This issue of SunbeltSecurityNews contains:
1. Editor's Dossier
- Talking About Adware
2. Important Note
- Windows Security Center gives false alarm on VIPRE for Vista SP1
3. Cool Tools
- Tools We Think You Shouldn't Be Without
4. Eyes Only Your Viewpoint on Security Issues
- Another Great Tip from Tim
- Off the Street Repairman
5. Operations: What You Need To Know
- This Week's Top 10 Spyware Threats
- Per ThreatNet the Worldwide Threat Level Is High
6. Dirty Tricks
- So Just What Is Adware?
- Kazaa Resurrected
- Does Elvis Really Have an E-Passport?
- One-Third of Users Respond to Spam
- Facebook Has Privacy Issues
7. Zone - Cool Products & Other Stuff
- A Map of the First Moonwalk
- Chrome Messenger Bags Are Hot
- Astronaut Space Pen 40th Year Moon Landing Celebration Commemorative Pen & Box
- Creative Grave Markers
- 57 Chevy
- Need for Email
- Okinawa Churaumi Aquarium
|
Kiss Your Antivirus Bloatware Goodbye
We asked users of antivirus products what they didn't like about
their AV software. They told us they are resource hogs and slowed
their computer down. They told us that scan times took way too long,
and that the AV software nagged them. In short, old-style AV software
takes too much Memory and CPU. Time to switch to VIPRE! It gives you
malware protection that combines antivirus, antispyware, anti-rootkit
and other technologies into a seamless, tightly-integrated product.
Even if you run "free" antivirus software, it hijacks 20% of your PC,
so it's really not free at all! Find out how fast your PC can be:
http://www.sunbeltsecuriftynews.com/090722-VIPRE
|
Editor's Dossier
Talking About Adware
Greeting SSNers,
Privacy is a most interesting issue these days. We definitely seem to suffer
from a lack of it and the future looks even more risky with recent proposals
regarding medical records, etc. We live in a very open society it seems.
Reality programs televise themes that would make Ripley blush. We live in
a cyber fish bowl.
Nevertheless, there are things we can do to protect ourselves especially from
one of the most invasive forms called adware. You may wonder why adware is
considered so malicious. I wondered this myself, after you are getting
something for free whether it is software, games or music, etc. What's the
harm? You can read why in our Dirty Tricks section.
Amazingly, we are celebrating a couple of historic events this month - the
40th anniversary of Woodstock and astronauts walking on the moon.
Don't forget our new user forums so you can speak your mind.
http://www.sunbeltsecuritynews.com/090722-Forum-Discussion
You can also follow our tweets:
http://www.sunbeltsecuritynews.com/090722-Twitter
Enjoy the latest issue of SunbeltSecurityNews. And remember stay safe out there!
Best,
Larry Jaffe.
Editor SunbeltSecurityNews
P.S. You can write to me at any time, I want to know how you feel about
Internet security and if you have any ideas for articles or subjects you
would like us to cover. Email me
feedback@SunbeltSecurityNews.com
Important Note
Windows Security Center gives false alarm on VIPRE for Vista SP1
Some VIPRE users have notified us that they are getting warnings from the
Microsoft Security Center that VIPRE is incompatible with Microsoft's Vista
SP1. It's a false alarm. The text of the note from Microsoft's Windows Security
Center team to Sunbelt about this issue is:
Subject: RE: Windows Security Center Showing "Incompatible" Notification for
AV on Vista SP1
"We have an update: We have determined that for full installs of Windows Vista
SP1 (not updates) the grace period is actually starting at the time the build
was staged for release, not when Windows was actually installed on the end
user's computer. In these cases, the grace period is ending on July 14, 2009.
"We have developed a tool to fix this issue on affected machines and are
currently testing it. The tool extends the grace period through September.
Our plan is to have it available by the end of next week. We thank you for
your continued patience....
Thanks,
Windows Security Center Team"
|
Own a Single-user VIPRE?
Upgrade Now To Home Site License For Just $19.95
You run VIPRE and love it. But what about the other PC's at the house? We have
a special, limited time upgrade offer. You can upgrade now and just pay the
difference (20 bucks) between the Single License and the Unlimited Home Site
License (UHSL). But wait, it gets better. Your UHSL starts fresh and you get
a new 12 month subscription! Do the math. Wait and pay 30 bucks later, or buy
the upgrade now and get a whole year for 20 bucks. A no-brainer! Remember this
is for a limited time only, get that upgrade now! Click here to learn more and
order:
http://www.sunbeltsecuritynews.com/090722-UHSL-Upgrade
*Offer not valid in the UK
|
Cool Tools
Eyes Only Your Viewpoint on Security Issues
Another Great Tip from Tim
All too often, I find myself the bearer of bad news. "Sorry, all of your data
is gone." Usually that is followed by the question, "Do you have a backup?"
Most of the time it is a resounding NO for personal home computers or laptops.
Fortunately, for many businesses, their IT staff or provider has some sort
of backup strategy in place (hopefully). Sometimes though I have gone into
a business that has little or no backup that occurs regularly. Some do but
it is never monitored or maintained. Others keep switching the same tapes
day after day and have been using the same tapes for years only to find out
that after disaster has struck they have no backups. They just assumed that
the backup was running and basically have been switching tapes for months
for nothing. Just about every home I go into there is no backup of anything.
Whether a large corporation with a bank of servers or your home family PC,
one thing is imminent and that is a failure. Whether a hardware failure,
act of God, or you fall victim to a malicious virus or hacker attack.
Computers are man-made devices and are prone to failure. Although there are
technologies for redundancy of your data to circumvent the disaster of data
loss, these are usually only found in servers or higher end workstations.
Typically, you will not find any of these features in your home PC or laptop.
For business owners or managers I recommend discussing with your IT staff
or provider the backup strategies that are being employed. I also recommend
evaluating disaster recovery plans in the event of some catastrophic event.
For home user's personal PC's and laptops, I recommend creating a backup of
your important information if you already aren't. This can be easier said
than done however. There so many ways to go about it and so many options
regarding backup media and also off-site backup locations. Many are lost
before they begin with the question of how? -- Tim Gardner
Off the Street Repairman
When I saw the blip regarding passwords, I just have to pass along this story.
We were on vacation we stayed at a campground with Wi-Fi. It was not a very
strong signal so getting out in cyberspace was trying at best. Parked next
to us a couple on their way home from Palm Springs to Canada. They too were
having the same problem with connections.
To make a long story fairly short, there was another camper who was a
computer guru of some sort. The gentleman parked next to us mentioned
the getting /staying connected to the guru gentleman. You are going to
be astounded when I tell you our next door neighbor gave this guy complete
access to his computer because the guy told him he could fix it. Apparently
thinking it was the computer not the poor signal. Now keep in mind these
two people did not know each other, had never met and probably would not
ever see one other again. The computer gentleman doing whatever computer
people do to make these things operate better and made program and system
changes that prevented our neighbor from gaining access to his stuff
(financial records, stock portfolio, etc.). He wasn't very happy.
The computer gentleman was supposed to come back and fix whatever he did but
we left so don't know if he did but will assume he did. I nearly had a
stroke. Who in their right mind would give a complete stranger out in
the middle of nowhere access to their computer? I am not talking about
a repair shop but basically someone "off the street". Then wonder how
on earth people get their information. Just thought you might need an
"oh my God" for the day. L. B.
Operations: What You Need To Know
This Week's Top 10 Spyware Threats
Some of you have asked me recently as to why adware would be considered
malicious as it does not appear to be as harmful as Trojans and Rogue
Security Programs like number 7 on this week's Roguish Hit Parade -
FraudTool.Win32.Antivirus2010 (v). Well it may be true that Trojans,
etc. do more damage, do not underestimate the destructive power of
adware. Wouldn't you consider annoying popups and the transmission of
info on your surfing habits sent to the adware company to be malicious?
This week GameVance shows its ugly face on our Top 10. GameVance offers
"free" games from its website in exchange for the display of targeted
pop-up and pop-under advertising based on information about users'
online behavior. You will pay the price.
- Trojan.ASF.Wimad (v): Trojan
- Trojan-Spy.Win32.Zbot.gen: Trojan
- GameVance: Adware (General)
- Trojan.Win32.Tdss.aalc (v): Trojan
- Trojan.1: Trojan
- Trojan-Downloader.Zlob.Media-Codec: Trojan Downloader
- Trojan.DNSChanger.Gen: Trojan
- Exploit.PDF-JS.Gen (v): Exploit
- FraudTool.Win32.Antivirus2010 (v): Rogue Security Program
- INF.Autorun (v): Trojan
Per ThreatNet the Worldwide Threat Level Is High
You should take extra precautions in your computing practices.
Active Threats - Be Aware
- There is spam circulating that tries to lure Internet users to malicious
web sites. The spam promises a "Peep hole" video of ESPN reporter Erin
Andrews undressing in a hotel room. The spam then delivers Zbot-like
Trojans to both Macs and PCs. The PC version then downloads rogue
anti-malware and tells you to buy it.
- A new vulnerability has been detected in Firefox, but late reports
indicate it can only lead to a stack-overflow crash which isn't exploitable.
This is not the same as the vulnerability that led to the Firefox update
(version 3.5.1) late last week.
- The two serious vulnerabilities in Microsoft's products that were
reported recently remain unpatched. Exploits are in the wild.
- An ActiveX vulnerability used by Internet Explorer to display Excel
spreadsheets can allow remote code execution (Security Advisory 973472).
- Video ActiveX Control vulnerability allows an attacker to run
arbitrary code (Security Advisory 972890).
Stay on top of all the real-time threats:
http://www.sunbeltsecuritynews.com/090722-SunbeltSecurity
Dirty Tricks
So Just What Is Adware?
Imagine someone following you around wherever you went. You know they
are there, you are not sure who they are but their persistent presence
is downright annoying and even threatening. You don't know what they
will do or why they are doing it. They are just there - a malignant
big brother. This is the wonderful world of adware or in its
non-abbreviated form 'advertising-supported software' (although it has
expanded from this definition to include any free stuff that you
download that installs a little extra).
This little extra is where adware goes beyond its bounds and thoroughly
invades your privacy. Certain additional functions are built-in or
bundled with your freebie which keep track of what sites you visit
and reports back to adware HQ. Of course, this is done without
your permission. Oh, and then there are those most annoying popups!
Kazaa Resurrected
Speaking of adware one of the biggest perpetrators of said malware is
coming back from the graveyard. Only this time they are said to be legal.
Time will tell.
http://www.sunbeltsecuritynews.com/090722-Kazaa
Does Elvis Really Have an E-Passport?
The new-fangled e-passports might not be as secure as the gov would
like us to believe. Check out this "official" Elvis Presley passport.
It seems that the RFID chips are rather easy to clone and fake.
http://www.sunbeltsecuritynews.com/090722-e-Passport
One-Third of Users Respond to Spam
A couple of years ago, I wrote a column about the temptation of spam and
that I had an itchy trigger finger at times wanting to check out all
these amazing offers. Somehow, through great self-discipline and
self-preservation I resisted temptation. But guess what? I was not
alone in that temptation and truth is thanks to a recent study I am
not alone.
"Almost a third of consumers admit responding to messages that might
be spam emails. Some acted out of curiosity or by mistake but a puzzling
96 from a sample of 800 (12 per cent) said they clicked because they
interested in the product or service advertised in junk mail messages.
A survey by the Messaging Anti-Abuse Working Group (MAAWG), released
on Wednesday, also found that four in five consumers thought it unlikely
they were at risk from malware capable of turning their PC into a
spam-relaying zombie, despite the prevalence of the problem.
MAAWG commissioned researchers to interview 800 ordinary computer users
in North America.
http://www.sunbeltsecuritynews.com/090722-Junk-Mail-Economy
Facebook Has Privacy Issues
Like I said earlier, we are facing an open society but the problem is
that our openness might be abused. Like what happened with this gentleman.
"Mitch Ratcliffe, ZDNet colleague and man who takes pleasure in ranting
in a range of technological subcultures, recently asked why a married
man of seven years has had his Facebook profile pictures used in ads
promoting matchmaking sites for singles."
http://www.sunbeltsecuritynews.com/090722-Facebook-Privacy
Zone - Cool Products & Other Stuff