Jump to content

YoKenny

Experienced Members
  • Posts

    2,764
  • Joined

  • Last visited

Posts posted by YoKenny

  1. It's the car companies themselves. Now imagine a VW Golf being sold here in the U.S. under the name VW Rabbit. :rolleyes:

    I had a white Rabbit diesel for about 10 years until the body rusted away to nothing and it had about 250,000 miles on it then I bought a Datsun Fastback that was a disaster as it rusted out in 3 years so I bought a Golf that lasted about 10 years.

  2. Keep your anti virus definitions up to date as removing Virut is not easy

    Virut and other File infectors - Throwing in the Towel?

     

    I actually wanted to blog about this last week, but didn't find the time yet...

    In the last couple of weeks, I noticed a HUGE increase of Virut present on computers. As a matter of fact, 30% of the infected computers I analyzed were infected with Virut. This is bad, really bad... :-(

     

    Virut is a Polymorphic File Infector that infects .EXE and .SCR files. It opens a Backdoor by connecting to a predefined IRC Server and waits for commands from the remote attacker - for example to download/run more malware on the compromised computer. Emails may be harvested as well.

    This latest variant may also search for htm, html, asp and php files on the drives and modifies them by inserting an iframe that points to a malicious website. So you can already imagine what may happen if the owner is a webdesigner and uploads the infected webpages.

    An excellent write up on this latest variant (and previous one) can also be found here (by Nicolas Brulez): http://securitylabs.websense.com/content/Blogs/3300.aspx

    http://miekiemoes.blogspot.com/2009/02/vir...s-throwing.html
  3. As much as I like U2 I won't be venturing to myspace.com as it is a magnet for malware purveyors to try out their latest concoction of mayhem on download junkies:

    http://www.siteadvisor.com/sites/myspace.com

     

    Stick to reputable sites like Amazon.com and their site:

    http://www.u2.com

     

    See:

    http://hosts-file.net/default.asp?s=myspace.com

    I realise that blocking MySpace is causing quite alot of controversy. However, as I stated here, MySpace has been and continues to be both a major source of malware, and a breeding ground for perverts. I hope you can appreciate this. If you'd like to access MySpace anyway, you are free to unblock these entries.
  4. Misleading Software Spoofs ZDNet

    Posted 02.21.2009 by Frank J

     

    Impersonation is a form of flattery by itself, however, not when it comes to the very latest round of rogue security software this time impersonating ZDNet, CNET?s and PC Magazine?s reviews section, making it look like legitimate and highly respected technology sites have actually reviewed and recommend the rogue security software.

    http://www.techjaws.com/misleading-software-spoofs-zdnet
  5. I don't have Vista nor Comodo but there are 2 rules I live with that has served me well.

     

    1: Do not have 2 active anti virus scanners active as they will be competing for the same system resources and at a minimum interfere with each other or at a maximum cause the system to become unstable.

     

    Some anti virus applications do not live well together because their resident drivers conflict so if I want a second anti virus opinion then use an on-line scanner or download a bootable stand alone scanner:

    http://www.f-secure.com/weblog/archives/00001409.html

    http://forum.avira.com/wbb/index.php?page=...;threadID=82163

     

    2: Do not have 2 software firewall applications installed as they interfere with each other.

     

    I'll be getting my Vista system next week and Comodo will never use up a single byte of its huge (to me) hard drive.

  6. For some reason, when I use JavaRA at work on users' computers, it doesn't always take update 7 off... It's always 7 that it has problems with so I manually remove it in Add/Remove

    I'm not sure who the operating system question is targeted for but currently I am on my XP Home system.

     

    All releases of Sun Java prior to Version 6 Update 12 left remnants and that is why JavaRa was made.

  7. I found it

    [*Yahoo Messenger (Logs/Cache)]LangSecRef=3022Detect=HKCU\Software\Yahoo\pagerDefault=TrueFileKey1=%ProgramFiles%\Yahoo!\Messenger|ypager.logFileKey2=%ProgramFiles%\Yahoo!\Messenger\Profiles|*.*|RECURSEFileKey3=%ProgramFiles%\Yahoo!\Messenger\Cache|*.*|RECURSEFileKey4=%ProgramFiles%\Yahoo!\Messenger\IMVCache|*.*|RECURSE

    Note: I think that this is always true.

     

    Should be

    [*Yahoo Messenger (Logs/Cache)]LangSecRef=3022DetectFile=%ProgramFiles%\Yahoo!\Messenger|ypager.logDefault=TrueFileKey1=%ProgramFiles%\Yahoo!\Messenger|ypager.logFileKey2=%ProgramFiles%\Yahoo!\Messenger\Profiles|*.*|RECURSEFileKey3=%ProgramFiles%\Yahoo!\Messenger\Cache|*.*|RECURSEFileKey4=%ProgramFiles%\Yahoo!\Messenger\IMVCache|*.*|RECURSE

     

  8. I'm in agreement with kmillerusaf. I think he is right.

     

    I don't remember the publishers being there before.

     

    AJ

    I don't like imageshack images!

     

    When the image finally showed up I see that you have multiple vulnerable Sun Java installs.

     

    Go to Add/Remove Programs and un-install all Sun Java installs.

     

    Download JavaRa then unpack it then run it to remove Sun Java remnants:

    http://raproducts.org

     

    Download and install Version 6 Update 12:

    http://www.java.com/en/download/manual.jsp

     

    Run Secunia Online Software Inspector to find other vulnerable applications:

    http://secunia.com/vulnerability_scanning/online

  9. Buffer overflow issue in versions 9.0 and earlier of Adobe Reader and Acrobat

    Release date: February 19, 2009

     

    Vulnerability identifier: APSA09-01

     

    Bid number: 33751

     

    Platform: All platforms

     

    Summary

     

    A critical vulnerability has been identified in Adobe Reader 9 and Acrobat 9 and earlier versions. This vulnerability would cause the application to crash and could potentially allow an attacker to take control of the affected system. There are reports that this issue is being exploited.

    http://www.adobe.com/support/security/advi.../apsa09-01.html

     

    Use Foxit Reader to read pdf files:

    http://www.pchell.com/support/adobereaderalternative.shtml

  10. bonyolddoc, winantivir2009 is from the antivirus2009 gang and is a bit of nasty work.

     

    On a non-infected system download Malwarebytes MBAM:

    http://www.malwarebytes.org/mbam.php

     

    This infection is so nasty that the latest versions are built to detect MBAM and cripple it so you need to install it on a Flash drive or burn it to a CD after renaming it to bonyremove.exe or something like that so that it is not detected then install it on the infected system then do an Update and run a Quick scan then let it remove whatever it finds and a reboot is probably required to remove locked files.

     

    Also see:

    http://www.bleepingcomputer.com/malware-re...ivirus-vista-xp

  11. A new version of MailWasher Pro Beta is now ready.

     

    As you hopefully know by now the existing MailWasher is now being put to pasture, and we are working on a new version from scratch.

     

    The new version also requires .NET 3.5, which is the framework the new MailWasher interface is built from.

     

    Changes include :

     

    * Added support for IMAP accounts

    * Added account test when accounts are added or edited

    * Added new version of Xceed data grid

    * Added drag and drop support for sorting accounts

    * Added right click menu for sorting accounts

    * Progress indicator when program closes is now functional

    * Column widths and order now being saved

    * Improved Event Logging parsing for port, username and password alterations

    * Fixed POP3 checking bugs and improved checking process

    * Fixed Logon Progress Indicator bug

    * Other misc fixes and tweaks

    http://forum.firetrust.com/viewtopic.php?f=5&t=372

     

    General Forum if you are not a beta tester:

    http://forum.firetrust.com/viewtopic.php?f=16&t=1010

×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use.