Saturday, July 30, 2005
Windows Update Validation
http://www.boingboing.net/2005/07/28/microsoft_genuine_ad.html
Wednesday, July 27, 2005
Microsoft unfazed by Vista legal threat

Microsoft does not fear litigation over its choice of Windows Vista as the name for the next version of its operating system, a senior company official in Australia says.
Danny Beck, the senior Windows client product marketing manager, was responding to queries about the possibility of other software companies, which have the name Vista, initiating legal action.
The Seattle Times reported late last week that a business software and services company named Vista, founded in 1999 and located in Redmond, was not amused by Microsoft's choice of name.
Founder John Wall was reported as saying he would consider his options and talk to Microsoft before he acts.
Microsoft is known to be extremely protective about its own trademarks.
Beck said the name Vista was commonly used by a number of companies in different industries.
"We are only using the word Vista paired with our trademark Windows. The two together - "Windows Vista" - form the name of the next version of the Windows operating system," he said.
"Microsoft conducted a thorough search to ensure the Windows Vista mark would not infringe on the trademarks of others. We have filed for a trademark for the name Windows Vista in over 100 countries."
The next version of Windows is code-named Longhorn and is long overdue, with release dates having slipped a number of times. It was supposed to be released last year but is now said to be scheduled for release in 2006.
The latest version of Windows, XP, was released in 2001.
Monday, July 25, 2005
A new instant messaging worm
Windows PCs has been found.
The worm, dubbed Opanki.Y by Trend Micro, arrives in a message with the text: "This picture never gets old." It includes a link to a file that when downloaded is installed as "ITUNES.EXE," possibly to trick people into thinking that it is associated with Apple's popular media player.
If it runs, the worm opens a back door on the infected PC and downloads and installs four adware applications, Trend Micro said. Adware is software that displays pop-up advertising on a computer screen.
"We are seeing more worms and viruses that are dropping spyware and adware," Hughes said. "The virus writers get money for every install."
In addition to Opanki.Y, a worm called IM.Dynu hit users of AIM and MSN Messenger on Wednesday. It infects PCs via e-mail, the Web and instant messaging services, IMlogic said in an advisory. The Web addresses it uses in the instant messages can differ and so does the payload, the security company said.
The advice to instant messaging users is to be careful when clicking on links in messages--even when they seem to come from friends--and to use up-to-date antivirus software.
Windows Vista
Sunday, July 24, 2005
Most PC problems are easily fixable
Spyware
(n.) Any software that covertly gathers user information through the user's Internet connection without his or her knowledge, usually for advertising purposes. Spyware applications are typically bundled as a hidden component of freeware or shareware programs that can be downloaded from the Internet; however, it should be noted that the majority of shareware and freeware applications do not come with spyware. Once installed, the spyware monitors user activity on the Internet and transmits that information in the background to someone else. Spyware can also gather information about e-mail addresses and even passwords and credit card numbers.
Spyware is similar to a Trojan horse in that users unwittingly install the product when they install something else. A common way to become a victim of spyware is to download certain peer-to-peer file swapping products that are available today.
Aside from the questions of ethics and privacy, spyware steals from the user by using the computer's memory resources and also by eating bandwidth as it sends information back to the spyware's home base via the user's Internet connection. Because spyware is using memory and system resources, the applications running in the background can lead to system crashes or general system instability.
Because spyware exists as independent executable programs, they have the ability to monitor keystrokes, scan files on the hard drive, snoop other applications, such as chat programs or word processors, install other spyware programs, read cookies, change the default home page on the Web browser, consistently relaying this information back to the spyware author who will either use it for advertising/marketing purposes or sell the information to another party.
Licensing agreements that accompany software downloads sometimes warn the user that a spyware program will be installed along with the requested software, but the licensing agreements may not always be read completely because the notice of a spyware installation is often couched in obtuse, hard-to-read legal disclaimers.
Adware
(n.) (1) A form of spyware that collects information about the user in order to display advertisements in the Web browser based on the information it collects from the user's browsing patterns.
Malware
maĺwăr) (n.) Short for malicious software, software designed specifically to damage or disrupt a system, such as a virus or a Trojan horse.
So now that you know what may be causing some of your problems it's time to fix them. I use three programs to help me do this. One is an anti virus program and the other two are anti spyware programs. The first one is called AVG anti virus. This a free program and unlike some other anti viruses they do not require you to pay yearly to keep you protected (sounds a lot like organized crime) You can find AVG anti virus at http://www.free.grisoft.com
The next one is Adaware (Ad-a-ware) from Lavasoft. This program will look for and remove spyware. You can find Adaware at http://www.lavasoftusa.com
The last one is also a spyware removal tool. Spybot Search & Destroy it to will look for and remove spyware. You can find this at http://www.safeer-networking.org Running all three and keeping them updated will help keep your system running a little smother. Try to run and update them at least once a week , more if you think you maybe having problems.
Web browsers, You do have a choice
Here is a link if you would like to read more about Internet Explorer
http://www.kb.cert.org/vuls/id/713878
The truth about toolbars
Toolbars can be useful but get the wrong one and they will cause you trouble.
Their are a lot of third party toolbars out their to chose from, The problem is this. Not all toolbars do what they claim. In fact most are filled with adware and spyware. Most will claim to increase your surfing speeds. If you see claims like this don't believe it. Your surfing speeds are determined by many things like your internet provider, if you are on dialup or DSL the phone lines coming to your home and in your home will be a factor in this, if you have broadband the area your in and the lines you are connected to can determine your speeds. What the toolbar is really doing is collecting information that you are typing like your email address, name, phone number, home address, any thing you type. This is called a key logger. It is a small program that was installed with the toolbar. Once collected the info is sent to another system where it is sold. Yes somebody is making money off your info. You may notice an increase in popups, unwanted emails, and web pages that you did not ask for. Not all toolbars are bad and if you must have one I suggest one of these three. The google toolbar witch can be found at
http://toolbar.google.com/index_2Another nice one is the msn toolbar found at http://toolbar.msn.com The last one is the yahoo toolbar, this can be found at http://toolbar.yahoo.com Remember toolbars are like friends, A good one will never do you wrong.
Spoof Emails
Sample email body:
Microsoft Security Bulletin MS05-039: New patch against W32/Sober, W32/Zafi, W32/Mytob.
Issued: June 26, 2005
Updated: June 26, 2005
Version: 1.0
Summary
Who should read this document: Customers who use Microsoft Windows
Maximum Severity Rating: CRITICAL
Recommendation: Customers should install the patch immediately.
Security Update Replacement: This update replaces the update that is included with Microsoft Security Bulletin MS05-038. That update is also a cumulative update.
Affected Software:
Microsoft Windows NT Server 4.0 Service Pack 6a
Microsoft Windows NT Server 4.0 Terminal Server Edition Service Pack 6
Microsoft Windows 2000 Service Pack 3 and Microsoft Windows 2000 Service Pack 4
Microsoft Windows XP, Microsoft Windows XP Service Pack 1, and Microsoft Windows XP Service Pack 2
Microsoft Windows XP 64-Bit Edition Service Pack 1
Microsoft Windows XP 64-Bit Edition Version 2003
Microsoft Windows Server 2003
Microsoft Windows Server 2003 64-Bit Edition
Download the update and patch your system.
This is another example of a spoof email.
Chase Bank.
Users receive a spoofed email message claiming that they have been locked out of their account due to unauthorized account access. The email instructs users to unlock their account by updating their account information. The link to update their account information redirects users to a phishing site requesting personal information.
This phishing site is hosted in Taiwan and was up at the time of this alert.
Phishing Email Text:
Dear Customer,
We are contacting you to remind you that our Account Review Team identified some unusual activity in your account. In accordance with Chevy Chase Bank's User Agreement and to ensure that your account has not been compromised, access to your account was limited. Your account access will remain limited until this issue has been resolved. We encourage you to sign on and perform the steps necessary to restore your account access as soon as possible. Allowing your account access to remain limited for an extended period of time may result in further limitations on the use of your account and possible account closure. To view and perform the verification process, please click on the link below:
Harris Bank is committed to maintaining a safe environment for our customers. To protect the security of your account, our bank employs some of the most advanced security systems in the world and our anti-fraud teams regularly screen the Online Banking system for unusual activity.
Thank you for your prompt attention to this matter. Please understand that this is a security measure meant to help protect you and your account. We apologize for any inconvenience.
Sincerely,
Chevy Chase Bank, Customer Service.
SO how can you tell if the website your at is fake or not? With a tool called (Spoof Stick) This tool will display the name of the site you are at not just the web adderss that the link took you to. You can get Spoof Stick at http://www.corestreet.com/spoofstick Paypal has a site showing you how to spot spoof websites and emails. This site is at https://www.paypal.com/cgi-bin/webscr?cmd=xpt/general/SecuritySpoof-outside
Performing a clean install of XP
This can be a intimidating thing if you are not sure what you are doing. The truth is it is not as hard as you may think. The computer will do most of the work, it just needs you to answer some questions and make a couple of choices. So lets get started. First of all be sure that you back up any thing you may want to keep, pics, docs, installation files of a program you may have downloaded. The point is be sure to save any thing you want to keep that you don't have a copy of because this process will erase all the data on your hard drive. First your PC must be able to boot from the CD. If you know your PC will do this skip down to (put your Windows XP CD in the CD drive)
Start your computer and look for a message that says "Press [usually F2, Esc or Delete Key] to Enter Setup". This message may only appear for a second.
Quickly press this key. If you aren't able to move fast enough wait until Windows completely loads then restart the computer. This time as soon as the computer restart rapitley tap the key on your keyboard that you saw in Step. 2. Now that we are in the BIOS. We want to change the settings of the computer so that it boots from the CD rather than from the floppy and hard drive first.
In some Bios you'll want to select "Advanced Setup" by moving the arrow on your keyboard and then hitting the Enter key when you arrive on the Entry.
Try to follow the directions on the screen until the "CDROM" or is the 1st Boot Device or appears on top of the order. This might take some experimentation to figure out, but this is the hardest part of the XP installation but once you get the CDROM set to first boot the rest of the installation is pretty easy. After you set up the CDROM for booting, you want to save your settings and exit the BIOS. This is done by hitting F10 on your keyboard. Before you do this, be sure to put your Windows XP CD in the CD drive
The PC will now Boot from the XP CD. Look for the message "Press any Key to boot from CD usually located at the bottom of the screen.'Press Any Key"
Setup will start copying files, if you need to install any third-party or RAID drivers press F6 at this time. The copying of files can take awhile.
Next you will get the option to repair or enter setup, choose to enter setup. Press ENTER. Press F8 if you agree to the license.You must press F8 to continue. Setup will scan for previous Windows installations.
If you are using the upgrade version of XP on a computer without any version of Windows currently installed, this is where you will replace the XP CD with your qualifying CD, XP setup will scan the qualifying CD and instruct you to replace it with the XP CD to continue XP setup; otherwise, you will not see this screen. Clean install qualifying media can be any of the following Win NT3.51, 4.0, 2000, Win 95, 98, Me. Choose the location to install. If the hard drive or partition has a previous installation of XP you want to remove it, choose to delete the partition by pressing "D". You will then be prompted to create a new partition in the empty space. This will remove all data from the deleted space.Choose the NTFS file system from this screen.
Select F to continue. Setup will show a progress box and reboot when copying files is complete. When you see the "Press any Key to boot from CD" DO NOTHING.this time let it boot from the hard drive.
From this point, you will follow the on screen prompts. If you live outside the US, you will probably need to modify the default settings. Personalize your XP Enter your Name and Organization.
Enter the CD Key. The Key is located on the back of the CD folder in the Retail versions, and on a holographic label with the OEM versions purchased with a piece of hardware. Write this key down and secure it in a safe place in case the original is misplaced destroyed through natural causes or stupidity. Choose a name for the computer, this should be a unique name for the computer, especially if it is to be connected to a network. In Pro, you are given the option of creating a password or leaving it blank.
Set your Time Zone and Time and Date.
Setup will scan for network.
If detected you will have the choice to choose a typical configuration or custom. Choose typical if you are unsure. For home you will choose your workgroup, if a network is already established and you intend to connect to it, use the existing workgroup name, otherwise, I suggest using the default.The same goes for Pro as suggested for Home, but you will have the choice to join a Domain, if you do not have a Domain or do not know leave blank.
Setup will continue and reboot when completed ignore the "Press Any Key".
The loading XP window will now display after reboot.
You will see a change display settings, say yes, and accept the setting if you can see the screen after accepting. You will see a welcome screen, press next and unfortunately you have to wait for the dialog to finish. Set up you internet or network connection.
This is the Activate, Register screen. You must activate within 30 days of installing XP, but you do not ever have to register, Registration is completely optional and if you do not register, no personal information will be transmitted during activation. If you register, then activation will transmit that information along with the activation. The first Activation is usually done over the internet if the computer is connected to the internet, otherwise, it can be accomplished by copying the alphanumeric string from the activation screen and make a phone call to the on screen supplied phone number. The activation center will then give you a slightly longer number to input into for activation. I suggest you do not activate immediately in case you need to make hard ware changes, or install to a different system within the thirty days, and you will be reminded on boot up until you do.Setup users screen. Set at least one user for yourself or the person that will be using the computer. Logon to XP and Install your anti-virus software. Apply Service Pack and Critical updates from Windows Update before installing any software or hardware. Very important to avoid worms! Install all applications and setup your email. Good Luck and Have Fun.
Viruses change us
http://www.crime-research.org
The threat of spyware and viruses being secretly downloaded on their computers has caused the majority of consumers to change their online behavior over the last year, a research firm said Wednesday.
Fully 9 out of 10 consumers say they have made at least one change to avoid unwanted software, the Pew Internet &American Life Project found. For example, more than 80 percent of the 2,000 adults surveyed by Pew said they had stopped opening email attachments unless they were sure the documents were safe.
Other behavioral changes included nearly half of the respondents no longer visiting websites that they feared might deliver unwanted programs. One in 4 said they had stopped downloading music or video files from peer-to-peer networks, and nearly 1 in 5 said they started using a different web browser to avoid software intrusions.
"Spyware has had a chilling effect," Susannah Fox, associate director of Pew, said.
The impact of spyware and viruses on behavior involves 10s of millions of Americans, the research firm said. Nearly 7 in 10 home Internet users, or about 93 million Americans, have experienced at least one problem associated with unwanted software.
Those problems include computers slowing down, freezing up, or crashing. In addition, some respondents reported seeing new programs appear that they didn't install, new icons suddenly appearing on the desktop, and having their Internet home page changed without them resetting it.
While 80 percent of consumers said they knew about spyware, only about half claimed to have a grasp of the concept of adware, which comes bundled with some free software downloaded from the Internet.
Adware tracks a person's Internet habits, so the information can be used to provide targeted advertising on the person's computer. Spyware, on the other hand, is installed without explicit consent and can sometimes be used to track site visits and record keystrokes in order to try to steal passwords.
Even though legitimate marketers often use adware, consumers still don't like it, Fox said.
"They don't want to be followed around," she said. "Consumers are increasingly skeptical about tracking, and about downloading extra programs, such as adware, that go along with free software that people enjoy."
As a result, more consumer education is needed, if marketers hope to change opinions of adware, Fox said.
Explorer vs Mozilla
In the attack, JavaScript is used to display a pop-up window in front of a trusted Web site. The pop-up appears to be part of the legitimate site, but actually is linked to a different, malicious site. A user might be fooled into sending personal information to the scammers.
Although the pop-ups could be used by attackers, overlaying multiple windows in a Web browser is a feature, not a vulnerability, according to an advisory posted Tuesday on Microsoft's TechNet Web site.
"This is an example of how current standard Web browser functionality could be used in phishing attempts," Microsoft said in the advisory.
Phishing is a prevalent type of online fraud that attempts to steal sensitive information such as usernames, passwords and credit card numbers. The schemes typically combine spam e-mail and fraudulent Web pages that look like legitimate sites.
Earlier this week, security monitoring company Secunia warned of the browser problem and rated it "less critical." The issue affects most major browsers, Secunia said.
The problem is that JavaScript dialog boxes do not display or include their origin. For an attack to occur, a user would have to visit a malicious Web site or click on a link before going to a trusted site, such as that of a bank. The attacker could then overlay part of the trusted site with a window asking for data such as a user name and password. Information entered would go to the attacker, instead of the bank.
Firefox developers at the Mozilla Foundation have been making moves to combat this kind of attack. In April, a patch was developed that allows people to block Java and Flash-based pop-ups unless they came from trusted sites.
Opera has said that its latest browser, 8.01, would display the pop-up's origin, letting a user inspect its URL to see if it came from a trusted site.
Customize Windows XP
Have you ever wanted to change Windows XP to look and feel the way you wanted it to look and feel? Well you don't need to be a software hacker to do it. XP will allow you to change many of it's feature and don't worry Steve Jobs and Bill Gates won't get mad at you for doing so. The changes that you are about to make are things that are built in to Windows XP and require little computer knowledge. The following link will take you to the Microsoft knowledge base website. Their you will learn a few tips and tricks for customize Windows XP. http://www.microsoft.com/windowsxp/using/setup/customize/default.mspx