Wednesday, October 28, 2009

Facebook Hacking and what to look out for

Facebook has become the new way to connect with those people you have lost contact with., it has also in turn become a way for people to steal your identity. It is a good idea to be watchful and careful who you invite and what applications you allow to access your information.

1.) They try by email:

Subject: Facebook Password Reset Confirmation

Body: Because of the measures taken to provide safety to our clients, your
password has been changed.
You can find your new password in attached document.

Thanks,
The Facebook Team

2.) They try by application:



Here is a screenshot of Facebook’s Application Privacy page, you are in Control:

Wednesday, October 7, 2009

The Meanest and best places to live in the world

The top three cities are, by rank, Vienna, Zurich (last years winner), and Geneva. Commonwealth nations fare pretty well, too, winning 9 of the top 30 spots—even though London comes in only at 38. The U.S. also fares poorly, barely making it into the top 30 with Honolulu and San Francisco in the bottom two places. The top city in Asia is Singapore, at no. 26. No cities from Africa or South America are in the top 30. The bottom? Baghdad once again comes in at 215.


Vienna


More Info at http://images.businessweek.com/ss/09/04/0428_best_places_to_live/1.htm

More on the recycle bin virus

Referring back to my article: http://screamatthepc.info/2008/08/taming-recycle-bin-virus.html

I have noted that I did not really express how to get rid of this virus. The quickest way to do this would be to remove it from your disk in the operating system - Linux or go to http://threatinfo.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_AUTORUN.CG&VSect=Sn

Ok I am guessing you didn't quite figure that one out huh? Ok if you want a sure fire way - Stick a Live boot CD of Linux into your machine, Ubuntu is a clear favourite and you can get the disk fairly cheaply from http://www.fosscds.co.za/product_info.php?products_id=589 or if you have the bandwidth, you can download it from http://ultimateedition.info/Ultimate%20Edition/ubuntu/

This virus distributes itself using your USB stick and your local hard drive - it has the uncannily ability of filling up a USB stick with whatever is in your recycle bin and then hides all the files using the windows dll files and resident memory in exlorer.exe. Most Antiviruses will detect this as I depicted in my previous article, but they are unable to get rid of the virus.

Print this out and take to a trained technician unless you are comfortable with taking out your hard drive and putting it in a machine that has Linux installed.

To the Technician: Gather all hard drives and memory sticks suspected as having the virus, connect them up in a machine that has Linux installed or where you have access to an Ubuntu Live CD - Important, please don't boot into Windows as you will then infect the host machine and will have to clean that too... Once booted into Linux, locate the windows hard drives connected, on Ubuntu these are usually displayed on the desktop, others will be located under /mnt/windows or /mnt/media. Go to the root of these drives, delete the following: autorun.inf, recycler and any bat or cmd files present excepting for autoexec.bat which is a legacy file for windows. Also delete ".recycler" and any folders that say recycler.

The Autorun.inf files and the cmd files are what makes this virus work, when you boot back into windows now the files are removed, you may get a few error messages, to get rid of these messages:

  1. Open Registry Editor. Click Start>Run, type REGEDIT, then press Enter.
  2. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Active Setup>Installed Components
  3. In the left panel, locate and delete the key:
    {08B0E5C0-4FCB-11CF-AAX5-90401C608512}
  4. Close Registry Editor.
If you are still getting the error, go back to registry editor and locate to HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows>Current Version>Run

Delete any files you do not recognise (it would be wise to google and make sure) - most of the files here are a mirroring of the ones in your system tray next to the time. These files run in your memory so that they open quickly when you access them, such as your graphics tray - igfxtray and windows hot keys - hkcmd.


Stopping Autorun Viruses

DISABLE AUTORUN. This will stop a lot of viruses from spreading from one drive to the other. You can do this by opening regedit.exe and modifying the following key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer

There should be an entry with the name NoDriveTypeAutorun. Set it to 0x95 to disable autorun on everything but CD drives, or 0xB5 (the letter 'B', not the number '8') to disable it on all drives.