Bay Geeks Computer Repair Services

December 29, 2008

Santa left a virus under the Christmas tree

Filed under: Malware, viruses — Tags: , , — admin @ 9:14 am
0
Digg me

Amazon has warned its customers that one of Samsung’s digital picture frames shipped to customers infected with a virus. While Samsung has some egg on its face, malware that ships on consumer hardware is not as serious of an issue as it may seem.

Earlier this week Amazon alerted its customers to an issue affecting the installation CD that shipped with the Samsung SPF-85H 8 inch Digital Picture Frame. Apparently the CD shipped with a copy of the W32.Sality.AE virus. Amazon is recommending that people download a recent copy of the application directly from Samsung’s website rather than using the CD.

So yes, this is embarrassing for Samsung. It shows that either they or the subcontractor who cut the CD need to tighten up their processes surrounding manufacturing systems. There is no reason for those machines to be exposed to malware, let alone not run up-to-date anti-virus to catch these infections.

The customers have a pretty low likelihood of being infected by this malware, though. Any system running up-to-date anti-virus would have been guaranteed to spot the potential infection, as the delay between when the CD was first cut and when the customer attempted to install the application was far longer than the average amount of time it takes for a piece of malware to be detected by an anti-virus package. If the system wasn’t running an up-to-date anti-virus package, well, it probably had oodles of malware already, and the marginal cost of one more infection is pretty small.

I suspect next year Samsung will be asking Santa for security people who are tightwads about compliance.

Adam J. O’Donnell, Ph.D. is an R&D engineer who has focused on computer security since 2000. He currently is the Director of Emerging Technologies at Cloudmark, a messaging security company located in San Francisco. See his full profile and disclosure of his industry affiliations.
By Adam J. O’Donnel, Ph.D.

Add This! Blinkbits Blinklist Blogmarks BlogMemes BlueDot BlogLines co.mments Connotea del.icio.us de.lirio.us Digg Diigo DZone Facebook FeedMeLinks Folkd.com Fleck Furl Google Google Reader icio.de IndianPad Leonaut LinkaGoGo Linkarena Linkter Magnolia Mister Wong MyShare Ask.com MyStuff Ask.com Yahoo! MyWeb Netscape Netvouz Newsgator Newsvine Oneview.de RawSugar reddit Rojo Segnalo Shadows Simpy SlashDot Smarking Sphere Spurl Startaid StumbleUpon TailRank Technorati ThisNext yigg.de Webnews.de ReadMe.ru Dobavi.com Dao.bg Lubimi.com Ping.bg Pipe.bg Svejo.net Web-bg.com Plugin by Dichev.com

The Facebook virus spreads: No social network is safe

Filed under: Malware, viruses — Tags: — admin @ 9:10 am
0
Digg me
“KOOBFACE” is the name of the Trojan worm that’s been making its way through the social networking site Facebook lately, but to the site’s users, it’s been simply known as “the Facebook virus.” That name will soon become a misnomer, though, because the worm is now spreading outside of Facebook’s walls to attack other social networks like Bebo, MySpace and Friendster.

About Koobface
Once a computer has become infected with the Kooface worm, it spams the friends belonging to the owner of the computer by leaving comments on their profiles. Those comments appear to come from the infected user, saying things like “Are you sure this is your first acting experience?”, “is it u there?”, “impressive. i’m sure it’s you on this video”, “How can anyone get so busted by a spy camera?” and “You’re the whole show! i’m admired with you.” Save for that last one, whose bad English will likely raise a flag that all is not what it seems, the other comments appeal to people’s vanity. They wonder: is that really a video of me? and then click through on the link provided.
The link actually takes them to an off-site page which pretends to offer a video download from “YuoTube,” but then stalls saying that you’ll need a new version of Adobe’s Flash Player installed in order to continue. Of course, if you click the button to proceed with the install, you’re infected. Infected users are then directed to even more contaminated web sites when they try to use search engines, which puts them at risk of identity theft, among other things. “Search terms are directed to find-www.net,” said McAfee’s Craig Schmugar, and that “enables ad hijacking and click fraud.”

Social networks will be the new breeding ground for viruses
Koobface may not be the first bit of malware to hit the social networks, but it has become so widespread that it now accounts for one percent of ScanSafe’s blocked malware, said ScanSafe senior security researcher Mary Landesman. (Facebook will not disclose how many members are infected.)
What’s frightening about the spread of this Trojan is not the worm itself - it’s really nothing new in terms of malware - but the way its being spread. Over the years people have learned to be suspicious of unknown links and attachments in their emails, so the virus writers turned to hit us where we’re more vulnerable: on our social networks. Here, many people still have a feeling of comfort and security. They don’t always have their guard up.
According to Graham Cluley, senior technology consultant at Sophos, “a key factor which helps social-networking spam and malware succeed is that people are more prepared to click on a link or message if they believe it is from someone they know. The average person is used to receiving unsolicited e-mails in their regular inbox, but believe messages have more credence when they arrive via Facebook. The message is clear — people need to beware.”
Cluley also warns that the situation is going to get worse next year. There will be more attacks and they will become more sophisticated. “It will probably take a long time before the general public begins to learn that hackers and scammers are using the system for their own ends.”

How To Protect Yourself From Koobface
Besides doing the obvious - running an up-to-date antivirus, security patches, and firewalls - you should be on the look out for the following:

u A sample spam message:

u The malicious site:

u The warning message:

You should also keep an eye on Facebook’s security page (http://www.facebook.com/security) which warns of the latest threats. – New York Times

By Sarah Perez
Add This! Blinkbits Blinklist Blogmarks BlogMemes BlueDot BlogLines co.mments Connotea del.icio.us de.lirio.us Digg Diigo DZone Facebook FeedMeLinks Folkd.com Fleck Furl Google Google Reader icio.de IndianPad Leonaut LinkaGoGo Linkarena Linkter Magnolia Mister Wong MyShare Ask.com MyStuff Ask.com Yahoo! MyWeb Netscape Netvouz Newsgator Newsvine Oneview.de RawSugar reddit Rojo Segnalo Shadows Simpy SlashDot Smarking Sphere Spurl Startaid StumbleUpon TailRank Technorati ThisNext yigg.de Webnews.de ReadMe.ru Dobavi.com Dao.bg Lubimi.com Ping.bg Pipe.bg Svejo.net Web-bg.com Plugin by Dichev.com

December 12, 2008

Protected Mode

Filed under: Computer Advice, General — Tags: — admin @ 1:38 pm
0
Digg me
Protected Mode

Available only to people running Internet Explorer 7 in Windows Vista, Protected Mode provides new levels of security and data protection for Windows users. Designed to defend against “elevation of privilege” attacks, Protected Mode provides the safety of a robust Internet browsing experience while helping prevent hackers from taking over the system and installing programs or deleting your information.

In Protected Mode, Internet Explorer 7 in Windows Vista cannot modify user or system files and settings without user consent. Protected Mode requires the user to confirm any activity that tries to put something on your machine or start another program. By ensuring the user consents to these kinds of actions, the likelihood of automated and/or unwanted software installation is reduced. This feature also makes you aware of what a website is trying to do, giving you a chance to stop it and take time to double check the trustworthiness of the website.

Add This! Blinkbits Blinklist Blogmarks BlogMemes BlueDot BlogLines co.mments Connotea del.icio.us de.lirio.us Digg Diigo DZone Facebook FeedMeLinks Folkd.com Fleck Furl Google Google Reader icio.de IndianPad Leonaut LinkaGoGo Linkarena Linkter Magnolia Mister Wong MyShare Ask.com MyStuff Ask.com Yahoo! MyWeb Netscape Netvouz Newsgator Newsvine Oneview.de RawSugar reddit Rojo Segnalo Shadows Simpy SlashDot Smarking Sphere Spurl Startaid StumbleUpon TailRank Technorati ThisNext yigg.de Webnews.de ReadMe.ru Dobavi.com Dao.bg Lubimi.com Ping.bg Pipe.bg Svejo.net Web-bg.com Plugin by Dichev.com

December 6, 2008

Why does my hard drive show less space than advertised?

Filed under: Computer Advice, General, Uncategorized — Tags: , — admin @ 1:19 pm
5
Digg me

Your hard drive may show less space than the published specifications due to a number of reasons.

1.    The way size is calculated and displayed.

2.    Any “Partitions” on the disk will change the total in a specific partition.

3.    Hidden files and folders decrease available space.

4.    Compression increases the apparent size, but not the physical size.

5.    Drives larger than the OS or Drivers natively supports.

First, the definition of a megabytes (or gigabytes) is a unit of data storage capacity measured in 1,048,576 bytes (or 1024KB). The larger the numbers, the more apparent the size difference will be when listing the size as megabytes (or gigabytes) versus bytes. Actually, both numbers are correct. The noticeable difference is due to the 1024KB definition of a megabyte. This is why a 95.3GB hard drive can also be listed as having 102 billion bytes of total space.  Just think of it as “round off”  In the screen shot at right: The first number is the total number of bytes, the second number is based on the number of megabytes or gigabytes.

Second, some computers have a non-DOS hard drive partition that is used for features such as Save to Disk, Hibernation, or Recovery. This partition is not normally reported by the operating system, although it can be viewed using a disk partition utility.  This is very common on desktops and laptops.  NOTE: Partition information will be created or formatted automatically during initial system setup and a system recovery.

Third, by default, all system files are hidden and cannot be seen. This may adversely affect the reporting of available hard drive space. You can set your Folder Options so you view system and hidden files and folders, but do be careful as changes to system files can adversely affect your system.

Fourth, if you turn on Compression for a drive, it will increase reported free space and used space, but since compression is based upon the actual contents, this number is not fixed, but will change as files are added or changed.

Fifth, older operating systems did not support some of today’s larger drives, so the total space reported may be much smaller than the drive specifications.

It is also worth noting that bad sectors are corrected by your operating system and can change the total drive space, free space, or used space as well.

So as long as a drive is reporting a value approximately close to the specification value, you can be comfortable that you received the right drive and that you are getting to correct data storage.  Of course, tuning of your drive’s partitions and options can yield optimal values, but this is not something for the average user to explore.

Source: Tiger Direct

 

Add This! Blinkbits Blinklist Blogmarks BlogMemes BlueDot BlogLines co.mments Connotea del.icio.us de.lirio.us Digg Diigo DZone Facebook FeedMeLinks Folkd.com Fleck Furl Google Google Reader icio.de IndianPad Leonaut LinkaGoGo Linkarena Linkter Magnolia Mister Wong MyShare Ask.com MyStuff Ask.com Yahoo! MyWeb Netscape Netvouz Newsgator Newsvine Oneview.de RawSugar reddit Rojo Segnalo Shadows Simpy SlashDot Smarking Sphere Spurl Startaid StumbleUpon TailRank Technorati ThisNext yigg.de Webnews.de ReadMe.ru Dobavi.com Dao.bg Lubimi.com Ping.bg Pipe.bg Svejo.net Web-bg.com Plugin by Dichev.com

December 2, 2008

Apple encourages anti-Virus protection, no word on if the marketing department agrees

Filed under: Computer Advice — admin @ 11:01 pm
0
Digg me

 You have seen the ads on TV, read countless comments online, and perhaps even posted a few of them yourself. The Macintosh has no need for anti-Virus software. So it is quite humorous and a touch ironic to see Apple apparently reversing the marketing machine and encouraging anti-Virus protection.

Let this sink in for a second.

Apple, the company that uses its marketing department to push the notion that Macs are immune to pretty much every system flaw found on the planet, honestly said in a recent Tech Note that:

“Apple encourages the widespread use of multiple antivirus utilities so that virus programmers have more than one application to circumvent, thus making the whole virus writing process more difficult.”

So not only is Apple recommending the use of anti-Virus software, but it’s also encouraging the use of layered security for the Mac. The problem with the layers mentioned in the Tech Note is that the anti-Virus applications listed will never work well together on a Windows-based PC, let alone on an Apple Mac.

So unless there is something different in the code for Norton Anti-Virus 11 for Mac, McAfee Virus Scan for Mac, and Intego VirusBarrier X5, using all three of these or more than one for a layered defense, is strange advice indeed. 

There are two other applications not mentioned by Apple in the Tech Note: ClamAV for OS X (free and works well) and MacScan ($29.99 USD) from SecureMAC.

It is a long held and hardcore stance that, for most Mac users, security applications are generally optional.

Rich Mogull, of Securosis fame and long-time Mac security expert, still maintains that common sense will prevail for most Mac users, and that anti-Virus offerings on a Mac are always needed in a corporate environment where compliance is required.

In an article published earlier this year, Mogull suggested that anti-Virus would be needed if requiring a Mac for risky usage.

“I do not recommend desktop antivirus software for the average Mac user, but you need to take other precautions… make sure you use email accounts that support spam and virus filtering, such as Gmail, Yahoo Mail, or Hotmail,” wrote Mogull.

“Spam is one of the major vectors for malicious code propagation, and gateway protection will reduce your risk should an email-driven Mac virus appear,” he added. “Consider switching to the Firefox Web browser with the NoScript plug-in. NoScript selectively, and non-intrusively, blocks all scripts, plug-ins, and other code on Web pages that could be used to attack your system during visits.”

The Tech Note was published by Apple with little-to-no public notice, but it is still nice to see that the company is taking security seriously and debunking the rumor that the Macintosh is simply immune from virus-related problems.

Yet, one has to wonder if the new “I’m a Mac” commercials will mention this, or if Microsoft will jump on this and spin it.

While there is clear irony in reading the recommendation that AV software is indeed useful and encouraged, any spin placed on this that leads to “Ha! I told you,” or blind panic would take away from the sensibility that using layered security on a system (PC or Mac) is just plain smart.

Sure, the total amount of Malware that targets a Mac is small when compared to the Malware that targets a PC — no one in their right mind can argue otherwise. Yet, if you account for third-party applications such as Adobe Reader, QuickTime, and others, the playing field evens out somewhat.

Also, if you account for user error, then the field is leveled even more. Just like on a PC, the security on a Macintosh is no match for a user who simply installs things at will and never updates a single bit of code.

So take Apple’s advice and use some AV software, and read Mogull’s tips in the linked article above. Just because the Mac is relatively safe now, does not guarantee it will stay that way forever.

http://www.thetechherald.com/article.php/200849/2539/Apple-encourages-anti-Virus-protection-no-word-on-if-the-marketing-department-agrees

Add This! Blinkbits Blinklist Blogmarks BlogMemes BlueDot BlogLines co.mments Connotea del.icio.us de.lirio.us Digg Diigo DZone Facebook FeedMeLinks Folkd.com Fleck Furl Google Google Reader icio.de IndianPad Leonaut LinkaGoGo Linkarena Linkter Magnolia Mister Wong MyShare Ask.com MyStuff Ask.com Yahoo! MyWeb Netscape Netvouz Newsgator Newsvine Oneview.de RawSugar reddit Rojo Segnalo Shadows Simpy SlashDot Smarking Sphere Spurl Startaid StumbleUpon TailRank Technorati ThisNext yigg.de Webnews.de ReadMe.ru Dobavi.com Dao.bg Lubimi.com Ping.bg Pipe.bg Svejo.net Web-bg.com Plugin by Dichev.com

Powered by WordPress

Copy Protected by WP-CopyProtect Thanks to Chetan.