Admins are shaking in there boots due to the Ms 09-001 Patch

I have to talk about this because this is a big deal.   According to Techworld and I'll quote:

"This one scares me - a lot," says Eric Schultze, CTO of Shavlik Technologies. "It is a lot like Blaster and Sasser. It is the same exploit vector. If I am an attacker and I can touch NetBios then I can execute code with no credentials."

[via Techworld]

[ad]Now This is due to the fact of what is happening with an update that came a few months ago the MS 08 - 067 that still people haven't patched their systems.  According to F-secure the Downadup/Conflicker has grown overnight by a million computers being infected.

Now why are they scared of the recent patch (MS 09-001), because of so many vectors of infection, you don't need any credentials.  The virus  does not  need to know any passwords or user names to gain access.  Just like the Downadup variant that is hitting the internet right now, this virus tries to access accounts by guessing weak passwords or even putting itself on flash drives or other mobile media to get other systems infected.

So why are admins scared over this new patch?

Most  companies don't patch there system as quickly as Microsoft would like them to.   You see most companies have quite a few computers depending on the size of the company it could be quite a lot.  So many in fact that it would have several IT personal just to keep the system going.
[ad]

So why don't they just put the new patches on the systems?

Depending on the size of the company and what they do has a lot to do with them updating there systems.  Some use really special programs or have a network going that is vital.  Even the smallest update to the system could bring the network or the program down.  Most companies liketo test it out on test machine for a while to make sure that the patch doesn't  prevent the business from doing business.   Here are a few articles that prove why companies do not want to just install patches automatically:

• Windows patch is flawed (Dated March 31, 2005 8:31 AM PST)


• Stealth Windows update prevents XP repair (Dated Sept 27, 2007)


• Patch Tuesday security update causes problems with IE for some (Dated Dec 18, 2007)

Some companies are using older systems like Windows ME or some older Windows Operating systesm.   Although there isn't anything we can do about those because Microsoft has stopped supporting them with updates and all.  I know we are all thinking thesame question?

Is there a way to fix the problem with Windows Updates?

I personally don't have an answer but I am sure hackers will find ways to exploit codes so they can get on your system so way.  I've recently read a story about Adware Author and now I understand even more about why people do all of this.

This is one of the questions every admin has to ask themselves?  How do we update all of the systems we are responsible for?  There are no easy answers to this.

Facebook Virus strikes again

“Look you were filmed all naked!” read the subject header on one iteration of the virus-spreading message, which is being sent automatically from infected accounts to the “friend” list for that account. Clicking the link usually takes users to a page that looks like YouTube, and a pop-up message advises the user to download a Flash plug-in. The download contains the virus, which replicates by contacting everyone on the victim’s Facebook friend list and advancing the hoax.

[Via Boston Media]

[ad#ad2-right]This is a good social engineered attack, they seem to have you download a virus into your system.  I Keep talking about how you need to be careful with emails.  I also suggest that you do a complete Virus scan if you think you've been hit with this.  There is only one way to prevent yourself from getting this little facebook virus and that is not to click it. Some other things to consider if you found out this was a virus is to contact the person who sent this to them so they to could do a virus scan on their system.

It is always going to be something to be hard, because these people are using social engineering.   It seems they are trying to prove a point, even Macintoshes can be vulneble to this attack.  If you get anything through you email from people saying they seen you naked or got pictures of your butt, I'd suggest, not clicking those links.

How to disable autorun the easy way!!!

I read a report from Cnet about USB devices spreading Virus and I will quote:

The bad guys are intentionally developing new flavors of malware designed to propagate through USB devices," said Gunter Ollmann, chief security strategist for IBM's ISS security division. "They are today's floppy drives."

[ad#ad2-right]An infected computer can spread a virus to a clean USB thumb drive that is inserted. That USB drive will then be spreading the virus onto other computers if the operating system on those machines has an AutoRun-type feature enabled. The AutoRun function in Windows launches installers and other programs automatically when a flash drive or CD is inserted. The Mac has an equivalent function, according to Ollmann.

[Via Cnet]

In order to disable "autorun", which in Vista is called Autoplay. In order to disable Autoplay from starting when you insert media into your computer here is how you do it:

You will need to be Logged in as Administrator before this can be done:

Next click start and type "Autoplay" without quotes. It will bring up a screen but all you have to worry about is this:



You will need to make sure there  is no check mark for "Use AutoPlay for all media and Devices".   Click save and close.

[ad#ad2-left]Once that is done, you will have no more Autoruns from USB devices.  If you want to disable Autorun in XP, I'd suggest reading some of these articles for XP.

• Wikipedia - AutoRun


• How to Disable Autorun

These are just a few and are really nice to articles but there are others out there that might be more to your liking.  I suggest searching Google for them.   I hope this helps you out!!!

Google Now lets you Video/Voice chat!!

After checking out some of what Google has been doing.  I find out that you can now Video Conference for free.  That is to say that you can conference with someone on line and do cloud computing.   According to Google:



To Get this Video and Voice chat Click this link

[ad#ad2-right]Now I might not a lot but this will be most likely be used in association with the new Google Phone, the G1. So I thought about how this will be used? This will be used in several ways. To keep in touch with family, to make it easier to telecommute and to Video Conference with associates from work. Google Model is "DO NO EVIL". There is a flaw to this I am sure, this is a Internet Protocol to Internet Protocol connection and in doing so you create so much possibility of a virus getting through. There is no doubt that this is using flash. It also is know to make the infrastructure of a business weak. The Intranet of the business would be compromised. I am sure there are vulnerabilities in this and we will hear them shortly. I'd give it a week or two, remember the problem with Google Chrome and how un-secure it is. These are just a few of what would cause security headaches to all who work in the IT field. I just want to bring that up to prove a point. Google's mantra isn't perfect, it is what it is.

Antivirus Professional 2008 uses Scare tactics

[ad#ad2-right-1]

We came across a rogue today called Antivirus Professional 2008 that uses GeoIP Lookup as part of its scare tactics. This site uses Flash and script to create the effect of an online scan, that then attempts to push an installer at the visitor. The NoScript extension for Mozilla Firefox is an excellent way to mitigate against this kind of garbage.

[Via F-secure]

It seems that there is a site out there, that seems to be trying to scare you into downloading there software. If you have any questions about this site please feel free to check out what I've found out:

Registration Service Provided By: ESTDOMAINS INC
Contact: 1.3027224217
Website: http://www.estdomains.com
Domain Name: ANTIVIRUS-ONLINE-SCANNER.COM
Registrant:
N/A
Serento faloimitator@list.ru

Minskay str. 27-14
Kiev
Kiev 237293
UA
Tel. 044.2901732
Creation Date: 07-Jun-2008
Expiration Date: 07-Jun-2009
Domain servers in listed order:
ns2.antivirus-online-scanner.com
ns1.antivirus-online-scanner.com
Administrative Contact:
N/A
Serento faloimitator@list.ru

Minskay str. 27-14
Kiev
Kiev 237293
UA
Tel. 044.2901732
Technical Contact:
N/A
Serento faloimitator@list.ru

Minskay str. 27-14
Kiev
Kiev 237293
UA
Tel. 044.2901732
Billing Contact:
N/A
Serento faloimitator@list.ru

Minskay str. 27-14
Kiev
Kiev 237293
UA
Tel. 044.2901732

[ad#ad2-right]Now as you can see this site is located in Russia, and if that's the case it is probably some virus itself to take control of your system to do what they want with it. So you best advice is if you think you have a virus then check out my recommendations these are all free to download and try. Unlike this site, they are legitimate and actually do what they promise.  If you want to email them you can but It don't think it will help.

*UPDATE on that Website*


According to F-secure that site is now Suspended.  Great job guys.  We are now fighting these people even better than I'd thought.

Toshiba Rolls out the Mobile Gaming Laptop!

[ad]

o Genuine Windows Vista Ultimate (SP1, 64-bit7 version) (default)
o Genuine Windows Vista Home Premium (SP1, 32-bit version)
* Intel Core 2 Extreme Processor1 QX9300* 4096MB PC38500 DDR3 1066MHz SDRAM3
* 128GB Serial ATA SSD3
* 320GB (7200 RPM) Serial ATA HDD3
* DVD SuperMulti (+/- double layer) with Labelflash drive
* NVIDIA GeForce 9800M GTS graphics with NVIDIA SLI technology 512MBx2, GDDR3 discrete graphics memory
* Atheros 802.11 b/g/n wireless-LAN

This looking so sweet, to get the full picture check out the Toshiba Gaming website : Qosmio: X305 Let me know if anyone wants to buy me one!! ;) I wouldn't mind one these myself!!

Fixing the Adobe Problem!!

If your have been having problems with Flash Players stoping after 2 seconds of playing.  I have a few ideas to try to get rid of the problem.  It used to happen all the time with Vista in the early days.  Here's what I did to occasionally get the flash player to work:

[ad]

• 
  

  Cleaning out the Prefetch Directory! -- Having seen this from time to time. If you have programs startup that might need to be refreshed this will refresh them so that they run like new. You occasionally can get programs that will load in a odd way and this will fix that also.

  
  

• 
  

  You want to be more anonymous? -- Cleaning out your cache on your browser can sometimes fix the problem. It's like anything else it can sometimes be corrupted.

  
  

• 
  

  Some Important programs to prevent yourself from having viruses and Malware!! -- Having seen this with my own two eyes, if you have a viruses or malware on your system that too can cause problems with playback of flash media.  So just double check making sure you don't have any viruses.
  

  
  


• 
  

  Adobe Flash tips and Tricks! -- Also having found this out.  Adobe actually keeps the flash video on there servers cached or sometimes somewhat buffered to help with playback.  Clean the cache out at the source sometimes fixes the problem also.

  
  

[ad]

Now having used some of these tricks to get flash players to run has on occasion worked for some strange reason or another.  Although I don't know if this will fix the 2 second playing video problem I get the feeling it should since in theory it has everything to do with cache and corruptions of the files. If you can come up with some other tips or tricks to fix the problem let me know!!

Is IPv6 a Problem or is it still in Beta?

Due to the high volume of people, I have thought of how best to go about describing my issue with my DSL router and why I"ve disabled IPv6!!!   First off, I have a VISTA Premium System, with an OEM license.  That isn't nothing new.  The problem is that if I use IPv6, I would constantly get no internet.  I would always get local but not Internet.  I didn't know why until recently, and that was IPv6.  It isn't to say I don't stop getting this.  I still do but it is less of the problem.  I could re-install the system and see if that fixes the problem.


Would that fix the problem?

Yes it probably would if it is a driver issue.  I say it isn't because if it was a driver issue I could just downgrade to an earlier driver, which there is none.  I am going to guess that no one has done any new drivers for the IPv6 Since Vista came out.  I don't know why but with my DSL it has been an issue when I was on my cable.  I recently switched, I had no problems.

Could it be my DSL Provider?

It is also a probability.  I do know like any DNS providers with the latest scare.  Is your DNS Safe?  I talked about DNS cache Poisoning and how to fix it. I talked about OpenDNS.  I have been using OpenDNS since I've gotten DSL and if it was an DNS issue, I've read reports that Open DNS has never had this type of issue.  So it can't be my DNS although, there is always a chance the DSL provider could be having problems with the IPv6 Protocol.  Check out Failing to plan is planning to fail post about this same type of issue.

Could I have a bad DSL Modem?

Let's just say this, If it is the modem then that would be a problem.  You try telling you provider that you are having problems with IPv6.  I am sure they would be scratching there heads like what is that and how do you know?  So I would love to flash the DSL modem with the latest software but for some reason I can't find any updates.  It's a Westell 325W and I looked and can't find anything!!  I could see if I couldn't find a Linux distro to flash into but I am not that good at this stuff.  So If you know how to fix that problem.  By all means tell me.

Could I use a AYIYA tunnel to fix this?

The only problem I see with this that it would slow me down even more.  I only have so much bandwitdth to worry about.   Having to Tunnel this through a service would hinder me.  So I can't think of any reason why I would want to slow me down.  I am really not concerned with IPv6 because when they do go into being required, they should have this fixed.  Will they fix the problem soon, I hope but I hold no definite answers on that one!!

Adobe Flash tips and Tricks!

Having been using Hulu for the last few months, I've had to tweak the Flash Player and I'd thought I share some tips to get your movies and shows to run smoother on some systems.  I will say this, it is not some times the system but the connection to the Internet.  Bandwitdth, for some shows are sometimes the hardest part of getting to watch the show.

From time to time, Check for updates:

Having updates will sometimes resolve the most common issues with the Flash player.  I've had that happen in the past, a certain version would not work right with my system.   After updating on those occasions, I'd be ready go!!  So here's the website to go to download and install the latest version:

Download and Install Adobe Player


[ad]

Why should I have to check it from time to time?

Adobe seems to not want to tell you if you have the lastest version.  So I've got a schedule to check it ever month and see if I have the latest version.  How can you figure that out? By downloading and installing.  If you've got the current version then you do not have to install it again!!

Put more access on storage!

Currently we have Terabyte hard drives, so we can have the system store more information on our hard drive.  I'm not saying that does not come without some security risk, but I do have a better time with streaming video.  By making more space available for the flash player to use, you can sometime cut down on connection speed and reliability.  I've had instances that once I've changed the amount of space for a website, I've gotten better video and watching experiences.  How you may ask by doing two things:

Going to your favorite video website > Run a video > Right Click on Video > Click Settings


Slide the bar to where you want it.  The default is 100 Kilobytes, I've got it set to 10 Megabytes.  I'll let you choice how much.  It just depends on the space and how much your willing to give up.

[ad]

Then you have to direct yourself to the adobe website and do the same there.  You have to put add the information to the cloud you could say.  Here's the link, you can always get there by either visiting the Adobe website or clicking on the advanced tab in the settings manager.

http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager.htm

[ad]
You would then go to the website storage tab or link and go there and slide the bar to where you've put the other one or give it more.  You then would want to make sure adobe is using your hardware acceleration for playing movies and video.



Make sure yours has the Check Mark!!
Sometimes it is easier just to clear the Cache!

Yes, I did say clear the Flash player cache.  Here is how you do it.  You will have to go the settings manager website. The Cache is in the storage settings manager.  Then click on Delete all sites.  It will ask if your sure.  You say yes, and it's done.

After that you should have some smoother sailing with Hulu and other websites that require flash. It isn't hard to do but it is sometimes a pain because you have to from time to time clear out that cache on the website. If anyone else can come up with some good tips throw them out my way. Share your tips with the world.

SanDisk drops a patent lawsuit bomb, sues 25 companies for infringement

Apparently SanDisk just noticed that other companies have had the nerve to ship flash-memory devices, because it's just dropped two lawsuits and an International Trade Commission action against some 25 companies, including Philips PNY, Kingston, Imation / Memorex, LG, and Verbatim. SanDisk is alleging that these companies infringed up to seven different patents, although what those patents cover has not yet been released. The two lawsuits are filed in the Western District of Wisconsin, which is known as a "rocket docket," so we should hear more about them relatively quickly, but the real action for right now is the ITC case, which is the same type of complaint that halted imports of those Qualcomm chips and could result in a stoppage of flash imports if successful. This just dropped, so we'll keep you updated as we find out more -- and peep the whole list of companies being sued after the break.

Hmm, I thought people should know about Sandisk and how hard it is to find any other good Flash Memory!!

Samsung reveals first 30-nm 64Gb NAND chip -- and a bit of skin

We're not sure what's more impressive here: the fact that Samsung has produced the world's first 30nm-class 64Gb (bit, not byte!) NAND chip or that they're now roping defenseless product waifs into hawking their silicon wafers. Nevertheless, we're looking at a serious jump in density in just 10 months. A maximum of 16 of the new chips can be combined for cost-effective 128GB (byte, not bit!) MLC NAND-based flash cards used primarily for data storage. Sammy's faster SLC based flash cards will still be the preferred choice when speed is of the utmost priority and cost isn't an issue. As such, Samsung also announced a 32Gb SLC NAND chip based on the same SaDPT (Self-aligned double patterning technology) manufacturing process. Sadly, we'll have to wait until 2009 for production to begin. Still, he looks happy dontchathink?

We will have to wait until 2009 but I bet we will start seeing these installed laptops!! I wonder if you could daisy chain them to make a big hard drive?