Wednesday, July 16, 2008

VIRUS ALERT: Storm Returns – Hiding In Plain Sight

You open your eMail programme and see this headline:
“John McCain Found Unconscious”
Or this one:
“Obama Dies In Shock Accident”.
Compelling and perhaps intriguing enough for you to click on the message to learn more?
I have already discussed the Storm Virus back last December. Then it was trying to entice you with Happy New Year wishes most notably with the Happy 2008.exe. All you had to do to invite this pervasive virus onto your machine was click.
Eventually most anti-virus programmes and articles about this virus and how it arrived slowed the Storm down to almost nothing. But the clever (though malicious) people behind the Storm Worm Virus came up with another cleaver bit of social engineering. Compelling headlines delivered to your eMail in-box. In the past week, the Storm Worm has stricken countless tens of thousands across the internet using just such headlines.
The key to this particular Worm Virus is that the recipient must take some action to launch this Trojan and allow it to attack the users’ machine (or entire home network).
The best way to protect yourself is simply to not click on unsolicited eMails with enticing or alarming headlines.
The best protection against all virus’ in general is a good anti-virus programme and more specifically oftentimes even more important, that most uncommon of contemporary virtues, Common Sense.
So, dear Bulldog readers, I wanted to alert you to this newest version of an old annoyance. And if you encounter any of these outlandish (but compelling) headlines in your eMail in-box, just hit your delete key. It may be one of the best universal anti-virus tools any of us have.
If you think you have been infected, or if you just find your machine is sluggish or has slowed down inexplicably, then the solution is as follows:
Go to this URL: http://www.microsoft.com/security/malwareremove/default.mspx.
It is the home of the Microsoft Malicious Software Removal Tool.
Click on the underlined link "Skip the details and download the tool". Save it to your machine in a file: i.e., MyDownloads>Microsoft>MalwareRemover or whatever the name you use to identify the location you download to. When it has downloaded, then run the programme. You will be given the choice of either a ‘quick scan’ a ‘full scan’ or a ‘customized scan’. If you have the times (just under an hour for the full scan) run the full scan. Otherwise go for the 'quick scan'.
Note: If you downloaded this programme before, you will still need to download it again; it is updated regularly to uncover new versions of malware, spyware and Trojan viruses.
Here are some of the current headlines from the past few days that I have uncovered:
"Bill Clinton in today's Times - thank god Hilary didn't beat Obama."
“Beijing Olympics canceled upon the death of China's president."
"Obama bows out of presidential race."
"Scandal rocks Obama as lurid sex video leaked?"
"Dog digs grave for owner."
And perhaps the most fantastic of all:
"Oil falls below $100 a barrel.”

Now you are both forewarned and know what to do if you get infected.

Sunday, February 17, 2008

Digital / Analog Up-date or Can You Hear Me Now!?!

Is your phone analog? The analog cellular networks AMPS (Advanced Mobile Phone System) have been phased out by all telecom providers in favour of the new digital networks. But in our area, there are a number of people who still might have analog phones or use analog cellular signals and they may not know it.
Most of us have made the switch to from analog cellular service to digital, but for anyone who still has an analog ‘brick’ phone there may be a very unpleasant surprise. The FCC has granted Verizon and ATT the only Major National AMPS providers, permission to pull the plug on their analog networks on Monday, February 18, 2008.
It is not only the phones that may be cut off. But many alarm systems run on AMPS, and they will be cut as well. In addition a variety of in-car monitors, security systems in older cars will also be affected. So, if you are not in a GSM area or if your On-Star vehicle is 2002 or earlier, you will have to make other arrangement.
US Cellular will continue analog service until the end of this year. December 31st will mark the end of the analog signal era. Check to see if that ‘emergency phone’ you got for Grandma or son or daughter is analog. It could be an unpleasant surprise to find out when there is actually an emergency.
If you have not already checked with your alarm system company, I strongly suggest you do. And soon.
For On-Star customers, GM is offering an upgrade, but it will cost $200 dollars or perhaps more and they are not offering –at the moment at least – any rebates or discounts. You can contact them directly.

VIRUS ALERT: Storm Passes Mega-D Rising

The STORM WORM bot-net has become a victim of its own success. Microsoft Windows malicious software removal tool has brought the storm under control, after a record run.
The Storm Worm made a feeble attempt to return for Valentine’s Day but the remnants were a danger mostly to a rapidly diminishing few. For anyone who feel’s their machine slowed significantly in the past 7 to 10 days you can insure your machine has been cleaned by running the malicious software removal tool found here: http://www.microsoft.com/security/malwareremove/default.mspx.
The good news is that for all intents and purposes the end of the storm worm storm is near, and likely will not bother our Bulldog readers any more. There is some not-so-good news.
Unfortunately, like the Maine winter and in particular this year’s Maine winter, one storm departing does not mean a clear sky above. Similar as well to our Maine’s weather the next storm is often more severe than what has dissipated. As I down-grade the Storm Worm alert, I am issuing a new ALERT for the emerging Mega-D, bot-net.
Mega-D is what is called a blended attack by security firms. It uses the usual methods to trick users into downloading and installing Mega-D on their machines. This turns that machine into a propagator and disseminator of Mega-D. It also can use Trojans to dodge anti-virus protection methods.
It has specifically targeted FaceBook users invites and a bogus Flash Player up-date. It is also using eMail come-on with free offers for a variety of herbal products.
It has variations that can hi-jack browser settings and appears to be morphing rapidly into new variants. The best way to prevent an infection is to keep your anti-virus programme current, and use common sense when opening eMails that are unfamiliar or have offers to good to be true. When you are surfing the web do no download any programme or product that pops up. It may say “Your computer has been infected” or “Spyware Detected” then tell you to “download this programme or product immediately”. Pay no attention to the warning or demand or suggestions.
If you did not go to a site to download anti-virus or spyware, then close out your browser and run a full anti-virus scan. The run a spy-ware scan with SpyBot or whatever programme you prefer.
This exploit has attacked at least two of our Bulldog readers in the past week and it caused a good deal of havoc and hassle before I was able to assist them.
If you suddenly find you cannot up-date your anti-virus programme or your computer is slow during familiar tasks, the solution is to run the Microsoft software removal tool and run the full or deep system scan. Re-boot your machine after it has run, then go to your anti-virus up-date location and get all the latest up-dates and virus definitions.
Like any trip we take, remember your computer may be in a familiar place in your home, but you can inadvertently invite a nasty visitor. Vigilance is the eternal price of a virus free, Trojan free experience.
If you have any questions as always feel free to contact me: guygriscom@gmail.com