MobileMe Who me? Could this be Phishing?

Photo By : Richard Thomas

MobileMe one of Apples latest software packages, recently started getting emails claiming they need to update their credit card information.

It seems that along with Twitter, Facebook, and PayPal Phishing are on the rise. I know this was going to happen do to the fact of the recession. I've seen more and more attempts to send people to the Canadian Pharmacy and to sell you drugs that I wouldn't recommend buying it online.

Some things I am wondering is when will Apple release they are having to protect their consumers from these types of attacks? I've talked about the Apple Botnets and how they will become more and more prevalent due to the fact users think they can never get a virus. See the Apple Ads in 2007 to prove my point.

So let's talk about online safety, and help those who might need help. Some of my thoughts to help keep the Apple People happy are:

• 
  

  [ad]Don't go Downloading Illegal stuff – This is mostly how they malware authors are getting Mac users to install malicious software. You think you downloading the I-Life 09 but are really installing a virus.

  
  


• 
  

  Don't click links in Email – This is so tempting because it easier to just click and have it open up automatically but most of the time if you click a link that says it is going to http://www.apple.com/support (That is how they fool you).

  
  


• 
  

  Don't give out your email on twitter – This is also something you should follow more and more, because you don't want to get a virus or spam from making your email public. There are ways to see your deleted twitter message so that isn't going to be hard to find those emails.

  
  


• 
  

  It's time to install Macintosh Anti-virus software – Yes you heard me, I know there are a few Mac Anti-virus software's out there. You should also make sure to keep that up to date.

  
  

Now is when Apple should start suggesting security, but they have stopped recommending it for so long. The Malware authors are getting restless with anticipation. I can only guess what they will try next but it will happen. Sooner or later you will get a virus so bad that Apple will start recommending it on there site. When that day comes, I'll be so happy because that means Apple software isn't that bad. I just hope Apple realizes it before it's too late. They've had so much Apple don't Virus propaganda thrown at it's consumers it is no wonder they aren't worried about Security.

Superbowl 2009 Ad's are on HULU

Now I don't have to watch the Superbowl to see all the ads. The Day after the Superbowl, Hulu releases the ads that were at the half time. So here they are:



So what ones do I like:

[ad#ad2-right]
• Firestone : Taters


• Star Trek Trailer -- I can't wait for the movie to come out.


• Monster's VS Aliens (3D Glasses required) -- Dreamworks is now only doing 3D.


• Transformers 2 Revenge of the Fallen Trailer


• Race to Witch Mountain Trailer


• Alec in Huluwood -- Hulu gets even more people to come to their site.


• Up Trailer


These where the ones that I liked, they had some other ads for like Monster.com and Cars.com, and also Careerbuilder.com. I see they had some Budweiser advertising in there too but really don't get me interested as for trailers and the really funny ones. Hope you get a laugh like I do.

Phishing sites pop up for IRS!

Well, this just came to light with The Spywareguide blog. I've seen some activity about Where's my refund lately and I thought I tell you how to make sure you're on the right site. If you're expecting a refund check the OFFICIAL SITE. The Official Site is http://www.irs.gov and nothing else. If you want to find out about some of the most common Phishing attempts check out the Phishing advice from the IRS.

[ad#ad2-right]The Spyware Guide blog talks about sites that looks to be IRS but are actually just phishing for information.  Some of the ones they talk about are:

gicrisis.org/data/refundtax/SearchTAXERR.php

irs-2009.com/refund/refunds.html

collectrefund-irs.com/refund/refunds.html

cimaonline.ca/application/Internal/Revenue/Service/pas.php?certegy_vm=trueportlet_change_1_actionOverrideFchaseonlineFchangeFprocessDetails_windowLabel_portlet_process_pageLabel_page_process

jklabs.cz/phpayv2/admin/import/.secure/www.irs.gov/get-refund/refunds.php?Where_is_my_refund&Get_Refund

Although this list will most likely change this is just starting for people who filed there income tax. Some things to Remember are:

You can generally access information about your refund 72 hours after IRS acknowledges receipt of your e-filed return, or three to four weeks after mailing a paper return

Via IRS.GOV

So if you've filed your Taxes it should be getting to you in 3 to 4 weeks although as you get closer to the March 15, 2009 Deadline it will take longer so you should consider filling early to prevent from having to wait to long for your return.  If you follow the rule that any email claiming  to be from IRS is not true and shouldn't click or install any software.  You should however tell the IRS as quickly possible about this attempt to get sensitive information.  If you want to protect your  system from virus or even think you have a virus, trojan, or Malware please check my Malware Resource for further information on removing it!!

.

Barack Obama isn't leaving the White House!

In a story from Sophos, some e-mails are going around saying that Barack Obama is not going to be president or that he will not be inauguration.   Sopho's also makes a great comparison for the two sites and it does try to look like the official site.

[ad#ad2-right]

Which if you click on the "Continue Reading" link it will try to send a file "Speech.exe" which is W32/Waled-Gen or Mal/WaledPak-A.   It is a fake site to look like the real site, it is never a good idea on clicking on links that looks real. For those of you who want to watch the Inauguration online I would suggest Hulu:

You can watch it happen when it happens. So sit back relax and enjoy the show!!

Virus Handbook -- 39.95$ Shows you the theory behind E-mail Virus.

Amazon reviews this book and says:

E-mail Virus Protection Handbook : Protect your E-mail from Viruses, Tojan Horses, and Mobile Code Attacks (Paperback)

The authors of this volume (and there are several) begin by explaining how and why e-mail viruses work--they point the finger mainly at software that's designed for slick presentation of mail instead of for security, as well as at uninformed end users. Then, they begin to explain what various countermeasures, including antivirus software and firewalls, can do, and offer specific configuration advice. They also explore means of configuring popular e-mail servers and clients for maximum resistance to viruses. Overall, this book is carefully researched and should provide system administrators with the information--both practical and background--that they need to protect their systems from some of the more insidious threats around. --David Wall

Price: $39.95

If your like me and your curious how these viruses work. This book is good for those who want to learn how to fight or combat viruses that usually come with E-mails. You have to know why there are viruses and why you need Anti-virus software. Although I've only read some of this, it makes my head spin. I'd recommend people read it at least twice. This is good for technicians who have to fight with viruses a lot, will give you so many good ideas on how to combat them.

Please visit my store for other Recommendations.  I'll update them when I find more cool stuff.

Removing Win32/Bagle.HE worm

Here is another virus that seems to be spreading lately.   From the looks of it, it sees to be another email worm.  Here is what eset says:

Aliases

Email-Worm.Win32.Bagle.gt (Kaspersky), W32/Bagle.gen (McAfee), Trojan.Tooso!gen (Symantec)

[ad#ad2-right]Win32/Bagle.HE is a worm that spreads via e-mail. The size of its executable is 40565 B .

When executed the worm copies itself in the following locations:

• Documents and Settings\All Users\Application Data\hidn\
  hldrrr.exe


• Documents and Settings\All Users\Application Data\hidn\
  hidn2.exe

In order to be executed on every system start, the worm sets the following Registry entry:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\drv_st_key

[ad#ad2-left]It seems to have a manual removal process, Unless you pay for the other software but according to the 411 on PC Security:

Win32/Bagle.HE worm is a “threat” that appears in security scans by fake antispyware WinDefender 2008.

The danger of Win32/Bagle.HE worm is supposed to scare you into wasting $49.95 on WinDefender 2008.

Unless you like getting ripped off, don’t download the software the Win32/Bagle.HE worm popup links to. You’re not really infected with Win32/Bagle.HE worm — you’re infected with scamware that you need to remove.

I’ll show you how to get rid of Win32/Bagle.HE worm and WinDefender 2008, for free.

[via 411 on PC Security]

According to this site you can remove it by doing some steps.  I think Kaspersky has an easier way to remove it and it looks like most anti-virus software will remove this.   You need to remember that only you can prevent this from the future.   You should also update your windows update and make sure your system is up to date.

Fix Shutdown Problems in Vista!

[ad]
In the Patch Tuesday update, Microsoft quietly released the patch to fix Windows Vista machine shut problems. This patch should of came sooner.

KB957388

Update for Windows Server 2008 and Windows Vista

Install this update to resolve a set of known application compatibility issues with Windows Server 2008. After you install this item, you may have to restart your computer.

This was not a critical update and it seems to resolve so many issues with compatibility.  One thing it seemed to fix on my system has been the shutdown time.  It is now quite fast, it would normally take me 2 to 3 mins to shutdown, now it does it in less than a Minute.   So if you've not installed this update please install it soon.   I would like to know if people are seeing the same thing I am.   I've found a great resource on fixing it if you are still having problem, it talks about how to check your system performance. Although this is been doing it lately with these programs not loaded or even running, they still seem to cause problems so now I get the feeling it has to do with legacy programs.  This should fix most of the problem with older programs.

Upcoming Patch Tuesday

[ad#ad2-right]I wanted to get prepared for the updates for this Tuesday and I thought I'd go through them and list what Microsoft said about each.   These are what's been said on Technet and I am sure there will be more.   Each one of these don't look to serious but I will post Tuesday if there is anything I've missed on this post.   As you might know this is not set in stone but just the direction of Microsoft for this Months Release.


KB955839

Update for Windows Server 2008, Windows Vista, Windows Server 2003, and Windows XP

Install this update to resolve an issue that is caused by revised daylight saving time laws in many countries. This update enables your computer to automatically adjust the computer clock on the correct date in 2008. After you install this item, you may have to restart your computer. This update is provided to you and licensed under the Windows Server 2008 License Terms.

[ad#ad2-left]KB957388

Update for Windows Server 2008 and Windows Vista

Install this update to resolve a set of known application compatibility issues with Windows Server 2008. After you install this item, you may have to restart your computer.

KB890830

Windows Malicious Software Removal Tool

Microsoft released the Microsoft Windows Malicious Software Removal Tool to help remove specific prevalent malicious software from computers that are running Windows Vista, Windows Server 2003, Windows XP, or Windows 2000. After you download the Microsoft Malicious Software Removal Tool, it runs one time to check your computer for inflection by specific prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps remove any infection it finds. Microsoft releases a new version of the tool every month.

[ad#ad2-right]KB905866

Update for Windows Mail Junk E-mail Filter [November 2008] (KB905866)

Install this update for Windows Mail to revise the definition files that are used to detect e-mail messages that should be considered junk e-mail or that may contain phishing content. After you install this item, you may have to restart your computer. This update is provided to you and licensed under the Windows Vista License Terms.

I am sure there are going to be others but right now this looks like the normal things Microsoft sends out.  I am sure they are keeping a tight lid on the really serious stuff until last second so I'll have to report the really important stuff Tuesday.

You asked for it, Now it's real -- Vista SP2 Dec 4,2008

Beginning Thursday Dec. 4^th, we will be making the Windows Vista and Windows Server 2008 Service Pack 2 Beta available to everyone through a Customer Preview Program (CPP). The CPP will launch on TechNet and be available to anyone interested in trying out this service pack. The CPP is intended for technology enthusiasts, developers, and IT Pros who would like to test Service Pack 2 in their environments and with their applications prior to final release. For most customers, our best advice would be to wait until the final release prior to installing this service pack.

[Via Technet]

[ad#ad2-right]Yes you heard right, you can get into the Beta of Vista SP2 and not have to wait till April.  Some things to remember:

• It is a Beta


• It will Have Bugs


• It is for people who want to test it out


• It should only be installed for people who need to test it out

Some of the changes that they are going to incorporate into Sp2 are support for new types of hardware and emerging standards that will grow in importance in the coming months.  The complete list of changes can be found here.   I will be testing this out sometime this weekend to give it a full thorough check out.   I will give a report later on this month possibly first part on January I would like to give it a complete test.   To test it out yourself, check out this link for directions on how to download it.

Bandwidth Tools For Monitoring your bandwidth

<<See Previous Post


So I've done some looking around for bandwidth programs.  So here's what I found so far.  The programs I've got listed are not test and are therefore your responsible for any and all use of the programs.

[ad]

• 
  

  FreeMeter Bandwidth Monitor For Windows - Monitor network bandwidth (C#.NET 2k/XP+). Desktop and Systray graph. Configurable connection speed, update interval, color, transparency. Monitor any or all network interfaces. Ping/Trace/UPnP utilities. Email notifier (POP/IMAP). Requires .NET 2.0.

  
  


• 
  

  Pipelog - Windows Bandwidth Meter -- Pipelog is a Windows bandwidth meter that gives live statistics of accumulated bandwidth usage. It is written in C# and runs on the .NET Framework.

  
  


• 
  

  Windows Service Monitor -- Monitor and automatically restart Windows Services with this small Win32 command line utility. Windows Service Monitor (WinSMon) can monitor several services, restart services that stop/fail and limit the number of restart times.

  
  


• 
  

  iptotal -- iptotal is an IP traffic monitor. It listens to a network interface in non-promiscuous mode, and measures IP bandwidth usage. After the specified number of seconds, the average throughput is printed at total, input and output usage.

  
  


• 
  

  Bandwidth Vista 1.0.0.8 -- Bandwidth Vista is modern, informative and intuitive to use. Whether you are looking for network problems or simply want to check the speed of your Internet connection Bandwidth Vista is for you. Bandwidth Vista monitors all your connected interfaces at once and holds a history of transfers, which can be viewed down to the minute. This dynamic application also indicates the countries of remote computers con.

  
  


• 
  

  Bandwidth Monitor 2 -- An ideal tool for the bandwidth conscious, Bandwidth Monitor enables you to keep a close eye on the amount of bandwidth accumulated over the current hour, day, week, month, or even year! Advanced logging tools make it easy to view your bandwidth usage and make alterations to bandwidth logs. Clean up old data at the touch of a button, and import your bandwidth data from our predecessor Bandwidth Monitor 1.0. Version 2 adds Vista compatibility.

  
  


• 
  

  Axence NetTools 3.2 -- NetWatch - network monitoring with e-mail alerting, real-time & historical charts of response time & packet lost. WinTools lists exhaustive system information from Windows computers: running processes & services, registry, event log, disk, memory & CPU information. Port scanner checks for all open ports and running services.

  
  


• 
  

  BitMeter 3.5.7 -- BitMeter 2 is a bandwidth meter, it allows you to visually monitor your Internet connection by displaying a scrolling graph that shows your upload and download speed over time. Features include: Graphical and numerical displays of historical data, Web interface, alerts, stopwatch, calculator, transparent/float/click-through modes, 36-page help file, audio notifications, configurable color-schemes and many other options. Version 3.5.7 offers minor fixes and feature enhancements.

  
  

[ad]

These are just a few that I could find to better keep track of your bandwidth.  These haven't been tested but should get your started in the right directions.  If you have any good suggestions by all means let me know!!

SpiceBird A New Mozilla Product

Collaboration is much beyond e-mail communication – it's a process where individuals work together to achieve a common goal. Apart from having e-mail, instant messaging and group calendaring, an ideal collaboration system should make 'working together' possible – like creating a proposal, launching a new product, developing software, managing group knowledge and publishing websites even while working from different continents. Spicebird - the collaboration suite developed by us, creates a platform to do precisely that. In addition, Spicebird makes customization easy and ensures that the software can be adapted to your business collaboration needs.

If you are here looking for the roadmap of Spicebird or to download it, please take a look at this blog post. Check out a preview of Spicebird 0.3 alpha:

It's supposed to be a way to Integrate Email, Instant Messaging, Calendar, and Blogging into one little program. I am quite curious about this little product and trying to get into the beta to see if it is all that. It also has RSS feed reader, and Message tagging. So I thought people would like to see this for themselves.