BCM

Saturday, July 30, 2005

Windows Update Validation

Microsoft has started to check the sn# of the operating system it is updating . If the OS is not authentic you will not be able to do any updates but just 24 hours after the new validation system was put in place someone has found a way around it. Read more at
http://www.boingboing.net/2005/07/28/microsoft_genuine_ad.html

Wednesday, July 27, 2005

Microsoft unfazed by Vista legal threat





Microsoft does not fear litigation over its choice of Windows Vista as the name for the next version of its operating system, a senior company official in Australia says.

Danny Beck, the senior Windows client product marketing manager, was responding to queries about the possibility of other software companies, which have the name Vista, initiating legal action.

The Seattle Times reported late last week that a business software and services company named Vista, founded in 1999 and located in Redmond, was not amused by Microsoft's choice of name.

Founder John Wall was reported as saying he would consider his options and talk to Microsoft before he acts.

Microsoft is known to be extremely protective about its own trademarks.

Beck said the name Vista was commonly used by a number of companies in different industries.

"We are only using the word Vista paired with our trademark Windows. The two together - "Windows Vista" - form the name of the next version of the Windows operating system," he said.

"Microsoft conducted a thorough search to ensure the Windows Vista mark would not infringe on the trademarks of others. We have filed for a trademark for the name Windows Vista in over 100 countries."

The next version of Windows is code-named Longhorn and is long overdue, with release dates having slipped a number of times. It was supposed to be released last year but is now said to be scheduled for release in 2006.

The latest version of Windows, XP, was released in 2001.

Monday, July 25, 2005

A new instant messaging worm

A new instant messaging worm that masquerades as Apple Computer's iTunes application and drops adware on infected
Windows PCs has been found.

The worm, dubbed Opanki.Y by Trend Micro, arrives in a message with the text: "This picture never gets old." It includes a link to a file that when downloaded is installed as "ITUNES.EXE," possibly to trick people into thinking that it is associated with Apple's popular media player.

If it runs, the worm opens a back door on the infected PC and downloads and installs four adware applications, Trend Micro said. Adware is software that displays pop-up advertising on a computer screen.

"We are seeing more worms and viruses that are dropping spyware and adware," Hughes said. "The virus writers get money for every install."

In addition to Opanki.Y, a worm called IM.Dynu hit users of AIM and MSN Messenger on Wednesday. It infects PCs via e-mail, the Web and instant messaging services, IMlogic said in an advisory. The Web addresses it uses in the instant messages can differ and so does the payload, the security company said.

The advice to instant messaging users is to be careful when clicking on links in messages--even when they seem to come from friends--and to use up-to-date antivirus software.

Windows Vista

Looks as though longhorn has finally been given a name, Windows Vista. The name was leaked carefully to enthusiast sites late Thursday evening, and acorrding to the BetaNews story MS have registered a whole bunch of related domains earier in the year.

Sunday, July 24, 2005

Most PC problems are easily fixable

The biggest complaint that I hear when people bring their PC's to me is that it is running slow, locks up, takes a long time to start or shut down, their home page changes, popups even when they do not have a web page open. cdrom opens and closes on it's own. All sings of adware, spyware, or viruses. I will show you how to get rid of these things and get your PC running like new again.

Spyware
(n.) Any software that covertly gathers user information through the user's Internet connection without his or her knowledge, usually for advertising purposes. Spyware applications are typically bundled as a hidden component of freeware or shareware programs that can be downloaded from the Internet; however, it should be noted that the majority of shareware and freeware applications do not come with spyware. Once installed, the spyware monitors user activity on the Internet and transmits that information in the background to someone else. Spyware can also gather information about e-mail addresses and even passwords and credit card numbers.

Spyware is similar to a Trojan horse in that users unwittingly install the product when they install something else. A common way to become a victim of spyware is to download certain peer-to-peer file swapping products that are available today.

Aside from the questions of ethics and privacy, spyware steals from the user by using the computer's memory resources and also by eating bandwidth as it sends information back to the spyware's home base via the user's Internet connection. Because spyware is using memory and system resources, the applications running in the background can lead to system crashes or general system instability.

Because spyware exists as independent executable programs, they have the ability to monitor keystrokes, scan files on the hard drive, snoop other applications, such as chat programs or word processors, install other spyware programs, read cookies, change the default home page on the Web browser, consistently relaying this information back to the spyware author who will either use it for advertising/marketing purposes or sell the information to another party.

Licensing agreements that accompany software downloads sometimes warn the user that a spyware program will be installed along with the requested software, but the licensing agreements may not always be read completely because the notice of a spyware installation is often couched in obtuse, hard-to-read legal disclaimers.

Adware
(n.) (1) A form of spyware that collects information about the user in order to display advertisements in the Web browser based on the information it collects from the user's browsing patterns.


Malware
maĺwăr) (n.) Short for malicious software, software designed specifically to damage or disrupt a system, such as a virus or a Trojan horse.

So now that you know what may be causing some of your problems it's time to fix them. I use three programs to help me do this. One is an anti virus program and the other two are anti spyware programs. The first one is called AVG anti virus. This a free program and unlike some other anti viruses they do not require you to pay yearly to keep you protected (sounds a lot like organized crime) You can find AVG anti virus at http://www.free.grisoft.com
The next one is Adaware (Ad-a-ware) from Lavasoft. This program will look for and remove spyware. You can find Adaware at http://www.lavasoftusa.com
The last one is also a spyware removal tool. Spybot Search & Destroy it to will look for and remove spyware. You can find this at http://www.safeer-networking.org Running all three and keeping them updated will help keep your system running a little smother. Try to run and update them at least once a week , more if you think you maybe having problems.

Web browsers, You do have a choice

Most people don't know that the Web browser they are using can cause them a lot of problems. A Web browser like Internet Explorer acts like an open door for virus writers and spyware planters. These people know that IE is field with holes and will by default allow the installation of software with out the users knowledge. You do have a choice. The Alternatives to IE are Firefox, Mozilla, and Netscape. These are a much better for blocking Popups and unwanted software. They can make your web surfing.....Pleasant. These Web browsers will work in Windows or Linux. Here are the links to these browsers. getfirefox.com http://www.mozilla.org/products/mozilla1.x/ browser.netscape.com
Here is a link if you would like to read more about Internet Explorer
http://www.kb.cert.org/vuls/id/713878

The truth about toolbars

The truth about toolbars.
Toolbars can be useful but get the wrong one and they will cause you trouble.
Their are a lot of third party toolbars out their to chose from, The problem is this. Not all toolbars do what they claim. In fact most are filled with adware and spyware. Most will claim to increase your surfing speeds. If you see claims like this don't believe it. Your surfing speeds are determined by many things like your internet provider, if you are on dialup or DSL the phone lines coming to your home and in your home will be a factor in this, if you have broadband the area your in and the lines you are connected to can determine your speeds. What the toolbar is really doing is collecting information that you are typing like your email address, name, phone number, home address, any thing you type. This is called a key logger. It is a small program that was installed with the toolbar. Once collected the info is sent to another system where it is sold. Yes somebody is making money off your info. You may notice an increase in popups, unwanted emails, and web pages that you did not ask for. Not all toolbars are bad and if you must have one I suggest one of these three. The google toolbar witch can be found at
http://toolbar.google.com/index_2Another nice one is the msn toolbar found at http://toolbar.msn.com The last one is the yahoo toolbar, this can be found at http://toolbar.yahoo.com Remember toolbars are like friends, A good one will never do you wrong.

Spoof Emails

Spoof Emails. You may have received one your self or know someone how has. The problem is that they may not realized they have received these Spoof Emails. These emails look like they came from the people that they claim they are from. Most of these emails ask you to update your information and most will ask you for user names and passwords account numbers mothers maddened name. No bank, credit union, financial institution, eBay, Paypal, credit card company's, department stores, exe, will ever ask you for this kind of info with an email that has been sent to you. You should know that you will never get an email telling you to (CLICK HERE to install a security patch) And yet a new wave of email scams disguised as Microsoft Security Bulletins. Users receive an email message which urges the immediate installation of a cumulative security patch. Users who execute the Trojan become infected with an SDBot variant, which is currently undetected by major anti-virus vendors. This Trojan/Bot allows complete unauthorized access to the machine.

Sample email body:
Microsoft Security Bulletin MS05-039: New patch against W32/Sober, W32/Zafi, W32/Mytob.
Issued: June 26, 2005
Updated: June 26, 2005
Version: 1.0

Summary
Who should read this document: Customers who use Microsoft Windows
Maximum Severity Rating: CRITICAL
Recommendation: Customers should install the patch immediately.
Security Update Replacement: This update replaces the update that is included with Microsoft Security Bulletin MS05-038. That update is also a cumulative update.

Affected Software:
Microsoft Windows NT Server 4.0 Service Pack 6a
Microsoft Windows NT Server 4.0 Terminal Server Edition Service Pack 6
Microsoft Windows 2000 Service Pack 3 and Microsoft Windows 2000 Service Pack 4
Microsoft Windows XP, Microsoft Windows XP Service Pack 1, and Microsoft Windows XP Service Pack 2
Microsoft Windows XP 64-Bit Edition Service Pack 1
Microsoft Windows XP 64-Bit Edition Version 2003
Microsoft Windows Server 2003
Microsoft Windows Server 2003 64-Bit Edition

Download the update and patch your system.

This is another example of a spoof email.

Chase Bank.

Users receive a spoofed email message claiming that they have been locked out of their account due to unauthorized account access. The email instructs users to unlock their account by updating their account information. The link to update their account information redirects users to a phishing site requesting personal information.

This phishing site is hosted in Taiwan and was up at the time of this alert.

Phishing Email Text:

Dear Customer,
We are contacting you to remind you that our Account Review Team identified some unusual activity in your account. In accordance with Chevy Chase Bank's User Agreement and to ensure that your account has not been compromised, access to your account was limited. Your account access will remain limited until this issue has been resolved. We encourage you to sign on and perform the steps necessary to restore your account access as soon as possible. Allowing your account access to remain limited for an extended period of time may result in further limitations on the use of your account and possible account closure. To view and perform the verification process, please click on the link below:



Harris Bank is committed to maintaining a safe environment for our customers. To protect the security of your account, our bank employs some of the most advanced security systems in the world and our anti-fraud teams regularly screen the Online Banking system for unusual activity.

Thank you for your prompt attention to this matter. Please understand that this is a security measure meant to help protect you and your account. We apologize for any inconvenience.
Sincerely,
Chevy Chase Bank, Customer Service.


SO how can you tell if the website your at is fake or not? With a tool called (Spoof Stick) This tool will display the name of the site you are at not just the web adderss that the link took you to. You can get Spoof Stick at http://www.corestreet.com/spoofstick Paypal has a site showing you how to spot spoof websites and emails. This site is at https://www.paypal.com/cgi-bin/webscr?cmd=xpt/general/SecuritySpoof-outside

Performing a clean install of XP

Performing a clean install of XP.
This can be a intimidating thing if you are not sure what you are doing. The truth is it is not as hard as you may think. The computer will do most of the work, it just needs you to answer some questions and make a couple of choices. So lets get started. First of all be sure that you back up any thing you may want to keep, pics, docs, installation files of a program you may have downloaded. The point is be sure to save any thing you want to keep that you don't have a copy of because this process will erase all the data on your hard drive. First your PC must be able to boot from the CD. If you know your PC will do this skip down to (put your Windows XP CD in the CD drive)
Start your computer and look for a message that says "Press [usually F2, Esc or Delete Key] to Enter Setup". This message may only appear for a second.
Quickly press this key. If you aren't able to move fast enough wait until Windows completely loads then restart the computer. This time as soon as the computer restart rapitley tap the key on your keyboard that you saw in Step. 2. Now that we are in the BIOS. We want to change the settings of the computer so that it boots from the CD rather than from the floppy and hard drive first.
In some Bios you'll want to select "Advanced Setup" by moving the arrow on your keyboard and then hitting the Enter key when you arrive on the Entry.
Try to follow the directions on the screen until the "CDROM" or is the 1st Boot Device or appears on top of the order. This might take some experimentation to figure out, but this is the hardest part of the XP installation but once you get the CDROM set to first boot the rest of the installation is pretty easy. After you set up the CDROM for booting, you want to save your settings and exit the BIOS. This is done by hitting F10 on your keyboard. Before you do this, be sure to put your Windows XP CD in the CD drive
The PC will now Boot from the XP CD. Look for the message "Press any Key to boot from CD usually located at the bottom of the screen.'Press Any Key"

Setup will start copying files, if you need to install any third-party or RAID drivers press F6 at this time. The copying of files can take awhile.
Next you will get the option to repair or enter setup, choose to enter setup. Press ENTER. Press F8 if you agree to the license.You must press F8 to continue. Setup will scan for previous Windows installations.
If you are using the upgrade version of XP on a computer without any version of Windows currently installed, this is where you will replace the XP CD with your qualifying CD, XP setup will scan the qualifying CD and instruct you to replace it with the XP CD to continue XP setup; otherwise, you will not see this screen. Clean install qualifying media can be any of the following Win NT3.51, 4.0, 2000, Win 95, 98, Me. Choose the location to install. If the hard drive or partition has a previous installation of XP you want to remove it, choose to delete the partition by pressing "D". You will then be prompted to create a new partition in the empty space. This will remove all data from the deleted space.Choose the NTFS file system from this screen.
Select F to continue. Setup will show a progress box and reboot when copying files is complete. When you see the "Press any Key to boot from CD" DO NOTHING.this time let it boot from the hard drive.
From this point, you will follow the on screen prompts. If you live outside the US, you will probably need to modify the default settings. Personalize your XP Enter your Name and Organization.
Enter the CD Key. The Key is located on the back of the CD folder in the Retail versions, and on a holographic label with the OEM versions purchased with a piece of hardware. Write this key down and secure it in a safe place in case the original is misplaced destroyed through natural causes or stupidity. Choose a name for the computer, this should be a unique name for the computer, especially if it is to be connected to a network. In Pro, you are given the option of creating a password or leaving it blank.
Set your Time Zone and Time and Date.
Setup will scan for network.
If detected you will have the choice to choose a typical configuration or custom. Choose typical if you are unsure. For home you will choose your workgroup, if a network is already established and you intend to connect to it, use the existing workgroup name, otherwise, I suggest using the default.The same goes for Pro as suggested for Home, but you will have the choice to join a Domain, if you do not have a Domain or do not know leave blank.
Setup will continue and reboot when completed ignore the "Press Any Key".
The loading XP window will now display after reboot.
You will see a change display settings, say yes, and accept the setting if you can see the screen after accepting. You will see a welcome screen, press next and unfortunately you have to wait for the dialog to finish. Set up you internet or network connection.
This is the Activate, Register screen. You must activate within 30 days of installing XP, but you do not ever have to register, Registration is completely optional and if you do not register, no personal information will be transmitted during activation. If you register, then activation will transmit that information along with the activation. The first Activation is usually done over the internet if the computer is connected to the internet, otherwise, it can be accomplished by copying the alphanumeric string from the activation screen and make a phone call to the on screen supplied phone number. The activation center will then give you a slightly longer number to input into for activation. I suggest you do not activate immediately in case you need to make hard ware changes, or install to a different system within the thirty days, and you will be reminded on boot up until you do.Setup users screen. Set at least one user for yourself or the person that will be using the computer. Logon to XP and Install your anti-virus software. Apply Service Pack and Critical updates from Windows Update before installing any software or hardware. Very important to avoid worms! Install all applications and setup your email. Good Luck and Have Fun.

Viruses change us

Viruses change us This article is form a web site called Computer crime research center.
http://www.crime-research.org

The threat of spyware and viruses being secretly downloaded on their computers has caused the majority of consumers to change their online behavior over the last year, a research firm said Wednesday.

Fully 9 out of 10 consumers say they have made at least one change to avoid unwanted software, the Pew Internet &American Life Project found. For example, more than 80 percent of the 2,000 adults surveyed by Pew said they had stopped opening email attachments unless they were sure the documents were safe.

Other behavioral changes included nearly half of the respondents no longer visiting websites that they feared might deliver unwanted programs. One in 4 said they had stopped downloading music or video files from peer-to-peer networks, and nearly 1 in 5 said they started using a different web browser to avoid software intrusions.

"Spyware has had a chilling effect," Susannah Fox, associate director of Pew, said.

The impact of spyware and viruses on behavior involves 10s of millions of Americans, the research firm said. Nearly 7 in 10 home Internet users, or about 93 million Americans, have experienced at least one problem associated with unwanted software.

Those problems include computers slowing down, freezing up, or crashing. In addition, some respondents reported seeing new programs appear that they didn't install, new icons suddenly appearing on the desktop, and having their Internet home page changed without them resetting it.

While 80 percent of consumers said they knew about spyware, only about half claimed to have a grasp of the concept of adware, which comes bundled with some free software downloaded from the Internet.

Adware tracks a person's Internet habits, so the information can be used to provide targeted advertising on the person's computer. Spyware, on the other hand, is installed without explicit consent and can sometimes be used to track site visits and record keystrokes in order to try to steal passwords.

Even though legitimate marketers often use adware, consumers still don't like it, Fox said.

"They don't want to be followed around," she said. "Consumers are increasingly skeptical about tracking, and about downloading extra programs, such as adware, that go along with free software that people enjoy."

As a result, more consumer education is needed, if marketers hope to change opinions of adware, Fox said.

Explorer vs Mozilla

Microsoft Internet Explorer vs Mozilla Firefox, Opera 8.0 Microsoft does not plan to update Internet Explorer to prevent a spoofing attack that could trick users into giving out personal information to hackers.

In the attack, JavaScript is used to display a pop-up window in front of a trusted Web site. The pop-up appears to be part of the legitimate site, but actually is linked to a different, malicious site. A user might be fooled into sending personal information to the scammers.

Although the pop-ups could be used by attackers, overlaying multiple windows in a Web browser is a feature, not a vulnerability, according to an advisory posted Tuesday on Microsoft's TechNet Web site.

"This is an example of how current standard Web browser functionality could be used in phishing attempts," Microsoft said in the advisory.

Phishing is a prevalent type of online fraud that attempts to steal sensitive information such as usernames, passwords and credit card numbers. The schemes typically combine spam e-mail and fraudulent Web pages that look like legitimate sites.

Earlier this week, security monitoring company Secunia warned of the browser problem and rated it "less critical." The issue affects most major browsers, Secunia said.

The problem is that JavaScript dialog boxes do not display or include their origin. For an attack to occur, a user would have to visit a malicious Web site or click on a link before going to a trusted site, such as that of a bank. The attacker could then overlay part of the trusted site with a window asking for data such as a user name and password. Information entered would go to the attacker, instead of the bank.

Firefox developers at the Mozilla Foundation have been making moves to combat this kind of attack. In April, a patch was developed that allows people to block Java and Flash-based pop-ups unless they came from trusted sites.

Opera has said that its latest browser, 8.01, would display the pop-up's origin, letting a user inspect its URL to see if it came from a trusted site.

Customize Windows XP

Customize Windows XP

Have you ever wanted to change Windows XP to look and feel the way you wanted it to look and feel? Well you don't need to be a software hacker to do it. XP will allow you to change many of it's feature and don't worry Steve Jobs and Bill Gates won't get mad at you for doing so. The changes that you are about to make are things that are built in to Windows XP and require little computer knowledge. The following link will take you to the Microsoft knowledge base website. Their you will learn a few tips and tricks for customize Windows XP. http://www.microsoft.com/windowsxp/using/setup/customize/default.mspx