Living with Linux offline and blogging about it!

No time to be offline!

Hey Let's face it, I am more and more wanting to blog. It is however quite hard to do that while traveling or when I have family. So I been curious as to how to do that. As you know I've been using Linux more and more. I have thoroughly enjoyed the experience. The only problem sometimes is I didn't have a internet connection and I know myself, that can be quite hard to write blog post. So I went searching around to see if I can blog offline. I found some great little programs that will do it easily in Linux.

Blogging Offline, Didn't know you could do that?

If your like me, you probably think you have to be online all the time. I am just glad that I found a program that will do me everything that I wanted to do with blogging and publishing my posts. I hate those times when I do not have access to an internet connection and I have something that I want to write. I didn't know you could blog offline either, but as I was wanting to delve more and more into Linux, I am steadily making Kubuntu my home away from Windows. I've always been fascinated with writing and Linux in general so that is why I am leaning more and more on teaching others about the Operating System.

Some programs that you should check out:

• Blogilo -- This is the one that I am using with Wordpress right now and it seems to work really well. I'm really impressed with the software and I think they are making some great strides with offline blogging.
• blogGtk -- Looks good but have not actually tested this one out. I will install it later on but the screen shots don't look anything like Blogilo and even then It looks somewhat the same. I guess I could live with any blogging software but right now I am loving Blogilo.
• Gnome blog editor -- This one looks to be for Gnome projects but does look promising even though I am using KDE. I don't know anything more than that, I might also try that one out just for kicks.

As you can see these are just a Few of blogging tools that the Open source community has created to better fasciliate and make blogging just that much easier!

How do I add links?

There are definately several ways to add links. I will give you a few ideas and let you come up with your own way to help you blog offline.

• Automatic Seo Links plugin -- Great little plugin for the simplest of things. The little plugin will allow you to automatically associate any keyword with an URL. So if I were to tell you about Linux, it would automatically link to a website. This is quite handy and have it used it in the past. You should look into it if you have a wordpress blog.
• Blogilo -- Download you most recent blog post and you will already have links available to keep your readers on your site longer and encourage them to stay on your site.
• Put the links in when your online -- This is also something that is very useful because if your like me, you sometimes can't think of the links but know that if you had internet access you could easily find them. So before you post with Blogilo, just go through the post and put those link in there when your ready.

I hope these help you create even better blog and allow yourself time to be offline. I really am enjoying Linux and how open the community is. Hope to see you soon!!

Keep It Real!

Paul Sylvester

Scareware List for July 31, 2009

Looks like they went out and made a quite a few domains lately so Here they are:

• antivirus-live-pro.org ([intlink id="1837" type="post"]Antivirus Pro Scareware[/intlink])


• internetantivirusplus.com (Fake Antivirus)


• mybestantivirusplus.com


• securesoftwarebill.com (Rogue System Security Antivirus)


• yourantimalware.com


• totalsurfguard.com


• systemsecuritysupport.com


• stabilitysuite.com


• powersystemstability.com


• onlinecentersupport.net


• identitysecuritysuite.com


• etotalsecurity.com


• defenseinteractive.com


• defenseinteractive.com


• antispyinteractive.com


• antispyavailable.com


• protectionsystem.org(Like [intlink id="1837" type="post"]Antivirus Pro Scareware[/intlink])


• realbestantivirusplus.com

Remember these sites are active and are scaring people into buying or installing there product, you should not go to these sites. As you can see the Scareware Writers and domains have been busy this week and have made these to use in this weekend I can bet on that.   These sites are trying to [intlink id="3607" type="post"]scare you into buying there product or installing there fake antivirus software[/intlink].    If you are constantly inundated with pop up windows warning you have a virus or trojan and showing you a load of viruses or trojans on your screen. They will probably ask you to install software or buy the product that would be a big waste of time and could possibly install even more malware and also could loose money. You should never download any software from sites you don't know or buy from sites that you've never heard from.

Threat to System : Moderate

[rating:4/5]

Advice : Do a Complete system scan and make sure you don't have any more hidden malware.

I recommend :

[ad#SUPERAntiSpyware]

A-Squared Emergency USB Stick - Portable Antivirus Kit

[gallery link="file" order="DESC" columns="2"]

IT Security warfare is an interesting domain. It is a never ending race between the security software developers and malware writers. And since the security software always act after the development of the malware, they are always behind in this race.

But this fact poses a serious threat to the security of your system as a user. If you are not careful and regularly updating your antivirus applications, you might be late, and if the malware might get a chance to get the entry to your system, it can play havoc there.

Today’s Intelligent Malware…

Today’s malware are much more intelligent than their predecessors. They not only do the damage intended by their developers, but also make it difficult for security software to identify them. They try to disable your antivirus applications, they modify your system files so that you are not able to access the security software websites and forums, they hijack your browser homepages, they disable the update procedure of your security software and use all such tricks, which make their detection difficult.

What is the Solution?

In a such a situation, you need a security tool, which remains aloof from your system and can be used as and when required. A-Squared Emergency USB Stick is one such portable tool, which can be used in such a situation.
A-Squared Emergency USB Stick is a combination of two free security tools from the reputed security vendor EMSI. These tools are…

A-squared Free:

[ad]With a-squared Free you have got the powerful a-squared Scanner including graphical user interface. Search the infected PC for Trojans, Spyware, Adware, Worms, Dialers, Keyloggers and other malign programs.

a-squared Command line Scanner:

This scanner contains the same functionality as a-squared Free but without a graphical user interface. The command line tool is made for professional users and can be used perfectly for batch jobs

You can download this and save it in your USB Flash Drive. In some unfortunate instance, when the security software installed in your system is not able to detect any malware, and the malware damages your system files, then there are chances that this USB stick remains protected, because it may not have been inserted in your computer at the time when the malware has been doing its job.

Once you are aware about the presence of the malware, you can try to use this portable antivirus kit to clean your system. The command line tool coming with this portable antivirus toolkit is especially useful because many of the present day malware can potentially disable the GUI interface of the popular security software.

[Download A-Squared Emergency USB Stick]

[This is a Guest Post from Silki Garg, who enjoys writing about Internet and PC Security Issues. Check out her latest articles on ClamWin Portable Virus Remover and Windows Security Options Tool WinPatrol.]

Careless Facebook profiling can lead to Identity Theft!

I just got in contact with a old friend from High school and another friend of mine suggest the new friend. I was looking at her profile and couldn't believe what I saw:

As you can see this is not good I was amazed at how many people are giving out there birthdays and who they are married to to friends and family. So we heard about how people are claiming they need help or are in need of desperate money. This is nothing new, as you know people are having hard economy times and people are using the social engineering to scam people out of money.

I feel that I should warn people the important necessity.   You shouldn't be broadcasting your DOB and who your married to to your friends, just in case they get hacked.

Recent activity indicates that identity thieves are hacking into trustworthy profiles before selling on the login details to interested parties. This information is used by spammers to target legitimate users, posting misleading links on their "walls" – personalized message boards.

[Via Computing.Co.UK]

This deservese a little mind and a lot of understanding.   By the spammers hacking into facebook accounts they have the chance to scam or spam people with links to possibly have a virus or trojan installer.

[ad#ad2-right]For example This one blog talks about the Virus:

Symantec's Norton Antivirus software has flagged this as a "high risk" Infostealer.Gampass virus. More info on this particular Trojan vius is here. (Note: Symantec warns the risk level is "low," since it originated in 2006, but this new Facebook email is a new iteration of the same virus.)

You might be inclined to click on this link because it's from a friend, but they did not intentionally send it to you -- and yes, their Facebook photo is attached, too.

[Via Sync-blog]

Now I went searching through my friends list and also found this little bit of information.  As you can see this one is asking for people to use there account to scam people out of money.  They could use this to find out even more information of the Other partner and make you believe your talking to the real deal.   Saying they need money because they are stuck over seas or something like that.   I've seen this on other blogs where people have sent money to "friends" but are actually people who are the scammers.  Then if you send the money you are out of luck with your money and possibly your friends to.  I am sure there are more but this is prime examples of what you shouldn't do and why.

So what can you do to prevent Identity Theft and/or being scammed?

[ad#cricket-right-ez]

• Roboform Review — A Password Manager that will help protect your passwords from key loggers and other such phishing sites.    I strongly recommend it to to all who are security minded. (Never use the same password for all your accounts)


• Are you worried about your identity? -- This is good information in checking out sites that might be questionable.  You can find out what type of site it by using your brains.


• Old Phish Become New again -- This is blog post about twitter and what may happen if you did give out your password.   This is a good example of why you never should give out your password to third party websites.


• Twitter Spammers a getting more smarter -- This is also good example of what happens when you see become friends with someone who isn't real.   You could be the next to be spammed and/or impersonated.

If you follow some common steps you to could prevent from being the victim or getting your Identitiy stolen.   Some things to remember is Never tell anyone your Birthday the whole date like someone did on twitter a few days ago.  It's nice that they are growing older but that gives people that much more information to use to steal your money or your idenitiy.   Think before you give out any personal information like Age, Married, who your married to and anything that might be used to be able to access your account or your impersonate you.  Remember only you can prevent from being scammed or lossing your identity, you wouldn't want to have to pay for your mistakes.

Zero Day For IE7 Being used in the wild.

It looks like IE7 patches are being used right now in the wild.  According to TrendMicro:

HTML_DLOADER.AS exploits the CVE-2009-0075 vulnerability, which is already addressed by the MS09-002 security patch released last week. On an unpatched system though, successful exploitation by HTML_DLOADER.AS downloads a backdoor detected as BKDR_AGENT.XZMS.

[Image from TrendMicro Blog]

[ad#ad2-right]As you can see this this can be very bad for the companies who wait a while.  Internet Explorer is still being used 1 out of 4 users and I see it it all the time on my stats.   The Good news is this isn't as hard to get rid as the Conflicker but should be taken serious because the writers might start to want to get even more malicious and make it even harder.

This is the next step to prevent yourself from getting caught with your pants down so to speak, you need to patch all systems that have internet access.  I still like the Autopatcher because it will do the job with very little input from the user.   It also makes it easier for people to patch big systems.  You should also consider installing some Free Anti-virus software to help protect the systems you do have.

From the looks of this virus, someone could easily make this into a botnet and you know how that can could affect your systems and your ISP.  So it is best to get this months patches on the floor of your company as soon as possible.

You should also consider telling your users to start using Firefox to prevent infection from even happening. Until you patch, you are vulnerable.

Disaster preparation 101 -- Data backup

In this one I will talk about Disaster, it happens to all of us from time to time. A fire, a earthquake, a stolen laptop or any number of ways. So what happens to your data, is it stored on the laptop? Is it important very sensitive data? Could you get fired if you lost that data?

[ad#ad2-right]These are all questions you must ask yourself when you have laptop. How do you backup your data or even do you have a backup? Having seen this with my own clients, I must wonder if there are people out there who just don't care. I had a client the other day who gotten a virus and this was a really mean virus. Deleted some very important files when you tried to clean the virus out. She called me in a panic because she couldn't load up windows? I asked if she had any backups, she said "what's a backup" . So I sat there discussing this with the client for over 20 minutes. Finally she started to understand, she said she had the OEM Backup DVD but nothing else. She also said she needed help with getting data off the computer. I told her that I would be able to come the next day and I was lucky the virus didn't do anything else to her data. We were able to retrieve the data from her system. That is where I start my rant , Why would anyone not have backup of there most important data?

So How do you backup your data? This is controversial and somewhat depends on how much people want to spend to keep there data safe and not loose pictures or music. There are several ways to do it, each way has it's pitfalls or short comings and requires a little more effort:

Kinds of Backup

Hard Medium - DVD, CD, External Hard drive

• Wikipedia's List of DVD backup Software -- This is good for beginners who want to explore how to backup options.


• Free Hard Disk Backups and Restore Software -- Gives you a list of great free backups and restore software to help you backup your system.


• GoodSync Backup --  This isn't free but helps you backup your software to an external drive and makes sure you have the most current files on your system.


• Some other Backup Software -- This is a variety of good backup software from Amazon.

Although,  The hard medium is usually used that doesn't mean you can have a backup other than hard.   Here are some ways to back up on the internet.

Internet Medium:

• Jungle Disk -- Provides online storage through the Amazon s3 service.   Only pay for what you use.   It works well with most Operating system.  I've used it on Vista so it is really nice.


• Carbonite Online backup --Another good Online storage.


• Some Other Online backup -- Here a list from Amazon to better help you find the type of software that you might need.

These are just a few options, if you want to look for other you can.  The important thing to do is BACKUP because if you need some data that gets wiped or destroyed.  You will be kicking yourself for not backing up.

Removing Win32/Bagle.HE worm

Here is another virus that seems to be spreading lately.   From the looks of it, it sees to be another email worm.  Here is what eset says:

Aliases

Email-Worm.Win32.Bagle.gt (Kaspersky), W32/Bagle.gen (McAfee), Trojan.Tooso!gen (Symantec)

[ad#ad2-right]Win32/Bagle.HE is a worm that spreads via e-mail. The size of its executable is 40565 B .

When executed the worm copies itself in the following locations:

• Documents and Settings\All Users\Application Data\hidn\
  hldrrr.exe


• Documents and Settings\All Users\Application Data\hidn\
  hidn2.exe

In order to be executed on every system start, the worm sets the following Registry entry:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\drv_st_key

[ad#ad2-left]It seems to have a manual removal process, Unless you pay for the other software but according to the 411 on PC Security:

Win32/Bagle.HE worm is a “threat” that appears in security scans by fake antispyware WinDefender 2008.

The danger of Win32/Bagle.HE worm is supposed to scare you into wasting $49.95 on WinDefender 2008.

Unless you like getting ripped off, don’t download the software the Win32/Bagle.HE worm popup links to. You’re not really infected with Win32/Bagle.HE worm — you’re infected with scamware that you need to remove.

I’ll show you how to get rid of Win32/Bagle.HE worm and WinDefender 2008, for free.

[via 411 on PC Security]

According to this site you can remove it by doing some steps.  I think Kaspersky has an easier way to remove it and it looks like most anti-virus software will remove this.   You need to remember that only you can prevent this from the future.   You should also update your windows update and make sure your system is up to date.

Uncovering a Virus/Trojan

Getting done with the first part really got my juices flowing. I was shopping looking and thinking about this next article. I came up to only one option turning this into a 3-5 length post due to all the content that I will have.  So where did we leave off?  Oh that is right figuring out if you have a virus/Trojan.  The instant I made a post about this 12 hours later someone make a comment and here is what he said:
[ad#ad2-right]

Rene Van Belzen

I can't wait to read part two of this article. I always wondered how you'd know you're infected if a virus don't want to be detected and no virus definitions are yet available, because the virus is so new.

Now the truth is anytime a Virus does something it usually leaves a footprint somewhere and somehow.   Even the hardest working hacker can't plan for all possibilities and that is where we begin.   I have been helping people for a while with viruses and know that no matter how hard the virus tries to hide you can usually find it relatively quickly and easily do to virus check here are the ways I've done to figure out if they may or may not have a virus/Trojan.

Now if this is a client's computer and you don't want to be rude to the client, there are a few indications of user error and installing a virus.   This is relatively simple, all you do is do a quick inventory of all the start menu programs.  You'd want to look for any P2P file sharing program, If they have Firefox Installed, and if they are using Window Mail and not Thunderbird.   You see 80% to 90% of virus downloaded are installed by the End USER.  They either downloading a game and installing a virus with [ad#ad2-left]a game, or not protecting themselves by using Internet Explorer or Using Windows Mail.  That is usually my first step due to the fact, I've got to be diplomatic about finding out about security ways.  Also make sure they are up to date on there Window updates, unless they are using a really old system then you will have to work even harder.  Also you can suspect a virus if the client is talking about having problem with a program recently although this isn't always true it sometimes is the case due to the fact hackers don't have a big chance to test these viruses/Trojans out before they set them into the wild.  So there are always going to be unplanned problems associated with them.

After the first initial search of desktop, you should really know the likely hood of a possible virus getting on the system and later we will talk about counter measures to prevent virus attacks in the future.   There are a few places a hacker likes to put commands.   Hackers love to put in the Registry to run a program every time Windows starts.  It usually in:

• HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run


• HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\

Usually 50% to 70% of virus like to make sure the program to runs.  This is a flaw in Windows because hackers can edit this without much effort but there isn't many places a hacker can go to make sure a program is set to run when you boot.   So this is also a benifit to finding those little programs.

Now just like the Regisitry, Hackers also like to put programs in a few areas on the hard drive.   This is also kinda hard to hide because most of the time these are consider important to the system but if you know what to look for you can pretty much figure out if it is truelly a system file.  These areas of the hard drive are:

• C:\WINDOWS\System32[ad#ad2-right]


• C:\WINDOWS


• %programfiles%\common files\microsoft shared


• %windir%\temp\

These are just a few but if you look hard enough it can be found most of the time.   Most of the time I use the registry to tell me where these programs are so I can do a further check of the program.  Some of this is not needed with some of the programs that I recommend but this is for those who want to be a through job and make sure the virus is gone.

On my next post we will talk about some good tools for the trade to help get rid of a virus/Trojan.  This little step here is used to  better help identify a virus and also give you chance to google each name on the list of registry and the hard drive  to see if you can identify the virus.

Upcoming Patch Tuesday

[ad#ad2-right]I wanted to get prepared for the updates for this Tuesday and I thought I'd go through them and list what Microsoft said about each.   These are what's been said on Technet and I am sure there will be more.   Each one of these don't look to serious but I will post Tuesday if there is anything I've missed on this post.   As you might know this is not set in stone but just the direction of Microsoft for this Months Release.


KB955839

Update for Windows Server 2008, Windows Vista, Windows Server 2003, and Windows XP

Install this update to resolve an issue that is caused by revised daylight saving time laws in many countries. This update enables your computer to automatically adjust the computer clock on the correct date in 2008. After you install this item, you may have to restart your computer. This update is provided to you and licensed under the Windows Server 2008 License Terms.

[ad#ad2-left]KB957388

Update for Windows Server 2008 and Windows Vista

Install this update to resolve a set of known application compatibility issues with Windows Server 2008. After you install this item, you may have to restart your computer.

KB890830

Windows Malicious Software Removal Tool

Microsoft released the Microsoft Windows Malicious Software Removal Tool to help remove specific prevalent malicious software from computers that are running Windows Vista, Windows Server 2003, Windows XP, or Windows 2000. After you download the Microsoft Malicious Software Removal Tool, it runs one time to check your computer for inflection by specific prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps remove any infection it finds. Microsoft releases a new version of the tool every month.

[ad#ad2-right]KB905866

Update for Windows Mail Junk E-mail Filter [November 2008] (KB905866)

Install this update for Windows Mail to revise the definition files that are used to detect e-mail messages that should be considered junk e-mail or that may contain phishing content. After you install this item, you may have to restart your computer. This update is provided to you and licensed under the Windows Vista License Terms.

I am sure there are going to be others but right now this looks like the normal things Microsoft sends out.  I am sure they are keeping a tight lid on the really serious stuff until last second so I'll have to report the really important stuff Tuesday.

Facebook : Beware Spam for breakfast. (Virus)

In today's society, we've been to complacent with people with people clicking links for the social group. In one such article on Channel Web, a nice little blog, says this:

[ad#ad2-right]


The worm was discovered by IT security provider Kaspersky Lab, which said the threat, Net-Worm.Win32.Koobface.b, is targeting Facebook users by creating spam messages and sending them to the infected user's friends via the site.

"Unfortunately, users are very trusting of messages left by 'friends' on social networking sites," said Alexander Gostev, senior virus analyst at Kaspersky Lab, in a statement. "So, the likelihood of a user clicking on a link like this is very high."

[Via Channel Web]

This seems to be a problem people thinking that a link someone sends them is a real good link but actually is a link to a video site. According to this article the links people are sending are actually a fake video link, telling you have to download some update to flash player, by downloading this program. The user gets involved with the virus and the fun begins. So how can you prevent this from happening, two ways one is a very good group of software to make sure you have the latest and greatest video codecs. That too can be something they'll say you need and if you've already installed this list of codecs then you know they'll not telling the truth and you can quickly get away from the site laughing.

[ad#ad2-left]What's this program name, it is call the K-lite Mega Codec pack. In this Pack you will be able to play almost everything without having to go download another program. This is done by people who want you to have all the latest codecs installed so you don't have to go by a program you'll only going to use once a month.

Once you've done that, you'll no longer have to worry for the most part about codecs. There will be times when you might have to visit that site and update them but that will be far less.

The other thing you must remember is if it says you must update your player. That should be a sign that there is something. I'll always go to the site and check for example Adobe. If it says I need to update my flash I'll manually type it into my browser. This way you will know you have the latest updates, if you need to update the flash player by all means go to here and update.

If you got the virus I'd check out my Anti-virus and Anti-Spyware page and that should show you will you need to get rid of the Virus. This virus is very easy to get rid of, just download any one of the anti-virus software and install it. Don't forget to update the virus database while your at it. That should fix the problem pretty fast. Remember the only way to prevent from getting the virus is YOU.

trojan.zlob removal tricks!!

[ad#ad2-right]

Aliases:
Trojan-Downloader.Win32.Zlob.qyl (Kaspersky)
Trojan-Downloader.Win32.Zlob.qzs (Kaspersky)
Trojan-Downloader.Win32.Zlob.qzn (Kaspersky)
Trojan.Zlob.CPP (BitDefender)
Puper (McAfee)
SystemDefender (Symantec)

Trojan:Win32/Zlob.G is a component of Win32/Zlob that downloads rogue security programs, adware, and additional Win32/Zlob components.

[Via Windows Live OneCare]

[ad#ad2-left]This one just popped up today on my radar it seems to be a very low threat on everyone's radar according to my sources say "Trojan.Zlob.G is a Trojan horse that may download and execute remote files and redirect the Internet Explorer home page and search page."  So to remove this little Trojan you would want to download one an Anti-virus and firewall.   Once you install the software the program should fix the problem for you.   This one seems to be really easy to fix.   So Please read my post on how to better protect your self if you want to prevent this in the future.

Are you patched, Secunia Says NO

Think you've got nothing to worry about, according to Secunia 98% of computers are not fully patched and are vulnerable to some kinda of attack. [ad#digg-right]So I wanted to talk about this a little and give you a few good ways to make sure you are patched.  There are several ways to get your system up to almost 100%.



[ad#ad2-left]Some things to do is make sure you have your Windows systems updated.  This is easy to make sure, if you have an internet connection you can just check for updates.  If you don't know how to do it, it is quite simple, Just go here.    If you have Windows Vista all you have to do is hit Start and type in the search box "Windows Update" and hit Enter and you will be taken to the update page.




If you have a system that is off of the Net you could use the Clone of Autopatcher Program to do it for you.   You also need to update all your secondary programs such as Audacity, Open Office, and other programs that you use weekly.



[ad#ad2-right]If you don't know what you need to update sometimes just having a program check for you can make a really good difference.   The one that I like to use is Appsnap and it actually searches you computer to see what might need to be updated.   I also suggest for the final suggestion is check out my Anti-Virus and Anit-Spyware Resources and make sure you have a firewall and anti-virus software.  This will greatly reduce your chances of getting a virus but that isn't all you have to be careful on what you click on read this article on Some Important programs to prevent yourself from having viruses and Malware!! Read that carefully to better understand how you can protect yourself in the future.

Windows 7 will sport Direct X 10 Compliance!

The new feature is called WARP10, for “Windows Advanced Rasterization Platform,” and it’s essentially a DX10-compliant, software-only rasterizer that was written by Microsoft; it runs directly on the CPU. In a situation where a DX10 app needs to run but can’t find DX10-compliant hardware, it will run on WARP10, albeit very, very slowly. Ultimately, you can think of WARP10 as a “software DX10 GPU” that will exist as a fallback in Windows.

[via Arstechnica]

[ad#ad2-left-1]This will make Windows 7 work more smoothly with Windows XP and Vista games.   This looks to be like having more compatibility with the older games.   When Vista came out they were complaining about not being able to play games on Vista.   Vista has been really updated with being able to play games. People are starting to play games on a Vista machine.   This is also a step for Windows 7 to be one that Microsoft, being that they are trying to get the next O/s to look like an Angel probably.  What I expect is Microsoft will advertise about Windows 7 will be gamer friendly.   This is a move on Microsoft to get gamers on board with this release and to try to get people to forget about Vista.

[ad#ad2-right]Having said that here’s some things that will be most likely be Advertised with Windows 7 when it comes out.     Microsoft will want it to be game friendly, User Account Control to be less obtrusive, and program compatibility.   These the main points to get people to start buying Microsoft’s products.  Microsoft should be worried because of Apples comments about how you should use an Anti-virus for Macintosh’s.  This is definitely worrying Microsoft.  It means Microsoft has an competitor that Hackers are trying to exploit.   I would be willing to guess that Microsoft is worried people are switching to Apple products.  These are just guesses but I am quite certain Microsoft is really worried.  What do you think, do you think it will happen?

Not so, Antivirus2008

[ad#ad2-left]On F-secure blog they talk about this rogue antispyware.

OK, so let's say the user (by some stroke of luckless chance, or courtesy of a trojan downloader) ends up with the demo installer of Rogue:W32/VirusRemover2008.C on their hands and it runs
[via F-Secure]

According to them, they have many different version of this rogue antispyware.  They have de, dk, es, fr, it, no, nl, and no, which are all attempting for you to buy this no so Virusremover2008 software.  They talk about how it tells you have a 9 infected viruses and that you need to remove them, but in truth, they use a text file to create this lie.  Check out all the details for further information.

Microsoft issues Vista patches out of Monthly Patch Cycle!

Microsoft issues Out of cycle patch for Vista.   These patches are as Followed:
[ad#ad2-right-1]

Kb957321


An update rollup is available for the Microsoft Windows Imaging Component (WIC) in Windows Vista or in Windows Server 2008. This update rollup resolves the problems that are documented in the following articles in the Microsoft Knowledge Base:

954708 An update to add support for the serialization of complex Extensible Metadata Platform (XMP) data types in the Windows Imaging Component

945060 There may be inconsistencies in the Extensible Metadata Platform (XMP) and Exchangeable Image File (EXIF) values for an image file in Windows Vista and in Windows XP

KB959108

The Windows Portable Device (WPD) API collects and transfers Software Quality Metrics (SQM) data to Microsoft servers. The SQM data is collected only on an opt-in basis through the Microsoft Customer Experience Improvement Program. An update is available that disables the collection and transfer of SQL data to Microsoft servers.



This update affects Windows Vista-based computers, Windows Vista Service Pack 1 (SP1)-based computers, and Windows Server 2008-based computers that are in the Microsoft Windows Media Player Customer Experience Improvement Program.

KB959130

On a Windows Vista-based computer or on a Windows Server 2008-based computer, you install a third-party Web browser. You set the third-party Web browser as the default Web browser. Then, you run the Connect to the Internet Wizard. However, if you select the Browse the Internet now option, Windows Internet Explorer starts instead of the third-party Web browser that you set as the default Web browser.

[ad#ad2-right]This seems to be not so important.  All of these are not really security related but it does surprise me that Microsoft wanted to release these out of Cycle.   If your planning on using your Vista laptop during the holidays you might want to update your vista machine before you go.  I don't think there is going to be any major issues with this but if there is, you can always remove these updates later.

Cricket USB UM100 Broadband Wireless Modem Review.

The UM100c is No Longer Available, Please check out the Cricket [intlink id="3059" type="post"]A600 Modem Review[/intlink] Or the [intlink id="4523" type="post"]UM185 Broadband modem[/intlink]. The UM185 modem might be a replacement to the UM100.

After a full week of playing around with this USB wireless, I wanted to talk about it. So let's break it down into pieces.

1. [ad#text-broadband1]


2. Installation --  The installation of the USB was not to difficult.  I did have to do some more steps than this:  Install the Software, then hooked up the USB device to the USB port.


3. Manual Activated the Broadband --  For some reason in my area they had several people have problems with the broadband activation.  So I had to activate it manually!!

After that all went well, I was on the internet just a cruising along.  I did however wonder why I was getting such a slow response speed.  When I went traveling I thought I would share some of my local results with you to better show you my speed.  All these test were done at



Please see an updated post on how to get even more speed from the broad band modem.
This speed is not the true speed for the broad band modem.

The Percentages over the results are showing you just what my signal strength was when I was doing the test.  Two of the 4 were traveling on the highway and the other two were stationary.  I also know that my speed will vary along with signal strength, I know I have to be a mile or less from a tower to get 100%.

*Update* 12/21/08

[ad#cricket-1]In my other post I talk about why I didn't get the speed I expected, but after I did the activation I went to normal Mobile Broadband speeds.   I also now have been using the USB Modem for my main internet without any or much problems.   I know I can't play any major online games but I can at least have the internet with me were ever  I go.   As long as you stay in the coverage area, you should be in good shape.  .  Like I Said I've used it in my area for over a 1 month and with the small little problem, the speed has been really dependable and I haven't had any major issue with connectivity. I've been using this modem as my main internet and have not seen any major internet and have not seen any of the cap come my way.   I think they won't mind to much as long as you don't ABUSE the internet, for example don't use it for bittorrent downloads and you should be fine!!

Update 12/24/2008
I also did travel with my laptop to another city, and I got to say it was really good and how it did when I went from one city to another. Check out the report here.
According to some post and forum talks around the the internet they are talking about the soft cap of 5 Gigabytes but that seems to not be so important right now.   After all, they have to make money some how.   I will update as necessary when I find anything else out.

update 1/01/09

I also did a video and uploaded it to youtube using the broadband connection. I had no problem uploading this video to Youtube. I've embedded it in this web page. See it on the bottom:



I also bought the [intlink id="3059" type="post"]A600 Cricket modem[/intlink] and I absolutely love this modem because of the things you can do with it.

Vista has a new Vulnebility!

According to Techworld.com,  Vista has a new Vulnerability that could let a hacker infect a Vista machine with a rootkit.  The talk from them is quite intriguing.   I will quote it to better let you know what the Vulnerability is:

The vulnerability could allow a hacker to install a rootkit, a small piece of malicious software that is very difficult to detect and remove from a computer, Unterleitner said.

[ad#ad2-left]Phion notified Microsoft about the problem on 22 October. Microsoft indicated to Phion that it would issue a patch with Vista's next service pack. Microsoft released a beta version of Vista's second service pack to testers last month. Vista's Service Pack 2 is due for release by June 2009.
[via Techworld.com]

The way they could do this is through the Device IO Control which in turn could corrupt the Kernel of Windows Vista.  Now we all know that Microsoft will release a patch quicker than 6 months away.  According to this article, people are already looking for the exploit and want to know more about it.  I would be willing to bet they will have a patch out sooner than later.  Probably January or Febuary, which will be a big deal because no one will expect it.  I would also imagine hackers will start trying to figure out how they could install software as quick as possible before Microsoft pushes out the patch.   So what can you do to protect yourself, Get a firewall, a Antivirus and learn how to protect yourself to prevent yourself from getting a computer virus.

A good free VPN Client -- OpenVPN & more

I've been doing some research on what might be good to use in case, I was away from my home network.  I was thinking how safe am I at Starbucks or other places that I might doing my web.  So I did a little looking around to see which one I liked and I came to the conclusions that only one I need right now is:

The nice thing about this was the simple installation of the software and how easy it was to set it up. This service is in beta but seems to be really well done with regards to the end users. When you install this software and want to connect it uses the OpenVPN software with there configurations. OpenVPN, is a open sourced SSL VPN solution and is free to use. The way this this free is of Ad Supported banners. Now it is cheaper than paying monthly for a VPN service. The ones I've found so far are these few:

• OpenVPN (FREE)(*advertisement)(Linux, and Windows)


• Always VPN (Prepay) (5 GB to 80 GB limit) (Linux, Mac and Windows)*Out of Beta
  


• Hotspot Shield (FREE) (*advertisement) (Windows) (3 gig Cap)
  


• WiTopia (40$/ Year) (Mac, Linux, and Windows)

[ad]There is of course others out that but these are just a few that I saw that looks like the cheapest there is.  Others I've seen cost 40 to 50 dollars a month.   If you have any other ones that are free or cheap let me know.  I don't think we need to pay a lot just to have security on an open network. I'm certain that they're more out there but will keep looking for more later on. I did my initial research and will come back and find more.

*Update Feb 8, 2009*

As of recent a friend emailed me saying telling me to check the site out again and I did.  Not sure when they went out of Beta because I've not been using Always VPN lately due to my Broadband Cricket Prepay Internet.  I just checked and yes they are charging here's the break down:

• 5GB - USD 8.50


• 10GB - USD 15.00


• 20GB - USD 26.00


• 40GB - USD 33.00


• 80GB - USD 47.00

So I must ask why they didn't just keep the 5 GB limit with the Advertising, I do not know but  I did want to let people know that it is no longer free and no longer in Beta.  I went from Always to OpenVPN which still works despite the fact they are using Always VPN back client.   It's open source so it will probably change to something else sooner or later.   If you see it changes let me know, I will update more when I find out more!!

Antivirus Professional 2008 uses Scare tactics

[ad#ad2-right-1]

We came across a rogue today called Antivirus Professional 2008 that uses GeoIP Lookup as part of its scare tactics. This site uses Flash and script to create the effect of an online scan, that then attempts to push an installer at the visitor. The NoScript extension for Mozilla Firefox is an excellent way to mitigate against this kind of garbage.

[Via F-secure]

It seems that there is a site out there, that seems to be trying to scare you into downloading there software. If you have any questions about this site please feel free to check out what I've found out:

Registration Service Provided By: ESTDOMAINS INC
Contact: 1.3027224217
Website: http://www.estdomains.com
Domain Name: ANTIVIRUS-ONLINE-SCANNER.COM
Registrant:
N/A
Serento faloimitator@list.ru

Minskay str. 27-14
Kiev
Kiev 237293
UA
Tel. 044.2901732
Creation Date: 07-Jun-2008
Expiration Date: 07-Jun-2009
Domain servers in listed order:
ns2.antivirus-online-scanner.com
ns1.antivirus-online-scanner.com
Administrative Contact:
N/A
Serento faloimitator@list.ru

Minskay str. 27-14
Kiev
Kiev 237293
UA
Tel. 044.2901732
Technical Contact:
N/A
Serento faloimitator@list.ru

Minskay str. 27-14
Kiev
Kiev 237293
UA
Tel. 044.2901732
Billing Contact:
N/A
Serento faloimitator@list.ru

Minskay str. 27-14
Kiev
Kiev 237293
UA
Tel. 044.2901732

[ad#ad2-right]Now as you can see this site is located in Russia, and if that's the case it is probably some virus itself to take control of your system to do what they want with it. So you best advice is if you think you have a virus then check out my recommendations these are all free to download and try. Unlike this site, they are legitimate and actually do what they promise.  If you want to email them you can but It don't think it will help.

*UPDATE on that Website*


According to F-secure that site is now Suspended.  Great job guys.  We are now fighting these people even better than I'd thought.

Sites that you need not Visit:

[ad#ad2-right]I've had some Anti-virus problems in the past few weeks and have been trying to see if it is my system or if it was just luck of the draw.  So I did some research and found some sites that you should not go to, or download from.   These sites have been know to spread the fake anti-virus malware software.   So I wanted to warn people of some common websites that have been known to have viruses on them:

• hxxp://movieportal2008q.com/freemovie/Movie/xxxx/x/ -- this site usually tries to send you the "Trojan.HTML.Zlob.AG" Virus.



• hxxp://porntubedot.com/xxxxxxxx/WatchFreeMovie.php --This site usually tries to send you the "Trojan.Dropper.SMN" Virus.



• hxxp://handballfondi.it/xxxxxx1.php -- This site is one of the new Malware sites that looks like Youtube,   When you go to this site they say you need a special to play a video clip.  Most of the time when you get something like this, it is going to try to install Malware. A good broad set of Codecs that you may want to download is called Klite Mega Codec, which if you us that you should never need to download any other codec to play a movie clip from any site online.



• hxxp://0scanner.com/---censored---/ --  This site usually tries to send you the "Adware.FakeAntiVirus.L" virus.  Another site trying to install malware. [ad#ad2-left]
  
  

If you want to check your system, here are some places to go to get a free Anti-virus check:

• Panda Security Active Scan


• Trend Micro House Call


• Kaspersky Labs Free Virus Scan


• Symantec Free Antivirus Scan


• Bitdefender Free Online Scanner


• F-Secure Online Scanner

If you have any other ways sites that we should avoid by all means comment about it. I would love to hear sites that you know are bad!!