Rogue Fake Codecs on the Rise

Panda Labs has been talking about Adware/VideoPlay and they are seeing a lot of variants on this.   They even play a game, find the difference in the installation screen:



Now as you can see this look to be the same agreement in all those difference installation.  Some things to consider Never install any software from a website that you don't know Nothing about about.

Panda Labs also talks about these new variants in regards to what they do:

This file spreads by making copies of itself in the removable drives and it also creates an autorun.inf in order to be run when they are accessed. This file collects the data stored in the browsers, such as cookies, passwords, profiles, email accounts, etc, and connects to a remote address to send the information.
[Via Panda Labs Blog]

[ad#ad2-right]As you can see this makes you have very little security with your system.  I talk about Identity theft, and why you should always worry about your identity.   This however will make your passwords less secure and maybe even compromise you system to the point of having a data breach.   You need to be careful when you come by this, some fake codecs have been know to be scareware.  In which, the fake codecs installs a Trojan to tell you have a virus and try to make you buy a fake program to get rid of the Virus.  In one of my recent posts about Codecs and Facebook, I talked about the K-Lite Mega Codec Pack and how that will prevent you from installing these sociable links from friends and family.  The nice thing about this pack is it install all the really good codecs that you might come across on the web.  If you have this installed and there's a website that says you need a special codec, you'd know that it is either a fake codec or the author who made the video doesn't standardize.   In which case you will be more willing to leave that site without installing that codec.

If you follow these steps and also consider installing an Anti-virus and Firewall, you will be in a much better shape then when you first started out. Remember only you can prevent from getting a virus. You should also consider doing the registry edit that will prevent Autorun. As you can tell these new variants also are spread through USB and other removable media. This is the other way these programs are using to infect other systems.

Facebook Virus strikes again

“Look you were filmed all naked!” read the subject header on one iteration of the virus-spreading message, which is being sent automatically from infected accounts to the “friend” list for that account. Clicking the link usually takes users to a page that looks like YouTube, and a pop-up message advises the user to download a Flash plug-in. The download contains the virus, which replicates by contacting everyone on the victim’s Facebook friend list and advancing the hoax.

[Via Boston Media]

[ad#ad2-right]This is a good social engineered attack, they seem to have you download a virus into your system.  I Keep talking about how you need to be careful with emails.  I also suggest that you do a complete Virus scan if you think you've been hit with this.  There is only one way to prevent yourself from getting this little facebook virus and that is not to click it. Some other things to consider if you found out this was a virus is to contact the person who sent this to them so they to could do a virus scan on their system.

It is always going to be something to be hard, because these people are using social engineering.   It seems they are trying to prove a point, even Macintoshes can be vulneble to this attack.  If you get anything through you email from people saying they seen you naked or got pictures of your butt, I'd suggest, not clicking those links.

Apple's Immunity, Botnet sanctuary.

But is Apple projecting a false sense of security just to save face? Many experts repeatedly warn that all operating systems are susceptible to viruses, and as the Mac becomes more popular OS X will inevitably become a bigger target for malicious attacks.

[via Pcworld]

Having said that I feel the notion that Apple is trying to keep there reputation as a virus free system. I can only hope that they stay that way. Which as much as I know, Apple will most like start to be the main source for botnets, because of the lack of security.


[ad#ad2-right]According to reports on this blog, people are worried Apple stance on it being the safest and having so much immunity to viruses. Apple in the past has stated they have mislead people with there firewall. Yet Apple takes down that suggestion of having an Anti-virus(Quietly).

[ad#digg-left]Everything I've seen suggest that virus writers and Malware writers will MOST likely start targeting the Mac OS X, they know Apple sense of security is Vulnerable to attack and they will exploit it more and more. So what does that mean for Apple, it just means that soon every hacker who has a botnet will want a piece of the Apple Pie and is right now.

[ad#ad2-left]As PC Trojans go, the programming features of RSPlug.E look fairly basic. PC malware is more highly evolved and usually cleverer. But a programmer - probably a Russian - with knowledge of OSX had taken time to create a Trojan that hits Macs instead of PCs, James pointed out.

[via Techworld]

Which looks like it has already begun. So what can Mac users do, get an Anti-virus and maybe Apple will have to start backing down from the Virus commercials and actually admit it. Sooner or later someone will have to challenge Apple to get them to start admitting to it.

Taking back Program Controls : For the Beginners!

Image via Wikipedia

So, let's face it, this is one of the most annoying problems there are with programs.   Programs that you think are shut down but are actually still active in the Taskmanager.  So I figured I'd talk about some of the most common fixes for these problems.    Now as you know there can be any number of programs or glitches as they say, causing the problems.  So let's talk about the why, shall we.

Most of the time programs don't quit because they are waiting for some kind of response from the system or the System is waiting for the program to close by itself.  It could also be a problem with a Virus or Root kit?  How do you fix it?

Fixing the problem is somewhat just trial and Error.  It isn't always the hardest thing to do but sometimes people overlook the easiest solutions.   So here are some easy ones:

• Check to see if one of the Microsoft updates are causing the problem --  Sometimes you might not realize it, but having installed an update can cause problems like KB951748.  That one caused a major Headache for Zonealarm.  So it is wise to check each months updates when you start seeing problems, sometimes it could of been happening for a while but it can sometimes cause troubles.


• Do a Hijackthis scan -- Just in case it is virus this will tell you what programs might be the virus.  You will need to go Analyze the logs so go HijackThis Log Analysis Site 1 and HijackThis Log Analysis Site 2. Check the logs to see what viruses might be on your system.   Just Remember that if you delete something important to your system you will have to install the Operating System.


• Boot into Safe Mode and Clean out your Prefetch Directory -- Yes that is right, if you boot into Safe Mode and clean the cache you sometimes help fix problems.  You see most programs loaded in cache sometimes get corrupt and might cause problems.


• Uninstall any programs that you think might problem --  This one is easily overlook because most people don't realize that a program is loading up with your knowledge and might cause a variety of problems.  You can also check the Msconfig for that programs that might not need to be loaded up when you start windows.

These are just a few ways to fix the problem and I think if you do this most of your problems will go away.  There are of course other solutions depending on your system configuration.   As with any changes to your system, please talk to your computer care specialist if you have any questions.

Related articles

• Manual Removal of Malware Using HijackThis (brighthub.com)


• Remove Viruses and Spyware for Free | Portable Antivirus (portableantivirus.org)


• Virus Or Spyware Attack? Do This! (site-press.com)


• Get The Best Anti Spyware Removal Removal To Make Your Pc Far From ... (best-antivirus-software.org)


• ZoneAlarm caught using fake antivirus scare tactics (arstechnica.com)