"Users of Mozilla Firefox 1.5.0.12 have been offered a major update to Mozilla Firefox 2.0.0.4 via the automatic update notification. As reported earlier, Mozilla Firefox 1.5.0.12 is the last release from the Firefox 1.5 Branch.
As per the the ReleaseRoadmap policy, the previous release of Firefox (1.5 in this case) is supported for six months beyond the release of a major revision (2.0 in this case).
Mozilla Firefox 2.0.0.4 can also be downloaded directly from the Firefox Product Page."
Saturday, June 30, 2007
Firefox Update
You have NOT received a postcard from a friend!
- You've received a postcard from a family member!
- You've received a greeting card from a friend!
- You've received an ecard from a partner!
Fake iPhone Sale Through Malware
See the full details at SunbeltBLOG.
At Kodak "A Nice Day for a Revolution"
Today, a few minutes past 8:00 AM (EDT), Building 9 was imploded. Building 9 was the home for manufacturing photographic paper at Kodak for decades.
As shown in the first picture, the 700,000+ square foot Building 9 was also visible from my 12th floor office window from the nearby Research complex.
By the time I return to the office on Thursday, both the dust and remaining debris left from the implosion will be gone. Gone also are thousands of Kodak workers who were part of the traditional photographic business that George Eastman founded. What will not be gone, however, is the incredible spirit of those Kodak employees who are left to continue the evolution of Kodak to a digital company.
The implosion was carried live on RNews, a local television news station. During the coverage, Kodak's Inkjet Public Relations Director, Barbara Pierce told listeners:
“Not only about an evolution of the company, but also a revolution that Kodak continues to provide to consumers. You know, Eastman established low cost and easy photography for the masses and Kodak continues to provide that through our digital cameras and also through our new inkjet systems."Kodak easily illustrated the move to the future at the popular Consumer Electronics Show (CES), being awarded three CES Innovations Awards and also receiving prestigious honors from Popular Science and PC Magazine. I certainly understand why the KODAK EASYSHARE V610 Dual Lens Digital Camera that I recently purchased was named “Best of Innovations 2007” award winner in the Digital Imaging category.
When it comes to printers, I cannot tell you how very pleased I am with my new Kodak EasyShare 5300 All-in-One Printer. I grew up in a "Kodak Family" with my grandmother, parents, aunts, uncles, cousins working at Kodak at one time or another over the years. Now I am the last of the family working at Kodak.
With that background and family history, I did not think anything could be as good as Kodak 35mm prints for the consumer. The EasyShare printers with Kodak's Inkjet systems showed me how very wrong I was in this belief. Setting aside the low cost of the ink cartridges, the quality of photographic prints is absolutely awesome! Then consider that the color ink cartridge is only $14.99, black ink cartridge $9.99 or a package deal of $21.99 for both black and color ink cartridges!
The only problem is that the EasyShare printers are selling as quickly as they can be made. Beyond quality, perhaps compatibility with both Windows Vista and Mac has added to the popularity of the printer.
Wednesday, June 27, 2007
Windows Live Photo Gallery Beta
Windows Live Photo Gallery:
- Improved image editing features like Panoramic stitch, histogram, and sharpen image.
- Improved tagging and organization including the ability to quickly sort by name, file type, tag or date.
- Publish photos directly to your photo galleries on Windows Live Spaces.
- Auto event grouping and tagging when importing photos (and video) from your camera to PC.
- Improved Photo Import Tool.
For full details, see The Windows Experience Blog and Microsoft PressPass.
Windows Vista Family Discount Program Ends Soon
With the purchase of a retail boxed Windows Vista Ultimate, U.S. and Canadian customers can upgrade up to two additional PCs in your household to Windows Vista Home Premium for only $49.99 ($59.99 CAD) each.
Details are available at "Bring Home the Wow".
References:
- Microsoft, "Bring Home the Wow"
Tuesday, June 26, 2007
Windows Vista Updates
Important:
- Update for Windows Vista (KB931836) -- Installing this update enables your computer to automatically adjust the computer clock on the correct date in 2007 due to revised Daylight Saving Time laws in many countries. After you install this item, you may have to restart your computer.
Recommended:
- Update for .NET Framework 3.0: x86 (KB932471) -- This update addresses a Rights Management Services issue with the Microsoft XPS Viewer. You can restore full Rights Management functionality by installing this update.
- Cumulative Update for Media Center for Windows Vista (KB935652) -- This update addresses issues with Media Center for Microsoft Vista and applies to the 32- and 64-bit editions of Windows Vista Home Premium and Windows Vista Ultimate. For complete listing of issues included in this cumulative update, see KB935652. After you install this item, you may have to restart your computer.
Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...
MS Security Bulletin MS07-022 Revised for NEC 98
For additional information see Microsoft Knowledge Base Article 931784 (http://support.microsoft.com/kb/931784).
• Customers who have previously installed this update on NEC 98 machines running Japanese language Windows 2000 are encouraged follow the guidance provided in Microsoft Knowledge Base Article 931784 (http://support.microsoft.com/kb/931784) for reinstalling the update.
• Customers who have not previously installed this update or are not affected because they do not have Japanese language Windows 2000 running on a NEC 98 system need take no action regarding this re-release.
=================================
Additional Resources
=================================
• Microsoft Security Bulletin MS07-022: Vulnerability in Windows Kernel Could Allow Elevation of Privilege (931784):
http://www.microsoft.com/technet/security/bulletin/MS07-022.mspx
• Microsoft Knowledgebase Article 931784 - MS07-022: Vulnerability in the Windows kernel could allow elevation of privilege:
http://support.microsoft.com/kb/931784
=================================
Regarding Information Consistency
=================================
We strive to provide you with accurate information in static (this mail) and dynamic (web-based) content. Security Bulletins posted to the web are occasionally updated to reflect late-breaking information. If this results in an inconsistency between the information here and the information in the web-based Security Bulletin, the information in the web-based Security Bulletin is authoritative.
If you have any questions, please contact 1-888HELPSEC (1-888-435-7732), select the option for Security Partners and provide your Access ID.
Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...
Monday, June 25, 2007
"Getting to know the Microsoft enthusiasts" -- Me!
Here it is: "Getting to know the Microsoft enthusiasts: Corrine Chorney - Microsoft MVP".
After you read the interview, take some time to check out the site. You will be glad you did. There is a lot of helpful information, presented in a clear, concise manner -- and not just for "beginners". Enjoy!
Sunday, June 24, 2007
How Quickly a Year Passes
The big excitement over the past year was caused by Microsoft with the release of Internet Explorer 7 and, of course, "The WOW" release of Office 2007 and Windows Vista.
So, what is all the reminiscing for? Security Garden is one year old today. In celebration, I pushed the button to upgrade to the "new" Blogger. Except for some minor tweaks here and there, the "Construction Zone" here at Security Garden is just about cleaned up. With help from Blogcrowds, the conversion to three columns was fairly simple. I kept the same "Harbor" template but made some custom changes. Replacing the "lighthouse" gif accompanying each post with a mini-version of my rose avatar was a natural change. Removing the lighthouse from the background and some of the extra "foo-foo" seems to have lightened the load.
Check out the new feature for accessing Windows Vista Bookmarks. Just click on the link in the sidebar to see the Table of Contents page. From there you can go directly to the page to access the bookmarks. Pretty slick!
I am sure I will be making more changes along the way, but this is a good start. I hope you like the changes as much as I do.
Security Garden is dedicated to my friend and mentor.
F-PROT Antivirus Version 3 Hotfix for Windows 98/ME
"Due to diminishing support from Microsoft for Windows 98/ME, FRISK Software will only support the Windows 98/ME platform for a few more months and will discontinue support completely sometime later this year. This is slightly ahead of the previously announced schedule."In the meantime, FRISK has released a hotfix to address limitations encountered in Windows 98/ME. Get the hotfix.
Refer to the Microsoft Support Lifecycle by Product for information on support for Microsoft operating systems and software.
Saturday, June 23, 2007
Construction in Progress
Please bear with me as I make adjustments.
Windows Vista How To Demos
Getting started
Understanding UAC in Windows Vista
What computer users need to understand is that UAC is not a detriment but rather another tool that Microsoft has provided for our use with the Windows Vista operating system. Personally, I wish to know what is going on with my computer. I want to control what is installed, where and when. That is one reason why I have WinPatrol installed on my computer. It is also the reason I advise keeping UAC activated. You can prevent installation of a drive-by install of a malicious software through the use of UAC. I would find it very reassuring to receive the following UAC prompt:
An unidentified program wants access to your computer.Another example of an advantage to UAC is that you can create standard user accounts for your children. By providing your children with standard user accounts, you will be able to control granting permission for them to install software on the computer.
Charlene Shepard is a writer on the Windows user assistance team at Microsoft, specializing in Windows security and networking. She has prepared an excellent Windows Help article on User Account Control, Understanding User Account Control in Windows Vista.
For locating at a later date, the article has, of course, been added to Windows Vista Bookmarks. Look under Features and Tutorials.
Software Certified for Windows Vista
So, what does it mean to be certified for Windows Vista? How does a person know if a software they wish to install is compatible with Windows Vista? Ben Reed, a Manager in the Windows Vista Team, recorded a video to answer those questions and to illustrate the simplicity of installing software that is Certified for Windows Vista.
There are four key areas where certified applications shine. They include: security, reliability, performance and compatibility.
- Security -- The applications meet privacy standards set forth by the Anti-Spyware Coalition. They are fully tested to ensure they do not contain any spyware or malware. The applications fully integrate with Windows Vista User Account Control (UAC), meaning the applications no longer need admin rights to run.
- Performance -- Certified applications integrate with Windows error reports, making trouble-shooting the software, and improving the long-term user experience with the software.
- Reliability -- The software supports the MSI package for installing reliably and cleanly, reducing the necessity for unnecessary reboots.
- Compatibility -- The software must past tests for compatibility with both Windows Vista 32 and 64 bit.
Watch the video as Ben demonstrates the simplicity of installing a software certified for Windows Vista.
References:
- Certified for Windows Vista Software Demo Video
- Applications that have earned the "Certified for Windows Vista" logo or the "Works with Windows Vista" logo
- Look for the Logo. Experience the Difference.
- Certified for Windows Vista Devices and Software
Friday, June 22, 2007
Windows Vista - 6 Month Vulnerability Report
The report is available in PDF format from Windows Vista - 6 Month Vulnerability Report.
Tuesday, June 19, 2007
"Parental Controls" For Firefox
See a screen shots at CyberNet
Get Glubble at http://www.glubble.com/index.php
Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...
Monday, June 18, 2007
Q&A With Security MVP Experts 21June07
We invite you to attend an Q&A with the Microsoft Security MVPs. In this chat the MVP experts will answer your questions regarding online safety issues such as phishing, spyware, rootkits as well as server related topics. If you have questions on how to protect your PC, please bring them to this informative chat.References:
When: Thursday June 21st
Time: 4 pm PST (7pm EST)
Where: TechNet Chat Room www.microsoft.com/technet/community/chats/chatroom.aspx
No password required
Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...
Exchange Server Q&A with the MVP Experts
Exchange MVPs will be on hand to answer your questions about Exchange Server, Outlook and Exchange for Small Business Server. So if you are thinking of upgrading to Exchange Server 2007 or have questions about Exchange Server 2003 we hope you can join us for this informative online chat!
Chat 1
When: Tuesday June 19th
Time: 5 pm PST (8pm EST)
Where: TechNet Chat Room www.microsoft.com/technet/community/chats/chatroom.aspx
No password required
Chat 2
When: Thursday June21st
Time: 10 am PST or 1 pm EST
Where: TechNet Chat Room www.microsoft.com/technet/community/chats/chatroom.aspx
No password required
References:Friday, June 15, 2007
Windows Mail
- Migrate from Outlook Express to Windows Mail (Vista4Beginners)
- Windows Contacts (Vista4Beginners)
- Windows Mail (Features & Tutorial) (Vista4Beginners)
- Windows Mail keyboard shortcuts (Vista4Beginners)
Thursday, June 14, 2007
Windows Vista Help Topics
The latest additions to the Windows Vista tutorials provided by Vista4Beginners encompass Instant Search and have been bookmarked .
You can return to those tutorials in the Search section of Features and Tutorials.
A new find is SimpleHelp. I learned about it from a friend at LandzDown Forum. This friend provides remote help for family members and found the Screenshot Simulations at SimpleHelp invaluable. I contacted Ross McKillop, webmaster and tutorial writer at SimpleHelp and suggested several tutorials for Windows Vista. His response was almost immediate and the tutorials have started to appear, beginning with this Windows Vista firewall tutorial, added to Vista Security Features.I think Windows Vista users will also appreciate these screenshot simulations from SimpleHelp, added to Windows Vista Bookmarks Mail, Features & Tutorials and IE7 pages:
Watch for more bookmarks coming from these two excellent sites, Vista4Beginners and SimpleHelp.
Tuesday, June 12, 2007
June 2007 Monthly Security Bulletin Release
June's release contains 6 new bulletins, 4 of which have maximum severities of "Critical".
- MS07-030 Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution (927051)
- MS07-031 Vulnerability in the Windows Schannel Security Package Could Allow Remote Code Execution (935840)
- MS07-032 Vulnerability in Windows Vista Could Allow Information Disclosure (931213)
- MS07-033 Cumulative Security Update for Internet Explorer (933566)
- MS07-034 Cumulative Security Update for Outlook Express and Windows Mail (929123)
- MS07-035 Vulnerability in Win 32 API Could Allow Remote Code Execution (935839)
- MS07-012 Vulnerability in Microsoft MFC Could Allow Remote Code Execution (924667) (Updated to v2.0 to reflect applicability to Windows Server 2003 Service Pack 2, and explicitly noting that Platform SDK is not affected)
- MS07-018 Vulnerabilities in Microsoft Content Management Server Could Allow Remote Code Execution (925939) Updated to fix an issue whereby custom CMS2002 install paths could be reset in the registry to the default paths, as noted in KB article 924429 "known issues" section)
Please refer to the bulletin revision notes for more detail.
Monday, June 11, 2007
I Lost A Dear Friend Today
Big Brother,
I tried to call you today. The phone just rang and rang and rang. I didn't even get the answer machine. Then I heard from your sister . . .
I love you and will miss you always.
{{{HUGS}}}
Lil' Sis
Love ya, Pat
Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...
Moving Forward: "The Julie Group"
In his blog post Alex asks:
"How many of you working for corporations have been to mandatory sexual harassment training every year? But how many of you have been to a company security training?"Both are mandatory training requirements where I work. However, I am in a corporate environment that not only emphasizes strong employee values but also has a solid backbone supporting the corporate network. While such efforts may be in place in large corporate environments, smaller companies, including school systems, as well as places with rapid employee turnover most likely do not have the same resources.
Thus, the formation of The Julie Group, comprised of the same experts who provided pro bono assistance to Julie Amero. The purpose of the website is to address similar issues faced by Julie and others who get trapped in the injustices of legal system. As described at Region 19 BOE Gazette:
"Education will be a big subject. Preventative computing practices that minimize exposure to inappropriate content will be endorsed. Educational materials for use in schools will be examined and recommended.There is a world of ignorance surrounding the enigma referred to as "the 'net". Laws are archiac or too broad when considering the effects of expired antivirus software, an infected email attachment, a drive-by download, or a mirad of other events that could infect a computer of an unsuspecting computer user.
Lawyers looking to offer pro bono services might drop in to see what we're up to and recommending as worthy causes.
Police and enforcement agencies will find the Julie Group receptive to offering independent second opinions of cyber-crime cases."
If you or someone you know know has been impacted similarly to Julie Amero, refer them to The Julie Group.
References:
Saturday, June 09, 2007
Important Yahoo Messenger Security Update
Very accurate and script-kiddie-friendly exploits are publicly available for both vulnerablities. It is possible that crimeware distributors will start exploiting this for drive-by downloads. Therefore, please install the latest upgraded version of Yahoo Messenger (ver 8.1.0.401) as soon as possible. Yahoo will start distributing the new version soon through an automatic update, but until that happens, you will need to install the new version manually by going to the Yahoo Messenger download page.
Don't wait for Yahoo to make the fix available via their automatic update process. Instead, update Yahoo Messenger as soon as possible.
Ad-Aware 2007 Not Windows Vista Compatible
Ad-Aware 2007 has not been certified for Windows Vista. In fact, Lavasoft "discovered a technical glitch required for Ad-Aware 2007 to fully operate with Vista."
which yields the bit in green below indicating that Ad-Aware 2007 is not Vista ready:
Certified for Windows Vista software:See Microsoft Knowledge Base Article 933305 for Applications that have earned the "Certified for Windows Vista" logo or the "Works with Windows Vista" logo. Look under "More Information".
* Is independently tested for compatibility, functionality and reliability on Windows Vista-based PC's.
* Provides enhanced security by implementing Microsoft security guidelines.
* Meets privacy standards set forth by the Anti-Spyware Coalition.
* Installs reliably and if necessary, uninstalls cleanly.
* Eliminates unnecessary reboots.
* Ensures compatibility with 32-bit and 64-bit editions of Windows Vista.
Ad-Aware Plus and Pro users are reminded to be vigilent with Ad-Watch. See Ad-Watch Setting Can Kill .LNK and .EXE File Extensions.
Edit Note:
This topic has received quite a few hits since August 28, 2007, when Lavasoft published their blog post, Ad-Aware Now Vista Compatible, (including the Works with Windows Vista logo shown here) and the subsequent forum announcement on September 3.
When following the referral links to this topic, they all seem to go to various sites where users with Windows Vista are having problems with Ad-Aware 2007. Thus, in conjunction with the above-linked announcements, the purpose of this edit note is to supply this updated information provided by Lavasoft so an informed decision can be made by Ad-Aware users. I will leave it to you to read between the lines.
- The August 28, 2007, press release, copied below, stated that a Vista-ready product was available for customers:
News Release:
For Immediate Release
Ad-Aware Releases Update Supporting Vista
Gothenburg,Sweden, August28 – Pioneer anti-spyware company Lavasoft today announced the release of the Microsoft VistaTM compatible version of Ad-Aware 2007.
“Many of our customers have already made the transition to the Windows VistaTM operating system, and they depend on Ad-Aware to continue to protect them from online threats,” said Lavasoft’s CEO Jason King.“Vista is great for consumer usability,but like its predecessors, it comes with security flaws, leaving computer users vulnerable to cyber threats and crime.”
In July, Microsoft COO Kevin Turner announced that Vista had already sold 60 million copies since the launch at the end of January 2007.This latest version of Ad-Aware provides compatibility for VistaTM (32 bit). To ensure that the product was compatible without relying solely on the self-interpretation of ‘works with Windows VistaTM’, developers at Lavasoft took advantage of the Vista-Ready program offered at the Microsoft headquarters.
“We traveled to the United States to develop from within the Microsoft offices, which gave us a great advantage with quick turnaround for any Vista compatibility questions we posed,” stated senior developer at Lavasoft, Lennart Lundqvist. “The team at Microsoft is focused on transitioning software applications for the Vista platform,and as a result we have a compatible product to respond to our own customer’s needs.”
The Vista version is available to existing customers through the web update program within Ad-Aware 2007. New customers can visit www.lavasoft.com for more information.
About Lavasoft
Founded in 1999, Lavasoft is "the original anti-spyware company", with over a quarter of a billion downloads worldwide for the Ad-Aware product. A private company headquartered in Gothenburg, Sweden, Lavasoft provides security solutions for individual consumers and enterprise clients alike. Lavasoft has 4,000 partners in 120 countries.
For further information, please contact Michael Helander, Director of PR & Communications at Lavasoft, telephone +46 733 18 45 63 or atpress@lavasoft.com.
- The August Newsletter (referenced in the September 3, 2007, Forum Announcement) stated the following:
“We have opened up important lines of communication with Microsoft, and have established the next steps that need to be taken in order to ensure a Vista compatible version early this fall,” says Odd Stranne, project leader and software developer at Lavasoft.
Since the new Ad-Aware 2007 product has been built with the capability to immediately distribute version updates and patches, all Ad-Aware users with a valid license will
immediately receive the Vista compatible update when it is available. - October 22, 2007: Anything missing from the Winqual Application List: Works with Windows Vista website (site requires IE to work)?
End Edit (22Oct07)
Thursday, June 07, 2007
Take a Virtual Test Drive of Windows Vista
"Recently we released two images in virtual formats of Windows Vista which will give you a 30 days hands-on experience to play with both a Windows Vista 30-Day Enterprise Edition and Windows Vista with Visual Studio 2005 . Using the power of virtual machines, you can download these Virtual Hard Disks (VHDs) and play with Windows Vista and other apps right away. This means you have minimal set up with no additional hardware required. Once the VHD is downloaded you can test drive right away. All you need is a tool like Virtual PC 2007 which is a new, free product from Microsoft used to set up virtual machines quickly on your desktop. The VHDs are located at www.microsoft.com/vhd. Also stay tuned for more images with both MS products and partner apps.Check it out and see what you can do with it! Also, to get your hands further into test driving Windows Vista check out Virtual Labs and Windows Vista Test Drive. Both use similar virtualization technologies but work within an online environment. Stay posted for more TechEd 2007 news!"
If you are not sure about Windows Vista this is a great way to try it out.
Advance Notice - Microsoft Updates for June 2007
Note that the bulletin advance notification will be replaced with the June bulletin summary on June 12, 2007. For more information about the bulletin advance notification service, see Microsoft Security Bulletin Advance Notification.
To receive automatic notifications whenever Microsoft Security Bulletins are issued, subscribe to Microsoft Technical Security Notifications.
Microsoft will host a webcast to address customer questions on these bulletins on Wednesday, June 13, 2007, at 11:00 AM Pacific Time (US & Canada). For more information, see Microsoft Security Bulletin Summaries and webcasts. Microsoft also provides information to help customers prioritize monthly security updates with any non-security, high-priority updates that are being released on the same day as the monthly security updates. Please see the section, "Other Information" in the Advance Notice.
References:
- June 2007 Advance Notification -- MSRC Blog
Wednesday, June 06, 2007
Amero Granted New Trial!
"Julie Amero leaves the New London courthouse this morning escorted by her husband, Wes Volle, left, and Todd Fernow, the head of the Legal Clinic at the University of Connecticut Law School."
Image from TheDay.com
Today Superior Court Judge Hillary B. Strackbein overturned the conviction of Julie Amero on four counts of risk of injury to a minor resulting from pornographic pop-ups appearing on a classroom computer. Judge Strackbein ruled that the expert computer witness presented by the prosecution, provided "erroneous" testimony about the classroom computer.
In the report at courant.com, it is indicated that the Assistant State's Attorney David Smith said
"state would take no position on Dow's motion for a new trial, making it unlikely she will be tried again. Smith also acknowledged that erroneous information about the computer was presented during trial."I sincerely hope that if the State of Connecticut does indeed determine that a new trial is unnecessary, the decision is made quickly. I also hope that other schools and public facilities providing internet access have learned a lesson about proper computer maintenance from this case that has dearly cost Julie Amero and her family.
In addition to the many articles below and Fox Video clip, those following this story will want to read the SunbeltBLOG where Alex Eckelberry shared Some comments on the Julie Amero case. In particular, Alex acknowledged the work done by the forensic team that worked on the case on a pro bono basis and included recognition of work done by others, also stating:
This event was a testament to the power of a community of people coming together in a common cause.
Coverage:
- Amero Granted New Trial, Rick Green, Courant News
- Substitute Teacher Gets New Trial on Porn Charges, Karen Florin, theday.com
- Substitute Teacher Granted New Trial in Porn Case, Brian Krebs, Washington Post
- Substitute teacher's conviction for porn popups set aside, TheRegister
- Teacher granted new trial in pornographic pop-up case, Greg Smith, Norwich Bulletin
- Video Outside Courtroom, Fox61 News WTIC
Tuesday, June 05, 2007
Julie Amero Update
Norwich Bulletin:
"Amero’s attorney, William Dow III, based today’s motion for a new trial on “evidence discovered after the verdicts and now in possession of the state and the defense.” In light of the new evidence, Dow said the jury reached inaccurate conclusions about Amero’s alleged Web surfing."
For the sake of the peace of mind for Julie and her family, I certainly hope this can be settled soon.
Click the Amero tag for background information and links.
TechEd 2007
To follow their happenings, just tune in to Windows Connected. Here is what Josh and Jeff have posted so far:
Rogue Security Applications Being Pushed On Myspace
"The latest piece of garbage floating around Myspace - full writeup here - is bad enough. Fake Windows update box overlaid on random profiles, that takes you to a hijack involving rogue antispyware cleaners."MySpace seems to be a magnet for bad behavior. Please use caution.