one hit me hard in the chest.  I must say this was a big surprise to me and others but it looks like Bank of America is going to cut 30,000 to 35, 000 Jobs in the next 3 Years.   I'll will quote Huffinton Post:

NEW YORK — Bank of America Corp. said Thursday it expects to cut 30,000 to 35,000 jobs over the next three years, as it faces a deteriorating economic environment and tries to absorb Merrill Lynch & Co.

[Via Huffinton Post]

[ad#ad2-right]Now this one will affect the Whole US and some other International in the coming years. It is based on the Economic Stresses we are getting hit with right now. I am saddened and disturbed by how many people have loss there jobs. I have lost count as to how many people have losed their jobs over this economic downward spiral as Jason Calicanis once said. I can only hope that we can get up after this and fix what went wrong in the first place. I also know that it is quite hard to get hired in this day and age. So what is to become of the hard working men and women? Will the Government have to pay for housing for even more people? These are all questions we must answer soon in order to prevent a disastrous depression.

Trojan.PWS.ChromeInject.A is not a Firefox plugin.

A new type of malware designed to harvest web passwords has been detected in-the-wild by BitDefender’s antivirus research labs. This latest e-threat – called Trojan.PWS.ChromeInject.A – is intended to be delivered onto a compromised computer system by other malware for subsequent download into Mozilla Firefox's Plugin folder. Once installed it gets to work every time Firefox is started.

[Via Bitdefender]

[ad#ad2-right]So having seen this I thought I'd come up with ways around this to better protect yourself.  One way to prevent this from getting your sensitive data is to get a program like Sandboxie.   You could stop using Firefox that would be silly, because right now Firefox is more secure than Chrome and Internet Explorer.   I'd also suggest checking out my Anti-spyware page and Anti-Virus page and get some more protection.

The key to this virus protection is just be cautious of where you go and keep all you system update to date to prevent all this from happening.  It is also advisable to not have your passwords saved on Firefox, you should use something like Roboform, it is free  to download and try.  It will encrypt your passwords so if they don't know the master password then they are out of luck.  Roboform is also good for coming up with some strong passwords.  Just some suggestions to prevent from people seeing your sensitive data, you don't want anyone to get that data.

sinowal.trojan Problems.

Trojan-PSW:W32/Sinowal.CP drops and loads a password stealing component on the infected system and tries to steal account information from it. It also tries to steal information that is required to access certain online banks' and online payment systems' websites.

[via F-secure]

[ad#ad2-right]It seems to be a very hard virus to remove but there are ways to get rid of this virus.   Some tips and tricks to get rid are:

• Check out my Anti-Virus Page


• Computing.net


• The Geek Police


• How to Detect Sinowal

This are the beginning steps to get rid of a Virus but it will be a really hard virus because it wants to stay in your system.  You should also Restart in Safe mode and Try to remove that virus that one.   You will also want to disable your system restore due to the fact that it will be in there and might come back if you restore your system.  Just some simple tips to help keep you safe on the net.

Viacom and ATT layoff some people. (12,850 People)

Today, we are announcing a company-wide restructuring plan that includes staffing reductions in all divisions. This will result in a reduction of our worldwide workforce of approximately 7 percent, or about 850 positions. We are also suspending salary increases for the Company's senior level management in 2009. In addition, after a comprehensive review of our operations, we will write down certain programming and other assets. These three actions will bring us significant cost savings and other efficiencies.


[via Gawker]

[ad#ad2-left]This is a Sad day for the telecommunications industry both AT&T and Viacom are laying off people. According to reports Viacom will lay off around 850 people. ATT will layoff 12,000 Jobs. Here's the quote from Associated Press:

AT&T Inc. joined the recession's parade of layoffs Thursday by announcing plans to cut 12,000 jobs, about 4 percent of its work force.


[Via Associated Press]

So in all today total that is 12,850 people who are going to be laid off. This is another set of layoffs but isn't the last to see the whole list of of Layoffs in the Tech industry that I've talked about please click this link. You may find some usefull tidbits if you search my blog enough, I've got some great tips on getting hired and what you should do to be prepared.

Adobe Lays off 600 people

Adobe might also hire new workers within Europe, he said. The cuts will be formally announced on Dec. 15 when the company releases its fourth-quarter financial report.


[via Infoworld]

[ad#ad2-right]This is another technology company to lay off people, there are some talks that it would be around 600 workers on some blogs. Others are just talking about the Management shakedown, and some workers are going to be moved around. I don't know who is going to be laid off, or if there will be a tremendous amount of people who will need to start looking for a job. I do know that Adobe is looking for ways to cut cost, and I expect they are having problems just because of the Recession.  If you want to check out other jobs that have laid people off, just click this link.



[ad#ad2-left]

Adobe also announced the implementation of a restructuring program, and has taken steps to reduce its headcount by approximately 600 full-time positions globally. The restructuring will result in anticipated pre-tax charges totaling approximately $44 million to $50 million. The Company expects approximately $28 million to $30 million of the restructuring charges to be recorded in the fourth quarter of fiscal year 2008.

[Via Adobe Blog]

This the press release for Adobe and I wanted to share with you what they said. So it is confirmed they want to get rid of 600 people. Sad to hear, but that isn't the only layoffs in the industry. If I find out anything else I'll let you know!!

Black Friday becomes Blacker!

There aren't a lot of details yet, but news sources are saying that in Palm Desert, California, two people died after a shooting inside a Toys R Us. One story suggests that the shooting was the result of an altercation between two teenage girls. Apparently, a boy, listed as a juvenile, was responsible for the shooting and was detained.


[Via Gizmodo]

[ad#ad2-left]According to Gizmodo, two people are dead and I've looked at KMIR News 6 and There is no more information.  I do not like this years black friday it seems like Recession is hitting people harder than people thought!!  Not much else is known but this is going to be the worst Black Friday for a while.   I don't think there has been any thing like this before.

Some good CyberMonday Sites to look at for 2008!

I was just getting done with that story about the Walmart Stampede, and thought I would encourage people to check these good sites for people to check out for great deals.   I have been looking through sites combing for some great sites to find the best deals and here they are:

[ad#ad2-right-1]

• Dealio -- Dealio will not only show you sneak peaks at Cyber Monday ads, but we will also send you directly to the store so that you can purchase the often limited inventory Cyber Monday deals before they disappear. Best of all, there is no need to hop from site to site – Dealio has all your Cyber Monday shopping covered.


• CyberMonday -- Shop hot holiday deals from more than 500 merchants. All of Shop.org's proceeds from CyberMonday.com support the Ray Greenly Scholarship Fund.


• Cybermonday Mahalo Deals -- This Mahalo page collects links to websites offering information and discounted merchandise for Cyber Monday.


• Best Cyber Monday Sales --Well, I finally put together a list of the top retailers throughout the country with links directly to their Cyber Monday deals.


• Shopzilla --  The company's mission is to enable shoppers to quickly and easily find compare and buy anything, sold by virtually anyone, anywhere. Each month, Shopzilla connects millions of consumers with thousands of stores.

These are just a few that I could find and wanted to let people decide where they would like to go!!

Microsoft issues Vista patches out of Monthly Patch Cycle!

Microsoft issues Out of cycle patch for Vista.   These patches are as Followed:
[ad#ad2-right-1]

Kb957321


An update rollup is available for the Microsoft Windows Imaging Component (WIC) in Windows Vista or in Windows Server 2008. This update rollup resolves the problems that are documented in the following articles in the Microsoft Knowledge Base:

954708 An update to add support for the serialization of complex Extensible Metadata Platform (XMP) data types in the Windows Imaging Component

945060 There may be inconsistencies in the Extensible Metadata Platform (XMP) and Exchangeable Image File (EXIF) values for an image file in Windows Vista and in Windows XP

KB959108

The Windows Portable Device (WPD) API collects and transfers Software Quality Metrics (SQM) data to Microsoft servers. The SQM data is collected only on an opt-in basis through the Microsoft Customer Experience Improvement Program. An update is available that disables the collection and transfer of SQL data to Microsoft servers.



This update affects Windows Vista-based computers, Windows Vista Service Pack 1 (SP1)-based computers, and Windows Server 2008-based computers that are in the Microsoft Windows Media Player Customer Experience Improvement Program.

KB959130

On a Windows Vista-based computer or on a Windows Server 2008-based computer, you install a third-party Web browser. You set the third-party Web browser as the default Web browser. Then, you run the Connect to the Internet Wizard. However, if you select the Browse the Internet now option, Windows Internet Explorer starts instead of the third-party Web browser that you set as the default Web browser.

[ad#ad2-right]This seems to be not so important.  All of these are not really security related but it does surprise me that Microsoft wanted to release these out of Cycle.   If your planning on using your Vista laptop during the holidays you might want to update your vista machine before you go.  I don't think there is going to be any major issues with this but if there is, you can always remove these updates later.

Technorati Officially laysoff 6 people!!

Technorati released today they are going to Lay off 6 people and I will quote:
[ad#ad2-left-1]

Unfortunately, this means sacrifices. Technorati’s management team members are taking pay cuts ranging from 15-25% and employees are taking 10% cut. This also includes the reallocation of staff. We’re laying off six employees today – including two executives -- and there are two additional departures we won’t replace. These are high performers who have worked long hours to get us where we are now. They’re also friends, and we’re very sad to see them go. We simply need a leaner and reconfigured mix to get us through 2009.

[via Technorati Weblog]

They will also be taking pay cuts all through the company.  So the recession is hitting them also.  I am sure CEO Richard Jalichandra has the company interest in mind.  According to Techchunch, they have added these recent layoffs ticker.   You can also search my blog for other layoffs that have happened or will happen.

Some program Vulnebilities Detected!!

Just got done looking at some of my security sites and according to SecuriTeam there are are several programs that have vulnerabilities. here are the Ones that I've found:

Google chrome is vulnerable to URI Obfuscation vulnerability.
An attacker can easily perform malicious redirection by manipulating the browser functionality. The link can not be traversed properly in status address bar.This could facilitate the impersonation of legitimate web sites in order to steal sensitive information from unsuspecting users. The URI specified with @ character with or without NULL character causes the vulnerability.

[ad#ad2-right]iPhone Configuration Web Utility for Windows Directory Traversal
iPhone Configuration Web Utility lets "you easily create, sign and distribute configuration profiles using a web browser". A vulnerability in iPhone Configuration Web Utility allows remote attackers to access files that reside outside the bounding root directory of the program's files folder.

Streamripper Multiple Buffer Overflows
Streamripper "records Shoutcast and Live365 MP3 streams to a hard disk, creating separate files for each track. Runs under Unix and Windows." Secunia Research has discovered some vulnerabilities in Streamripper, which can be exploited by malicious people to compromise a user's system.

Amaya URL Bar Stack Overflow Vulnerability
A vulnerability in Amaya browser allows remote attackers to cause it to overflow an internal buffer which in turn can be leveraged to execute arbitrary code.

These are the ones that I found and wanted to let you know about these so you can make your system even more secure.   if I find any others I'll let you know!!!

Hulu Launches the Hulu for the Holidays!

[ad#ad2-right]This is near and dear to my heart.  Hulu finally launches the Hulu for the Holidays sponsored by Wal-Mart.   I have talked about what they might bring to the holiday season and if you want to find out what I thought might come to Hulu check out these links:

• 
  Some Movies that might be coming to HULU!
  


• 
  Hulu Brings on Paramount Movies!
  

Some movies or show that will probably come to Hulu are going to be Christmas themes.  I would wager it will be Charlie Brown, Peanuts, The Grinch who Stole Christmas.  I am sure there will be even more later on, ones that I didn't think would come to Hulu.   We shall see what comes from what they want to do the next few weeks.  To bad they aren't doing clues this time around people seemed to like doing that.

Looks like a scam to me : Personal Shopping Assistant!

[ad#ad2-left]

Good afternoon!


We found your resume at _________________ and we would like to propose you a
position of Personal Shopping Assistant.

Imagine having an exciting job with incredible salary (up to $100,000/year) that
lets you use your creativity while being paid to shop. Welcome to the world of
personal shopping!

As we know shopping is the world's favorite leisure activity, but in our busy
society an increasing number of people need to hire someone to do their
shopping. Thus personal shoppers are more in demand than ever before.

There are absolutely NO START-UP FEES and NO FEES for being employed at this
position. As long as you live in the USA, and you have a credit card or any
other line of credit, have 1 or 2 free hours during the day – you are eligible
for this job!

[ad#ad2-right]This is what you will have to do in short:
• Purchase the requested goods using your credit card.
• Send us receipts.
• Wait for us to issue a credit to your credit card in the amount of purchase
plus shipping fee plus your commission which comprises 10%.
• Ship out the goods.
• You are finished, come back for a new list of goods.

If you are interested in Personal Shopping Assistant position please fill in the
form below and send it to: Open2usa.job.dep@gmail.com
Our manager will contact you within two working days.

------------------------------------------------FORM-------------------------------------
Full name ______________________
Residence country _____________________
Age _____________________
Contact phone ______________________
Availability time _______________________
------------------------------------------------FORM-------------------------------------

This letter confirms your resume has been duly processed and your skills
completely meet our requirements for Personal Shopping Assistant Vacancy.

Thank You,
John Walker

[ad#ad2-left-1]I wanted to bring this up because of two things that I saw first off that made this look like a scam. One is they want to "CREDIT" your credit card and two they use a GMAIL account. I am going to say this is looking more and more like a scam. If anyone else has any other ideas about this just leave your comment.  I don't see how this can be real.   I am thinking once they have your credit card information, they'll start using it.