Technology Vault - NewsBytes
Sunday 31 August, 2003
Thunderbird v0.2 beta released by @ 8:21 pm
A newer version of Thunderbird mail program has been released. This build is dated 29/8/2003.
Versions are available for Macosx, Win32 and Linux and you can download it from HERE
This build seems very stable and offers a few extra options. One that I like is having an abc icon when composing mail instead of having mail checked upon sending.
It seems a little faster too. Highly recommended!
Mozilla Thunderbird is a redesign of the Mozilla mail component. Their goal is to produce a cross platform stand alone mail application using the XUL user interface language.
############################
Software Piracy. by bluetracker @ 10:47 am
Thanks to forum member Tone who e-mailed me info of the 'Reg' story that I was reading at the time. ;-)
Symantec adds Product Activation and 'beefs up' N.A.V. against piracy
Anti virus and utilitiy program vendor SYMANTEC has unveiled it's plans to add anti-piracy measures to it's wares starting 2004.
The Register has the full Symantec low down on it's website for those unwilling to read the rantings of an "old fuddy duddy" that follow. Remember where that link was....just in case it gets too much for ya!
The use of Product Activation is of course not a new concept, Microsoft started the ball rolling when it shipped the same sort of protection with their Windows XP operating system CD's.
At the time the reason they gave for the introduction was to "protect users from buying illegal and possibly inferior copies of our software". In fact the giant software manufacturer was feeling the pinch in the sales department, with so many people using warez copies of their software Uncle Bill decided enough was enough.
This of course raised a furore as Privacy lobbyists manned their soapbox's with gusto demanding to know just what information about the user this "Product activation thingy" actually sent to Microsoft.
The aftermath saw the birth of "Keygen" software designed to circumvent Microsoft's anti piracy initiatives. This anti anti authentication stuff was found circulating on the P2P networks BEFORE Windows XP hit the shelves!
Corporate licence 'keys' were then circulated by 'miffed' users which were snapped up by the general populace and used to 'trick' Microsoft's Authentication Servers into believing that the request for Windows Updates was coming from a authentic peice of MS software.
The situation today is that Microsoft is now spending more time and money on tracing and reconfiguring it's servers to spot 'bogus' keys than it ought to be.
Well the bell has rung, it's now "Round Two" as Symantec also come out swinging in the battle to save their profits and uphold anti-piracy ideals.
They also say that their reason is to "protect users from pirated or counterfeit software". Not surprising really, as Symantec have been Bosom Buddies with Microsoft for a long time now.
It's also no surprise that the Authentication measures that Symantec are to employ are very similar to those used by Microsoft on their Windows XP software.
"Good on 'em" I say..... but with reservations;
I hope that Symantec's efforts don't lead to their Staff being too busy chasing 'bogus' authentication keys that are undoubtedly gonna be appearing on the P2P networks shortly after the first 'outer' containing the Authentication measures hits the High Street shelves; leading to less time for them to address new threats on the Virus front. Perhaps I'm just paranoid....I hope so!
Software Piracy in all it's forms (if the headlines are to be believed) is crippling not only the software markets but also the Music industry; the latter campaigning vigourously against the plethora of P2P file sharing sites that seemingly operate with impunity, passing on recorded material freely thus denying the Artist (and the publishers) of their rightful profits.
In Symantec's case; being the vendor of a hugely popular Anti-Virus program; I have an uneasy feeling that bootleg copies activated by 'bogus' keygen applications may only serve to give virus writers another avenue of attack, incorporating their own malicious codes into the AV software at source!
Time for the authorities to crack down hard on these "file sharing P2P sites"...pull the plug once and for always. Perhaps then they can concentrate on the mass production of bootleg CD's.
The British Government could go a long way to reducing these CD pirates by taxing blank CD's at the same rate that they do a pack of cigarettes. Perhaps a Government Health Warning could be printed on the carton...
CD Copying is bad for your pocket" or some such. Other Governments may like to follow that lead?
OK perhaps that is too draconian a measure, as there are plenty of bona-fide users of blank CDR's that would be miffed at the price hike. But hey....ciggy smokers still buy ciggies don't they?...ooops...forgot about the influx of cut priced "cross channel" supplies, that for many keep their habit alive... I think I'll leave the lid on that particular can of worms for now! ;-)
Anyway enough of my ravings, let's all hope that all of the above are just that and we can all sleep easy knowing that our 2004 copy of the Symantec/Norton Anti-virus software isn't a 'hookey' one and our computers are safe and free from any 'backdoors' linking to a virus writers computer.
The only way to be certain is to buy your software from a reputable source and refuse to spend your dosh on "cheap" or "cut priced" alternatives sold via car-boot sales or use a P2P network to download the software.
***************
Thursday 28 August, 2003
AVG UPDATE TIME! by bluetracker @ 7:15 pm
Grisoft have just released updates for AVG6 & 7
AVG 7.0
Update Number= AVI 259.11.6
Update File = u7avi130.bin
Size =1970819 bytes
Release Date 28.8.2003
AVG6/AVG Free Edition
Update Number= 514
Update File = d603261z.bin (AVG6 pro version = d603261u.bin)
Size = 3807852 bytes
Release Date = 28.08.2003
All users are advised to 'toddle off' and update their copies now.
Rumours have it that SOBIG G. could well be on it's way so it's important to have your anti-virus software as up to date as possible.
The F.B.I. tasked with finding the person responsible for creating this virus believe that according to the writers' M/O a new version is released a few weeks prior to the last one getting 'past it's sell by date' programmed into the code.
In the case of SOBIG F, that would be early September.
YOU have been warned
***************
Tuesday 26 August, 2003
More problems for troubled ISP V21 by @ 11:20 am
Dial-up users and ADSL users at V21 cannot connect to the internet or check their email this morning. This is yet another problem for the troubled ISP.
Early this morning, V21's Primary Authentication, Secondary Authentication, Customer SMTP Svc, Mail1 POP3 Svc, Mail1 WebMail and Secondary DNS servers failed. At the time of writing, it is still down.
V21 have issued the following message on their service status page: Due to a core routing failure all authentication system are currently offline. This will be affecting users attempting to connect to dial, ADSL or email services. Our engineers are currently investigating the issue and we are working to resolve the problem which has been assigned the highest priority. Please accept our aplogies for the inconvenience caused. As yet we have no esitamated time for repair but we will keep you updated with the progress as more information becomes available.
V21 have had many complaints about poor connection to their email servers with Windows timing out before they can recieve or send mail and most recently, complaints about the un-announced introduction of the Declude spam filter software that offers users no control over their personal email. Users have complained about mail being deleted from the server that wasn't spam eg. Newsletters.
At this stage, we don't know if all these V21 servers have been attacked by a hacker or a virus or is simply a hardware failure (I have asked V21 for an explaination), but we will keep you informed. The above message was posted at 11.33am but the servers had been down a few hours before anyone at V21 posted the message. Unfortunatly, V21 users cannot read the message on the service status page HERE unless, like me they can dial-up using an alternative ISP. I am not sure if the pay-as-you-go number will even work for them if all the authentication servers are down.
ADDED: The server problem has now been resolved 12.27pm. V21 have not yet posted any explaination.
ADDED: V21 have posted the following message on their service status page: This morning there have been problems with the NTL leased line and our telephone lines, which have been down for around an hour from around 11am. As the database which stores clients usernames and passwords was unavailable, ou will have been unable to log onto the Internet during this fault, which has now been resolved by NTL
###########################
Friday 22 August, 2003
Macromedia Flash Player 7 beta update by @ 9:46 pm
Those of you who have upgraded to Macromedia Flash Player 7 beta will find an update available. Flash Player should auto install when your connected to the internet and check for player updates.
Macromedia Flash Player is the standard for delivering high-impact, rich Web content. Designs, animations, and application user interfaces are deployed immediately across all browsers and platforms, attracting and engaging users with a rich Web experience.
Version 7.0.0.250 will install with a file size of 534kb.
###########################
This is getting SOBIG by @ 9:24 pm
An updated report on SOBIG.F, one of the biggest computer viruses to ever hit the world. An estimated 100 million emails have now been delivered.
The time bomb... Sobig.F is due to start it's second phase tonight. On infected PCs, Sobig.F will attempt to download code from the internet and then run it on the computer. This occurs on Fridays and Sundays at 19:00-22:00 GMT. This equates to the following times in different parts of the world:
Los Angeles 12 noon - 3:00pm
Boston 3:00pm - 6:00pm
London 8:00pm - 11:00pm
Berlin 9:00pm - 12:00 midnight
Hong Kong 3:00am - 6:00am (Saturday and Monday)
Tokyo 4:00am - 7:00am (Saturday and Monday)
Sydney 5:00am - 8:00am (Saturday and Monday)
Sophos has cracked the 8 bit code and come up with a list of IP addresses it will connect to. these are:
12.158.102.205
12.232.104.221
24.33.66.38
24.197.143.132
24.202.91.43
24.206.75.137
24.210.182.156
61.38.187.59
63.250.82.87
65.92.80.218
65.92.186.145
65.95.193.138
65.93.81.59
65.177.240.194
66.131.207.81
67.9.241.67
67.73.21.6
68.38.159.161
68.50.208.96
218.147.164.29
WinOScentral has reported that companies have reacted by closing down computers tonight. Even the mighty New York Times has shut down it's HQ Computers. This virus has hit headline news round the world. WinOScentral goes on to say: “These 20 machines seem to be typical home PCs, connected to the Internet with always-on DSL connections”, says Mikko Hypponen, Director of Anti-Virus Research at F-Secure. “Most likely the party behind Sobig.F has broken into these computers and they are now being misused to be part of this attack”.
Make sure that your antivirus software is up to date and that you have all the latest critical updates from Microsoft Windows Update.
CLICK HERE to learn about SOBIG.F's sting in it's tail.
################################
Thursday 21 August, 2003
August 2003, Cumulative Patch for Internet Explorer by @ 5:34 pm
Microsoft have released a patch that solves various security issues with Internet Explorer 6. Microsoft says: A number of security issues have been identified in Microsoft® Internet Explorer that could allow an attacker to compromise your Microsoft Windows®-based systems and then take a variety of actions. For example, an attacker could run programs on a computer used to view the attacker's Web site. This vulnerability affects computers that have Microsoft® Internet Explorer installed. (You do not have to be using Internet Explorer as your Web browser to be affected by this issue.) You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.
This patch is for anyone running:
Internet Explorer 6 Service Pack 1
• Windows XP SP1
• Windows XP
• Windows 2000 SP4
• Windows 2000 SP3
• Windows 2000 SP2
• Windows NT® 4.0 SP6A
• Windows Millennium Edition (Windows ME)
• Windows 98 SE
Internet Explorer 6 Service Pack 1 (64-bit edition)
• Windows XP SP1 64-bit Edition
Internet Explorer 6
• Windows XP
Internet Explorer 5.5 Service Pack 2
• Windows 2000 SP4
• Windows 2000 SP3
• Windows 2000 SP2
• Windows NT® 4.0 SP6A
• Windows Millennium Edition (Windows ME)
• Windows 98 SE
Internet Explorer 5.01 Service Pack 3
• Windows 2000 SP3
Internet Explorer 5.01 Service Pack 4
• Windows 2000 SP4
For more details about the update CLICK HERE
Head on over to Windows Update now to install the patch and keep your computer secure.
##############################
Tuesday 19 August, 2003
WORM_SOBIG.F by @ 10:10 pm
TrendLabs received numerous infection reports of a new malware spreading in Norway and Spain. This malware is detected as WORM_SOBIG.F. As of 5:11 AM US Pacific Time, Trend has declared a Yellow Alert to control the spread of this malware.
This worm is designed to propagate via e-mail using its own Simple Mail Transfer Protocol (SMTP) engine.
Most antivirus software has had an update for it today so if you havn't already checked for updates, do so now!
#################
Monday 18 August, 2003
AVG Update by @ 10:24 pm
Grisoft have updated their antivirus software AVG6 and AVG7. This update adds detection of new virus Worm/Nachi.
Grisoft says:
Worm/Nachi deploys itself by exploiting the security hole in the DCOM RPC interface (the same way as Worm/Lovsan) and stores itself on a victim computer in Windows system directory as a file named WINS\DLLHOST.EXE which is 10240 bytes long. The virus makes a copy of TFTPD.EXE program in this directory with the name SVCHOST.EXE.
After its execution the virus searches for computers running unpatched system operating in the network and infects them. Virus will stop its activity in the year 2004.
###########################
WORM_MSBLAST.D by @ 10:20 pm
Trend Micro have issed the following notice:
TrendLabs HQ received numerous infection reports of a new malware named WORM_MSBLAST.D
spreading in Japan, Taiwan, and Singapore. It currently has an infection count of 20,000.
A yellow alert has been called at 7:14 AM, August 18, 2003 (US Pacific Time) to stop the spread of this malware.
It usually arrives as DLLHOST.EXE (~10,240 bytes) and opens port 707, for its malicious routines. Similar to the earlier MSBLAST worm variants, this malware also exploits the RPC DCOM Buffer Overflow,
and instructs target systems to download its copy from the affected system using the TFTP program.
############################
Sunday 17 August, 2003
ISP finds the truth hard to reveal by bluetracker @ 8:18 pm
A popular UK ISP is ‘running for cover’ as it is revealed that they have installed Anti-Spam software on their mail servers.
Why should that get their Customers back up? Simple really and the reason will soon become clear to all.
On a fine 4th August evening, a ‘posting’ appeared on a certain UK based ISP’s members’ forum.
Nothing-new there… so what's the deal?
A customer of the ISP and member of the forum wanted to know why his friend’s e-mails were not reaching the recipient when routed through the ISP’s servers. The message read…
"A friend is having problems sending e-mail using xxxxx. Some does not get to it's intended recipient. The text below is taken from the headers of his e-mail to me (I have removed the actual username). Does anyone know what it's all about? I was not aware xxxxx used junk mail filtering. Does anyone else get this message"?
This message included as evidence of ‘foul play’, a header, taken from an e-mail received in the posters’ mailbox…
(All identifying details have been removed to protect the poster’s privacy in all snippets used)
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.00.2314.1300
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300
X-Declude-Sender: xxxxx@xxxxxx
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam.
X-Spam-Tests-Failed: IPNOTINMX [0]
X-Spam-Prob: 0.095202
X-RCPT-TO:
Status: U
X-UIDL: 315019626
The bone of contention was the appearance of the X-Note entry as shown above which seemed to imply that the ISP was indeed using an anti-Spam filtering program.
The software in question, as the above excerpt reveals is Declude Junk-Mail
This in itself was a big surprise to the membership of the ISP’s forum as on the 1st of August a forum Moderator (who also provides answers on the phone in Helpdesk) had posted in a separate query, this denial (of sorts)…
01 August 2003
"Here at XXXXX, we do not employ any Spam filters: I am surprised by the message that you are receiving from your email.
The reason why we do not employ Spam filters is because an email with the word teens in the title is likely to be Spam of a sexual nature - but it may be an email about your teenage relative and our Spam filter would stop you reading an innocent email.
From time to time, we are informed of Spam from certain addresses; people email us at abuse@xxxxxx. We check into this and if there is Spam from a certain address then we may block the sender on the server".
I‘m sure when you read that, you spotted their ‘gaff’ straight away? “we do not employ any Spam filters” followed closely by “and our Spam filter would stop you reading an innocent email”.
Most odd…. were they using a Spam filter or not?…Apparently even the Moderator/Helpdesk employees weren’t too sure.
The topic was batted back and forth among forum members for what seemed an age, no response from the ISP to the original query was to be had until 10 days after it was penned…
13 August 2003
Forum Moderator
Are we using Spam-filtering on our SMTP server?
"Yes we are".
"All messages are scanned and each test failed is given a score. The more test that fail the greater the likelihood of the message being stopped as Spam. The threshold for Spam is currently 15 so any message with a score of over 15 will not be received. You will see from the headers posted that most score between 1 and 4".
X-Spam-Tests-Failed: NOPOSTMASTER, IPNOTINMX [1]
Technical Support
So It was finally out… they DID use a Spam filter, but only on the SMTP server…….Another anomaly arose……the header that was supplied was from the POP server. Surely this was a mistake?
Questions started rolling in, aimed squarely at the Moderators who supplied the info…surely you mean the POP servers? Asked one member… The reply he received from the ISP’s employee was incredible…
13 August 2003
Forum Moderator
"Hi ,
I don't think we're using any filtering on the POP3 servers yet".
-------------
Technical Support
The reply was on par with the responses one would normally expect from a Tech Support person. Nevertheless things were getting heated as member after member added more headers to the thread that without shadow of doubt that the POP server was indeed running the Declude software.
Not satified with it's errors upto this time Technical Support added another nail to their coffin and replied with…
14 August 2003
Forum Moderator
"Hi,
We have considered using a SPAM filter of sorts on our incoming servers following many customer requests; however have not done so yet".
Technical Support
Following up, later that day, after numerous cries of ‘FOUL’ from the members
on 14 August 2003
Forum Moderator
"Hi,
You're right - we are using a SPAM filter on our incoming mail server as requested by many clients. Each message is scanned and rated; any message scoring over 15 is blocked from coming through.
As you can see from your example, your message was not blocked because it had a rating under 15, in fact it was determined as having only a possibility of only 0.00043% of being a Spam message".
Technical Support
The ‘example’ wasn’t deemed as Spam because it was a blank mail sent from a particular mail address and the recipient was the sender!
To cut a very long story short
Obviously I am in possession of the full transcript of the forum messages and to reproduce them in this story would take up far to much time in the writing and Disk space on our servers. They are open to inspection to anyone who cares to read all 29 pages of it!
Suffice it to say that the ISP has been found out.
Apparently it is using the Declude software…so why all the secrecy and the snails pace throughput of info from the forum/tech support quarter?
The reason is quite obvious really; you see - Declude doesn’t simply ‘block’ what it considers a Spam e-mail…it deletes it outright…the ‘Mods’ have told us so in their own words! Now whether this is by design or by the way the ISP has configured the program is still unclear as any credible explanation isn’t at this time forthcoming from the ISP’s Admin Guru’s who must surely by now realise they’ve dropped an ‘Almighty Clanger’.
Moreover this ISP didn’t even inform it’s customers that they were going to use the software, nor have they provided said customers with the option to decide for themselves by way of a dedicated ‘Junk-Mailbox’ within the online e-mail folders.
Many of the ISP’s customers subscribe to Newsletters from respectable sources that are delivered to their mailboxes. Even some of these have been found to be just 1 or 2 ‘weighting’ points away from oblivion at the hands of the Declude filtering system.
It is entirely feasible that someone somewhere is wondering just what happened to ‘this weeks newsletter’ or perhaps an e-mail sent by Aunty Mable never got to the intended mailbox or perhaps worse still an important job opportunity has been lost in the ether. The intended receivers never knowing that any mail had indeed been sent to them. Perish the thought!
Now don’t get me wrong here
I and many other Internet mail users would welcome with open arms ‘user friendly’ attempts by an ISP to shield us all from the multitude of junk that is sent via e-mail. What I believe the masses don’t welcome is some poorly configured or totally inept software being used in a clandestine manner that has the ability to delete OUR e-mails should any resemble the software’s idea of what constitutes SPAM.
BT for their part also uses Spam filtering software. Theirs however was widely publicised before being implemented on users mailboxes and it has the ability to forward ‘suspect mails’ to a Junk mailbox on the users account. Users can log on and sort through the suspect mails and keep those that aren’t really Spam and delete the rest if they so choose. After a certain period of time the junk mailbox is auto-deleted by BT.
This simple courtesy is denied users of the ISP that this article relates to; I am in no way, what could be construed as a ‘Legal Eagle’, but one cannot help but wonder if what is apparently happening at this ISP is strictly legal…. someone somewhere must know of a law that is being infringed by their actions or lack of them to date?
You no doubt have realised by now that the ISP’s name has not been revealed in the snippets taken from the forum transcript and spelling has also been corrected to protect the ignorant- just in case there is a viable and logical reason behind their actions. But for the life of me I don’t see it…. (My income is allergic to lawsuits)
Perhaps ALL will be revealed as one giant misunderstanding at a later date as the forum thread gets closer to the truth of the matter in the coming days or even weeks (Depending on the speed of response to Customer’s queries by the ISP’s tech boffins).
Whichever way the story eventually pans out; the ISP should have learned a good few lessons in how to win their customers trust in their actions.
Only time will tell on that score.
**************
Saturday 16 August, 2003
New VIA 4in1 Drivers 4.49p by @ 7:19 pm
VIA 4in1 Drivers 4.49p are the latest drivers released for motherboards with Via chipsets.
The 4-in-1 drivers are a collection of periodically updated drivers that provide enhanced VIA chipset support under Microsoft Windows. All VIA chipset users should install the 4-in-1 drivers to improve performance, fix issues, and minimize any incompatibilities.
Note: Win95/98/98SE are now relatively old operating systems, and drivers are no longer optimized for those operating systems. Many users of VIA chipsets who run Win95/98/98SE report that using an older version, such as VIA 4in1 version 4.35, they experience a more responsive system.
These drivers are 7.1mb in size.
CLICK HERE to download the drivers from the viaarena website.
###################
Friday 15 August, 2003
WORM_MSBLAST.A Update by @ 6:35 pm
Trend Micro sends the following information out about WORM_MSBLAST.A: Due to continuous infection reports coming in from different regions, TrendLabs has raised the alert level for this malware from Yellow to Red.
TrendLabs officially released pattern file 604 to protect users from this worm. However, due to new variants discovered, we recommend that all users update to the latest official pattern file.
This malware exploits a vulnerability that allows it to propagate to
Windows 2000 and XP systems. TrendLabs urges users to apply the patch, which is available: HERE
In addition, users may download the Trend Micro System Cleaner, our automated cleaning solution, from: www.trendmicro.com/download/tsc.asp
For more information on WORM_MSBLAST.A and other variants, please visit our Web site at: www.trendmicro.com/vinfo
############################
Wednesday 13 August, 2003
AVG Update by @ 4:32 am
Not much in the way of detail from Grisoft with this update, all they tell us is: Among others, added detection of Worm/Lovsan
The file size is 1556kb and a restart is not required.
Grisoft seem to be having a few server problems which can make downloading the files via AVG6 a little difficult. If you find that you cannot download the update via AVG, then you can manually download and install the update files by clicking on the link on their website HERE
#################################
Tuesday 12 August, 2003
WORM_MSBLAST.A by @ 9:53 am
TrendLabs has received several infection reports of this new worm named WORM_MSBLAST.A which exploits the RPC DCOM BUFFER OVERFLOW, a vulnerability in a Windows Distributed Component Object Model (DCOM) Remote Procedure Call(RPC) interface which allows an attacker to gain full access and execute any code on a target machine, leaving it compromised.
This worm has been observed to continuously scan and send data to vulnerable systems in the network using port 135. When the system date is August 15, it performs a Distributed Denial Of Service attack against windowsupdate.com.
As of 1:54 PM, US Pacific Time, Trend has declared a yellow alert to control the spread of this malware.
For more information visit the Trend Website
######################
Monday 11 August, 2003
New Shields Up tests by @ 8:18 pm
Regular users of Shields up may be interested to know that a new range of tests have been added.
A file sharing test, tests port 139 and Netbios which were tested by the previous version of Shields up.
An option to 'test common ports' trys to establish standard TCP Internet connections with a collection of standard, well-known, and often vulnerable or troublesome Internet ports on YOUR computer. It tests ports 0,23,25,79,80,110,113,119,135,139,143,389,443,445,1002-30,1720 and 5000.
An option to test'ALL Ports' ports "grid scan" determines the status of your system's first 1056 TCP ports. GRC says: 32 ports at a time, represented by each row, are probed for up to two seconds. The results are posted as the next set of ports are probed. The entire scan requires no more than a little over one minute.
A messenger scan checks to see if if the messenger service is available on your computer.
Other services include a new 'browser services' test, the ability to test specific ports and an look-up service for each port. This is handy if you don't know the use of each port.
To test your computer and Internet Firewall out, head on over to Shields Up
############################
Friday 8 August, 2003
Macromedia Flash Player 7 Beta by @ 10:14 pm
Macromedia have released a beta version of their flash player. I installed Flash Player 7 a week ago now and I must say I like it. The main thing that used to bug me was almost everytime I visited a site with Flash content, with Flash Player 6 I used to get the dreaded pop-up telling me a newer version was available. With this new version, updates are catered for in a much more civilised way.
If you have Windows 2000 or XP, the player checks for updates in the background (If you let Zonealarm remember) and a tray icon shows you progress of the download and details about what is being installed. The beta player has been updated twice this week and on both occasions, a small 650kb download sorted it without any bother. I was able to carry on surfing even on my dial-up modem.
I've had no issues with the player at all. Macromedia does warn users that this is a beta release and it may not be compatable with older flash content. But, I have a number of flash files on my system and I've not had any problems of this kind.
The player is much faster. They have developed ways to increase the speed of running flash files. This is most noticable when running flash files at full screen size.
All in all, I highly recommend this new player, even though it is a beta it seems extremely stable.
I can't vouche for how the player will run on other platforms, but on XP it's a dream. CLICK HERE to download your copy now.
#######################
Thursday 7 August, 2003
The Cleaner by bluetracker @ 12:08 am
Get a new Cleaner!
Moosoft have just updated the reference files for their 'stand alone' anti-trojan detection and cleaning utility The Cleaner
This update can be accessed directly from within the MOOLIVE Updater supplied with the program or from the support page at the Moosoft.com website.
Database v3366 (08/06/2003) is 493k in size and has added the detection of ... DSK, Fear and Hope, fyle, Geri, LMR, Mind Control and MovingMouse.
Four definitions have been updated to cater for the latest known variants of... GhostVoice, Litmus, MoSucker and SubSeven
It is not enough to simply install an anti-malware program and forget about it. Viruses/trojans (malware) are being written/updated every day; detection software can only be as good as the age of the reference files it depends upon to trace the viruses/trojans etc.
To be sure you are as fully protected as possible; make a point of regularly checking your AV solution has the latest updates available.
*****************
Tuesday 5 August, 2003
AVG Update by @ 5:12 am
Grisoft have updated their antivirus software AVG. The update adds protection against Worm/Aritima, Worm/Autorooter, Win32/Wabrex and new variants of I-Worm/Cult, I-Worm/Roron, Worm/Lolol.
The file size is 1499kb and a restart is not required.
Update your version of AVG to keep your computer safe and free of viruses.
###########################
Monday 4 August, 2003
I-Worm/Mimail virus warning by @ 4:58 am
This little blighter has shown up 20 or more times in my inbox over the weekend and is proberbly heading for an inbox near you. Here are some details about the virus so you can aviod catching it.
The emails has a subject line 'Your Account!'
It an attachment about 30.1kb called message.zip
The virus captures information from certain windows on a user's desktop and emails it to specific mail addresses using a vulnerability in Outlook Express.
If you get one, just delete it, DO NOT OPEN IT.
If you do, you will need a tool to remove it. Symantec provides one free HERE
Now, the best way to protect yourself against picking up the virus is to:
Make sure your antivirus software is up to date.
Visit Windows Update and make sure you have downloaded all critical updates.
Use a program to view emails sitting on the server before opening them up in Outlook Express. You can find a link to Mailwasher on our tweaks page.
Never open an attachment unless you are 100% sure it is safe to do so.
Scan all attachments before you open them. It's very often your best friends that send you viruses without their knowledge.
Don't think that by using a web based mail service it will protect you. It won't. If you have Outlook Express set up on your system (If you've got windows then you probarbly have) it will use it. Also, you may well not have updated it if your not using it making the chances of a virus using it's vulnerabilies even higher.
EDIT: The information I was given was slightly incorrect. It is not Outlook Express that has the vulnerability, it is Internet Explorer if it doesn't have the latest patch for it. They have now corrected the information on their site. For more information about the patch required CLICK HERE
###################################
Sunday 3 August, 2003
SpywareBlaster Update by @ 12:16 pm
SpywareBlaster has an update to it's spyware datbase dated 3/8/2003. This update provides protection against the following spyware:
SearchEX, New Dotnet variant, vloader dialer, browsertoolbar, surfairy variant, forbes downloader, alexa variant, toolbarcc variant, 24 media (3), 7 ad power, add, banner blank, loads for lop.cpm, match craft, traffic support (2), tribal fusion, webads and xxxtoolbar.
Press that update button now!
#########################
Saturday 2 August, 2003
New nForce drivers by @ 4:58 pm
Nvidia have updated their nForce drivers to version 2.45. These drivers have a number of new elements:
Windows XP Driver Versions
Audio driver 3.48 (WHQL)
Audio utilities 3.48
Ethernet driver 3.13 (WHQL)
GART driver 3.34 (WHQL)
Memory controller driver 3.38 (WHQL)
SMBus driver 3.38 (WHQL)
Installer 3.56
IDE In-the-box 2.70 (WHQL)
Display drivers 44.03 (WHQL)
Windows 2000 Driver Versions
Audio driver 3.48 (WHQL)
Audio utilities 3.48
Ethernet driver 3.13 (WHQL)
GART driver 3.34 (WHQL)
Memory controller driver 3.38 (WHQL)
SMBus driver 3.38 (WHQL)
Installer 3.56
Display drivers 44.03 (WHQL)
USB driver
These drivers do not have the dreaded NVIDIA accelerated IDE drivers that gave many users problems.
2 versions are available. A smaller English version and an international version (or kit as nVidia calls it now). Both driver kits are unified and will only install the components that you are using. So, if you use another graphics card or have a sound card, then these driver elements will not be installed.
You can download this nForce driver from the nVidia website HERE under Platform/nForce drivers.
######################
Friday 1 August, 2003
Another AVG Update today by @ 8:11 pm
Grisoft have updated their AVG7 and free AVG6 again today. This update adds detection for just one worm, I-Worm/Mimail.
The file size on Windows XP is 1498.4kb and a restart of your system is not required.
#########################
|
