Friday, May 15, 2009

Virus Alerts [Panda Security's weekly report on viruses and intruders - 05/15/09]

> From: Virus Alerts <virusalerts@PANDASECURITY.COM>
> Subject: Virus Alerts [Panda Security's weekly report on viruses and intruders - 05/15/09]

> Date: Friday, 15 May, 2009, 6:24 PM
> - Panda Security's weekly report on
> viruses and intruders -
>
> Virus Alerts, by Panda Security (http://www.pandasecurity.com)
>
> PandaLabs' report this week focuses on three worms:
> IRCBot.CNE,
> BckPatcher.C and Boface.BJ.
>
> IRCBot.CNE sends messages to the infected user's MSN
> Messenger contacts.
> Message subjects include:
>
> * Me miro boracho en video que me tomaron
> en youtube (I see myself
> drunk in a video on youtube).
> * Esta es mi casa de suenos!! (this is my
> dream house)
> * Mira que pedo andaba ayer en la fiesta
> (look how drunk I was at
> yesterday's party)
> * No me acuerdo si me dormir con esta
> vieja??no se que hacer? (I
> can't remember if I slept with this woman yesterday. I
> don't know what
> to do)
> * Santo Dios creo que eres tu!!!! (Oh my
> God, I think it's you!)
>
> These messages include an attachment which is a copy of the
> worm. On
> running the file, users are infected with a copy of the
> worm.
>
> BckPatcher.C on the other hand, is designed to modify the
> desktop
> background, the Windows Explorer background and the folder
> icons.
> Additionally, every time files with certain extensions are
> executed
> (DLL, EXE, JPG or RAR) the worm is run instead of the
> applications
> associated to those extensions.
>
> BckPatcher.C spreads through shared, mapped and removable
> drives,
> copying itself to them.
>
> You can see images of the modifications carried out by the
> worm here:
> http://www.flickr.com/photos/panda_security/tags/bckpatcherc/
>
> The Boface.BJ worm reaches computers in a different way:
> through email
> messages with attachments, Internet downloads, files
> transferred via
> FTP, IRC channels, P2P file-sharing networks, etc. Users
> are unaware of
> the infection.
>
> Once the PC is infected, it takes approximately four hours
> to trigger
> its payload. It does so when users access log into their
> Facebook
> account. Then, it uses the network to send them a message,
> including the
> affected user. http://www.flickr.com/photos/panda_security/3528707512/
>
> On clicking the link users are directed to a page that
> resembles YouTube
> (called "YuoTube") in which a video "should" be displayed.
> However, in
> order to do so, users are asked to download a player. If
> users accept,
> the fake antivirus is downloaded. Image here:
> http://www.flickr.com/photos/panda_security/3527896167/
>
> Once the download is accepted, the fake antivirus is
> installed on the
> computer. It then starts sending users messages informing
> them their PC
> is infected and telling them they should buy a solution.
> Here is the
> interface displayed by one of the fake antiviruses:
> http://www.flickr.com/photos/panda_security/3528707634/
>
> More information about these and other malicious codes is
> available in
> the Panda Security Encyclopedia
> ((http://www.pandasecurity.com/homeusers/security-info)
>
> Finally, Panda Security has launched a page for users to
> relate their
> experiences with malware (whether they have fallen victim
> to money or
> data theft, etc.). Users who send their comments will
> receive a free
> download of Panda Internet Security 2009 with two-month
> services. Check
> it out here:
> http://www.pandasecurity.com/homeusers/media/malware-stories/
>
> You can follow Panda Security's activity online on Twitter
> (http://www.twitter.com/panda_security),
> and the PandaLabs blog
> (www.pandalabs.com)
>
> ------------------------------------------------------------
> To unsubscribe from Virus Alerts, please visit:
> http://www.pandasecurity.com/about/unsubscribe.asp
>
> To contact with Panda Security, please visit:
> http://www.pandasecurity.com/about/contact/
> ------------------------------------------------------------
>

Thursday, May 14, 2009

Be the first to get our 2010 solutions




From: Panda Security <intl.sales@imc.pandasecurity.com>
Subject: Be the first to get our 2010 solutions

Date: Friday, 15 May, 2009, 5:15 AM

Panda 2009 Product Line. The lightest protection.
If this email does not appear as a web page, click here Panda Security
Panda Security
Panda 2009 Product Line. Panda 2009 Product Line. Panda 2009 Product Line.
Buy now the lightest protection...
and get FREE upgrade to 2010!
Panda 2009 Product Line.

Don't miss a thing on the Internet. With Panda Security's 2009 Product Line , you will have all the efficiency and comfort you are looking for to surf the Internet with complete peace of mind .

Enjoy maximum protection with minimum impact on your PC.

Buy your 2009 solution now and get a free update to the new 2010 version.

Enjoy the latest protection technology at all times!
Buy
 
FREE
Upgrade
to 2010 Version
www.pandasecurity.com
At Panda Security we respect your privacy.
You are subscribed as kucingkumeong@gmail.com.
If you don't want to receive further communication, click here.
© Panda Security 2009

Saturday, April 18, 2009

FW: Virus Alerts [Panda Security's weekly report on viruses and intruders - 04/17/09]

----- Original Message -----
Subject: Virus Alerts [Panda Security's weekly report on viruses and intruders - 04/17/09]
Date: Fri, 17 Apr 2009 12:00:32
From: Virus Alerts <virusalerts@PANDASECURITY.COM>
To: <VIRUSALERTSCOM@OXYGEN3.PANDASOFTWARE.COM>

- Panda Security's weekly report on viruses and intruders -

Virus Alerts, by Panda Security (http://www.pandasecurity.com)

This week's PandaLabs report looks at the Hiloti.A Trojan,
PersonalAntivirus and IRCBot.CML worm.

When run, the Hiloti.A Trojan sets the Mandatory Integrity Control level
(MIC) to low. This way, it can run any file downloaded without the user
noticing. In this case, it downloads the Lop adware, designed to show
advertising messages.

Additionally, Hiloti.A logs onto Internet Explorer as a BHO (Browser
Helper Object), monitoring Internet browsing. If users use Firefox, the
malware injects a code on the pages monitored (over a hundred) to
redirect searches carried out on those domains to pages that contain
more malware to be downloaded.

PersonalAntivirus is a fake antivirus. As with all such adware,
PersoanlAntivirus is designed to convince users that the system is
infected with malware. To do so, it performs a false scan of the
affected system, during which it detects several malware samples (image:
http://www.flickr.com/photos/panda_security/3448900109/)

If users click "Remove", a form will be displayed asking users to pay
for the license, and a false warning message will appear indicating the
computer is at risk (image:
http://www.flickr.com/photos/panda_security/3449714734/)

Finally, IRCBot.CML, is a worm that allows remote intruders to access
and control the computer via IRC. This worm passes itself off as a photo
to reach computers, but once run displays an error message with the
text: "Picture can not be displayed".

Next, IRCBot.CML opens several ports and tries to connect to an FTP
server to send the user's data, keystroke captures, etc.

This worm spreads through MSN Messenger, trying to infect all the user's
contacts.

Panda Security has created a page where users can relate their
experiences with malware (whether their money or data has been stolen,
etc.). On sending the comments, users receive a free download of Panda
Internet Security 2009 with two months' services. You can see the page
here:
http://www.pandasecurity.com/spain/homeusers/media/malware-stories/

You can receive the Panda Security news automatically by adding this URL
(http://feeds2.feedburner.com/panda_security) to your feed reader.

Finally, follow Panda Security's activity online on FriendFeed
(http://friendfeed.com/pandasecurity), and the PandaLabs blog
(www.pandalabs.com)

------------------------------------------------------------
To unsubscribe from Virus Alerts, please visit:
http://www.pandasecurity.com/about/unsubscribe.asp

To contact with Panda Security, please visit:
http://www.pandasecurity.com/about/contact/
------------------------------------------------------------

Friday, March 13, 2009

Privacy Policy

Avrev Privacy Statement

What follows is the Privacy Statement for all Avrev websites including all the websites run under the Avrev.blogspot.com domain.

Please read this statement regarding our blogs. If you have questions please ask us via our contact form.

Email Addresses

You may choose to add your email address to our contact list via the forms on our websites. We agree that we will never share you email with any third party and that we will remove your email at your request. We don’t currently send advertising via email, but in the future our email may contain advertisements and we may send dedicated email messages from our advertisers without revealing your email addresses to them. If you have any problem removing your email address please contact us via our contact form.

Ownership of Information

Avrev is the sole owner of any information collected on our websites.

Comments/Message Boards

Most Avrev websites contain comment sections. We do not actively monitor these comments and the information on them is for entertainment purposes only. If we are alerted to something we deem inappropriate in any way, we may delete it at our discretion. We use email validation on most of our message boards in order to reduce “comment spam.” These email addresses will not be shared with any third party.

Cookies

Currently we assign cookies to our readers in order to save their preferences. This data is not shared with any third party. Accessing our websites is not dependent on accepting cookies and all major browsers allow you to disable cookies if you wish.

Third Party Cookies

Many of our advertisers use cookies in order to determine the number of times you have seen an advertisement. This is done to limit the number times you are shown the same advertisement. Avrev does not have access to this data.

Traffic Reports

Our industry-standard traffic reporting records IP addresses, Internet service provider information, referrer strings, browser types and the date and time pages are loaded. We use this information in the aggregate only to provide traffic statistics to advertisers and to figure out which features and editorials are most popular.

Legal proceedings

We will make every effort to preserve user privacy but Avrev may need to disclose information when required by law.

Business Transitions

If Avrev is acquired by or merges with another firm, the assets of our websites, including personal information, will likely be transferred to the new firm.

Links

Avrev websites frequently link to other websites. We are not responsible for the content or business practices of these websites. When you leave our websites we encourage you to read the destination site’s privacy policy. This privacy statement applies solely to information collected by Avrev

Notification of Changes

When Avrev makes changes to this privacy policy we will post those changes here.

Contact Information

If you have any questions regarding our privacy policy, please contact us.

Friday, November 14, 2008

FW: Virus Alerts [Panda Security's weekly report on viruses and intruders - 11/14/08]

----- Original Message -----
Subject: Virus Alerts [Panda Security's weekly report on viruses and intruders - 11/14/08]
Date: Fri, 14 Nov 2008 11:59:30
From: Virus Alerts <virusalerts@PANDASECURITY.COM>
To: <VIRUSALERTSCOM@OXYGEN3.PANDASOFTWARE.COM>

- Panda Security's weekly report on viruses and intruders -

Virus Alerts, by Panda Security (http://www.pandasecurity.com)

A new fake antivirus (the AntivirusPro 2009 adware), and the Gimmiv.C
and Boface.C worms designed to spread on social networks such as
Facebook and MySpace are the subjects of this week's PandaLabs report.

AntivirusPro 2009 is a malicious code that passes itself off as a trial
anti-malware solution. Once installed on the computer, it makes users
believe their computer is infected to make them purchase the full, pay
version of the fake antivirus. This way, cyber-crooks gain financial
benefits from their infections. According to data collected by
PandaLabs, over 30 million computers worldwide could be infected by fake
antiviruses
(http://www.pandasecurity.com/spain/homeusers/media/press-releases/viewn
ews?noticia=9393
)

Gimmiv.C is a worm designed to exploit one of the latest Microsoft
Windows vulnerabilities (MS08-067). When run on the computer, it drops
two malicious files onto the system.

One of the malicious files is vista.exe, an IP scanner that scans the
subnet range of the local network searching for computers with port 445
open. Then, the worm runs another file downloaded (Mrosconfig.exe),
which is used to exploit the MS08-067 vulnerability. Gimmiv.C uses this
malicious code on the vulnerable computers found in the scan. It also
makes one of the computers download other malware by connecting to a
certain URL.

Finally, Boface.G is a worm designed to spread on social networks such
as MySpace or Facebook.

This worm posts a link to a fake YouTube video on the infected user's
profile or contacts panel, or sends the contacts a private message with
the link. When they try to watch the video (which seems to come from one
of their friends) they are taken to a Web page where they are encouraged
to download a Flash Player update to watch it. However, if they do so,
they will let a copy of the worm into their computers and will infect
all of their contacts.

For further information about this worm, go to
http://www.pandasecurity.com/spain/homeusers/media/press-releases/viewne
ws?noticia=9434&sitepanda=particulares

You can receive the Panda Security news automatically by adding this URL
(http://feeds.feedburner.com/PandaSecurity) to your feed reader.

For up-to-date information about computer security, go to the Panda
Security Twitter (http://twitter.com/Panda_Security)

------------------------------------------------------------
To unsubscribe from Virus Alerts, please visit:
http://www.pandasecurity.com/about/unsubscribe.asp

To contact with Panda Security, please visit:
http://www.pandasecurity.com/about/contact/
------------------------------------------------------------

Sunday, August 17, 2008

Panda Security's weekly report on viruses and intruders - 08/16/08

Panda Security's weekly report on viruses and intruders -
Virus Alerts, by Panda Security (http://www.pandasecurity.com)

This week's PandaLabs report looks at the PcClient.HV Trojan, and the
Autorun.ACA and P2PWorm.F worms.

Bck/PcClient.HV is a Trojan that opens a backdoor in the computer. This
malware inserts an entry in Run and copies three files to the system:
PCCORTR.DLL and 81.DLL in C:\WINDOWS, and WUAUCT.EXE in
C:\WINDOWS\SYSTEM32. All of them are detected as Bck/PcClient.HV.

The Trojan uses the libraries (.DLL files) to reduce the security level
of the browser and the WUAUCT.EXE file to connect to a remote address in
order to send out information about the infected computer.

When the user runs the infected file, a 12-slide PowerPoint presentation
is displayed with photos of the Olympic facilities in Beijing.

The Autorun.ACA worm reaches computers as an executable file that tries
to pass itself off as a Word document. Depending on the system
configuration, the actual extension of the 'document' might not be
displayed.

This worm is designed to copy itself to %Root% under the name
JONIEZZ.EXE and %SystemRoot%\LoLOxz as SMSS.EXE. Also, it copies itself
to external drives and shared drives with the name AUTORUN.INF. This
way, the worm tries to infect any user that might access these drives.

W32/P2PWorm.F spreads through mapped and removable drives and P2P
programs. To spread through file exchange networks it copies itself to
directories of P2P programs, keygens, game cracks, security programs, or
popular applications like instant messaging clients.

Also, it inserts entries in Run to run automatically when the computer
starts up. This malware collects information from the infected computer,
for example, passwords for programs like CUTE FTP, FlashFXP, TotalCmd,
SmartFTP, FileZilla, Sniff, etc.

source www.pandasecurity.com

Thursday, June 26, 2008

Web and Computer Security

Well, if that would have been said to me by my father when I was 2 years of age, I would have understood. But when today, my own computer tells me that when I am 34, I wonder why I spent $1500 on my computer hardware and software just to enjoy the (un-realized) benefits of this great and revolutionary information technology?

Today's cyberspace is hazardous. None of today's PC users can claim that they never had a computer virus issue or a PC security breach. Now, if you count today's number of PC users worldwide, they will soon be 1 billion by 2010 according to analysts. When I see all the computer viruses, infections, trojans, and what not around me, and compare it with the 1 billion innocent computer users around the world, I simply feel sorry not only for those billion users but for myself too. But again, as a common user myself, I must admit it was not all doomsday for the whole industry since 1987 when I started to use computers. So, as a responsible member of this great IT revolution, I must share some of the best tips and tricks that I learned to use to make the minimum room for productivity on my computer.

Please note this is a tutorial for someone who has basic know-how of computer usage. For those who are newbies, I would recommend asking a local expert's help before trying anything out mentioned in this tutorial. In that case, make room for payment from deep pocket. For your own convenience, print this tutorial for step-by-step instructions.

Whenever my computer is infected, I act on any of the following options;

1. FORMAT HARD DISK: I back up all of my data on a CD-Writer if it is still accessible. And then format the whole hard disk drive and re-install each and every application.

2. USE SOFTWARE: I exhaust all anti-virus and other software options. This is usually my first priority as compared to formatting the whole computer hard disk drives.

Now, let me explain both options in detail;

PRE-REQUISITES: Make sure you have a CD-Drive (Writer), empty writable CDs, Windows OS CD (bootable) that contains files such as Format.exe, Scandisk.exe, FDisk.exe, and Attrib.exe files. Microsoft Office CD, Anti-Virus CD, GoldenHawk CD Writing Software in DOS (copy2cd.exe and cdtools.exe), Serial Numbers of your License, Driver CDs of Motherboard, VGA, Network, Sound and Modem devices. Optionally, download (using www.download.com or www.tucows.com) these software from any Internet Caf when your own computer is inaccessible and save it on a CD so that you can use it anytime for security purposes;

Golden Hawk DOS based CD Writing Software

HTech Fireman Windows based CD Writing Software

Driver Genius Pro

Partition Magic

AVG AntiVirus

SpywareBlaster & SpywareGuard

Spybot Search & Destroy

Ad-Aware

IE-SpyAd

ZoneAlarm

HiJackThis & CWShredder

I have intentionally avoided mention of many commercially good and more friendly software's mention here as I wanted everything to do FREE without any additional costs apart from the usual OS licenses. For your own convenience, you can research Google or Yahoo search engines find further information about such commercial software and their availability / pricing.

1. FORMAT HARD DISK

I know it is painful and surgical type of solution, but sometimes, it is the ONLY solution left after exhausting all of our efforts to revive our computer machine after a virus attack. Follow this procedure;

Booting Up: Try booting your computer normally first and see if you can login easily. If you can't or your computer hangs up, try holding F8 key when starting Windows and you will get the Safe Mode. Even if you don't get the Safe Mode, don't worry.

Power up your computer and press DEL key or F2 key to login your CMOS. In CMOS, go to Boot Preferences and make CD Drive as boot drive as your first boot drive and change the hard disk drive as the second boot drive. If you don't see your CD Drive in the boot-up options, your CD Drive is not properly installed. Check the connectors or ask your CD Drive provider for instructions to install the CD Drive. Now, when your CD Drive is ready, insert your Windows OS CD in the CD Drive and restart your computer machine. When prompted, select the option "Boot from CD with CD Option". When you get the prompt, Notice the CD Drive letter that was allocated to your CD Drive when it installed the CD Driver. It is usually D: drive or the last drive letter depending on the number of your partitions. Note it down as it is the actual drive letter where you will have to type a DOS command like d:

You should now be able to run all software utilities such as Format, Scandisk, FDisk or Windows Installation Setup.exe files. Right now, simply make sure they exist by typing a DOS command dir at the CD drive letter. If you don't find it with this simple directory command, use dir/s filename to search the file. For example, to search fdisk.exe file, type dir/s fdisk.exe.

BACKING UP YOUR DATA: Before formatting your hard disk drive, please make sure you have proper back up of your critical data files such as Microsoft Word, Excel, Powerpoint, etc files on a CD or any other media for backup that you have access to. In this tutorial, we assume you have a CD-Writer installed for taking backups on Writeable CDs. Their capacity is usually 700MB or less. Here, you should seriously consider using Zipping software like WinZip or WinRAR.

VIA WINDOWS: If you can luckily login to your Windows OS, you should run the CD-Writer software such as HTech Fireman to back up all of your data on an empty CD. If you don't know how to do it, read their user manual for detailed instruction set. If you can't access your Windows OS, read on.

VIA DOS: Some of the files that you wish to make back-up, may be hidden. To un-hide them, use attrib *.* +r +s +h.

Now, use the software from Golden Hawk file named as copy2cd.exe to backup your data files or directories on a writeable CD. Before using this command, make sure you are in an appropriate path on the computer such as E:/ where the actual file copy2cd.exe file resides;

Copy2cd c:data*.* f:

Here we assumed that f: is a CD Writer drive. Now, repeat the same for all of your files to back up. When finished, run cdtools.exe command i.e. cdtools f: to finish by selecting option "Disc Finalization".

If you can't back up your data using the above-mentioned procedure, either ask an outside expert's help personally or via internet. If all fails, forget your data forever and carry on installing a new OS as mentioned in this tutorial.

Backing up Your Drivers: An interesting tool to mentioned here is a software that automatically backs up all of your drivers of CD, modem, sound card, vga, usb, printer or just about anything that is currently installed on your system. But this software works only in an operational windows OS, and not in DOS. It is a good and time-saving practice to keep a backup of all of your drivers on a CD by using such a software. Its name is Driver Genius Pro and it is commercial software, not a freeware.

USING FDISK: You may skip this option and go straight to Formatting Hard Disk option, if you wish to use other useful partitions that may contain your data. Before going ahead with this option, Make sure there is no useful data left on your computer to be backed up. This option will delete all of the computer partitions and create new ones.

i) Boot up your computer using Windows OS CD.

ii) Run this command fdisk

iii) Press option 3 to delete all current partitions.

iv) To create a new partition, select option 1 and select Y to answer the maximum size question by the program.

v) Next, select option 2

vi) Press Esc key to quit and restart your computer to

See the URL http://www.compguystechweb.com/troubleshooting/fdisk/fdisk_scr.html for detailed instructions alongwith screenshots. Now, that you have created the primary partition, you can continue to format the newly created partition. There is a very user-friendly but commercial software called Partition Magic by PowerQuest to manage your partitions easily after installation of Windows.

FORMATTING HARD DISK: Now that you have created new partitions, It is time to format them so that you can start installing Windows. This is how you make your C: drive usable by your Windows OS for installation. Boot up your computer with Windows CD and type format c: command at the prompt. When prompted for maximum size, press, YES. After complete processing you will be presented with the successful report about the formatting of the C: drive. Select your new drive name and press ENTER to finish.

INSTALLING WINDOWS: Microsoft has made it very easy for a newbie to install a completely new OS on a newly formatted partition. It is all wizard based and you simply have to click NEXT each time whenever asked a question. Boot up your computer from the Windows CD and select Start with CD Option. When on DOS prompt, change to the CD Drive that it just created which is usually d: if you have only one partition C. Now type command setup.exe to start the windows installation process.

During installation, make sure you properly name your PC as per your preferences and select your regions and Time zone. When finished, the computer will re-boot and during next re-boot it may ask some drivers of your Sound Card, VGA, Network, or other devices attached. Provide the requisite driver CDs and locate the paths of the appropriate drivers. If you are not sure, leave it like that and press NEXT to ignore. When your windows installation is complete, you can install Microsoft Office, setup internet connection and start using it as normally as you would. Please make sure you install all the security software such as anti-virus, anti-spyware, adware, and other software as mentioned in the next section.

2. USE SOFTWARE

Installing Anti-Virus: Download free AVG Antivirus software and install it. Make sure you get its free key from their website by registering. This software is not auto-updated for critical viruses and for an auto-update version, you will have to pay. If you wish to pay, we would recommend world's most popular brands Symantec, McAfee and Trend Micros instead. No matter what Anti-Virus software you install, make sure you enable its Auto-Protect feature for automatic protection of your computer's resources and in-coming or out-going emails from any virus attack. Some software even allow you to setup silent detection and destruction without any disturbance to your work. Further, they are auto-updated via internet at the regular interval that you setup. Hence, you can rest assured that whenever a security threat is spread all over the world, your software will automatically download the requisite updated version and install its defense on your computer.

BROWSER SECURITY: To setup your browser (Internet Explorer on Windows) for maximum security against the usual threats, follow this procedure;

i) Start up your browser

ii) Go to IE > Tools > Windows Update > Product Updates, and selected Security Updates to be automatically updated. Microsoft releases patches and security patches from time to time to make sure your system's security is up-to-date.

iii) Now, go to Internet Options/Security/Internet, press 'default level', then OK. Now press "Custom Level." In the ActiveX section, set the first two options ("Download signed and unsigned ActiveX controls) to 'prompt', and 'Initialize and Script ActiveX controls not marked as safe" to 'disable'. Now you will be asked whether you want ActiveX objects to be executed and whether you want software to be installed. Sites that you know for sure are above suspicion can be moved to the Trusted Zone in Internet Option/security.

If you use another browser such as Firefox or Netscape, see their documentation on how to securely set it up against any such internet threats.

Installing Anti-Spyware: Spyware, adware, browser hijackers, and dialers are some of the fastest-growing threats on the Internet today. By simply browsing to a web page, your computer may become a victim. You can install SpywareBlaster and SpywareGuard to effectively guard your computer from such internet threats.

It includes Fast Real-Time Scanning engine for known spyware and heuristic/generic detection capabilities to catch new / mutated spyware and Download Protection along with Browser Hijacking Protection in real-time.

Simply download the software (free) from their website and install it on your system. Make sure you download its latest update too or enable its Auto-Update feature to be updated automatically in the background. Now, when you are ready, run the software to check the spyware on your computer. When spyware are found, it reports accordingly. Press "select all", then press option "kill all checked". Although it won't protect you from 100% spyware, But it is a very important extra layer of protection.

Next, install another software that is called Spybot Search & Destroy. It works exactly like SpywareBlaster, but it never hurts to have a double layer of spyware detection alongwith Spybot R&D.

Installing Anti-Adware: Adware is a common term used to describe potentially dangerous websites and scripts that do data-mining, aggressive advertising, Parasites, Scumware, selected traditional Trojans, Dialers, Malware, Browser hijackers, and tracking components. There is a very good software called Ad-Aware available to scan and remove such nuisances from your system.

To start using it, simply visit Lavasoft USA website and download its free non-commercial version of Ad-Aware Personal Edition. Run its setup program and install it. When prompted, ask it to scan your computer. If there are any adware found, it is detected and removed automatically by Ad-Aware. Run this software on a weekly or daily basis, if possible to keep your system clean.

In addition to the Ad-Aware, Internet Explorer comes with a very handy tool that allows you to block specific sites that may carry well-known advertisers, marketers, crapware pushers to the Restricted sites Zone. If you had to input 50000+ of such sites manually yourself, it would takes years. Luckily, there is a software that does it all automatically and it is called IE-SPYAD. Once you merge this list of sites and domains into the Registry, the web sites for these companies will not be able to use cookies, ActiveX controls, Java applets, or scripting to compromise your privacy or your PC while you surf the Net. Nor will they be able to use your browser to push unwanted pop-ups, cookies, or auto-installing programs on your PC. It is not an ad blocker. It will stop top unwanted crapware from being installed behind your back via "drive-by-downloads"; prevent the hijacking of your home page.

This Restricted sites list is based in part on info from: discussions in the SpywareInfo Forums and other forums that specialize in crapware removal major crapware reference sites: doxdesk, cexx.org, Kephyr.com, PestPatrol and SpywareGuide.

To start using it, simply download it from their website and run its install.bat file. Make sure you run its update as well soon after its installation.

INSTALLING FIREWALL: A firewall software acts as a defense shield against hackers, intruders, and blocks access attempts to your computer. ZoneAlarm is a professional firewall software that works in a stealth mode automatically and makes your computer invisible to anyone on the Internet.

Download it from ZoneLabs website and run its setup for installation. I recommend you use its Express Settings which automatically configures your most commonly used software like browser, chat messengers, ftp software to access internet, while blocks every other internet traffic in real-time. If any software or service tries to upload or download any data, it pops up an alert whereby you can allow or disallow such internet traffic.

Computer Slow Down: It is very common to see many complaining about their computer slow-down. The fastest and easiest cure is using Windows' built-in Defragmenter utitlity that you can find in Start Programs Accessories System Utitlities Disk Defragmantor and run thorough defragmantation. It will take a while before it ends.

If your system's performance does not improve after running defragmantation utility, consider scanning your computer via a software utility called HiJackThis which you can download and install on your system. Use this tool carefully as it is intended for advanced users only. HijackThis is a tool, that lists all installed browser add-on, buttons, startup items and allows you to inspect, and optionally remove selected items. The program can create a backup of your original settings and also ignore selected items. Additional features include a simple list of all startup items, default start page, online updates and more.

CWShredder is a utility for removing CoolWebSearch (aka CoolWwwSearch, YouFindAll, White-Pages.ws and a dozen other names). This tool will find and destroy all traces of the CoolWebSearch (CWS) hijacker on your system including redirections, IE slowdowns, start page changes, un-authorized addition of sites in IE Trusted Zone, and blocking access to IE options or setup.

Download CWShredder from their official website only as there is a similar named virus/trojan on the loose at various websites which you may accidently download and install, hence become more infected than being cured instead. When it is installed successfully, run the software to scan your local machine. Select the fix button & it will get rid of everything related to CoolWebSearch. Close ALL other programs & windows, including IE, before running CWShredder. Reboot after doing this.

I know there is still a lot left, but as I wanted to keep this tutorial as brief as possible, hence I covered only the critical elements here. I am sure you will have fewer breakdowns (if not ZERO0 and more productive hours on your computer. I would recommend you to setup all the software's auto update and auto-check options to free your time for more productive things than just playing hide and seek with spywares, adwares or viruses. Happy and safe computing!

This article is submitted by Kashif Raza http://www.networkingtutorials.net

Monday, June 16, 2008

Virus Prevention and Removal

A virus is a piece of code that gets loaded onto your computer without your knowledge and runs against your wishes. The first known occurrence of viruses goes back to 1987 when the ARPANET was infected by one.

One common misnomer among people is that you can infect your computer just by opening an email and reading its text. That is not possible; it is usually the files attached to the email that contain the virus. The most common file types are ".SCR" ".VBS" ", ".PIF"

Prevention is better than a cure: Here are some tips to make sure that your computer does not get infected.

* Get a good Anti-Virus software like Norton Anti-Virus, MacAfee, PC Cillin etc.
* Keep your anti virus software updated by downloading new virus definitions regularly. Most Anti-Virus software comes with the feature of updating virus definitions.
* Keep your windows operating system updated by regularly downloading new updates from the Internet. Windows O/S's have a lot of security loopholes and bugs that can be easily exploited by worms and viruses.
* Make sure the anti virus scans the file each time before its opened.
* Floppy disks and removable media are a good source of viruses; always scan them before accessing files on them.
* Never open email attachments from sources that are unknown or suspicious.
* Do not open emails that have questionable subject lines.
* When in doubt about a file, don't open it.
* Even with the best of precautions bad things can still happen. Backup all your data and important files.

Even after taking all these precautions if your computer does get infected, then here are a few things that you can do:

Online clearing tools - are a good source of trying to clean out the virus, there are many Anti-Virus websites that offer free online virus detection and removal services.

Removal tools - If you have an Anti-Virus software then you can go to the website of that software and download removal tools designed specifically for the virus. However, you must find out the name of the virus that infects your PC beforehand.

If you have a backup of all your important files, you can also consider formatting your hard disk.

Ashish Jain
http://www.m6.net
Ashish is an integral member of the M6.Net Web Helpers team

Friday, June 13, 2008

Virus Alerts [Panda Security's weekly report on viruses and intruders - 06/13/08]

- Panda Security's weekly report on viruses and intruders -
Virus Alerts, by Panda Security (http://www.pandasecurity.com)

Madrid, June 13, 2008 - PandaLabs' report this week focuses on the
Banbra.FUD and Dadobra.APK Trojans, and the MalwareProtector 2008
adware.

The Banbra.FUD Trojan uses the Microsoft Internet Explorer icon. When
run, the file with the malicious code establishes an FTP connection with
a specific IP address, loading the file with the name of the affected
computer followed by the word Aviso (Warning).

Banbra.FUD creates several files on the infected system and keys in the
Windows registry. When users connect to specific online Brazilian banks,
an error message is displayed and a window with a spoof bank url is
opened where users are asked to enter their login details. .

On reentering their credentials, the Trojan intercepts them and adds
them to the text file, which is later sent via FTP to the IP address
mentioned earlier.

Additionally, this Trojan deletes security application files and other
banker malware files.

The Dadobra.APK Trojan is designed to download other files infected by
banker malware, generically detected as Banbra.FTX by Panda Security
solutions.

When users run a file infected by Dadobra.APK, a video in which a
football field is shown is played, to fool users while the Trojans
continue carrying out malicious actions. .

Finally, MalwareProtector 2008 is an adware (program designed to show
unwanted advertising) which simulates system scans and encourages users
to buy software to delete the malware which has supposedly been found.

When run, it modifies the desktop wallpaper, displaying a message
informing users the computer is infected by spyware. Then, a window is
displayed recommending users to download anti-spyware software. If the
download is rejected, a screensaver with cockroaches eating the desktop
wallpaper is displayed.

If users download the application, it simulates a computer scan and
displays a list of the malware supposedly installed on the system. If
users choose to delete the malicious code, a message is returned
claiming the software is not registered and users must pay to use it.