Sunday, September 19, 2010

TDL3 Rootkit x64 Goes In The Wild

Windows x64 bit operating systems have long been a tier above 32-bit in terms of security but now the x64 bit operating systems are the newest targets for a certain rootkit. Security company Prevx found that the rootkit TDL3, which has been active for several months, got a new update that allows it to infect x64 bit Windows. This is an unprecedented development and marks the first appearance of an in the wild x64 rootkit.

x64 versions of Windows are considered much more secure than their respective 32 bit versions because of some advanced security features which are intended to make it more difficult getting into kernel mode and hooking the Windows’s kernel.

Windows Vista 64 bit and Windows 7 64 don’t allow every driver to get into kernel memory region due to a very strict digital signature check. If the driver has not been digitally signed, Windows won’t allow it to be loaded. This first technique allowed Windows to block every kernel mode rootkit from being loaded, because malwares aren’t usually signed – at least, they shouldn’t be.

The second technique to prevent kernel mode drivers from altering Windows kernel behavior is the Kernel Patch Protection, also known as PatchGuard. This blocks every kernel mode driver from changing sensitive areas of the Windows kernel. Prevx describes how the rootkit gets past both techniques:

To bypass both Kernel Patch Protection and Driver Signature verification, the rootkit is patching the hard drive’s master boot record so that it can intercept Windows startup routines, owns it, and load its driver. Both Windows security mechanisms are bypassed.

The first attempt at breaking the x64 kernel security was the Whistler bootkit but the first in the wild x64 compatible attack is this rootkit. The Prevx community had been seeing infections during the past nine days leading up to 8/26/2010 when the article was written and it is surely still active. The rootkit is spreading via porn websites and exploit kits. Prevx is currently analyzing the rootkit and thinks that TDL3 is under new owners, which are modifying it for x64 compatibility. Right now it seems to be in beta because it doesn’t always work but it will be important to keep an eye on it.


Join 16,500

View the Original article

Saturday, September 18, 2010

Doing Computer Repair Work for Businesses

When I first started my Computer Repair Business about 9 years ago, I focused my advertising towards residential areas. After some time, my residential clients started asking me to fix the computers at their own businesses or place of employment. I learned that is quite different to residential and they need to be treated differently. For example, a business generally values turn around time over cost; whereas a family with a few children will probably care more about price than turn around time.
Here is a list of some of the differences between doing work for businesses and residentials:

Speed of Repairs
As I mentioned before, businesses generally value turn around time more than the price. The reason for this is because businesses spend money to make money and by having a system out of action, it may be costing them more than what you are going to charge them. For example, the business may be paying the secretary $150 per day to be there but that may be wasted if they cant get on their computer. Also, by having that secretary out of action, the business may be slow to respond to customers which hurts the business even more and may cost thousands of dollars in lost revenue. Your $100 per hour fee may not be that expensive in their eyes if they can get the secretary working again and keep their customers happy.

Increasing Your Prices For Businesses
There are a few different schools of thought towards charging businesses more than residential clients. Some Computer Technicians believe that you should not punish your customers for having a business. Also, since commercial work is often harder and more time consuming so you will be making more anyway and therefor dont need to increase your prices.

However, other technicians will tell you that commercial work is on a whole different level than residential work (such a servers) and thus it requires a higher level of education that a technician needs to put time and money into. Therefor, the technician should charge more in the same way a doctor, dentist or lawyer would.

Some Computer Technicians say they only charge businesses more as a “priority fee”. The Technicians get out to businesses as soon as they can whereas residential clients get scheduled.

I am not going to say which way is right or wrong, its up to you to decide which feels best for you and your business.

Minimal Disruption and After Hours Support
As I outlined earlier, businesses can lose money when their systems are out of action so if you need to do work that isn’t urgent, its a good idea to offer after hours support (if you want to work those hours that is). This can be both onsite work or offsite remote support.

Insurance
If you are not insured now, you will definitely want to be before you start touching business machines. An honest mistake by you can cost your clients business thousands and they may come after you for damages. This is where having “errors and omissions” insurance can save your behind. “General Liability” insurance is also a good idea to have. You should speak to a local insurance broker to find out exactly what you need for your business and dont be afraid to shop around.

Be Cautious
You should always be on the side of caution when working on business machines, especially when data is concerned. Of course, you should be careful with residential computers as well but be extra careful with business machines because they can be mission critical to their business.

Also, dont be afraid to turn down work if it has the potential to turn ugly. About a year ago now, I went onsite to the base station courier company to do some preventative maintenance (cleaning and dust and such). This courier company had 4 servers tracking where their hundreds of trucks were, what they were carrying, where it needed to go all running from these servers on a custom Linux build. I had no problems cleaning out the 12 or so workstations but they then asked me to clean out the servers as well. In order for me to access the sides of them I would had to remove them from the rack and in order to remove them, I needed to power them down. I asked the client who manages these servers and they said they have another technician but he is currently in Cambodia. It was at that point I said I wouldn’t be cleaning out the servers. I didnt know enough about them should there be a problem bringing them back online. The guy who does know how to fix it is currently overseas and these servers are mission critical.
I could do the work and get paid for another hour if everything works our fine, or if it goes bad I would disable the company for an extended period of time. It just wasn’t worth the extra hours pay, the risk was just too high so I turned it down.

In conclusion, if you are going to work on business machines, focus on a fast turn around time, do what you can to minimize disruption, get insurance and always be very cautious.


Join 16,500

View the Original article

License Crawler – Find Product Keys In The Registry

When reinstalling an operating system you have to search around for all the product keys for your software; a neat way to get it all in once place is with the License Crawler tool. Instead of manually searching through CD cases, emails, and instruction manuals for those keys, License Crawler searches the registry looking for anything that could be a product key. Any keys that are registered in there should be found, including the Windows key and keys for programs like Office, Nero, and VMWare.

License Crawler finds keys pretty quickly, my computer has a lot of programs installed and it finished searching in 1-2 minutes. All Windows versions from 95 to 7 are supported. License Crawler is totally free, small and very portable. It doesn’t require an installation and it can scan a remote hard drive.

This can be especially handy in the computer repair shop because asking clients for product keys can be frustrating and time-consuming which slows down the repair process.

Screenshots:



View the Original article

Security Essentials Has An Evil Malware Clone

Reported by the Microsoft Malware Protection Center on Sept 1st, a new malware attack is out that not only tries to foist a fake clone of Microsoft Security Essentials on victims but it also customizes fakes browser warnings.

The attack looks strikingly similar to the real deal and it can be tricky to tell the difference even with an experienced eye. It starts out with a slick social engineering move by detecting what browser is in use and putting up the appropriate warning page. Right now it has warnings for IE, Firefox, and Chrome. The faked warning page looks almost exactly the same as the real warning page. The difference is that the fakes have some misspellings and also urge the user to get new virus protection via an update or upgrade.

When the user clicks the upgrade link they are sent to the homepage to download the malware Rogue:MSIL/Zeven. The homepage is itself another clone, it closely resembles the real Microsoft Security Essentials homepage. It even has a link to the real Microsoft Malware Protection Center.

When installed the malware looks like a convincing real anti-virus named Win7 AV with all the features including scans, updates and alerts for out-of-date definitions, and settings but none of it work. It will do the usual “scan” and then claim to have found a bunch of awful malware that it can’t remove without paying some money to upgrade to the full version. If the user decides to buy the full version it pops a window that claims to have strong encryption in “Safe Browsing Mode” that will actually do nothing to secure credit card data.

Even though this is such a cunning attack, it is possible to avoid it by remembering a few details. First, real browser warnings won’t have a link or message trying to get the user to download anything, they will also have no misspellings. Second, Microsoft Security Essentials is a totally free software so they wouldn’t ask for money anywhere on the program or website. Careful browsing will avoid traps like this and others.

Be sure to visit the original article linked above for the great screenshots!


Join 16,500

View the Original article

Embed Picasa web album into WordPress Sidebar

Picasa is one of the best photo sharing websites from Google. You can sign in to Picasa web album using Google account and add images, tag it, group it and share with your friends etc. Regarding picasa, on the past we had seen enough tools like importing albums to facebook, viewing it as automatic slideshow, bulk uploading etc.

Import Picasa Web albums to FacebookView Picasa Photos as SlideshowUpload Bulk Photos to Picasa

Picasa Widget WordPress plugin allows you to add picasa images on WordPress sidebar. It can display all your latest picasa images from the Picasa web album and display it on your WordPress blog sidebar. It displays the images as thumbnail from the gallery. You can make many adjustments to size as well as layout of the images.



View the Original article

Pixelpipe Media Uploader Post Images,Videos to Social Networks and Blogs

Pixelpipe media uploader firefox addon helps you to upload images, videos and audios to your favorite social networking sites and blogs. It is very useful addon to upload your images and videos to multiple social networking sites at one go. It reduces your work and shares your content across the internet in short period of time.

Pixelpipe Media Uploader addon for Firefox lets users upload photos, videos, audios to your favorite social networking sites and blogs at one go. It saves your time and also spreads your content across the web in jiffy. It supports over 110 destinations like myspace, Facebook, twitter, bebo, dropbox, Foursquare, flickr, Gtalk, Google docs, Hi5, linkedIn, Picasa, Orkut, Photobucket, Scribd, Posterous, Slideshare, Tumblr, Yahoo, WordPress, yfrog, twitpic etc.



View the Original article

Get Autocomplete Suggestions as you type with Google Scribe

Google scribe labs provides autocomplete suggestions as you type. Google scribe is a text completion service and it plays like a T9 dictionary on mobile phones. Have you tried the dictionary mode when typing text messages on mobile phones ? It will suggestion or auto complete the sentences as you type. Same like that, Google scribe offers autocomplete as you type in.

Google scribe is a text completion service that provides related word or phrase completion suggestions. In addition to saving keystrokes, Google Scribe’s suggestions indicate correct or popular phrases to use. As of now, its a lab application and supports only English as language.



View the Original article

Friday, September 17, 2010

WP Flickr Plugin Embed Flickr Photos To WordPress Posts

Flickr, the largest photo sharing website where amateur to Pro photographers have an account. If you’ve interest in Photography, then you should have an account in it. It’s free. We had discussed a lot of Flickr tools such as displaying Flickr album inside facebook, Guiding you to buy camera’s with the help of Flickr and a lot more. Have a quick glance over the Flickr tools which we had covered, you can open it on a new tab and keep it for later read.

Save pictures from Flickr on BulkShare Flickr photos on Twitter automaticallyTransfer images from Flickr to Picasa or PhotobucketBackup your Flickr account

WP-Flickr WordPress plugin allows you to embed Flickr images into WordPress blog posts. You can choose any of the standard sizes and then choose your image. You can also choose from any of your sets or directly from your public photo stream. It is easy to connect to your Flickr account and a simple way to add your photos to you blog. The title of your image automatically becomes the image alt text too.



View the Original article

Stop iTunes Playing After Specified Time with iTunes Sleep Timer

Sometimes while listening to music we fall asleep, its a pleasant one but the thing here is we get irritated when we need to get up between to switch off the music. So here is a simple apple script named iTunes sleep timer that lets you to stop the music playback after mentioning a specified amount of time.

Go to sleep with iTunes Playing and it will stop after a specified amount of time with iTunes sleep timer. If you haven’t installed any apple scripts before, then don’t worry. The iTunes sleep timer script includes all the instructions regarding how to install scripts in iTunes etc.



View the Original article

5 Tools To Know Most Popular Content on Twitter

Want to know what’s hot on twitter ? What people talk on twitter and what links are shared, tweeted on twitter ? Here are the 5 best tools to know the most popular content shared or tweeted on twitter. Previously we had seen the same concept of knowing the popular content shared on Facebook, today we will see it on Twitter. I personally suggest these tools to bookmark it and use it regularly if you’re a blogger, web designer or developer. It helps us to know what’s happening around twitter. Best method to catch up the latest news on your favorite niche.

Tweetmeme -



View the Original article