Facebook Goes Phishing again

In one of my Previous articles about the Koobface Worm, I talked about the way they were infecting the systems and what you need not do.

It seems that Trend Micro has seen an even more rise in people downloading the WORM_KOOBFACE.AZ and Seems to be on the RISE. This is all done with a Social engineering and Has had some attempts before with this little worm on Facebook.

[ad#ad2-right]After your Infected with this new Variant, it searches for cookies and Sends out a message to people from:
* facebook.com
* hi5.com
* friendster.com
* myyearbook.com
* myspace.com
* bebo.com
* tagged.com
* netlog.com
* fubar.com
* livejournal.com

This seems to be a social engineering Nightmare for these websites and as yet are unsure what else it does but it says the same thing it did before by saying "This is a Video of You on the Street." Which is bogus but none the less people click and think they have to download a codec or update their Flash. Social Engineering is on the rise and will be taken seriously. You should read the full report from Trend on what it does but you also should have an anti-virus and Firewall installed to prevent this from happening in the first place. The only true way of preventing this is not to be fooled, you should NEVER Download from a site you don't know or trust. See all the Facebook articles for more information.

Oh My I got the Presidents Attention!!

I just got an email telling me:

Barack H Obama (PresidentBarak) is now following your updates on Twitter.

So I go to the click the link and I see this:


Wow, I didn't know I was this influental to get the Presidents attention(NOT).


http://www.economygrantprogram.com/

After checking out the profile I see that it has a link to a site that basically asking for your personal address and your email account. After I go check the site I see in really small catch you have to pay 3.95 for Shipping and Handling. Well You know what they say, nothing ever is Free. This looks to be a way to get email addresses to spam in the long run. I wouldn't give them any information because this is looking to be a scam and I hate scams. You best bet is to go on with your life and report this spam to twitter. This however got my attention because of the who it was, and that is probably why they chose the name. It is however quite funny. :)

Days like today, I want to take off : GMAIL Down!!

It looks like they are having some troubles with Google MAIL today. This is one of those days I would love to actually go into work to day. If you want to check the status of Gmail You should visit there support page. I have checked it out and it does appear to have a problem with HTML and JAVASCRIPT, but the IMAP functionality seems to work just fine. I have been able to to receive email through IMAP although being kind of slower then normal but It is at least working. SO "DON"T PANIC", the service will be up and running sometime today!!

*Update*

As Of 7:30am EST the service is back up on my network. So like I said no worries. Good Job Google!!

Careless Facebook profiling can lead to Identity Theft!

I just got in contact with a old friend from High school and another friend of mine suggest the new friend. I was looking at her profile and couldn't believe what I saw:

As you can see this is not good I was amazed at how many people are giving out there birthdays and who they are married to to friends and family. So we heard about how people are claiming they need help or are in need of desperate money. This is nothing new, as you know people are having hard economy times and people are using the social engineering to scam people out of money.

I feel that I should warn people the important necessity.   You shouldn't be broadcasting your DOB and who your married to to your friends, just in case they get hacked.

Recent activity indicates that identity thieves are hacking into trustworthy profiles before selling on the login details to interested parties. This information is used by spammers to target legitimate users, posting misleading links on their "walls" – personalized message boards.

[Via Computing.Co.UK]

This deservese a little mind and a lot of understanding.   By the spammers hacking into facebook accounts they have the chance to scam or spam people with links to possibly have a virus or trojan installer.

[ad#ad2-right]For example This one blog talks about the Virus:

Symantec's Norton Antivirus software has flagged this as a "high risk" Infostealer.Gampass virus. More info on this particular Trojan vius is here. (Note: Symantec warns the risk level is "low," since it originated in 2006, but this new Facebook email is a new iteration of the same virus.)

You might be inclined to click on this link because it's from a friend, but they did not intentionally send it to you -- and yes, their Facebook photo is attached, too.

[Via Sync-blog]

Now I went searching through my friends list and also found this little bit of information.  As you can see this one is asking for people to use there account to scam people out of money.  They could use this to find out even more information of the Other partner and make you believe your talking to the real deal.   Saying they need money because they are stuck over seas or something like that.   I've seen this on other blogs where people have sent money to "friends" but are actually people who are the scammers.  Then if you send the money you are out of luck with your money and possibly your friends to.  I am sure there are more but this is prime examples of what you shouldn't do and why.

So what can you do to prevent Identity Theft and/or being scammed?

[ad#cricket-right-ez]

• Roboform Review — A Password Manager that will help protect your passwords from key loggers and other such phishing sites.    I strongly recommend it to to all who are security minded. (Never use the same password for all your accounts)


• Are you worried about your identity? -- This is good information in checking out sites that might be questionable.  You can find out what type of site it by using your brains.


• Old Phish Become New again -- This is blog post about twitter and what may happen if you did give out your password.   This is a good example of why you never should give out your password to third party websites.


• Twitter Spammers a getting more smarter -- This is also good example of what happens when you see become friends with someone who isn't real.   You could be the next to be spammed and/or impersonated.

If you follow some common steps you to could prevent from being the victim or getting your Identitiy stolen.   Some things to remember is Never tell anyone your Birthday the whole date like someone did on twitter a few days ago.  It's nice that they are growing older but that gives people that much more information to use to steal your money or your idenitiy.   Think before you give out any personal information like Age, Married, who your married to and anything that might be used to be able to access your account or your impersonate you.  Remember only you can prevent from being scammed or lossing your identity, you wouldn't want to have to pay for your mistakes.

Tech Journalist breaks the silence -- Journalist got Pwned!!

It was another ordinary day for this tech journalist. He had just waken up from his lovely dreams and hadn't realized that he was being baited with Phish. Yes that is correct he actually gave out his password to an Phish site and didn't know it.

I have to admit that he didn't hide it, in fact he decided to post about how he got Pwned and what happened.

The Face Of A Facebook Phishing Scam
[Click Picture to see the full story]

[ad#ad2-right]As you can see the site : Facebookcom.awardspace.com is a phishing site and should never give out your information to third parties.   Some things to remember if you get an email with a link sometimes won't send you to the real link.  This can be easily done just like blogging.  You don't know where you will end up when you click an email link.   One thing to remember is if in doubt log into facebook the old fashion way and see for yourself.

You could be the next person to have your Identity taken away from you.  So what should you do to prevent this type of phishing attacks, assume any email you get from Facebook, Myspace, Twitter, and Any other Social Sites to be a possible phish email.   These are always going to be a problem for these sites.  The spammers want access to be able to spam your friends and family with links, or to make you look foolish.  This is the reason they do it for Money or just for laughs.

One thing to remember is having a strong password will make it that much harder for you to be phished because if you can't remember it you will be more careful.  I will keep preaching this having a good Firewall and Anti-virus will also prevent you from getting viruses from these type of phishing attacks.  It will also make it much more harder to go to sites that smell like Phish.  Remember only you can keep your identity a secret.

Internet Security Companies Warn about Patch Tuesday and Valentines Day.

With Tomorrow being released some very highly rated Remote Code Execution to become Zero day in very short time. Some researchers are speculating about more viruses will be released in conjunction to Valentines day. According to this one post it will be likely to be E-cards being sent to try to lure you into downloading Malware.
[ad#ad2-right]

Various security vendors, including CA Inc, MX Logic Inc., Trend Micro Inc., and Panda Security, have issued alerts about new Valentine’s Day-themed spam campaigns that try to dupe users into installing the Waledec bot.

Researchers note that many websites which are affiliated to Waledac e-card scam have been recently updated with content based on the Valentine's Day theme.

Web sites distribute Trojan files which are commonly named love.exe; onlyyou.exe; you.exe; youandme.exe; and meandyou.exe and the list is not exhaustive.
[Via Express Buzz]

So which ones will likely be the exploits they will use? I have a few theories on that and One of them is the INTERNET EXPLORER vulnerability that will be patched and will try to get you to launch the link and will most likely try to launch it in Internet explorer, That would be my guess.    It seems to be Internet Explorer 7 and Below which will be patched so if you want to try out the IE 8 Beta,  You should be safe on that.  Although the best bet is to prevent users from clicking links in emails and also warning them not to open any attachments they are not expecting.    I'd also have the AutoPatcher ready to install the lastest patches for this Tuesday and schedule a time this week to update all the possible systems involved with the Databases.  Although this isn't one that tries to steal your data it is however a chance the writers to look at what you have and you know how that can be call a data breach.   So if your the IT for the department I'd suggest sending out warnings so they can keep from being caught with their pants down.   I'd also suggest having Anti-Virus and free Firewall installed on all the major systems and it wouldn't hurt to have the installed on minor systems if at all possible.

Twitter Spammers are getting more smarter

I got an interesting email about someone following me. I went to go check out there profile and Guess what I see:


As you cann se this account only had one post but people seem to be following back due to the picture and the bio.   I checked the account about 30 mins later and here I will show you:



[ad#ad2-right]It seems that if people see it has a picture and a bio that doesn't sound like it is is advertising anything, they will simply follow them back.  That really isn't a good idea.   Sooner or later they will start sending out spam to people who are following just because they haven't been caught.   I also checked out the Web site they have new there bio and it leads to http://www.squidoo.com/twittertipstricks. I hope the website knows their link is being used by a spammer. Although this could be a 2 for one deal for having there link also being used for spammer so they can get traffic to there site. I would be worried my ISP doesn't cut my website due to THE TOS. Although I serious doubt it would happen I do know it could happen. So users are being fooled by spammers, and people aren't looking hard enough into the account. Users should be warned they shouldn't just follow back if it looks like it is a person. I know this is a robot and expect it soon to start sending out spam to all those people who are following.   I just thought I'd share what I found out.  If you clicked on the tinyurl.com it sends you to Partnerwithpaul.com website which talks about making money like all other spam.   Just be careful you don't end up having regrets on following people who are bots.

A fan wants to Release Windows 7 Now : My Security Concerns

After reading about this from PcWorld, I've went to check this site out.  I went to his twitter accoun(Kelly Poe) to find out the site he put up and I am quite impressed.    Here are few things that I am concerned about starting with the website.

[ad#ad2-right]I love the idea and all but I am quite concerned with the privacy of my email account.  I don't know if you have to submit your email account but I would caution people not enter one until the site says what it will do with your email address.

Now that being said that's the only thing I can think of when it comes to security for your email address, you don't want to someone to give out your email address to spammers. That would just make it even worse for your email account.   You could however use a 10 min Email account to use but that might make it harder for Microsoft to contact you if they want to verify these accounts!!

Now my main concern is Windows 7  right now and Security.   You know the Conflicker/Conflickr/Downadup Worm is currently loose on the internet.  It uses the the Ms 08-067 Exploit and currently Windows 7  does not protect against this Worm in fact Microsoft has released information that you would need to install the updates manually to fix this problem.

Some vendors are yet to develop for Windows 7 beta due to it being a beta.  Some others like  Security Vendors are offering protection for Windows 7 Beta.  This is mainly the Anti-virus software group, I would like to see more people embrace windows 7 as much as the security groups.  Although this is the first step it would need to be more open response from Manufacturers and dealers alike they would need to get it to work making sure their drivers and such will work good with Windows 7.  This is where it takes time, that is why I am glad it is a beta, it allows vendors and Companies a like a chance to test out their software and Hardware and even their drivers before the release.

Before I support this, I would like to see more happen to Windows 7 in some areas.  For instance I'd like to see more compatability and more drivers and software that works for Windows 7.  I'd also like to see  Microsoft to take Windows 7 Beta Serious and Keep the Security up on it and not let it lapse.  I'd want Microsoft to send out patches for Vulnerabilities just like Vista and keep people's system updated so you don't have to update them manually.    I just hope Microsoft takes Apple's example to heart and release Windows 7 without having to have several versions of the same Operating System.

Phishing sites pop up for IRS!

Well, this just came to light with The Spywareguide blog. I've seen some activity about Where's my refund lately and I thought I tell you how to make sure you're on the right site. If you're expecting a refund check the OFFICIAL SITE. The Official Site is http://www.irs.gov and nothing else. If you want to find out about some of the most common Phishing attempts check out the Phishing advice from the IRS.

[ad#ad2-right]The Spyware Guide blog talks about sites that looks to be IRS but are actually just phishing for information.  Some of the ones they talk about are:

gicrisis.org/data/refundtax/SearchTAXERR.php

irs-2009.com/refund/refunds.html

collectrefund-irs.com/refund/refunds.html

cimaonline.ca/application/Internal/Revenue/Service/pas.php?certegy_vm=trueportlet_change_1_actionOverrideFchaseonlineFchangeFprocessDetails_windowLabel_portlet_process_pageLabel_page_process

jklabs.cz/phpayv2/admin/import/.secure/www.irs.gov/get-refund/refunds.php?Where_is_my_refund&Get_Refund

Although this list will most likely change this is just starting for people who filed there income tax. Some things to Remember are:

You can generally access information about your refund 72 hours after IRS acknowledges receipt of your e-filed return, or three to four weeks after mailing a paper return

Via IRS.GOV

So if you've filed your Taxes it should be getting to you in 3 to 4 weeks although as you get closer to the March 15, 2009 Deadline it will take longer so you should consider filling early to prevent from having to wait to long for your return.  If you follow the rule that any email claiming  to be from IRS is not true and shouldn't click or install any software.  You should however tell the IRS as quickly possible about this attempt to get sensitive information.  If you want to protect your  system from virus or even think you have a virus, trojan, or Malware please check my Malware Resource for further information on removing it!!

.

'Life Owner' won't delete your data!

I received this email from a friend and wanted to talk about this:

VERY IMPORTANT , PLEASE READ THIS

Anyone-using Internet mail such as Yahoo, Hotmail,
AOL and so on.

[ad#ad2-right]This information arrived this morning,
Direct from both Microsoft and Norton

Please send it to everybody you know who has
access to the Internet.

You may receive an apparently harmless e-mail titled 'Mail Server Report'

If you open either file, a message will appear on your screen saying:
'It is too late now, your life is no longer beautiful.'

Subsequently you will LOSE EVERYTHING IN YOUR PC,
And the person who sent it to you will gain access to your
name, e-mail and password.

This is a new virus which started to circulate on Saturday afternoon.
AOLhas already confirmed the severity, and the anti virus software's are not capable of destroying it.

The virus has been created by a hacker who calls himself
'life owner'.

PLEASE SEND A COPY OF THIS E-MAIL
TO ALL YOUR FRIENDS, And ask them to
PASS IT ON IMMEDIATELY!

THIS HAS BEEN CONFIRMED BY SNOPES.

http://www.snopes.com/computer/virus/mailserver.asp

After doing my little research, I've come to the conclusion that this is nothing more than a warning that someone went over board on. I've check this on Snopes and it says that:

This latter version is difficult to classify as either "true" or "false": The virus it references (i.e., the Mail Server Report worm) was a real one, but it's neither new nor currently rampant (as claimed in the warning text), nor does it manifest itself in the fashion described (since the "symptoms" provided in the warning are merely a reworking of the text of an earlier virus hoax). All in all, that message doesn't really merit the dire warning to "SEND A COPY OF THIS TO ALL YOUR FRIENDS, And ask them to PASS IT ON IMMEDIATELY!"

I decided to send a reply to my friend who email me this "Warning" and tell him this:

[ad#ad2-left]Although,  This is a real worm.  It however is over hyped and under no circumstances will it delete your files.   I'll quote from F-secure:

Warezov.W is a mass-mailing worm that sends itself as e-mail attachments to addresses found on the infected computer.

Typically, a mass-mailer arrives on a computer with an infected e-mail message. In some cases, the infected attachment can start automatically. In other cases, the system is infected when the user opens the attachment. When a typical mass-mailer is activated, it installs itself to the system and creates a startup key for itself in the Windows registry. It then stays active in the system's memory. While active, the mass-mailer searches for specific files (HTML files for example) on all available hard disks for e-mail addresses. Finally, it connects to an available mail server and sends itself to all the addresses it has found.

Aside from this, Warezov.W also downloads another worm variant from a specified website on the Internet.

According to all my sources is if you are worried about this worm, then I highly recommend a good Anti-virus and Software firewall.   This worm is easily detected by all the free anti-virus software out there.    I like AVG because it scans all incoming emails before you even touch the email.   Please don't forward that to anyone else it seems to be an old email warning that isn't really a warning anymore.   It seems to be a scare email where there is no real chance of your data going bye bye.   Just thought you'd like to know!!

So I tell you this, if you have any question of the likely hood of any emails you happen to come buy, you best best it to google it or ask your friend before you open the email up.   It is best also to scan all email attachments before even considering opening them.

Old phish becomes new again

According to some reports, this phishing has started up again and is now changed a little web address and when you go to the site it looks like:

[ad#ad2-right]If you sign into this website with your twitter account information, it sends out a Direct message with these links in them rosalierebyb.blogspot.com redirects to http://twittyblog.access-logins.com/login and the only way you can fix this is to CHANGE YOUR PASSWORD.

I'd also suggest getting a password manager so if you use just one password for all accounts you will easily be able to change them and make the passwords much harder to hack. You do not want your passwords stolen do yo? I suggest Roboform it works really well with password management.

Are you worried about your identity?

So after the fiasco of the other day, I decided I will talk about security and why you should worry about new websites that you have never heard of.   People are not worrying about there identity and keeping there identity safe.   You see whenever someone signs up to a service without thinking about their password being stored or even used maliciously.   You see when most people don't use more than one or two passwords for all there accounts and then you use the same password with a new website.  Are you asking for your identity to be stolen?  In one of my previous blog posts I talked about not having any privacy on the internet.

So How can you protect your privacy?

When ever I come across a site that I don't know about and I want to protect my account from being compromised I find out what I can from several places:

1. [ad#ad2-right]Google -- Yes this is quite common to use to find out about what people are saying asking the keywords like is it a scam or what people are saying about the site?  This can be very useful to make sure I don't get scammed by a company for instants the Nationwide marketing scam.  Although this is really important when you get things that sound questionable.  This can be very useful with regards to keep your wallet safe.


2. Whois Network -- If there is a site you've not heard about and have a question about it you can always do a whois lookup.   This is a great resource for finding out how long the site has been up and who owns it?  The problem with this is most people who have a website aren't worried about security and privacy.   So you make sure this site isn't a phish site or to make sure the site isn't being used improperly.


3. Sitetiki --  a good site to do some research.   It's a wiki like Wikipedia but for websites and if they are good or bad.  It also has a spammer list for people to watch and make sure not to go to.  These sites are usually redirect spam sites uses for email.

What about Personal privacy?

With this I also want to talk about security online to prevent people from gaining access to your accounts online by guessing the password.  Some sites also like to phish for your account information and use the information gained to take control over your account so here are some useful links to help protect your account information:

• [ad#cricket-right-ez]Roboform -- This is good for generating a really good random password and remembering it.  This will keep people from guessing the password and also make it easy to come up with another good password.  This will also fill out the required site forms that usually use to sign into website.


• A good VPN Service --  If your like me and you have to use free wifi from time to time and want to make sure you have privacy on the net.  This is good for security on any open wifi network and you don't want to have anyone watch you while your browse online.  In case someone is interested what VPN's are used for here is the link to let people understand it better.


• Perfect Paper Passwords -- This is coming from Security now Episode 115 and he talks about this to better help people make the best possible passwords.  Listen to it and it will help you understand more about security.

These are just a few ways to prevent people from gaining access to an account.   After doing some research on this and thinking about this in bigger detail.   I would like to make a public apologies about the fiasco yesterday and what happened.  In all truthfulness everything didn't seem right with the doings of the going on with website.   I also was worried about the twitter spam it was sending out as you started the service.   I didn't know until later that it was a real person trying to make a product twitter users could really use.   I have learned from my experience and I will work harder next time and not be so quick to act next time.   If I was the company that bought that site, I'd also offer a job to both of them for being intuitiveness on coming up with a really good product.

Viacom might be going to HULU

According to some of the news post people are worried about Viacom leaving Time Warner. Now Here's where Viacom might be going digital. What do I mean Digital, I am talking about going to HULU. If Viacom doesn't sign a deal with Time Warner, that would leave a space ope for someone else like Hulu.

So Viacom isn't happy with Time Warner, or They want to go IPTV. Some of the Headlines I'm seeing are:

[ad#tim-right-free-cell-1]
• Time Warner Cable Loses Viacom: MTV, Nickelodeon, Comedy Central To Go Dark


• Dispute Between Time Warner and Viacom May Affect Cable Shows


• Viacom could pull MTV off Time Warner Cable


• Viacom And Time Warner Cable Play Chicken; Programmer To Pull Networks Over Fee Dispute

These are just a few that I am seeing pop up around the internet.  So what does that mean to the internet user?  Well On one of there show's like Dora the Explorer on Nickelodeon will begin to stream some of the shows previews on Dec 29, 2009 for it's next show.  When you go to Nickelodeon Site you get this:



[ad#ad2-right]Although this just means they want as much money as possible this does give Hulu the chance to start streaming this type of content easier and probably be able to sign a contract with them without much of a fuss. After all Viacom wants to make money some how. So what can you do to get them to go to Hulu. Email Hulu and tell them and tell them you want Viacom to come to Hulu. If this happens so many things will happen with regards to online media.

Twitter Spam bots are hot to trot: http://gentai.com/revenge1

Ok so I was curious why I all of the sudden got people joining my list. each one I look at just to see who these people are have only one twitter message saying this from two different accounts:

and this one also

and once you click that link it takes you to this website and see what they want you to do:

These people are trying to get you to click on there links and [ad#ad2-left-1]get you give them email accounts.  This has been socially engineered to look like it is real.  I gave them a 10 min email account to see what they sent me.  It was a link to there porn site.  Wanting me to give them my credit card or checking account information and to join there site.  I don't think so, not this old dog.   Anyways if you get this spam from a user you might just want to block these people.  Some of these people have followers.  Hmm I don't know about these people.  I guess they want you to send an email to other people to spam them also.  How nice of them to social engineer this scheme so you can make your friends and family mad at you and probably not even talk to you.   So that is why it is good not to auto-follow people when they subscribe to your twitter account.   Some people have that set.  Some people just don't learn. I am sure some people will like this site for other reasons but please don't spam people with this little site. Please don't put people on that list.

Panatech PX-500 PCMCIA Sprint EVDO BroadBand Card

[ad#tmi-right-1-1]The Pantech PX-500 wireless mobile broadband card for Sprint gives you data communication access for your PC laptop anywhere you roam on the Sprint network at faster speeds than ever before. EV-DO rev A compatibility gives you download speeds of up to 3.1 Mbps and beefy upload speeds of up to 1.8 Mbps. Simple to use, the Pantech PX-500 wireless mobile broadband card lets you surf the Internet, send and receive email and text messages, and connect to corporate networks from just about anywhere.

Technical Specs:

• Dimensions - 4.57 in x 2.13 in x 0.51 in


• Weight - 1.8 oz


• Data Download Speed - EV-DO rev A (Up to 3.1 Mbps Down/1.8 Mbps Up), EV-DO rev 0 (2.4 Mbps Down/153 Kbps Up), 1xRTT


• Download Protocol - CDMA 850, 1900


• Compatible Carrier - Sprint PCS


• Network Compatibility - CDMA 850, 1900


• 3G Data Speeds - Yes

Compatibility Features

• Device Supports Data Plans - Yes


• Available For Purchase Without Service Plan - Yes

Saw this card and did a little digging.  I looks like the newest updated software and drivers for this card can also make it Vista and Linux compatible.   Although with any card you will use up more battery life but it is a small price to pay to check email and surf the web. Also if you have an newer laptop or am about to upgrade I'd suggest Getting a Sierra Wireless Compass 597 USB Modem from Sprint! This is good for anyone who wants to surf the web and not have to buy the hardware to do it with.  Both are free to buy and ship with a two year contract. If in doubt please get the USB card that way you know you know you will be able to use it.

Virus Handbook -- 39.95$ Shows you the theory behind E-mail Virus.

Amazon reviews this book and says:

E-mail Virus Protection Handbook : Protect your E-mail from Viruses, Tojan Horses, and Mobile Code Attacks (Paperback)

The authors of this volume (and there are several) begin by explaining how and why e-mail viruses work--they point the finger mainly at software that's designed for slick presentation of mail instead of for security, as well as at uninformed end users. Then, they begin to explain what various countermeasures, including antivirus software and firewalls, can do, and offer specific configuration advice. They also explore means of configuring popular e-mail servers and clients for maximum resistance to viruses. Overall, this book is carefully researched and should provide system administrators with the information--both practical and background--that they need to protect their systems from some of the more insidious threats around. --David Wall

Price: $39.95

If your like me and your curious how these viruses work. This book is good for those who want to learn how to fight or combat viruses that usually come with E-mails. You have to know why there are viruses and why you need Anti-virus software. Although I've only read some of this, it makes my head spin. I'd recommend people read it at least twice. This is good for technicians who have to fight with viruses a lot, will give you so many good ideas on how to combat them.

Please visit my store for other Recommendations.  I'll update them when I find more cool stuff.

Removing Win32/Bagle.HE worm

Here is another virus that seems to be spreading lately.   From the looks of it, it sees to be another email worm.  Here is what eset says:

Aliases

Email-Worm.Win32.Bagle.gt (Kaspersky), W32/Bagle.gen (McAfee), Trojan.Tooso!gen (Symantec)

[ad#ad2-right]Win32/Bagle.HE is a worm that spreads via e-mail. The size of its executable is 40565 B .

When executed the worm copies itself in the following locations:

• Documents and Settings\All Users\Application Data\hidn\
  hldrrr.exe


• Documents and Settings\All Users\Application Data\hidn\
  hidn2.exe

In order to be executed on every system start, the worm sets the following Registry entry:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\drv_st_key

[ad#ad2-left]It seems to have a manual removal process, Unless you pay for the other software but according to the 411 on PC Security:

Win32/Bagle.HE worm is a “threat” that appears in security scans by fake antispyware WinDefender 2008.

The danger of Win32/Bagle.HE worm is supposed to scare you into wasting $49.95 on WinDefender 2008.

Unless you like getting ripped off, don’t download the software the Win32/Bagle.HE worm popup links to. You’re not really infected with Win32/Bagle.HE worm — you’re infected with scamware that you need to remove.

I’ll show you how to get rid of Win32/Bagle.HE worm and WinDefender 2008, for free.

[via 411 on PC Security]

According to this site you can remove it by doing some steps.  I think Kaspersky has an easier way to remove it and it looks like most anti-virus software will remove this.   You need to remember that only you can prevent this from the future.   You should also update your windows update and make sure your system is up to date.

Google let your work from home with Task Lists!!

As the day go by we have all have tasks, and that means we have to keep a way to remember them.  Google decided to add that to there Google Mail.  Pcworld said it the right way:

[ad#ad2-left]If keeping Gmail open all the time just wasn't enough, Google gave us one more reason to stay glued to our computer screens. The Labs Team have released yesterday a new feature for Gmail - Tasks - basically a To-Do list manager. But besides the usual task list bonanza, the new feature can also associate emails with tasks and create multiple to-do lists.

[Via Pcworld]

[ad#ad2-right]So how do you get that to work.  Pcworld has a great resource for people to find out how to get it to work.   Just think it gives you one more reason to work from home.   Google actually did something quite nice when it comes to mail.   It can even convert email into tasks.  If you know of any good uses of this little feature leave a comment.

Cricket USB UM100 Broadband Wireless Modem Review.

The UM100c is No Longer Available, Please check out the Cricket [intlink id="3059" type="post"]A600 Modem Review[/intlink] Or the [intlink id="4523" type="post"]UM185 Broadband modem[/intlink]. The UM185 modem might be a replacement to the UM100.

After a full week of playing around with this USB wireless, I wanted to talk about it. So let's break it down into pieces.

1. [ad#text-broadband1]


2. Installation --  The installation of the USB was not to difficult.  I did have to do some more steps than this:  Install the Software, then hooked up the USB device to the USB port.


3. Manual Activated the Broadband --  For some reason in my area they had several people have problems with the broadband activation.  So I had to activate it manually!!

After that all went well, I was on the internet just a cruising along.  I did however wonder why I was getting such a slow response speed.  When I went traveling I thought I would share some of my local results with you to better show you my speed.  All these test were done at



Please see an updated post on how to get even more speed from the broad band modem.
This speed is not the true speed for the broad band modem.

The Percentages over the results are showing you just what my signal strength was when I was doing the test.  Two of the 4 were traveling on the highway and the other two were stationary.  I also know that my speed will vary along with signal strength, I know I have to be a mile or less from a tower to get 100%.

*Update* 12/21/08

[ad#cricket-1]In my other post I talk about why I didn't get the speed I expected, but after I did the activation I went to normal Mobile Broadband speeds.   I also now have been using the USB Modem for my main internet without any or much problems.   I know I can't play any major online games but I can at least have the internet with me were ever  I go.   As long as you stay in the coverage area, you should be in good shape.  .  Like I Said I've used it in my area for over a 1 month and with the small little problem, the speed has been really dependable and I haven't had any major issue with connectivity. I've been using this modem as my main internet and have not seen any major internet and have not seen any of the cap come my way.   I think they won't mind to much as long as you don't ABUSE the internet, for example don't use it for bittorrent downloads and you should be fine!!

Update 12/24/2008
I also did travel with my laptop to another city, and I got to say it was really good and how it did when I went from one city to another. Check out the report here.
According to some post and forum talks around the the internet they are talking about the soft cap of 5 Gigabytes but that seems to not be so important right now.   After all, they have to make money some how.   I will update as necessary when I find anything else out.

update 1/01/09

I also did a video and uploaded it to youtube using the broadband connection. I had no problem uploading this video to Youtube. I've embedded it in this web page. See it on the bottom:



I also bought the [intlink id="3059" type="post"]A600 Cricket modem[/intlink] and I absolutely love this modem because of the things you can do with it.

You have an undelivered UPS/FEDEX Package. (Virus)

From what I've seen so far. There seems to be a new rash of email going around with the heading that makes it look and feel like either UPS or Fedex. Saying that you have an undelivered package from them and to either print the order confirmation or to click a link. I will say this once, if you get this delete it. Fedex and UPS will never hide the link and tell you have an package waiting in the email. They will leave a note your door. You must ask yourself how Fedex/UPS found out your email address to tell you have a package waiting? They don't and they won't, just a fact.

[ad#ad2-right]UPS/FedEx Delivery Failure : Snopes

TROJ_DLOADR.GG and TSPY_ZBOT.NM Trojan, which will Monitor and try to steal your data. The other one is a ZBot and will try to steal you data also. If you need help removing this virus, I'd suggest checking out my other virus article Avg detected Trojan Horse Generic 12.htc?. There are a lot of ways to remove this virus but the first step is never click on any links in your emails. I also wrote about Some Important programs to prevent yourself from having viruses and Malware!! This will help prevent and fix the common virus problems you might have.