Internet Explorer Zero Day Discovered

Researchers at Symantec have reported the discovery of an unpatched vulnerability that impacts Internet Explorer versions 6, 7, and 8 running under Windows. Microsoft has released a security advisory confirming the vulnerability but currently has no plans to release an out-of-band update.

The exploit was delivered via targeted email that contained a link to a single compromised website (all malicious files have since been removed).

According to Microsoft, the vulnerability exists because "Internet Explorer incorrectly under-allocates memory to store a certain combination of Cascading Style Sheets (CSS) tags when parsing HTML. This could result in an overwrite of the least significant byte of a vtable pointer. An attacker able to spray memory with a specific pattern could potentially execute code in the context of the process parsing the HTML."

Heap spray attacks can be mitigated by enabling Data Execution Prevention (DEP). By default, DEP is enabled in Internet Explorer v8. To enable DEP in Internet Explorer v6 and v7, refer to the links below:

View the original article here

Best Internet Security Suites for 2011

An Internet Security Suite is a sound investment for your Windows PC, but it can be pricey. Finding the best Internet Security Suite that offers the most protection for your hard earned money is important. To save you time, money, and heartache, we've poured over the results of AV-Test.org's extensive testing of Internet Security Suites and provided our top picks for the best Internet Security Suites for 2011. To qualify, each Internet Security Suite had to score 4 or higher (out of a possible 6) for its combined effectiveness in detecting and removing malware.

View the original article here

Cum sa adaugam Defragment in meniul de click-dreapta in Windows 7

Stealth Settings: Home / Note / Cum sa adaugam Defragment in meniul de click-dreapta in Windows 7

Publicat de stealth pe November 12, 2010 · 3 Comentarii 

Advertisements
Cum sa adaugam Defragment in meniul de click-dreapta in Windows 7

Performanta unui computer depinde in mare parte si de starea de “sanatate” a hard-diskului instalat pe acesta. Degeaba procesorul este de ultimul tip si degeaba instalam n GB suplimentari de RAM (pe versiunile 32-biti oricum nu vor putea fi folositi decat maxim 3GB), daca starea hdd-ului este una foarte proasta computerul va avea o “prestatie” cel mult mediocra (si asta in momentele lui foarte bune, care se vor intampla destul de rar).

Una dintre operatiunile esentiale pentru mentinerea unui hard-disk in stare buna de functionare este defragmentarea periodica a acestuia. Daca va numarati printre utilizatorii care prefera sa efectueze manual orice task de pe computerele personale si care evita operarea automata a acestora, puteti adauga in meniul de click-dreapta optiunea de Defragment, astfel incat ori de cate ori veti deschide acest meniu (adica or de cate ori veti da click-dreapta pe o partitie) va veti aduce aminte – probabil :D – sa va defragmentati hard-diskul.

Cum putem adauga Defragment in meniul de click-dreapta a partitiilor unui computer

deschideti editorul de registri (Registry Editor) tastand regedit in Search-ul din Start Menu (sau in Run) navigati catre calea HKEY_CLASSES_ROOT/Drive/shell, apoi dati click-dreapta pe shell si creati un nou key pe care il veti denumi runas

modificati valoarea intrarii Default (panoul din dreapta) in Defragment, apoi dati click-dreapta pe runas si creati un nou key, pe care il veti denumi command

setati valoarea intrarii Default de sub command in defrag %1 –v –u (click-dreapta > Modify), apoi inchideti regedit si restartati computerul

Dupa restart, atunci cand veti da click-dreapta pe vreuna din partitiile computerului vei observa optiunea Defragment in meniul afisat.

Daca veti da click pe aceasta, va incepe defragmentarea partitiei respective.

Nota: Tutorial compatibil si cu Widows Vista. Netestat pe XP.

Atentie! Inainte de a efectua orice modificare in registrii de sistem este recomandat sa creati un backup al acestora pentru a evita eventuale consecinte neplacute.

windows 7 setting, instalez defragmentation tool, windows 7 add archive click dreapta, windows 7, ssl protocol was disabled, click dreapta regedit, noutati windows 7, defrag in limba romana pt xp gratis, cum se da defragmentare la windows 7, windows 7 click dreapta nu merge,

View the original article here

Roger Davidson: A Victim of Virus Scam - Or Not?

When reading the news, it's good to remember that what you're really reading is the product of someone else's research into the story. How in depth that research is obviously impacts how the story is told. Sometimes an article can paint a picture that is vastly different from the reality.

Consider either of these:

The stories assert that Roger Davidson, musician and heir to an oil fortune, was an innocent victim bilked out of 6 to 20 million dollars in an elaborate scam that sprung from a computer virus infection on his laptop. He took the laptop to a computer repair shop, after which the owners allegedly convinced him that all sorts of fanciful plotters were out to get him. As the story goes, he in turn was defrauded out of millions of dollars in protection fees. A sad tale, no?

But then read this article and you quickly realize this wasn't really the case of a befuddled victim, but rather the case of a man who may have had way too much to hide:

According to the defendants, some of what Davidson was concealing included millions of dollars in tax evasion and what was described as "massive" amounts of pornography. Additionally, the relationship between the alleged scammers and the alleged victim doesn't appear to as clear cut as other articles portray. Instead, if the defendants' allegations are true, it appears these may have been long standing relationships between three people and it may just have been Davidson himself who acted inappropriately.

Certainly there are a great number of scams perpetuated against the elderly each year. And unfortunately there are probably some unscrupulous computer repair shops willing to capitalize on someone's computer virus misfortune. But in this particular case, taking the story at face value may lead to the entirely wrong impression. Indeed, in this particular case, one has to wonder just who the real victims are.

View the original article here

Boonana Peels Down to Koobface for Macs

Dan Goodin at El Reg writes about the notorious Koobface worm being ported to Mac. The worm spreads via social engineering sites such as Facebook and Twitter and uses a malicious Java applet to load a backdoor onto your computer. Goodin points out that the Mac virus gurus at Intego have proclaimed this a low threat, specifically because it requires that the victim say yes to a warning message.

But so does pretty much every Windows variant of Koobface, nearly all of which generally masquerade as some sort of video codec.

It remains to be seen whether Mac users will prove to be more wary than their Windows' cousins. If not, we can expect that about 1% of those Mac users who do encounter the newly revamped Koobface will click "Allow" and infect their computers.

Intego is calling the new Mac social engineering worm OSX/Koobface.A. SecureMac is calling it Trojan.OSX.Boonana.a. Regardless of what you call it, it's a good reminder to disable Java in your browser. Truly, for all the security headaches Java brings, it's almost never ever legitimately needed.

View the original article here

Mozilla Patches Critical Firefox Flaw

Mozilla has released Firefox v3.6.12 in response to a zero day vulnerability that was discovered being actively exploited via the Nobel Peace Prize website. The exploit was targeting visitors to nobelpeaceprize.org in an attack some suggest was politically motivated.

The IP address involved in the attack traced back to a university in Taiwan. In October 2010, Chinese professor Liu Xiaob was awarded the 2010 Nobel Peace Prize. Liu Xiaob is currently serving an 11-year prison term in China for his writings in support of human rights.

Regardless of any motives behind its previous use, the flaw is highly critical and likely to quickly be exploited elsewhere. Firefox users are urged to update to the latest version as soon as possible. You can do so by directly downloading Firefox 3.6.12 or by choosing Help | Check for Updates from within the Firefox program.

View the original article here

Sophos Offers Mac Antivirus Free for Home Users

Antivirus vendor Sophos has long offered a paid version of Sophos Anti-Virus for Mac, but now Sophos is offering the same protection free for home use. Sophos Anti-Virus for Mac Home Edition is designed for standalone Macs running OS X 10.4 or later. The scanner detects both Mac and Windows malware and includes a rich feature set with ample configuration options.

If you're looking for a Mac antivirus solution for your MacBook or iMac, Sophos Anti-Virus for Mac Home Edition is definitely one worth trying.

View the original article here