Donna's SecurityFlash : Soapbox

Microsoft AntiSpyware 'now' detects Hotbar

donna — Sun, 26 Jun 2005 11:13:00 GMT

Earlier this month, we published a simple study (test) comparing few antispyware program’s real time protection - Does your antispyware’s real-time protection work?

One of the antispyware programs that we studied is Microsoft's Windows AntiSpyware Beta 1 which failed to protect the system in real time while installing a common threat Hotbar and did not detect Hotbar as adware or spyware.

Microsoft released 5729 definitions earlier today so I did another test using Windows AntiSpyware’s real time protection with 5729 definitions and using Hotbar's installer again:

See the result in Calendar of Updates http://www.dozleng.com/updates/index.php?showtopic=5524

Don’t be fooled by any installer

donna — Fri, 10 Jun 2005 09:08:00 GMT

Users should not trust the installer of an application until you’ve confirmed that it is safe to install the program.
What am I referring to?

http://www.dozleng.com/updates/index.php?showtopic=5278

No security news over there

donna — Thu, 02 Jun 2005 20:14:00 GMT

I have another security blog over in my website on security but there is no security news over there. I'll be posting PC and security news here in SecurityFlash (hosted by Susan Bradley - “The SBS Diva”.)

Funnyfox by Mozilla Europe

donna — Thu, 12 May 2005 16:56:00 GMT

Witty promotional videos featuring people's extreme reaction to discovering Firefox are spreading fast online
http://funnyfox.org/ :-D

ZDNet

Enigma Software Group did it again?

donna — Mon, 14 Mar 2005 10:13:00 GMT

Their product SpyHunter is not classified anymore as rogue/suspect but little we know... they are doing something again.

What they are doing now is not "taking advantage" of another anti-spyware program but taking advantage the name of well-known Index.dat Suite by Ur I.T. Mate Group.

More info in Calendar of Updates

Captcha is here.. right here in MSMVPS.com blogs

donna — Wed, 19 Jan 2005 02:58:00 GMT

CAPTCHA (Completely Automated Public Turing Test to Tell Computers and Humans Apart.) test is a program that can generate and grade tests that most humans can pass but current computer programs can't pass. Susan Bradley added CAPTCHA code for MSMVPS blogs to solve the spam problem.

Effective now! Anyone who will post a feedback is required to add a code.

Example code:

This new feature in MSMVPS blogs will prevent robots in posting unwanted messages (SPAM). Thanks to Susan, our hero.

BTW, yesterday a search feature has been added. You can now search this blog :-)

A Holiday Gift from CoU...to you!

donna — Fri, 24 Dec 2004 15:38:00 GMT

See - http://www.dozleng.com/updates/index.php?showtopic=3376

Merry Christmas everyone!

To Home Users: Do you want free security programs that really works?

donna — Mon, 06 Dec 2004 14:12:00 GMT

There are security programs available on the net but you are not sure which will really protect you or do what it claimed to do. Some programs worth $ but you aren't satisfied because the next time you turn on your PC, you are greeted by some sort of spyware. Maybe because the program that you recently installed is bundled with spyware or not recommended? See Rogue/Suspect Anti-Spyware Products & Web Sites. Below are the list of programs that are free for personal use and recommended to use by security conscious users like you.

Anti-Spyware scanners/prevention (the following can be installed altogether):

Microsoft Windows AntiSpyware (enable real-time protection)

Ad-aware SE
Spybot Search & Destroy (immunized the browser)
SpywareBlaster (enable all protection)
SpywareGuard (enable all protection)
WinPatrol (enable monitoring)

Anti-Virus (choose 1 only. It is not recommended to use more than 1 AV real-time proctection):

AVG
Antivir
Avast

Anti-Trojan scanner (Not all antivirus can detect malware! Use any or both):

a-squared
ewido security suite

Anti-script (Not all antivirus can defend from malicious scripts! Install one only):

Script Defender
Script Sentry

Ad-blocking (both or any):

hpHOSTS File or MVPS HOSTS
IE-SPYADS

Firewall (Choose 1 only. Installing more than 1 firewall software is not recommended. If you are running Windows XP Service Pack 2 (SP2), Windows Firewall is turned on by default. See Understanding Windows Firewall. Note: Windows Firewall will monitor incoming traffic only.):

ZoneAlarm
Kerio
Sygate
Outpost

Privacy:

X-cleaner

Browser:

Firefox or Mozilla

Anti-Spam:

Frontgate MX
Mailwasher

0-day protection (If you are running Windows XP Service Pack 2 (SP2), Data Execution Protection (DEP) is enabled by default. DEP performs additional checks on memory to help protect against malicious code exploits. See: Memory Protection Technologies.):

PrevX Home Edition

Anti-Phishing:

Netcraft Toolbar for IE and Firefox

Phishguard

SpoofStick for IE and Firefox

FraudEliminator for IE and Firefox

Others:

BHODemon
System Safety Monitor

CWShredder

CCleaner or Index.dat Suite

BigFix

PGP Freeware

Using the above programs will help to protect your home PC. Don't forget to check for your Windows and Office update by visiting Windows Update or Office Updates web sites. If you are using Windows 2000 or Windows XP, you might want to visit http://www.pedestalsoftware.com/products/se/downloads/webscan/ to find out if you are missing security patches or install Microsoft Baseline Security Analyzer

You should always keep those programs up-to-date and run a scan after each update to make sure that no malware slips-in. Visit Calendar of Updates everyday to keep your security software current. Last but not the least, create back-ups.

Important Tools to use in case a virus will intercept REGEDIT, MSCONFIG & Task Manager from running, keep xp_emegencyutil (this will save those important utility in windows). Also keep a copy of these:

LSPFix and WinsockFix - this will restore your internet connection in case a malware damaged it.

More free security programs and tools here. Of course, there are paid software that works but the above list is for home users that want to save up some ca$h.

Happy Safe Computing!

Don't be conservative. Malware aren't. Why you?

donna — Sat, 27 Nov 2004 23:30:00 GMT

I know there is a saying “If It Ain't Broke...Don't Fix It!” but you should consider reading what is new on whatever products has been upgraded by the vendor. See what has been fixed with the new version. See if there are security fixes. Check if there are new features that might make your life easier.

Don't be conservative. Malware aren't conservative. Why you?

I'm talking about those users who until now do not want to upgrade to SP2, AVG 7, JRE 1.5 or 1.4.2_06, IE 6 SP1, Ad-aware SE.. etc.

I'm also talking about users of old and unsupported systems (e.g. Windows 98, Windows ME.. See http://support.microsoft.com/default.aspx?pr=lifecycle) and unsupported products by many vendors especially the security products. Malware are not only using old tricks but new tricks. We need new and improved protections.

Afraid that the new version or build will not play nice? Then you should really use a system that can create a Restore Point.

Keeping everything up-to-date can help in protecting your data. Don't forget to keep good backups too.

I do not use the email scanner. My ISP scans my mail anyway.

donna — Sun, 14 Nov 2004 19:17:00 GMT

The above title is what a user posted in CastleCops AVG forum where I'm helping as an AVG, Symantec forum host and a Browser Hijacker 1st responder.

I couldn't resist but to host her too <g>

I replied to the poster: “May I ask why you don't use the e-mail scanner of AVG? Are you using another e-mail scanner or you are 100% depending to your ISP email scanner?

I asked the above because I would like to give some advise (if it's OK ;) ).

Even though your ISP is scanning your incoming/outgoing messages, you should allow your up-to-date antivirus program to scan your emails by default. It is recommended because while we are retrieving or sending e-mails, a connection time-out usually happens especially if the email has an attachment. If there is a connection time-out, some malicious codes (example: worms) around the net can infect the network. If a network where you are connected has been injected with a malicious code then your message might be infected. What if the message has been scanned already by your ISP (clean) but a new worm attack happened on the net, infecting the network while you are in the process of sending or retrieving the message? There is low chance for that to happen but why take the risk if you can help protect your system or your email. Your pathed system, antivirus and a firewall should help to protect your system but if one good protection has been disabled then you are not getting the most of it (protection). It is already there for free.. why not take advantage to help protect anytime.

I understand that real-time protection should be able to protect you (Resident shield) but that is different from e-mail scanning. Most Antivirus vendor including Grisoft recommends enabling the email scanner.”

I know I can list all reasons or show her links on why every user MUST NOT only install an antivirus but enable ALL the protection that the antivirus can give but I planned to write more to her if the above will not convince her. Good thing she is convinced.

She replied: “Thank you for your advice. It is appreciated. I must admit I did not know about the time out situation. The ISP is broadband but it does have problems at times and times out, so I will enable the scanner.”

To users who is reading this and believes that your ISP e-mail scanner is enough, you're wrong. It is not enough. Do not depend YOUR safety from OTHERS hands.

Practise Safe Hex - http://www.sophos.com/virusinfo/bestpractice/
How to stay clear from vulnerabilities?- http://msmvps.com/donna/articles/15520.aspx
Security at Home - http://www.microsoft.com/athome/security/default.mspx

Hey Spammer! Aren't you tired?

donna — Fri, 29 Oct 2004 20:16:00 GMT

Feedback feature has been disabled in this blog page. I disabled it today. A spammer is posting spam messages. I patiently deleted 100+ of spam feedbacks today. No feedback for now.

Hey Spammer! with .info domain. Aren't you tired? Bloggers can simply enable/disable the feedback feature in just 2 clicks. It's an easy task for bloggers.

Your task isn't easy .. tsk..tsk

Welcome to newly awarded MVPs!

donna — Sun, 03 Oct 2004 17:08:00 GMT

Welcome to all newly awarded MVPs!

Check out the list at http://mvp.support.microsoft.com/default.aspx?scid=fh;EN-US;mvpaward&style=TOC to see who are new in the list :-)

Congratulations to newly awarded and to those who are re-awarded!

Back to WWW

donna — Mon, 30 Aug 2004 09:26:00 GMT

Heya all, I'm back online =) Arrived yesterday (6:30PM). First, I will check for OS and security program updates (if any) to take advantage of all offered protection and program enhancements. Next, will check my mail box then will proceed in reading newsgroup/forum postings (public & private newsgroups/forums). Tomorrow, I will start feeding here again on whatever PC and security news flash that I may find interesting and important to mention.

The 2 weeks vacation was great.. really great! My tummy was really full. I ate a lot of good Thai and Malaysian food (yup, I had Malaysian food because we went to Penang, Malaysia for few days to visit my in-laws). Body and mind was so relaxed especially after the thai massage. I have nothing in mind but to relax last week. I didn't even read any news on/off line. I just love that vacation - pampered myself. Doing it only 2 times a year that is why I want to make the most each time I will take a time-out.

BTW, our experience with AirAsia was good. Aircraft took-off/landed as scheduled. It's packed! Everyone seems excited with the new cheapest flight from Macau to Bangkok. Will definitely use their service again. We stayed in Asia Airport Hotel (Bangkok). Love the hotel staffs' hospitality and quick assistance on anything we asked.

That's all for now friends!..I hope all of you are well =)

Unblog

donna — Mon, 16 Aug 2004 08:28:00 GMT

No, Microsoft didn't release an un-blog tool. They released toolkits to unblocked and block delivery of SP2 for Windows XP few days ago. Unblog means I'm un-blogging myself <g> for 2 weeks. Going to Bangkok tomorrow and be back on the 29th “or” 30th of Aug. There's an “or“ because I'll see if I can extend my stay :-D

Will unblog myself and unplug all stuff here tomorrow morning.

See you next month!

Before buying an anti-spyware program...

donna — Thu, 12 Aug 2004 04:35:00 GMT

Please...please visit Spyware Warrior page before making a purchase. There are growing numbers of anti-spyware programs that does not only pretend to remove spyware but installs spyware into users system :-O

Calendar of Updates (CoU) moved

donna — Wed, 11 Aug 2004 17:54:00 GMT

One is enough, two is too much....

[Rant on]

My homepage dozleng.com and Calendar of Updates (CoU) - where users tracks and posts software updates was down again. Kernel issue as per local host. It was down more than 30 hours. We lost 3 days of database.

After a week, it's down again. Server crashed and HD failure as per local host. No idea yet how much database we lost.

I and the CoU team can't stand it. You know what others usually say “one is enough...two is too much.. “ So we decided to make a move.

Calendar of Updates moved to another hosting service - to ipowerweb which hopefully will meet our requirements (a hosting service that will really keep the site up, 24x7 monitoring, create a daily backup and at least will notify me before doing any upgrade so the CoU team will be able to notify its members). Domain name (dozleng.com) has been pointed to ipowerwebs' nameservers. Now waiting for the transfer of nameservers to take effect.

To Dozleng.com - Internet Security & Others and Calendar of Updates (CoU) visitors and registered members: I and the team would like to apologize if the site is not accessible for now. Please check back.

What an SP2 day today again :-)

donna — Sat, 07 Aug 2004 22:16:00 GMT

Few days ago I removed XP SP2 RC2 Build 2162. Add/Remove programs handled it well. Did this to make way for this much awaited final build of XP SP2.

Yes, finally it is finalized by Microsoft.

So far so good. You'll see prompts here and there but that's OK because it will protect you. With IE SP2 - you're protected from auto-installs of anything or auto-run of anything while viewing any site because it will prevent any automatic installation of anything from sites without your approval.

MSDN subscribers can download the final build. XP SP2 beta-testers can grab it too from Microsoft Beta site. Others should wait for Microsoft to publicly offer the download via their Download Center or check Windows Update.

Order Windows XP SP2 CD site seems not ready but you should visit that page again to try to order your free Windows XP SP2 CD.

Features and Functionality of XP SP2 is here.

I want to wish for a magic wand again <g> If I have a magic wand, I'll wish that all Windows XP users will grab SP2 as soon as they can.

BLOODY Keyboard

donna — Sun, 18 Jul 2004 07:27:00 GMT

My keyboard is going nuts again. It did few months ago. Took the keyboard from my hubbys' PC awhile ago but afterwards he needed it. 'Remind me to get a new 1 tomorrow', I told him.. No shop is open at this time [1AM] but hey.. Windows XP has On-Screen keyboard. Never use it before... what a nutter-saver. Actually blogging now using this On-Screen keyboard. Keys aren't complete but better than nada.

Off-topic: Now Everyone Can Fly! via AirAsia

donna — Fri, 02 Jul 2004 22:14:00 GMT

I'm not advertising. I'm sharing to you the unbelievably LOWEST airfare I've seen!

August 17, 2004 - I'm leaving for Bangkok. It's a scheduled trip as a “present” from my honeybum for receiving the MVP award earlier this year. (Thanks sweetheart!). I thought of flying with Thai Airways which served us well last year but I found an unbelievable offer from AirAsias' “Now everyone can fly”. Their airfare is unbelievably low. Low as in low. The lowest of them all!

August 17, we willl be departing Macau to Bangkok. Returning to Macau from Bangkok on August 29. That is 13 days. AirAsia charged us - Macau currency (MOP) 1,274.00 (tax included). That's US$158 - 2 persons. No more, no less. Our flight is confirmed :-)) (I want to pull the days to eat and eat good Thai food!)

Isn't that's so cheap? :-0

How come it's cheap? They will not issue a ticket, no complimentary food - that's why it's cheap. Just remember the booking number, print the travel itenirary that they will send to you (e-mail or fax) then bring along your passport then you're ready to fly. Food is available on board (pay as you order).

I think this is a very great move and offer by AirAsia!

If you're located in Asia and plan to make a trip to neighbouring countries - take a look at AirAsia website. It's an amazing offer! Online booking is available.

Off-topic: CoUs' Lucky 7's Contest :-)

donna — Sat, 26 Jun 2004 13:25:00 GMT

Lucky 7's Contest!

To all our members and guests:
We are proud to announce a special contest!
The founders of *Calendar of Updates are proud that so many of you have registered and visit our site on a regular basis. From our very humble beginnings (we laughed at the prospect of attracting 50 members!) we have grown quickly to over 700 members!
To encourage greater membership we are having a special giveaway. We will offer a free license for software from one or more of the publishers that are found on our calendar (we are currently in the process of acquiring licenses, please see future announcements regarding the names of the software).

Here is how the contest works:

When we sign up our 777th member the contest will be closed.
Every member is automatically entered into the contest.
On the next day after we sign up the 777th member we will take the closing price for the Dow Jones Industrial Average (DOW). We will look at the three digits to the left of the decimal (for example, if the Dow is 10,478.83 we will take the number 478. The contest winner is member #478.
There is no purchase necessary to participate in this give away.
If the number generated from the Dow's closing price is between 778 and 999 (for example 10,872) we will use the following day's closing number, and continue to do so until we generate a number that falls between 001 and 777.
The only rule is you must be a member (thankfully, membership is still FREE).
Multiple memberships are not permitted, sorry!

If you are a guest, please sign up!
If you are already a member, you are already in the contest.

*Calendar of Updates - site to track or post software updates