Five Essential Packages for Ubuntu/Kubuntu!

Why do I need these packages?

There is no right or wrong answer but when I say it is needed, it is because us as a community should be ready. I know I already talked about people getting a Virus on Linux, and that some people think you can't get a Virus. In all aspects, the Linux community is in a holding when it comes to security and viruses. I will not discuss this enough but for today we will discuss what packages you should have already installed when you first start using Linux. Even the Ubuntu developers have talked about viruses on their main website, so it isn't something that I am not a little worried about when people start to use Linux.

The Packages I have installed!

While there is no right or wrong package for your Linux system, I thought I would at least recommend the ones that I did install not just for security but also for convenience. It will be your decision on which ones you will be install and which ones you think you'll need. This list is for those who are serious about security and want to avoid any chances of being compromised.

• VLC Media Player -- Although this has nothing to do with security it is something that will prevent those nasty attempts, claiming your don't have the right Codex to play this streaming Video. At least, if you have this installed you are one step closer to and knowing that this is a fake because I have found to be very affective having all the codex I will ever need.
• AVG Antivirus -- I have personally installed means I am a little more safer but not out of the woods just yet. Although, I am much safer having installed there is a long way to go before there is a good enough Antivirus program for linux and that I hope that changes in the future.
• Firewall -- Although this is your choice, I picked arno-iptables-firewall, which seems to be what I need right now. It however is something of a personal choice and probably even an OS choice.
• Password Manager -- Yes you heard it right, if you have a good Password manager then you are less likely to give out your password to sites that look like the real thing, which is called phishing attacks. With a good Password manager, you can go to right the right site with a click of the manager. I personally recommend Lastpass, but it is all up to your which one you want to use. I really don't know if there are more linux based password manager but I am sure you can find them.
• VPN -- Although this isn't really a package per say, but one that talked about in the past. How to get a VPN on Ubuntu/Kubuntu. I am sure there are others out on the internet. I just don't want to make it to complicated for beginners, so I did make my own tutorial on getting a free VPN. You really don't want anyone listening in while at a public hotspot do you?

Your one step closer!

As you can see these are what I call essential because of most of these will make you a little more security conscience and that in turn will make you a better Linux user. for the most part your be more ready than a lot of Linux user but that doesn't mean your invulnerable, just more educated the rest. If you have a recommendation, I encourage you to leave a comment and let others know, but for the time being these are just what I have installed on my Kubuntu 11.04 right now and I'm really happy.

See you on the Flip Side

Paul Sylvester

AVG 8.5 Free Version Best on my system

Pcworld has a released there top free Antivirus software picks.     Now let's be clear on this, I am an a average user, and have tested these products out on my own laptop plus others and here is what I find.

According to Pcworld, Avira Antivir Personal is the top pick and claims to block 98.9 percent of samples:

Such less-than-friendly default behaviors make Avira AntiVir Personal a better choice for tech-savvy users who know how to muck about in the settings. If you're willing to put up with a somewhat clumsy interface and the recurring pop-up ads, in return you'll enjoy top-notch, free protection against malware. It's not a bad trade-off by any means.

[Via Pcworld : Avira Antivir Personal Antivirus]

[ad]Now with Pcworld saying it isn't a bad trade-off to have the Pop-ups and the default behaviors of this program, it doesn't make me want to use this program since I am a gamer and the pop-ups would interfere with playing online games, not to mention if your not that tech savy person you'd have a lot of head scratching to  figure out this program.

Then we go to the Second pick and Avast Antivirus Home in this pick Pcworld claims to blocking 98.2 percent of samples tried with this program:

Avast Antivirus will do a decent job protecting a PC from malware, but if you're willing to put up with a less-than-perfect interface (and some ads), you're better off going with Avira's top-notch blocking.

[Via Pcworld : Avast Antivirus Home Edition]

Now unless you want to be scratching your head on this product you have to go through the Tutorial that pop-ups after installation to walk you through how to use this product.   Then there are some more ads that popup during the day that reminds you that this is a free program and suggesting you pay for it.   Also you will have to register with Avast  to get a personal free license to be able to keep this program running on your system.  The interface of this Antivirus makes you think you will be playing music, which can cause some confusion when it comes to understanding this product.

Third place was AVG 8.5 Free edition according to PcWorld.   With there being no pop-ups reminding me this is a free product.   Also the easy to understand interface also makes this very user friendly.   I also like the Linkscanner and blocked 95.8 percent of the samples meaning it is still rather good to use for the daily user who wants a less intrusive  pop-ups or ads.   AVG has not yet done a pop up with me but it is far less annoying than the others because of the interface and the ads that are shown in the main program.

Now if you want to add even more security to your system and keep it cheap as possible I would suggest Downloading and using  SUPERAntiSpyware and Malwarebytes.  These with AVG 8.5 Free edition to better protect your system and these don't interfere with AVG and actually helps boosts the removal of virus, Trojans, and Malware.



Download Malwarebytes

Download SUPERAntiSpyware















If your current antimalware software let an infection through, you may want to consider purchasing the PRO version of SUPERAntiSpyware or Malwarebytes License to protect your computer in the future. SUPERAntiSpyware Professional or Malwarebytes License features highly advanced Real-Time Protection to ensure protection from installation or re-installation of potential threats as you surf the Internet (Both are trusted Vendors by CCSS Forums).

Buy Lifetime Subscription SUPERAntiSpyware For $30, save $8.90 if you order now. This is a special offer from this website.

SUPERAntiSpyware My Review

Ok I have been using SUPERAntiSpyware for quite some time, I used the free version for about a year now.  Ever since I found a link on Computer America website.   Now let's face it, in Anti-Virus software there are many different ones.   I talked about [intlink id="3851" type="post"]Malwarebytes[/intlink] a few days ago now I want to talk about why you Should Buy SUPERAntiSpyware Pro.

Now let's be fair about this, I was given a free lifetime version of the Pro version from Mike Duncan the Director of Business Development.  So I might be a little Biased but that doesn't mean I wouldn't suggest to anyone who isn't looking for a cheap alternative to buy a Anti-virus Software.

So with that said now we can talk about it a little more.  The Free Version is great don't get me wrong but there are some key differences from the Free to the Pro Version.  Some of the things that I think are the most crucial points  for buying SUPERAntivirus Pro are:

• System Diagnostics -- Lets face it there are more and more virus, Trojans, and Malware being created each day and being used.  This is a great way to explore your system in even more details and find those really hidden viruses.


• Auto Scanning -- Very Important instead of just scanning when you think you have a virus.  You can schedule on a weekly or nightly basis when to do the scan and make sure your system keeps clean from infection.


• Automatic Updates -- With the free Version you can only update manually but with the Pro version, you can have it check for updates  every 8 hours.  After all there are viruses being discovered every hour in one part of the world!!


• Registry Blocking and Real Time Protection -- These two Go hand in  hand.  I have seen viruses come in many shapes and forms that will install without your knowledge these to help prevent this.   Although other Anti-Virus software does this to they cost more and have to pay on a yearly basis.


• Supported Languages --  Danish, English, Spanish, Estonian, German, Hungarian,  Italian, Macedonian,  Norwegian, Polish,  Portuguese,  and Swedish.

My review :

[rating:5/5]

Ease of Use

No Technical experience needed to use this software

No Long term Commitment by buying a lifetime subscription.

Here are what some peoples are saying about SuperAntispyware:

I think SuperAntiSpyware is a excellent program better then other AntiSpyware programs out there, gets rid of the nasties that other programs can’t get rid of, so having a Pro version would add a nice addition to my tool kit. [Scott]

For the most part, I subscribe to the MajorGeeks.com methodology of malware removal for my Windows-using clients (including my wife). This is one very awesome program. I recommend it to all using Windows, even those who aren’t in immediate need.   [Technoslick]

A LIFETIME license of SUPERAntiSpyware Professional would be an invaluable asset for any serious PC technician’s toolkit!  [C6Gunner]

[They seem to think this is a great tool and I do too]

Download the 15 day trial

[gallery link="file" order="DESC" columns="2" orderby="ID"]

As you can see by looking at those pictures you can have SUPERAntiSpyware work side by side other free Antivirus.   I suggest if you have the free versions of Antivirus to invest in the SuperAntiSpyware Pro.   It is a Cheaper Alternative then to buying one one those Major Brands and yet It helps protect your system from those nasty viruses, Spyware, or Trojans.   With SuperAntiSpyware Pro, You get real time protection and the ability to automatically update your definitions and program and Real-Time Blocking.  If your like me and have AVG or Some other Free Antivirus software.   As you know some Antivirus Software doesn't pick up a virus but others do.   This will add another layer of protect and help protect your System.  All in all, SUPERAntiSpyware Pro is the cheapest Alternative to buying one from the Major Brands.  If you buy it right now, you can get a Lifetime Membership for a limited time  and pay only $39.90.  You would never have to pay for another yearly subscription.

SUPERAntiSpyware also has a great tool you can download to submit a file you have a question about.   If it is a virus or Trojan,  it will help them identify and send out an update to get rid of that Virus.  You can help them find and eliminate even more Malware by using this Submit tool.

Why you can't run Antivirus or Taskmanager!

Photo by : Kristi Evans

As you know there has been more and more virus writers and scammers who don't want you to interfere with the ultimate plan.   You see the two major plans these people have are:

1. [intlink id="2811" type="post"]To use your computer as a Botnet[/intlink] --  This is most common because the Command and Control server is where they tell these other computers what to do weather send spam or do a denial of Service attack on a website.  Although this is the most common it isn't however the easiest to get rid of rid.   Far be it from being easy these virus writers want to keep a foot hold on your system.   This is like the SG-1 the "Foothold" Situation, they try to look like there is nothing wrong.


2. [intlink id="3805" type="post"]Fake Antivirus software[/intlink] -- This is the other common reason why you can't load up Taskmanager or SUPERantispyware/Malwarebytes.   It could even prevent AVG,  Norton Antivirus, and Other Antivirus software from being loaded at boot up.  Because most Antivirus software can detect this type of scareware.   The scammers want to make as much money as they can so they don't want the End user to be able to stop the program from scaring you into buying the fake product.  It could also have a [intlink id="3872" type="post"]Scareware Adviser[/intlink] trying to get you to buy the fake product!

As you can see these are what I call the Prime "2" reasons why you can't run your Antivirus software, although there is a way around this.   I have found loading up in Safe Mode to be the easiest way to run antivirus scans on an infected system.   Although this can be difficult to do it, however it helps prevent these programs from loading up in more ways then one.  If you can go download the Antivirus programs from another computer and have them to install once you load up in safe mode.   You should also think about installing other software like a [intlink id="2205" type="page"]Firewall even the Free firewalls[/intlink] are the better than Microsoft's Firewall.

[ad]The other options for those tech savy people who know what a hard drive is and how to remove it, is to mount it onto another system as a slave and then run your antivirus software on the hard drive in question.   This however shouldn't be done unless two conditions are met:

1. You Know what you doing --  Again if you don't know what your doing please don't try this.  It could hurt your system far more than you can know.   If you don't know how to do this you should take it to a professional and let them do the work for you.


2. Out of Warranty -- Yep that is right if this has a 2 year or longer warranty and you open up the hardware you automatically void the warranty on anything to do with your system.  So it is best to have someone who is qualified warranty specialist to open it up.  This way you still have your warranty on the system and if something does go wrong in the shop, they can fix it easier than a novice.

If you know what your doing this can be an easy process or it can be a hard process it only depends on how knowledgeable you are and how far you are willing to go.   Although there are [intlink id="2955" type="post"]some viruses that require you to just start over[/intlink].  This is because they have embedded so deeplyinto the system that removing them will ruin your Windows system and prevent it from booting in the first place.  This is the last option, if you have a system who has been overrun with virus and spyware it might be time to reinstall the Operating system.  This is what I call the end all way to get rid of the Virus, Trojan, Or spyware on your system.   If you do this you will need to make sure to install all the Microsoft updates before you do anything else.  Also you will need to [intlink id="2205" type="page"]re-install any Firewalls and Antivirus[/intlink] software to better protect your system from having the virus in the first place.

Nikki Catsouras being used to spread Malware

I was doing my usual perusing the internet and I came accross this site about Nikki Catsouras Accident Photos, I won't go into gruesome details but looks like the Malware Authors are at it again with trying to have you install [intlink id="2991" type="post"]Fake codecs[/intlink] into your system.

These are some of the nicer picturs on the site

I must warn you if you go to the site there are some very gruesome and disturbing pictures of the accident, but that not what is computer related.  On the site they also have a Video that isn't really a Video.  Clicking that video link pops up this in my AVG warning window:

[intlink id="2205" type="page"]This is the Free Version of AVG[/intlink]

As you can see, the Malware authors are using the accident video to get people to install the Fake Codec to install some Trojan, worm, or even a Virus onto your system.  I've talked about this from time to time but if  you need to install a codec from a site you don't trust.  I don't recommend this to anyone.   I would keep with the known [intlink id="2991" type="post"]Codecs [/intlink]and keep away from any site that says you will need to install a codec or tries to install a codec.   I also recommend some [intlink id="2205" type="page"]Free Anti-virus and Free Firewall[/intlink] software to better protect you.  As you can see the free AVG software that I was using did detect this and prevented me from going any further.  So the Free software Anti-virus providers are keeping even the most common users safe.

If you did visit that and get the virus, Trojan, or worm, you can visit my [intlink id="2205" type="page"]Maleware resources[/intlink] to  find tools to help remove this problem.

As of writing the post this seems to be on the Google Trends on May 2.  I will always tell people to go to the trust media sites if they are wondering who this person or what happen.   It looks like they Media is going wild over the court cases right now to take down the pictures.  I am all for the family wanting those picture.  I do hope they take them down.

MikeTechSHow Listener Roundtable Jan 24, 2009

We had a great discussion on Windows 7 Beta and I wanted to post this so people can download it and check it out themselves.    You have an idea for the next round table, just leave a comment and I'll let Mike know.   I enjoyed this one so much and can't wait for the next one!!

Miketechshow Listener Roundtable

[If your at my post, Hover over link to listen to it]

• Mike Smith - Host of The Miketechshow Podcast


• Paul - Tech-LinkBlog


• Daniel - Podcast Reviews Podcast


• Norbert - Totally Cool Tech Podcast


• Winston Wolf

Show Links -

[ad#robo-right-120x90]

• Windows 7 Beta


• VMware


• Microsoft Virtual PC 2007


• AVG Free AV for Windows 7 Beta


• Windows PowerShell

Please feel free and visit the Miketechshow website, and if you like his site please come back.  Don't forget to visit the Miketechshow Forums and check it out.  Who knows you might be able to help someone out from time to time.

Tools for Virus Removal : The ones I like to use!

In this post I want to talk about virus removal tools that I like to use when I need to remove a virus.   Some thing to consider when using these tools are:

• Is it a Rootkit?


• Is it Spyware?


• Is it a Virus?


• Is it a Trojan?


• Is it a Worm?

Each of these have to be dealt with differently because each requires something different.  Like rootkits if you have one installed and know that it is a rootkit you only options are to download some rootkit removers like:

• Sopho's Anti-rootkit remover --  This is good for those more known viruses and can remove several types of rootkits.   This isn't the only one I use, but it is a part of group that does the rootkit removing for me.


• Microsoft Rootkit Revealer --  This is good for proving there is a rootkit.  I've not seen it not detect a rootkit.  Most of the time when I find a rootkit from the other rootkit revealers this one actually dos better with information.


• Panda Anti-Rootkit Remover -- This one is another one I use when the other ones can't remove it.  Each one does remove certain rootkit differently and works better than the other.


• Aries Rootkit Remover from Lavasoft -- This is good for those really tough rootkits but have some great benefits for removing some of the really tough rootkits.

These are the ones that work well with me when it comes to removing the rootkits.  I've not had one of these to remove a rootkit but that depends on how you deal with the virus in the first place.  Now for Anti-spyware and Anti-Virus software here are some of the tools that I suggest:

• Hijackthis -- Run it, and when you get the LOG file you will want to go to HijackThis Log Analysis Site 1 and HijackThis Log Analysis Site 2, and see what it says.  This is the best software because it will scan all of the registry and tells you like a wiki what might it be.


• MSCONFIG -- Sometimes it is hidden but if you check through the MSCONFIG for any files that might not need to load. Also check the services tab and see if there is any services that may not be needed.


• Pctools Antivirus Free Software -- This is a free software so what can I say.


• AVG Anti-Virus Free Edition 7.5.503 -- This is another free one that can remove viruses really easily. Download this and you don't have to worry to much.


• Avast Home Edition -- AVG does better than this one but people seem to like this so I have to add this for people who like this better than the others.


• Clamwin Free Anti-virus -- This is a good one because this is open sourced and easily can help detect so many viruses. This is good for those people who like open sourced.

These are just  the ones that I like to recommend that does pretty good on removing the viruses but there are others that I recommend on my Malware Resources that people have recommend to me but I haven't tried them out yet.    Some of the Spyware and Adware removal and here are some of my favorites:

• SuperAntispyware -- Easily remove pests such as WinFixer, SpyAxe, SpyFalcon, and thousands more! Repair broken Internet Connections, Desktops, Registry Editing and more with our unique Repair System.


• Malwarebytes — can provide the needed assistance to remove the infection and restore the machine back to optimum performance.


• Ad-Aware — This is a very good tool to get rid of some of the most annoying little viruses that try to fool you that you have a virus.


• Windows Security Trojan Scanner — a Free online scanner to let you see if you might have a Trojan.


• SmitFraudFix — A great little program to get rid of those Desktop hijacks, those programs that take over your browser or other file system.

If your current antimalware software let an infection through, you may want to consider purchasing the PRO version of SUPERAntiSpyware or Malwarebytes License to protect your computer in the future. SUPERAntiSpyware Professional or Malwarebytes License features highly advanced Real-Time Protection to ensure protection from installation or re-installation of potential threats as you surf the Internet (Both are trusted Vendors by CCSS Forums).

These are just a few that I like to use when it comes to fighting those virus programs and the people behind the virus programs.   If you consider how hard it is sometimes to recognize a virus, you can see the problem with some of the programs they can sometimes  say a file is a virus and delete it and the next thing you know it won't boot into Windows.  This is what needs to be considered whenever you see a warning on your system so you must be careful when you remove files.  You should always have backups that is what I always recommend because the likely hood of something terrible happening to your data.  You should come up with a way to back up your system every week like a sunday back or even a Monday while your at work backup.

Spying on Spyware.ISpynow!!

[ad#digg-right]This is another Virus that is going around and thought I'd tell you about it:

Spyware.ISpyNow monitors files, network traffic, and keystrokes. This Spyware gives the person who installed it a Web-based interface with summaries of logged information on the host computer.

[Via Symantec]

[ad#ad2-left]Now this one isn't to hard to figure out what happened.  You have to manually install it on your system to get infected.  Symantec has a great way on uninstalling this annoyance.  I also suggest checking out my other program list just in case you don't want to buy Symantec Anti-Virus programs.  Some other things to check out is:

• Avg detected Trojan Horse Generic 12.htc? - This has a great article on how to use HiJackthis program and how to make sure you no longer have the virus.
  


• Some Important programs to prevent yourself from having viruses and Malware!! -- This article gives you some other programs to use other than Symantec.   You have a wide variety of choices on Anti-virus programs and Firewall Choices.  You also have some choices on Spyware removal programs.

This is just the beginning in getting your system clean.  You have to keep all you programs up to date and one way I do that is with Appsnap.  This little program keeps you programs up to date from Virus to Firewall.  I hope this helps people prevent and control spyware.

You have an undelivered UPS/FEDEX Package. (Virus)

From what I've seen so far. There seems to be a new rash of email going around with the heading that makes it look and feel like either UPS or Fedex. Saying that you have an undelivered package from them and to either print the order confirmation or to click a link. I will say this once, if you get this delete it. Fedex and UPS will never hide the link and tell you have an package waiting in the email. They will leave a note your door. You must ask yourself how Fedex/UPS found out your email address to tell you have a package waiting? They don't and they won't, just a fact.

[ad#ad2-right]UPS/FedEx Delivery Failure : Snopes

TROJ_DLOADR.GG and TSPY_ZBOT.NM Trojan, which will Monitor and try to steal your data. The other one is a ZBot and will try to steal you data also. If you need help removing this virus, I'd suggest checking out my other virus article Avg detected Trojan Horse Generic 12.htc?. There are a lot of ways to remove this virus but the first step is never click on any links in your emails. I also wrote about Some Important programs to prevent yourself from having viruses and Malware!! This will help prevent and fix the common virus problems you might have.

Avg detected Trojan Horse Generic 12.htc?

Just got a warning from AVG about, trojan horse generic 12.HTC, haven't heard of it, anyone out there hear if this one? apparently it infects explore.exe, and after months of explore.exe crashing I'd say it's a legit virus.

[Via Answer Bag]

Some tricks and tips to remove this little virus is quite simple. It is embedded in your system so how do you remove this threat? Easy follow these steps and you will have a better chance of getting rid of the virus:

1. Find out all you can on the virus -- Finding out the extent of where the virus lays is really a good idea.  Just because you found one place doesn't mean it isn't also hiding some other place.  Some good ways to figure out where it might be is to download Hijackthis and Then onces you download it and install.  Run it, and when you get the LOG file you will want to go to HijackThis Log Analysis Site 1 and HijackThis Log Analysis Site 2, and see what it says.



2. See if you can remove the Hidden Virus -- After you find out what the extent of virus may lay.  You will need to download these programs.  Run whichever ones you like to see if you can locate and delete the virus.  You may also consider using one of the several onine services to see what they might suggest or see if they can find this virus.
   


3. Check your services and reboot sequence -- After you think you've gotten rid of the virus, reboot and do a rescan.  Usually the Virus will respawn after you reboot, some of them have a command in the reboot sequence.   You may want to check your reboot sequence, by check with MSCONFIG.  Sometimes it is hidden but if you check through the MSCONFIG for any files that might not need to load.  Also check the services tab and see if there is any services that may not be needed.  The best bet is to google search each service or program that is in there and see if that might fix the problem.



4. Might be time to re-install Windows -- Although this is the hard for people, this can sometimes fix the most challenging virus.  You need not have to loose your important data.  The only thing to remember when you back up is when restore you data after you re-install windows.  Just remember one thing, if it is  an .EXE, .COM, .BAT, and .MSI extensions than that might risk you getting the virus all over again.  Although remember that you will need the other tools I talked about on #2 to keep from getting the virus again.

These are some tricks I use to get rid of a virus and now I've shared them with you and now it is up to you do the work.  If you have any tips or tricks to get rid of a virus leave a comment.

AVG detected trojan ; Generic11.BEOG

I had a Friend tell me his system detected  this Trojan GENERIC11.BEOG.  I did my research and right now.  It looking like Adobe added something to there recent updates *see updates below*.   I'll  Have to check with some other sources but it looking like AVG over did it again and found something that might just be an AVG issue.  (correction)


[ad]

I usually wait before updating something like adobe.  It is sure to be some minor change to adobe but if your are worried here's the link to watch and see what people are asking or talking about this false positive:

Malwarebytes Security Forums

It seems that AVG is calling this possible virus but yet it looks like it is a false positive.  So don't you worry.  If it was a true virus you'd probably would never know!! ;)

[ad]

*UPDATE*

I installed Adobe 9.0 and updated the virus scan database for AVG.  It hasn't found any thing yet but I am still scanning my system.  I'll let you know if it finds this false positive on my Vista machine!!  I'm doing this to test it out!!!  Come back later to find out the results of the test.  (if you like this website by all means google this website so it too can be on google trends.   I want to see it be up on google trends for a day or two.)

*UPDATE #2*

Just did a whole system scan.  It did not find anything.  So I will be doing a reboot and scanning again.   It might be something that is attached to a PDF, if you went to a malicious website.   So I will do another scan.

*Update #3*

I just rebooted and almost finished scanning with AVG.  I still haven't found anything wrong.   I have did some more digging into what might cause it.   I just did a look registry look up on {AC76BA86-7AD7-1033-7B44-A90000000001} and I found out something really interesting.   It's a PDFFile_8.ico File.  This is tells me this is an Icon for the desktop.   I'm using one of the examples from Malwarebytes Security Forums to try to figure out what might be infected.

Here's what AVG said after it finished scanning my system:

So I must assume that it is neither Adobe or AVG who have anything to do with this.  I will have to say that it must be a real infection as to not having any viruses after an install of Adobe.  How do you get this type of virus.  Check out my article on : Some Important programs to prevent yourself from having viruses and Malware!!

There you will find some useful tips on how not to get infected and other useful tools to help restore you system to it's glory days.

So I will tell my friend to do a full virus scan and double check the results.  I can't replicate the so called virus but I am sure there is something going on with the HASH files of the AVG Database and something might be coming back from the adobe install that has the same HASH files.  That also might be making AVG flag it as an Virus or Trojan.  I might never know though.