Showing posts with label Firewall. Show all posts
Showing posts with label Firewall. Show all posts

Thursday, October 15, 2015

Firefox Version 41.0.2 Released with Security Update


Firefox
Mozilla sent Firefox Version 41.0.2 to the release channel.  The update includes one (1) high security update which addresses the vulnerability described in CVE-2015-7184

No update was released for Firefox ESR which remains at version 38.3.0.

Fixed in Firefox 41.0.2


Update

To get the update now, select "Help" from the Firefox menu at the upper left of the browser window, then pick "About Firefox."  Mac users need to select "About Firefox" from the Firefox menu. If you do not use the English language version, Fully Localized Versions are available for download.

References


Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...











Wednesday, June 30, 2010

Online Armor sold to Emsisoft

Yes, it is true. Mike Nash confirmed in his blog post today that he sold the popular software firewall, Online Armor, to Emsisoft. Many followers of Security Garden will remember when Scot Finnie named Online Armor 2.1 as the Best Firewall Software of 2008.

Online Armor has remained a popular and excellent product. In fact, it is one of the two software free-for-personal use firewall products that I recommend.

On behalf of Emsisoft CEO, Christian Mairoll, Mike provided the following information for Online Armor customers:
  • "Product editions will stay untouched. Freeware edition will not end of course.
  • Website remains on www.online-armor.com, but we'll have to move everything away from tallemu.* domains soon.
  • Forum remains, but moved to support.online-armor.com
Which kind of benefits does Emsisoft expect from the deal then? As part of a much larger development team (8 at Emsisoft so far), OA development can progress faster. Sharing knowledge internally is a very important factor for speed and quality of the produced software.

  • With the existing marketing and sales force at Emsisoft, we want to spread the name about OA much more. It's a great product, winning tests, but we need to tell everybody about it to make it grow.

  • On the long run, we have plans to create some kind of a suite product. It's gonna be a completely new product most likely. But things are not finally decided yet."

  • I wish Mike and Tall Emu success in the flexible CRM system, developed for corporate customers.

    References:

    Clubhouse Tags: Clubhouse, Firewall, Security, Information,


    Remember - "A day without laughter is a day wasted."
    May the wind sing to you and the sun rise in your heart...

    Saturday, December 26, 2009

    So, You Have a New Computer . . .

    Congratulations! I am sure you are really excited about the new computer. Unless it is laptop_Win7a netbook, the computer will have Windows 7 installed. Although Windows 7 has many security features, there are still steps needed in order to protect your new computer.

    I recommend the following steps before you go online,

    1) Configure Windows 7 for a Limited User Account. This is a simple step and will help protect your account should your computer become infected. Step-by-step instructions are available in Steve Friedl's article “Configuring Windows 7 for a Limited User Account”.

    2) Create a Password Reset Disk.

    If you forget your computer password, you can use a password reset disk to create a new one. To create a password reset disk, click the Start button and type User Accounts in the search box. The link is located in the left pane.

    3) Software Firewall.

    Even if your computer is behind a router or you plan on using a different software firewall, you don’t want your initial online experience to be unprotected. Open Windows Firewall by clicking the Start button and typing firewall in the search box. Select Turn the Windows Firewall on or off from the left pane.

    4) Windows Update.

    Confirm that Windows Update is turned on so that any updates since your computer was built can be downloaded when you go online. Again, the fastest way to get there is to click the Start button and start typing update. Select Windows Update.

    The minimum steps have now been completed so you can finally connect to the Internet. Not that you finally made it, the first step is to download and install an antivirus software.

    5) Antivirus Software.

    There are several antivirus software programs that are free for personal use. However, in testing the free versions do not score as well as their paid counterparts or Microsoft Security Essentials (MSE) which is also free for personal use and can be downloaded directly from the dedicated Microsoft web site at http://www.microsoft.com/security essentials. (Instructions for installing MSE are available here.)

    Two of the free antivirus software programs that I recommend to people with budget constraints are avast! 4 Home Edition and Avira AntiVir PersonalEdition Classic. My favorite subscription antivirus is ESET. Another excellent program is Kaspersky.

    6) Anti-Malware and Monitoring Software.

    It is strongly recommended that you maintain at least one and, depending on your surfing habits, perhaps two updated anti-malware software programs on your computer. Microsoft provides Windows Defender, although if you install MSE, Windows Defender is replaced by the anti-malware portion of MSE.

    An excellent choice for a supplementary program is Malwarebytes' Anti-Malware (MBAM), which is free for personal use. MBAM also has a licensed version available which includes the “Realtime Protection Module” which uses an advanced heuristic scanning technology which monitors your system to keep it safe and secure.

    SUPERAntiSpyware is another popular anti-malware program.

    There is one more program that is actually the first thing I install on my computers -- WinPatrol. WinPatrol is free for personal use and also has a one-time payment licensed Plus version. The features listed below are the primary reason I use WinPatrol, described more fully at the Win Patrol Features page:

    • Delay Startup Programs
    • Warn if AutoUpdate Status Changes
    • Track Date/Time Programs are First Detected
    • Prevents Changes to File Type Associations
    • Keylogger Detection
    • Kill Multiple Tasks in One Step
    • Twenty Thousand Program Descriptions
    • Disable Vulnerable Active X Controls
    • Create Hijack Style Log Files

    7. Adding Hardware and Software.

    If you have Microsoft Hardware that you want to use on your new computer, the correct software for Windows 7 is available at the Microsoft Hardware Support for Windows 7 website. Check the vendor site for other brands.

    Check the Windows 7 Compatibility Center to find out what software and hardware are compatible with Windows 7. You can also download drivers and updates from the Windows 7 Compatibility center.

    ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~

    Now that you have the basics covered, there is a wealth of information provided by Microsoft at the Windows 7 Help & How-to website. From there you can find help for installing new hardware, backing up your files, how to personalize your PC or transfer files and settings from another computer as well as a security checklist and much more.

    For more in-dept information, Talking About Windows provides a behind-the-scenes look windows 7. It is a video blog with contributions provided by Microsoft engineers who helped build Windows 7.




    Remember - "A day without laughter is a day wasted."
    May the wind sing to you and the sun rise in your heart...

    Sunday, July 12, 2009

    Is Comodo President/CEO a Liar? You Decide

    It appears that Comodo's "Hero Administrator" has sunk to the level of referring to anyone who criticizes Comodo as a liar. Well, Melih, your claim is wrong.

    Here is the situation: I was checking blog visitor statistics this morning. When there is a referral link from a forum or another blog rather than as search results, I generally follow the link to see the source of the link. This is what I found today:

    VISITOR ANALYSIS
    Referring Linkhttp://forums.comodo.com/empty-t42573.0.html;msg288724;topicseen

    Following the link, I saw this blog post by Melih Abdulhayoglu, the President and CEO of Comodo:
    "And its been over a week and she still hasn't put my response to her post on her site Smiley Surprise Surprise!

    http://securitygarden.blogspot.com/2009/07/parents-beware-of-comodo-firewall.html

    I responded to her site on July 4th... and knowing the possibility of them censoring my post, i took a snapshot of my screen as I posted it.....7 days on... they rather censor what their users read...welldone Donna! Somehow I had a hunch that being concerned about telling the truth to her readers wasn't the first thing in her mind Wink

    Today its 11th July, they still continue to spread the lies and haven't changed a thing...

    Your sole purpose is a witchhunt against Comodo.. I hope you are being paid well for that Wink

    Melih"
    Since the only comments I reject are spam links or comments containing vulgarities, I proceeded to check the Dashboard. A screen copy of the Dashboard notice of comments that were awaiting moderation at Security Garden is too wide to incorporate here. The image is available at http://securitygarden.googlepages.com/MelihCommentNotices.GIF

    As can clearly be seen in the above-linked screen copy as well as the e-mail notice, reproduced in References below, the comment was left not on July 4 but rather last evening, July 11, at 11:29 PM. It is apparent that Comodo President/CEO "doth protest too much".

    No, Melih, I do not get paid for blog posts or help on the forums. My issue is not only with Comodo but also with any so-called security company with practices I perceive as not being representative of a security vendor (see Ethics tag).

    As to HopSurf, the domain registration information from DNS Stuff is copied below and HopSurf is registered to Comodo. That does not, however, change my warning to parents, as originally posted. HopSurf is a pre-checked toolbar for a so-called security product with a EULA clearly warning against the toolbar being available to anyone under age 18:
    "1.5.The Toolbar and the Services are not intended for use by or availability to persons under the age of 18.IF YOU ARE UNDER 18 YEARS OF AGE, YOU MAY NOT DOWNLOAD, INSTALL OR USE THE TOOLBAR AND YOU MAY NOT ACCESS THE SERVICES."
    With such a warning, I have no other choice but to believe that use of the toolbar would provide "adult-only" results in searches.


    References:
    • DNS Stuff Lookup: www.hopsurf.com A record

      DomainTypeClassTTLAnswer
      www.hopsurf.com.AIN360091.199.212.173
      hopsurf.com.NSIN3600ns0.comododns.net.
      hopsurf.com.NSIN3600ns0.comododns.com.
      hopsurf.com.NSIN3600ns1.comododns.com.
      hopsurf.com.NSIN3600ns1.comododns.net.
      ns0.comododns.com.AIN2160091.209.196.4
      ns0.comododns.net.AIN21600149.5.128.4
      ns1.comododns.com.AIN2160067.51.175.4
      ns1.comododns.net.AIN2160091.209.196.5


    • E-mail notice: "New comment on Parents Beware of Comodo Firewall."

    Anonymous

    to me

    Anonymous has left a new comment on your post "Parents Beware of Comodo Firewall
    ":

    HopSurf is a Comodo product, developed and published solely by Comodo, not ASk.com.
    Please get you facts straight before posting what could be considered and is False information.

    Publish
    this comment.

    Reject
    this comment.

    Moderate
    comments for this blog.

    Posted by Anonymous to Security Garden
    at July 11, 2009 11:29 PM
    Reply

    Forward



    Reply
    |

    Anonymous

    to me
    show details 11:32 PM (10 hours ago)
    Reply

    Follow up message
    Anonymous has left a new comment on your post "Parents Beware of Comodo Firewall
    ":

    Please note - failure to publish any posted comments that are contrary to your posts is proof you are completely biased and therefore unreliable. People should be made aware of this fact.

    Publish
    this comment.

    Reject
    this comment.

    Moderate
    comments for this blog.


    Posted by Anonymous to Security Garden
    at July 11, 2009 11:32 PM
    Reply

    Forward








    Remember - "A day without laughter is a day wasted."
    May the wind sing to you and the sun rise in your heart...

    Friday, July 03, 2009

    Parents Beware of Comodo Firewall

    Oh yes, Comodo promised to remove the Ask Toolbar and they did. In its place is another IAC product, the HopSurf Toolbar -- also a pre-checked installation. Not only is the toolbar pre-checked, as reported by Consumer Security MVP, Donna Buenaventura, there is no EULA (End User License Agrement) included with the installer.

    Donna kindly provided links to the on-line EULA for the HopSurf Toolbar at both Comodo and HopSurf. Reading the EULA, I cannot help but be concerned regarding what sort of material is provided by HopSurf that results in the inclusion of the following:

    "1.5.The Toolbar and the Services are not intended for use by or availability to persons under the age of 18.IF YOU ARE UNDER 18 YEARS OF AGE, YOU MAY NOT DOWNLOAD, INSTALL OR USE THE TOOLBAR AND YOU MAY NOT ACCESS THE SERVICES."

    Based on the above, as well as the sneaky inclusion of the pre-checked toolbar and missing EULA in the installer, I strongly advise caution, particularly to parents who have young children using the family computer.

    As Donna said:
    "So Comodo’s promise to remove SafeSurf Toolbar happened but not to finish their agreement with A$k/IAC. Instead, the new version of Comodo is now bundled with HopSurf Toolbar which is IAC/Ask.com too. The installer become worst because there’s no EULA presented in addition to known method of misleading people by offering unnecessary third party service/component in a SECURITY software. Note that it is a security software that should offer clean installer no?"
    So much for improvements.

    See Donna's complete post in Comodo removed Ask/IAC SafeSurf Toolbar by replacing it with HopSurf/IAC/Ask Toolbar and the accompanying screen shots at CoU.

    The following firewall programs are free for personal use and do not include a toolbar.




    Remember - "A day without laughter is a day wasted."
    May the wind sing to you and the sun rise in your heart...

    Friday, May 22, 2009

    Microsoft: Fix it For Me Now!

    It does not matter how something on a person's computer broke. It could be the result of a malware infection, a conflict with a third-party application, or self-help that backfired. Regardless of the source of the problem, we all want Microsoft to Fix it and to Fix it Now.

    Although Microsoft has long provided Knowledge Base articles with detailed instructions for repairing problems such as those mentioned above, the instructions generally involve registry edits -- which is understandably something the average home user generally will shy away from doing.

    Along comes Microsoft Fix it, a tool to automate those fixes that you want now, relieving you from worrying about messing up a registry edit that could result in your computer in worse condition than before you attempted the fix.

    The Fix it Team has created a wide range of fixes covering problems in Windows, Internet Explorer, Microsoft Office programs such as Excel and Word, Outlook, Windows Media Player, Zune and a whole lot more. Many of those fixes are a result of Windows Error Reporting (WER) where people like you and I allow the submission of crash reports to Microsoft. By submitting those reports, Microsoft Product Support Reports (MPSReports) is able to analyze the results and fixes for repeated problems are added.

    To check that Windows Error Reporting (WER) is enabled, do the following:

    Windows Vista:

    Click Control Panel > System and Maintenance > Problem Reports and Solutions > Change settings > Advanced settings > Select "Automatically check for solutions".
    Windows XP:

    Click Start > Right-click My Computer > Properties > Advanced Tab > Error Reporting.
    If you are not sure where to start, you can try Microsoft Automated Troubleshooting Services (Microsoft ATS) to detect problems on your machine and automatically fix any common problems.

    The Fix it Team has provided multiple resources to assist you in locating a Fix it solution:
    1. Fix it for me blog
    2. Fix it Gadget (Download link)
    3. Fix it Solutions Page
    4. Microsoft Fix it Solutions Center

    Listed below are a few of my favorite fixes for problems I frequently see in the support forums.


    Windows Fixes

    clip_image002 Enable Windows Firewall

    clip_image002 Error message when you use the Windows Update or Microsoft Update Web site to install updates: "0x8007000B"

    clip_image002 How do I enable User Account Control in Windows Vista

    clip_image002 How do I reset the Windows Update settings?

    clip_image002 How to reset Internet Protocol (TCP/IP)


    Internet Explorer

    clip_image002 Ask Toolbar that causes a crash in Windows Internet Explorer 6 and 7

    clip_image002How do I move the Standard toolbar to a location that is above the Address bar in Internet Explorer 7 or Internet Explorer 8?

    Fix it Reset Internet Explorer settings

    Fix it Re-Register the Internet Explorer .dll file

    Fix it Uninstall or remove Internet Explorer 8 - restores your previous version.


    Other Examples

    clip_image002 Default line spacing and default paragraph spacing in Word 2007 differ from the default spacing in earlier versions of Word

    clip_image002 How to move the Windows Taskbar from its default position or reset it to its default position

    clip_image002 Reset Windows Media Player Associations


    The next time you need a solution for a problem, let Microsoft Fix it for you.



    Related Posts: Microsoft FixIt Label


    Remember - "A day without laughter is a day wasted."
    May the wind sing to you and the sun rise in your heart...

    Tuesday, May 19, 2009

    Basic Computer Security for the Home User

    Before I start with a list of do's and don'ts for the home computer user, please allow me to tell you a little bit about yourself. You are a mom, a dad, a grandparent, aunt, uncle, cousin, brother, sister, only child, neighbor, friend, rocker, jazz enthusiast, student, teacher, banker, purchasing agent, and somewhere between the age of 10 and 90 or so.

    Regardless of which tag or tags describe you, there is one thing each of you have in common; that commonality being a home computer user. We all know that the cost of computers has come down over the years but that is no reason to jeopardize your investment.

    So let's talk about basic computer security to protect your computer. Using the analogy that I started this blog with:

    The best way to protect your garden is to fence it in.
    The same applies to your computer.


    What are the basics needs to fence in your computer?

    1) Firewall

    The purpose of a firewall is to block unauthorized access to your computer, yet allowing programs you allow access to the internet. The firewall is your first line of defense in protecting your computer and the data stored on it.

    There are several basic firewall software programs that are free for personal use that I recommend. Each of those software vendors also have a full-featured licensed version available for purchase:
    See Vista Compatible Firewalls for a broader selection of software firewalls.

    For information beyond the basics, see the documents prepared by Microsoft:
    In the case of a software firewall, two is not better than one. Only run one software firewall on your system. (Note: even if you are behind a router, you still need a software firewall.)

    2) Security and Software Updates

    Yes, I know. You have heard over and over that you need Microsoft Security Updates but what is this about other software? Software programs like Adobe Reader, Acrobat, Adobe Flash, SunJava, Firefox, Safari, and others also have security issues and need to be kept updated.

    Start with Microsoft Security updates, issued the second Tuesday of each month:
    How can you keep up to date with the other software on your computer? It certainly sounds like a daunting task. There is, however, a simple tool that will make it easier. To periodically check if your system is missing security updates or has insecure applications installed, visit http://secunia.com/software_inspector/. The Secunia Software Inspector runs through your browser with no installation or download required and does the following:
    • Detects insecure versions of applications installed
    • Verifies that all Microsoft patches are applied
    • Assists you in updating your system and applications
    3) Antivirus Software

    Just as a firewall is important to prevent unauthorized access, antivirus software is needed to help prevent your computer from being infected by viruses. You also need to keep your antivirus software regularly updated.

    There are a couple of free antivirus software programs that I recommend to people with budget constraints:
    My favorite subscription antivirus is ESET. Another excellent program is Kaspersky. See Vista Compatible Antivirus Software for a complete list. Only run only one antivirus software on your computer.

    For more information about computer viruses, see Beyond the Basics: Viruses.

    4) Anti-Malware and Monitoring Software

    The word malware was created from a combination of malicious + software. Malicious software includes computer viruses, worms, trojan horses, spyware, adware and other malicious and unwanted software.

    Although there is somewhat of an overlap between anti-malware software and antivirus software, it is strongly recommended that you maintain an updated anti-malware software on your computer. Microsoft provides Windows Defender.

    Another excellent choice is Malwarebytes' Anti-Malware (MBAM), which is free for personal use. MBAM also has a licensed version available which includes the Realtime Protection Module which uses an advanced heuristic scanning technology which monitors your system to keep it safe and secure.

    There is one more program that is actually the first thing I install on my computers -- WinPatrol. Indeed, I would feel I was doing a disservice if I didn't mention WinPatrol, referred as "Scotty, the Windows Watchdog". WinPatrol was introduced in the days of Windows 95 and is compatible with every Windows Operating System, including Windows 7. WinPatrol is free for personal use and also has a one-time payment licensed Plus version. WinPatrol was the first software I installed on my Windows Vista computer. Bill Pytlovany, the developer of WinPatrol is also a Microsoft MVP.

    The features listed below are the primary reason I use WinPatrol, described more fully at the Win Patrol Features page:
    • Delay Startup Programs
    • Warn if AutoUpdate Status Changes
    • Track Date/Time Programs are First Detected
    • Prevents Changes to File Type Associations
    • Keylogger Detection
    • Kill Multiple Tasks in One Step
    • Twenty Thousand Program Descriptions
    • Disable Vulnerable Active X Controls
    • Create Hijack Style Log Files
    ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~

    I know that is a lot to digest, especially knowing it is just the basics for keeping your computer secure. Over the years, I have covered other topics of interest for the home user, including phishing, setting up a home network, online shopping safety, family safety (including child-safety sites & tips). If you are interested in additional security tips, there is broad collection in the month-long Cyber Security Awareness Tip of the Day series from last October.

    To receive e-mail notices of new Security Garden posts, consider the subscription option in the left column.

    Clubhouse Tags: Clubhouse, challenge-safe, family, security, security center, How-to,


    Remember - "A day without laughter is a day wasted."
    May the wind sing to you and the sun rise in your heart...

    Monday, May 18, 2009

    Online-Armor Goes to the Top of the List

    When recommending a free-for-personal-use software firewall in the forums, the list I previously provided was in alphabetical order. As of today, that list has been changed to place Online-Armor at the very top of the list. Why? It is simple. Mike Nash got my attention when he chose ethics over dollars.

    If you are looking for a full-featured subscription firewall, I highly recommend Online-Armor (Product Features). As Bill Pytlovany asked: Would you like Toolbar with your Software Order? The answer is a resounding No! Support vendors like Mike Nash and Bill Pytlovany who choose ethics over dollars.
    Note: Although since updated and better than ever, Scot Finnie named Online Armor 2.1 as the Best Firewall Software of 2008. Online-Armor has been reported as working well on Windows 7 RC.
    I encourage Security Garden readers to read for yourself why Mike made the decision to forgo tens of thousands of dollars per month by declining the Ask toolbar. As you are reading Mike's article, pay particular attention to the key points that Mike observed kept getting repeated when considering the toolbar. They are some of the reasons why vendors that bundle the bar are out of favor:
    • Users do not expect a security tool to install unneeded items, even if that security tool is free.
    • Default opt-in is the only way people will install due to inattention, accident or trickery of wording.
    • Default opt-in is wrong.
    • Users place a lot of trust in security vendors. They are trusted to do the right thing. Do not abuse that trust.
    • Is it ethical to ask your users to install a product you would not install and use yourself?
    Read for yourself why Online-Armor made it to the top of the recommended list: Ask Toolbar in Online Armor Free? Nearly...


    Remember - "A day without laughter is a day wasted."
    May the wind sing to you and the sun rise in your heart...

    Sunday, April 26, 2009

    Comodo Software Removed from Softpedia

    Softpedia has long followed a strict code of ethics, defining adware as a software that falls into at least one of the following categories:
    (1) Displays ad banners or other types of advertising material during its runtime
    (2) Attempts to change the homepage for web browsers installed on the system
    (3) Attempts to change the default search engine for web browsers installed on the system
    (4) Offers to download or install software or components (such as browser toolbars) that the program does not require to fully function
    (5) At program startup/shutdown , opens web pages featuring advertising or similar income generating content
    (6) Creates desktop or start menu shortcuts for items unrelated to the program's functionality

    Softpedia reports that Comodo Internet Security strikes out on numbers 2, 3 and 4. Number 4, is the reason I stopped recommending Comodo firewall a year ago when the Comodo SafeSurf toolbar included the Ask Toolbar. Stefan Fintea, the Softpedia Software News Editor, explains:
    "Aside from the fact that SafeSurf is a component that the program (CIS) does not require to fully function, therefore it alone would be a good reason to mark CIS as adware, this utility also installs Ask Toolbar without asking for the user’s permission. This type of behavior is clearly not the one described in the Comodo email and could be easily classified as spyware (since adware would imply prior user consent)."
    For background on Ask toolbar issues see Edelman on 'Deceptive Door Openers' and Ask toolbars.

    Via BillP

    References



    Remember - "A day without laughter is a day wasted."
    May the wind sing to you and the sun rise in your heart...

    Friday, March 27, 2009

    Conficker Information for the Home Computer User

    This message about Conficker is not for people in the security industry. It is directed to the home computer user.

    Is the Internet coming to the end on April 1? Will your computer crash and burn if you are online on that day?

    The answer to both questions is NO.

    Has there been a lot of hype about Conficker and April 1? Yes, there has and it will likely continue. Earlier this week I added to the Conficker hype in Time is of the essence. Why am I concerned about the health of your computer? Consider the known capabilities of the current Conficker variants, as described at Security Focus,
    ". . . the worm program blocks security software, distributes code by creating a peer-to-peer network, and attempts to prevent anyone but the authors from updating its code by authenticating updates using a hash algorithm — known as MD6 — that is only a few months old. The collection of those capabilities worried the researchers."
    With that in mind, there is reason to worry if you or your friends have file sharing turned on, use P2P (Peer to Peer) programs, or share information via USB (thumb) drives.

    Let's start with file sharing

    If you have file-sharing turned on and become infected, the Conficker worm could allow remote code execution. In other words, the worm would take control of your computer. Microsoft KB Article 307874 includes instructions for turning off file sharing. Also available is a Microsoft Fix it to make the change for you.

    Disable Autorun

    USB/thumb drives use autorun to load files when the drives are plugged into the USB port. To prevent malware from spreading to your computer, disable autorun. The How-to Geek has simple instructions for disabling autorun on both Windows XP and Windows Vista:
    This from Microsoft: How to disable the Autorun functionality in Windows

    Other reasons to be concerned is the state of security protection.

    Check Security Updates

    Although it is recommended that all security updates be installed on your computer, at a minimum, ensure that "Security Update for Microsoft Windows (KB95688)" is installed:
    • Windows XP: Start > Windows Update > Other options > View installation history
    • Windows Vista: Programs > Programs and Features > Installed Updates
    In the event you cannot find that update installed on the computer, go to Security Bulletin MS08-067 and click the link for your operating system to be redirected to the download location.

    Firewall

    Surprisingly, there are still too many people on the internet without a software firewall. If this is true for your computer, at a minimum, activate the Windows Firewall. For help with this, go to How can I turn on or turn off the firewall in Windows XP Service Pack 2 or later versions?

    Antivirus Software

    Both Avast! and Avira AntiVir are free for personal use. If you do not have an antivirus software, install one now.

    Pay It Forward

    Conficker has affected the operation of hospitals, military, large corporate systems, and even the House of Commons. (There is a long list of articles below from The Register if you are interested in the extent of the impact of the various variants of this worm.) New readers of Security Garden may not be familiar with "Pay It Forward:
    "3 people helped each day, ‘paid forward’ by each person helps 4.7M people in two weeks."
    If each Security Garden reader checks with one or two of their friends and they in turn check with their friends, to make sure the computer(s) in their home have file sharing disabled, are updated, have a firewall and up to date antivirus software, worms like Conficker will have less of a chance of spreading.

    Whether it is the best or worst case scenario as depicted at Security Focus, don't let your friends be part of this:

    " 'In the best case, Conficker may be used as a sustained and profitable platform for massive Internet fraud and theft," wrote Phillip Porras, Hassen Saidi and Vinod Yegneswaran, all of SRI International. "In the worst case, Conficker could be turned into a powerful offensive weapon for performing concerted information warfare attacks that could disrupt, not just countries, but the Internet itself.' "

    Help from Microsoft:

    References:
    For the curious who are interested in additional reading on the history of Conficker, the articles from The Register paint quite a picture from November through March:




    Remember - "A day without laughter is a day wasted."
    May the wind sing to you and the sun rise in your heart...

    Wednesday, March 25, 2009

    Time is of the essence

    You may or may not have heard of "Confiker" or "Downadup". At this juncture, it does not matter what you have heard.

    It is time to take action.

    Forget the technical jargon. If your computer is not updated and is unprotected by a firewall, it is a target for what is expected to be a massive attack.

    If you cannot reach any of the Microsoft, antivirus or other security-related websites, it is likely your computer is among the million plus computers already infected with this worm. In that case, you need to do the following:
    • Disconnect the infected computer from the internet
    • Use an uninfected family member or friend's computer to get information, updates and removal tools from the information provided by SANS ISC.
    Even if your computer is not now or never has been infected, take the following steps to help prevent infection by this worm:
    • Enable a firewall on your computer.
    • Get the latest computer updates for all your installed software, most particularly Security Bulletin MS08-067.
    • Use up-to-date antivirus software. (Avast! and Avira AntiVir are free for personal use.)
    • Use caution when opening attachments and accepting file transfers.
    • Use caution when clicking on links to web pages.
    • Protect yourself against social engineering attacks.
    Update: Additional information is available in Conficker Information for the Home Computer User.

    It is estimated that there are well over a million Windows PC’s currently infected with Conficker. As illustrated in code at the CA Security Advisor Research Blog, on April 1, 2009, the infected machines will attempt to generate 50,000 URLs daily to download an additional component with new instructions.

    Although time zero for setting off the worm is April 1, 2009. As Bill Pytlovany points out in Conficker Judgement Day on April 1st, the day begins earlier in other parts of the world than in the western Europe and the North and South American continents. That means that when April 1 arrives in China, in New York, it will be March 31 at noon.

    Take steps now to protect your computer. Go to Windows Update.

    Calculate at WorldTimeServer.com your time
    when the first seconds of April 1, 2009 arrive.


    References:



    Remember - "A day without laughter is a day wasted."
    May the wind sing to you and the sun rise in your heart...

    Monday, November 17, 2008

    Get ZoneAlarm Pro Free (18NOV2008)

    I have not been a fan of the ZoneAlarm firewall by Check Point Software since the Ask Toolbar was included as a pre-checked option and disguised as ZoneAlarm Spy Blocker. That aside, I have been unpleasantly surprised lately seeing a large number of computers without a software firewall. Without a doubt, the computers have all been heavily infected.

    Perhaps those folks -- and yourself as well if you need a software firewall -- will take advantage of this one-day offer for a free one year subscription for Zone Alarm Pro.

    Via PCMag.com:
    "On Tuesday, Nov. 18, Check Point Software will offer the ZoneAlarm Pro software package for free for 24 hours, in celebration of Check Point's 15th anniversary, a company spokeswoman said Friday.

    ZoneAlarm Pro, which contains a firewall, antispyware, and ID protection service (including credit monitoring) normally costs $39.95. The download location for the free ZoneAlarm Pro package will go live at 6 AM PDT on Tuesday morning."


    The download URL is expected to go live at 6 AM PDT.




    Remember - "A day without laughter is a day wasted."
    May the wind sing to you and the sun rise in your heart...

    Sunday, October 12, 2008

    Online Armor v3 Vista Compatible

    It was some months ago when Scot Finnie announced Online Armor as The Best Firewall Software of 2008. Online Armor just got better! Version 3 of the Online Armor Personal Firewall has been released, providing support for 32 Bit Windows Vista.

    Online Armor provides a "free for personal use" version as well as a full-feature subscription version. See the Online Armor comparison chart for the differences between the two.

    The popular Vista Compatible Firewalls bookmark list has been updated to include the new release.








    Remember - "A day without laughter is a day wasted."
    May the wind sing to you and the sun rise in your heart...

    Tuesday, June 10, 2008

    Windows Firewall Tutorial Addition

    The Vista Security Features bookmark page has been updated to include a new tutorial by Vista4Beginners how to use the built in firewall in Windows Vista. Unlike the firewall introduced with Windows XP SP2, the Windows Vista firewall provides both inbound and outbound protection.

    A nice benefit of the Windows Vista firewall is that it is pre-installed as part of the operating system, there are not extra costs involved and, even better, no concerns about add-on toolbars.

    Learn how to use the firewall at Vista4Beginners in Windows Firewall. Don't worry if you lose track of the link, it can always be found in Windows Vista Bookmarks.




    Remember - "A day without laughter is a day wasted."
    May the wind sing to you and the sun rise in your heart...