From the monthly archives:

April 2007

Fake Security Programs

by certifiedbug on April 28, 2007

in Rogue

There are many Rogue antispyware programs, some of which will actually infect your machine rather than clean it. Or at the least, prove useless.

Countless victims seen in the help forums are infected by the Zlob trojan, which poses as a codec (compressor/decompressor) needed to view a video, often downloaded from websites with adult content.

Zlob installs a variety of fake malware and alerts users to download a rogue anti-spyware program to remove it, or installs the program on your computer without permission.

Rogue programs include those which rip off legitimate antispyware programs by playing on names.

As Bill Pytlovany blogged at “Bits from Bill”:
AntiSpyware Advertising Gets Nasty

I’m pretty confident, both Spywarebot ads are from the same company who have a couple dozen AntiSpyware products available under different names and domains. Neither are related to the popular “Spybot, Search and Destroy” program.

Doing one’s homework before downloading, can save you a much bigger headache than the time it takes to read.

Rogue/Suspect Anti-Spyware Products & Web Sites

Julie Amero sentencing delayed for third time

by certifiedbug on April 25, 2007

in News

Julie Amero was scheduled to be sentenced Thursday in Norwich Superior Court. However for the third time since March, sentencing has been postponed, now set for May 18, 2007.

The request by Assistant State’s Attorney David J. Smith, who prosecuted the case, was signed by Judge Hillary Strackbein.

“The state has not completed a full examination of all the issues which may affect its position at the sentencing hearing,” was Smith’s written explanation.

You may recall it was reported that the judge, Hillary Strackbein, was seen falling asleep during proceedings and made comments to the jury that she wanted the case over by the end of the week. Rather ironic at this point.

Microsoft News

by certifiedbug on April 25, 2007

in Microsoft, News, Security

The Microsoft Malware Protection Center Portal Preview will officially launch in the summer of 2007, meanwhile you can give feedback on the portal preview.

Microsoft Security Intelligence Report (July – December 2006)

More here: Three Microsoft Announcements

It is a Vista evening. ;)

Microsoft has released the April 2007 Cumulative Update for Media Center for Windows Vista. This update contains several improvements, and it resolves several issues. This cumulative update is intended for computers that are running Windows Vista Home Premium or Windows Vista Ultimate.

Article ID: 932818
Last Review: April 24, 2007
Revision : 2.1

The following Toshiba portable computers cannot be upgraded to Windows Vista. These portable computers were originally manufactured and designed to support only Microsoft Windows XP:

• Satellite R15 series
• Satellite L25 series
• Satellite L2 series
• Satellite M45 series
• Satellite M55 series
• Satellite M65 series
• Satellite A70 series
• Satellite A75 series
• Satellite M30X series
• Satellite M35X series
• Satellite P35 series
• Portege - M200 series Tablet PC
• Tecra M2 series

Microsoft Help and Support

Speaking of upgrades.

One of these days, I will blog my on-going experience with Dell Support, regarding a ’should be simple’ upgrade from XP Pro to Vista on a laptop.

Anyone who has ever had to deal with Dell Support, will know I am exhausted just thinking about it.

Windows Vista Beta 2, RC1 and RC2 set to expire

by certifiedbug on April 24, 2007

in Windows Vista

On May 31, 2007, pre-release versions of Windows Vista will expire. If you are running a pre-release version of Windows Vista (Beta 2, RC1, or RC2) you will begin to receive notifications about the upcoming expiration on May 18, 2007. To avoid work disruption and the loss of data, it is strongly recommended that PC users running any of these pre-release versions of Windows Vista migrate their PCs to the final version of Windows Vista prior to May 31.

Windows Vista Team Blog: CPP Expiration FAQ

ValueClick, time for the FTC to get involved

by certifiedbug on April 23, 2007

in Security

Winfixer is like a certain bunny, it keeps going and going…..

Sandi Hardmeier (Spyware Sucks)

So, what do we do about an advertising network like ValueClick that will not clean up its act? A network that has been implicated, over and over, in the spread of malware? An advertising network that was involved in the infiltration of the Windows Live Messenger banner advertisement by winfixer malware?

Full article

The Spy Act approved, third time lucky?

by certifiedbug on April 22, 2007

in News, Security

From the Committee on Energy and Commerce

Press release: April 19, 2007

Washington, D.C. - Today, the Subcommittee on Commerce, Trade and Consumer Protection approved H.R. 964, the “Securely Protect Yourself Against Cyber Trespass Act”, by voice vote in its first bill markup of the 110th Congress. The bill, also known as the Spy Act, is designed to protect consumers from harmful and intrusive programs known as “spyware” that can harvest personal data, damage computer software and disrupt Web usage.

“As technology advances, it is imperative that the government remain aware and ahead of potentially damaging uses of that technology. Protecting Internet users from dangerous programs that steal consumers’ identities, invade their software or just plain harass them is a top priority,” said Rep. John D. Dingell (D-MI), Chairman of the Committee on Energy and Commerce.

If passed, the Spy Act will shield Internet users from under-the-radar spyware programs that can secretly invade their computers and monitor their online activity. Some of these programs steal personally identifiable information, such as addresses, telephone numbers or even credit card account information. Other programs send repeated intrusive and aggressive advertisements, require consumers to download software or redirect users to Web pages against their will.

“An informed consumer is a powerful consumer. Too often, the average citizen is unaware of the litany of scams and con-jobs that infest the marketplace. We must stop the scourge of identity theft and related abuse. The Spy Act is a pivotal first step,” said Rep. Bobby Rush (D-IL), Chairman of the Subcommittee on Commerce, Trade and Consumer Protection. “Data breaches continue at a rapid pace and constitute a major threat to consumers. Next month the subcommittee will examine the astonishing breach at TJX to key up this issue. We must pass comprehensive data security legislation this year.”

The Spy Act would require software distributors and advertisers to clearly notify and require consent from consumers of the programs and applications they download from the Internet. Offenders could be assessed a substantial monetary fine up to $3 million for each unfair or deceptive spyware act or practice and up to $1 million for each violation regarding the collection of personal information without notice and consent.

The Spy Act will be marked up by the full committee in the next month.

Christine Varney, how droll

by certifiedbug on April 20, 2007

in Security

Quote of the day from Paperghost at VitalSecurity:

“Desktop advertising used to be a free-for-all,” said Christine Varney, a partner in Hogan & Hartson LLP’s Washington, D.C. office and a featured speaker at ad:tech San Francisco. “It’s not anymore. Thanks to the efforts of the Federal Trade Commission, the New York attorney general’s office, TRUSTe and, most recently, the reintroduction of federal anti-spyware legislation, those days are behind us. Simply put, there’s never been a better time for advertisers to venture into the desktop advertising arena.”

Market Wire Press Release:
Online Media Company to ‘Blanket’ Advertisers With Opportunities at Interactive Advertising Event

Ms. Varney is a former FTC Commissioner and currently head of the Internet practice group at Hogan & Hartson. She also serves on the Board of Directors of TRUSTe. Her clients have included eBay, Fox Interactive Media/MySpace, Zango, DoubleClick, Advertising.com, Netscape, and RealNetworks.

internetnews

Zango’s attorney, former FTC Commissioner Christine Varney, said the company fully cooperated with the FTC investigation, providing the agency with than one million documents.

dmnews

The complaint named the company and two of its principals, Mr. Smith and Daniel Todd. Attorney Christine A. Varney, a partner with Hogan & Hartson and an FTC commissioner from 1994 to 1997, represented Zango.

She includes ‘former FTC Commissioner’ on her resume when she is now a Zango advocate?

Is she trying to infer the FTC condones Zango? Who is Christine Varney

Phishing Attack Exploits Virginia Tech Tragedy

by certifiedbug on April 20, 2007

in News, Security

Sophos reports malicious spam pointing viewers to a file entitled TERROR_EM_VIRGINIA.scr. If downloaded, the link will install a banking Trojan on the users computer.

SANS (Internet Storm Center Warning) Watch out for fake ‘donation’ sites:

The Virginia Tech Memorial Fund - Official Link