All about computer worms

May 12th, 2008

Beware of worms in your computer. When I say worms, in case you are a complete newbie in the field, you should know that they are not real worms. Worms are, in fact, a kind of program which enter your pc. You will never know, but in your computer will reside a program foreign to your needs. And in probability it, or more likely they will steal your delicate information for somebody with doubtful motives.

Does that sound like a thriller in the making? Well, it should, but also, it is the truth. Last year, bank frauds cost decent people around the world billions of dollars. And most of the money that got siphoned was lost due to faulty security. Your computer might be the next target.

Unaware, you might invite that Trojan Horse which will ruin your finances for good for the rest of your life. Therefore, be careful. Do not let worms into your computer as you would never let worms in your food.

Read the rest of this entry »

Mozilla Distributes Virus-Infected Language Pack

May 9th, 2008

Anyone who downloaded the Vietnamese language pack for Firefox 2 needs to run an anti-spyware and anti-virus scan, then disable the pack for now. Mozilla warned yesterday that all versions of that language pack downloaded from its servers since Feb. 18, 2008, were infected with pop-up ad serving software.

Window Snyder, Mozilla’s chief security officer, said the Vietnamese language pack was contaminated as the result of a virus infection. “This usually results in the user seeing unwanted ads, but may be used for more malicious actions.”

Snyder said Mozilla doesn’t know how many people downloaded the compromised language pack, but said there have been 16,667 downloads of the pack since November 2007.

Mozilla is working on getting a replacement language pack up on the site soon. Snyder said that while Mozilla does virus scans when add-ons are uploaded to its servers, the scanner for whatever reason didn’t catch this nasty until several months after the upload. Mozilla is now adding post-upload scans to everything on its download servers, she said.

Language packs are add-ons in Firefox. Add-ons can be removed by clicking “Tools” and then “Add-ons.” According to the discussion on this in the Bugzilla database, the culprit here is something called “Trojan.Win32.Xorer,” which disables security software on the infected PC and spreads by infecting files, programs and removable drives.

Image

The Vietnamese language pack for Firefox 2 contains inserted code to load remote content. This code is the result of a virus infection, but does not contain the virus itself. This usually results in the user seeing unwanted ads, but may be used for more malicious actions.

Everyone who downloaded the most recent Vietnamese language pack since February 18, 2008 got an infected copy. While we cannot determine the exact number of compromised downloads, there have been 16,667 total downloads of the Vietnamese language pack since November 2007, so we anticipate the impact on users to be limited.

Mozilla does virus scans at upload time but the virus scanner did not catch this issue until several months after the upload. We are also adding after-the-fact scans of everything to address this sort of case in the future.

A new language pack will be available shortly. Until then, Vietnamese language pack users should disable this package using the add-ons dialog on the Tools menu.

https://bugzilla.mozilla.org/show_bug.cgi?id=432406

source:blog.washingtonpost.com/securityfix/2008/05/mozilla_distributes_virusinfec_1.html

Yahoo and McAfee - More Secure Web Search Result

May 9th, 2008

Yahoo and McAfee announced a partnership Tuesday under which potentially unsafe Web sites appearing in Yahoo search results will be flagged as risky.

The deal, an exclusive for Yahoo, uses McAfee SiteAdvisor technology to label a variety of potentially dangerous Web sites with red warning text and links to McAfee information about what risks the site poses. Among the triggers for a red warning message are sites that host spyware, adware, or virus-infected downloads; sites that have links to other Web sites with dangerous material; and sites that have a track record of harvesting e-mail addresses later used to send spam, the companies said

Image

 

The companies declined to reveal the financial terms of the partnership.

The deal represents the latest attempt by Sunnyvale-based Yahoo to lure more search requests, snap out of its recent financial funk and steal advertising dollars from search leader Google Inc. as it tries to justify its rebuff of Microsoft Corp.’s $47.5 billion takeover bid.

Yahoo shares fell 15 percent Monday after Microsoft pulled out of merger talks over the weekend.

 

The deal gives Santa Clara-based McAfee a way to expose more Internet users to its security software and tempt them to upgrade to premium versions.

McAfee also benefits from teaming with Yahoo because it can use Yahoo’s search data to identify sites to examine for security holes and include within its products, McAfee’s Dowling said.

The McAfee technology being used on Yahoo’s site is a stripped-down version of McAfee’s full SiteAdvisor technology that also is available for free directly from McAfee. It uses red, yellow and green icons to label safe and harmful sites. A premium version adds other features.

Billions of sites have harmful content, and the criminal hackers behind them try relentlessly to manipulate search rankings to boost their links and ensnare more victims.

Yahoo’s Garg said the company was doing experiments to identify malicious sites and bar them from search results.

source:news.yahoo.com/s/ap/20080506/ap_on_hi_te/yahoo_mcafee

Image

Spyware Blocker - Regain Control of your PC

May 7th, 2008

Aside from viruses and worms, spyware is one of the biggest threats to security and privacy in the internet and this threat is becoming worse. In a study by America Online and the National Cyber-Security Alliance, it was found out that almost 80% of the users surveyed have computers infected with some form of spyware. Every computer surveyed had an average of 93 spyware components installed in its system. Almost 89% of these computer users were not aware of the spywares’ presence in their units and 95% reported that they had not given permission for these spyware to be installed.

The Spyware Threat

The term spyware does not refer to a single type of software, in fact it covers a broad category of malicious software whose common denominator is that they are designed to undermine a computer’s operation and intercept or take control of it without the informed consent of the computer’s owner or user. Spyware is also akin to adware, tracking software, trojans, spybots and other malware. Spywares are typically installed without the user knowing it. This is because one of the tactics used by spyware is by deceiving the user into installing it. This happens because most spyware come bundled with legitimate software or exploit a security hole in a browser such as Microsoft Internet Explorer.

For most people, spyware is most noticeable in the form of pop-up ads and banners advertising a particular product or site. These unsolicited pop-up ads can also do more than just annoying the user and can be a way for the spyware to take a hold and install itself in the computer’s system. Furthermore, spyware pose a more serious threat to the security and privacy of internet users since they can secretly monitor the user’s web browsing activities as well as gather information entered into the computer such as credit card numbers which can be easily exploited by malicious personalities.

Read the rest of this entry »

Trojan Adware Hiding in MP3s, McAfee Says

May 7th, 2008

ImageAdware pushers have found a new way to trick you into downloading their annoying products: fake MP3 files.

On Tuesday, security vendor McAfee reported that it’s seen a huge spike in fake MP3 files spreading on peer-to-peer networks. Although the files have names that make them look like audio recordings, they’re really Trojan horse programs that try to install a shoddy media player and adware on your computer, said Craig Schmugar, a researcher with McAfee.

“Once you run it, there is no content. You’re taken to this site to install this player which you don’t really need,” he said.

Fake file names include: preview-t-3545425-changing times earth wind .mp3 and t-3545425-just got lucky.mp3. Users are first asked to OK an end-user license agreement before the Trojan installs two programs, Mirar and NetNucleus, on their PCs.

Ironically, while the Mirar software tells users that it doesn’t display popups, NetNucleus does deliver popup ads, so users who do not realize that they are installing two programs might feel tricked, Schmugar said. “You have a Window telling you that there are no popups and right behind it is a popup.”

Although McAfee has seen some nasty software disguising itself as media files in the past, it has never seen anything on this scale, Schmugar said. Over the past 24 hours, nearly a third of the McAfee customers who reported data back to the security company have detected these files, he said.

In the past few days McAfee has spotted the files on more than 360,000 users’ desktops.

Tags: , ,

source:www.pcworld.com/businesscenter/article/145567/trojan_adware_hiding_in_mp3s_mcafee_says.html

E-mail Spam on The Rise, Officials Offer Tips

May 6th, 2008

While theater goers are flocking to performances of Monty Python’s musical comedy “Spamalot” as it tours across America, “a lot of spam” within e-mail inboxes is proving to be no laughing matter for Air Force and government employees. ImageSpam is unsolicited and generally undesired bulk e-mail messages. Senders use spam for reasons ranging from advertising new products or services, to scams that bilk people of their finances. Increasingly, spam is used to download software to personal computers for malicious reasons.

At Air Force Materiel Command bases, the number of spam e-mails has been increasing for months. Currently, 90 percent of all inbound e-mail messages are spam. For AFMC that means more than 100 million spam messages a month, a 400 percent increase over the past six months. Within AFMC, special filtering software deletes more than 98 percent of all spam. In some cases only suspicious attachments are removed.

According to Lt. Col. Robert Henning, with Headquarters AFMC’s Communications, Installations, and Mission Support Directorate, most spam reaching AFMC recipients is addressed to AFMC Distribution Lists.

“This helps explain the recent widespread delivery, so we are exploring ways to tighten the use of distribution lists to help reduce external spam,” Colonel Henning said.

The potential damage from spam e-mails is the introduction of harmful attachments and Denial of Service Attacks. Colonel Henning said that a common tactic of recent spam e-mails is to get users to click on a Web link of a non-threatening Web site that has already been compromised.

“From there, the spammer attempts to install malicious code and gain access to our desktops and laptops, bypassing our network boundary defenses,” he said. “This is now a serious security threat.”

The colonel added that it’s important for workers to know what to do with spam e-mails when they appear.

“Recipients should send spam, as an attachment in a new e-mail, to their base/site network control center spam mailbox for analysis,” Colonel Henning said. “Users at each AFMC base can obtain that e-mail address by contacting their client support administrator.”

source:www.afmc.af.mil/news/story.asp?id=123097246

Buy Antivirus Software for Your System Safety

May 6th, 2008

Viruses are the worst enemy a computer ever has to face. It can destroy the settings of the bandwidth. It can also duplicate a certain program and file and destroy it later on. Viruses can also require you to spend money just to get rid of them and to have your computer fixed.

Most of the people nowadays depend so much on computers. Many establishments needs a computer in order to appropriately maintain important business operations and a fluid corporate activity. On the worst situation, having a virus can only mean a big problem, this includes, lost files, stolen data and destroyed networks.

At the present state of computer, having an antivirus software can be the safest thing to do. Because an antivirus works as a protecting shield that protects your business and saves you from all the worries a virus can bring.

Because of the fact that people are widely dependent on computers, antivirus software should be properly installed in each and everyone of them. A good computer system must have a backup method. Most of the time an antivirus is a type of program that can save computer information from being maliciously exploited.

A high-quality antivirus system can cost a huge amount of money. However, there are several forms of antivirus softwares that can be bought relatively cheaply in various online service counters.

It is an accepted fact that buying an antivirus software is a necessity. But be wary of tons of marketing schemes that offers free antivirus softwares, not all of them, but some of them are not really effective and works only on a number of viruses. Some of them may even carry viruses already. To be honest, the best to buy antivirus softwares are those you have to pay for. Companies need to be honest about what they sell or they can be sued.

Buying an antivirus can be expensive. But most of the computer owners don’t want to get cheap when it comes to computer health and safety maintenance. This is a wise investment that will virtually pay for itself.

A majority of computer designers prefer to buy antivirus software rather than just downloading them directly from the net. According to them, free antivirus software is all about cracking up files and memory spaces.

Computer safety is like human’s health. Think about it, if a person got sick he wouldn’t prefer to just get a cheap medicine, not if you want to recover fast. A person may think that free or cheap medicine won’t work as effectively as other over the counter medications that doctors usually recommend. That is the reason why a majority of the computer programmers do not rely on the traditional method of downloading. They love their computer as much as they love their health.

Buying the effective antivirus software for the computer can take a bit of researching. But all this effort will be handsomely rewarded when you know you can surf the web with confidence.

Buy Anti Virus Software from a Reliable Source

It is advisable for a computer user to purchase on the software registered homepage. By doing this, the computer user can have a great deal. And also, buying antivirus software from its own manufacturers website can provide a security package or guarantee on the programs. Not only that, users can be sure that the software that he purchased are not counterfeited. It is only common sense to buy the software from a reliable source.

Zango Suing Anti-Spyware Company Kaspersky Lab

May 4th, 2008

Zango’s high-profile lawsuit against anti-spyware company Kaspersky Lab is “akin to a cat burglar suing the alarm company,” Kaspersky’s law firm argued to a federal appellate court.

In papers filed this week with the 9th Circuit, Kaspersky said that Zango has no grounds to sue the security company for removing Zango’s software, which serves pop-up ads. “Allowing Zango’s suit will have a chilling effect on the Internet security industry and, ultimately, on use of the Internet,” Kaspersky argues.

Calling security software vendors “the sentinels of the Internet,” Kaspersky argued that forcing such companies “to allow malware to pass through a computer’s ‘gates’ unchallenged will compromise computer security and, ultimately, the free flow of information over the Internet.”

This case, initially brought by Zango last year, has drawn the attention of several prominent organizations and companies. Two weeks ago, the National Business Coalition on E-Commerce and Privacy weighed in on Zango’s behalf, arguing that Zango’s lawsuit against the spyware removal company should proceed to trial. The Coalition’s members include major companies like Eastman Kodak, JP Morgan Chase and Experian. Those companies install cookies on users’ computers and have an interest in discouraging anti-spyware vendors from removing those cookies.

Kaspersky also has powerful supporters, including the digital rights group Center for Democracy & Technology. That group plans to file a friend-of-the-court brief on the company’s behalf on Monday, according to Vice President and Chief Operating Officer Ari Schwartz.

Zango filed suit against Kaspersky last year, alleging that the company interfered with Zango’s business relationships with consumers by removing Zango adware from people’s computers. Kaspersky manufactures programs that remove adware and spyware, including Zango’s software, which serves consumers pop-up ads based on their Web-surfing activity.

U.S. District Judge John Coughenour in Seattle dismissed the lawsuit on the grounds that the federal Communications Decency Act immunizes interactive services providers that act in good faith to block objectionable material.

Zango appealed that ruling, arguing that Kapersky was itself a form of “badware” because it allegedly removed a program that consumers had chosen to install Zango.

In its brief filed this week asking the 9th Circuit to uphold Coughenour’s ruling, Kaspersky went on the attack against Zango and adware. “Zango adware is, of course, a source of pop-up ads, which, in general, many computer users find objectionable,” Kaspersky argued. “Apart from causing pop-up ads and opening links to sexually-explicit websites, adware itself is often harmful to a computer system, consuming computer memory, slowing processing time, causing computer system crashes, and clogging Internet connections.”

Eric Goldman, director of the High Tech Law Institute at Santa Clara University, said that at least one other federal court has also recently interpreted the Communications Decency Act as immunizing a Web company for blocking objectionable content. Judge James Zabel of Illinois last month dismissed a lawsuit by e360insight against Comcast for allegedly treating e360’s e-mails as spam and blocking them.

Zango was criticized in the past for allegedly installing adware without first obtaining users’ consent. In 2006, the FTC brought a complaint against Zango, and the adware company agreed to pay a $3 million fine, refrain from installing adware without first making sure that people consented, and to monitor third-party distributors to make sure they are not installing the software without consent.

A Zango spokesperson declined to comment on Kaspersky’s argument, other than to say the company intended to file a response with the 9th Circuit in two weeks.

source:publications.mediapost.com/index.cfm?fuseaction=Articles.showArticleHomePage&art_aid=81726

AVG Anti Virus Free Edition to Include Anti-Spyware

May 3rd, 2008

This latest popular version AVG free security software now incorporates protection against spyware. AVG Anti-Virus Free Edition 8.0 is intended for personal and non-commercial use on single computers running Windows 2000, XP or Vista.

avg2

What is not included in the free version?

The AVG Free product does not include the proactive safe-surfing (”drive-by download” protection) of the full LinkScanner module that is included in the commercial AVG products, nor the protection against hackers, keyloggers, spam, phishing attacks and malicious file downloads that can come through instant messaging and attachments. The free product also does not include the local telephone support and round-the-clock e-mail support provided with the commercial products.

Top Ten Spyware/Malware Threats for April

May 1st, 2008

Sunbelt Software, a leading provider of Windows security and management software, today announced the top ten most prevalent spyware and malware threats for the month of April.

1. Trojan.FakeAlert 1.77%

Trojan.FakeAlert will hijack the desktop background with an image alerting the user that their computer system has been infected with spyware. It also changes some settings of windows which include:- disabling permissions for the user to change the background image and setting the active desktop to ’show web content’. It is usually installed in conjunction with a rogue anti-spyware application. source:research.sunbelt-software.com source:www.pctools.com

2. Trojan-Downloader.Zlob.Media-Codec 1.30%

Trojan-Downloader.Zlob.Media-Codec is a program that typically purports to be a needed upgrade to Windows Media Player in order to view adult oriented videos on certain websites. However, Trojan-Downloader.Zlob.Media-Codec actually downloads and installs additional malware on the user’s machine. source:research.sunbelt-software.com

3. Trojan.NewMediaCodec 0.67%

Trojan.NewMediaCodec is a program that typically purports to be a needed upgrade to Windows Media Player in order to view adult oriented videos on certain websites. However, Trojan.NewMediaCodec actually downloads and installs additional malware on the user’s machine. source:research.sunbelt-software.com

4. ClickSpring.PuritySCAN 0.63%

PurityScan delivers targeted advertising including pop-ups to the user’s desktop. PurityScan transmits browsing history back to the vendor in order to provide ads based on the user’s browsing habits. PurityScan has been noted to install through security exploits and may bundle and/or download other adware applications. The EndUserLicenseAgreement (EULA) states that the vendor, ClickSpring LLC, may automatically update, upgrade or uninstall the company’s software as well as install additional applications at any time without father notice. source:research.sunbelt-software.com

5. Virtumonde 0.53%

Adware.VirtuMonde is an adware program that downloads and displays popup advertisements. source:www.symantec.com

6. Slagent/Navipromo 0.42%

7. CWS.DesktopHijack 0.39%

8. Trojan.Vxgame 0.39%

9. Blaire 0.37%

10. Backdoor.Rbot 0.35%