February 7, 2005

Genesis Computer Systems
Tech Tips and What's hot and what's not!

In This Issue

1. Anti Virus
2. Spyware
2. Virus Writer Sentenced
3. Windows Update is Being Updated

4. Spam
5. Just Say No

6. Symantec Alerts

Anti Virus's and Spyware Removel


Security Alerts


Latest Threats

 2 

02-05-05

W32.Gaobot.CII

 1 

02-04-05

VBS.Redlof.B

 2 

02-03-05

W32.Dopbot

More...


Top Threats

 3 

01-26-05

W32.Beagle.AZ@mm

 3 

12-14-04

W32.Erkez.D@mm


Removal Tools

·

W32.Bropia

·

W32.Envid@mm

·

Trojan.Vundo

More...


Security Advisories

·

Microsoft Windows HTML Help Control Cross-Zone Scripting Vulnerability

·

Microsoft Windows LoadImage API Function Integer Overflow Vulnerability

More...

.

Virus Writer Sentenced to Prison .

Was yours one of the 48,000 computers that got hit by the blaster worm variant back in the summer of 2003? If so, you might be interested in knowing that the author of that virus, Jeffrey Parsons, has been sentenced by a federal judge to 18 months in prison and three years of supervised release for unleashing the worm. Parsons was considered to be a "script kiddie," who created a copycat version of the original blaster and bragged about his deed in chatrooms. Read More

Windows Update is Being Updated

Microsoft is getting ready to release a new version of the Windows Update software, version 6. A beta testing program is expected to begin soon.  Read more here:

TECH TIPS

New Viruses Discovered

Watch out for a couple of "backdoor" viruses that can let an attacker take control of your computer remotely. The first is a worm called Backdoor.Sdbot.AO and the second is called Backdoor.Ranky.S and lets hackers use your computer as a proxy. See the following sites for instructions on how to remove these viruses if you get infected, and be sure to update your virus definitions.
.

For more info on this SDbot Virus

For more on the backdoor ranky. s

Back to top

Microsoft's new Anti Spyware!

We have been testing a new anti-spyware tool made by Microsoft, and we're happy to report that it carries on the Microsoft tradition of great software at a great price. It's called Microsoft AntiSpyware and it not only detects and removes spyware, adware and other "malware" (malicious software) programs - it actually prevents many of them from infesting your computer in the first place by using real-time security agents to monitor what's going on. There are three separate monitors: Internet, system, and application monitors.

Why another spyware program? According to our readers, this is one of the biggest computer-related problems they encounter, along with spam. And many of you have told us that none of the other anti-SPYWARE products on the market leave you completely satisfied with the results.

Microsoft AntiSpyware features "Active Protection," which alerts you to suspicious activity on your computer before harm is done, and it includes the most comprehensive and fastest growing database of SPYWARE signatures in the business. Another great idea is the SPYWARE Fighters' Network, which lets users immediately report new SPYWARE to be added to the database. We like that this information is sent anonymously. The results page that displays when AntiSpyware finds SPYWARE on your system is easy to interpret and contains details that let you make an informed decision as to what you want to remove and what you don't. And if you're not sure about some files, you can quarantine them and get them back or delete them later.

AntiSpyware goes beyond protecting against SPYWARE programs, too. It also includes a "History Cleaner" that will get rid of some of the data that hides in logs and temp files and could be used against you. It even has a "Secure File Eraser" that overwrites deleted files so the data doesn't remain on your hard disk to be recovered with sophisticated computer forensics techniques.

The installation wizard was straightforward and super fast; it took less than a minute on our Windows XP machine. You do have to restart the computer after installing. When you reboot, you'll see the "Target" icon in the system tray, indicating the program is active. Double click it to open the setup wizard. You'll have the choice of enabling automatic updates so AntiSpyware can download the latest SPYWARE signatures. You'll also have options to enable active protection and join the SPYWARE fighters' network. That's all there is to it - next you can run a scan for SPYWARE, and you can choose to run a scan every night at 2 a.m. (you can change the time after completing the wizard).

The graphical interface is simple, intuitive and icon-based. Scanning is fairly fast; it took about 16 minutes to scan 138,874 files and 6,686 registry keys. AntiSpyware detected the SPYWARE programs that we had deliberately installed on our test machine, plus a few more. As with any scanner, there were a few "false positives," too - programs that we had installed deliberately and wanted to keep. AntiSpyware lets you take separate action on each detected threat, so that wasn't a problem (if you prefer, you can set a single action for all detected threats using the Take Action button). Each listed threat shows the threat level, from low to high (for example, cookies are low threats) and you can view details about each (for example, the date it was installed). We especially like the fact that you can choose to "always ignore" a particular threat, so you don't have to keep telling AntiSpyware what to do with it each time you perform a scan.

Active Protection works nicely, too. If you install software that tries to install SPYWARE along with it, AntiSpyware pops up a window warning you of this, and gives you the option to allow it or remove it. All in all, we were impressed with the beta's performance and ease of use. We think Microsoft has another winner. We'll warn you when the product is released! In the mean time, don't buy any other anti-SPYWARE. This one detects, deletes AND protects.

Try It here free 

Back to top

Is it Just Spam or is it Something Worse? .

You probably get them, too. One of the most prevalent types of spam message lately is the one that states that you are now qualified... (we can't use the same terminology because your spam filter will catch it!) If you aren't in the market for a loan, you probably just hit "Delete" or dump it in your junk mail folder. But if you happen to be about to buy a house, you might be tempted to check it out. After all, it couldn't hurt. Or could it?

Some of these messages may be misguided bulk mailings from actual loan companies. But at least some of them are "phishing" attacks. They suck you in with the "pre-approval" and low rates, then they direct you to a Web site where you're asked to "confirm" your loan application information. As anyone who's taken out a loan lately knows, that means providing your social security number, home address and phone number, employment information, bank accounts and balances, credit cards and balances, and other details about your financial assets and liabilities. Because this information really is required by legitimate loan companies, some people don't think before filling it in. And if you do, and the site is run by a phisher, now he (or she) has everything needed to steal your identity and cause you untold misery.

Many mortgage companies do operate Web sites, but we caution you to be suspicious of anyone who initiates contact about a loan via e-mail. There are just too many of these spammers who turn out to be scammers, too.

Read more

Back to top

How Do I "Just Say No to All"? .

QUESTION:
When I install a program and Windows encounters the same file and asks me if I want to overwrite it, there is an option to say "Yes to all" so that it won't keep on asking me again. But what if I want to say "No to all?" Is there a way to do that? - Jean P.

ANSWER:
We wish they were all this easy! Yes, you can say "No to all" - all you have to do is hold down the Shift key while you click "No." Intuitive, isn't it? Hey, we've got to keep you on your toes. [grin]

Back to top

Copyright © 2005
Genesis Computer Systems LLC. All rights reserved.
Information in this document is subject to change without notice.
Other products and companies referred to herein are trademarks or
registered trademarks of their respective companies or mark holders.

Home | Amazin ISP SoftwareWeb Design | Web Cam

Genesis Computer Systems LLC
300 West Cedar Ave
Gladwin, MI 48624
Phone: 989-426-3121
Fax: 989-246-1404