Blocking Adware, Spyware, and Malware using the Hosts File

May 28th, 2007

There are many bad places on the World Wide Web. And by bad I don’t mean poorly designed Web sites containing pages filled with useless information (my personal Web site would qualify here). I am referring to Web sites that are specifically designed to do bad things to your computer. These so-called malicious Web hosts have but one purpose: to infect your computer with Adware, Spyware and even Malware when you visit their Web pages. There is a lot of money to be made in stealing your private information, tracking what you do on the Internet, and gaining control of your computer. Malicious Web sites are a significant tool used to accomplish these nefarious goals.

I know what you are thinking: “There are a lot of free Spyware and Malware scanners out there. I’ll just use one of those!” Yes, there are many free and low-cost anti-Spyware and anti-Malware programs. However, most virus and Spyware scanners work by identifying malicious software after it has infected your computer (and if you attempt to remove the Malware you can never be sure that it is truly gone). In other words, scanners are reactive to the presence of malicious software on your computer. What you really need is protection that is proactive and prevents the Malware from infecting your computer in the first place. And wouldn’t it be nice if this protection were simple to install, transparent to operate, and be free of charge as well? Have you ever heard of the hosts file?

Read the rest of this entry »

What is the Windows Vista Administrator’s Password?

May 21st, 2007

After you installed your first copy of Windows Vista, how long did it take you to realize that you didn’t know the administrator’s password? With me it was about a week before I needed to make some changes in the file system. It suddenly occurred to me that being logged in as administrator might make the User Account Control dialog box go away, but I didn’t know the administrator’s password! What the heck is the Vista administrator’s default password?

Unlike the previous releases of Windows, Windows Vista does not automatically create an Administrator account during installation. The theory is that the typical Windows user does not need to run with administrator privileges. Using a non-administrator account will prevent a Windows user from accidentally deleting operating system folder, files, and registry information, and prevent any Malware infecting the computer from doing the same. However, if you really need to run as an Administrator, you can easily activate the built-in Administrator account yourself.

Read the rest of this entry »

Do I Really Need 64-bits?

May 13th, 2007

Desktop computer workstations with 64-bit processors are now commonly found in advertisements presented to home and small office computer buyers. Dell is offering 64-bit desktop systems with Intel Xeon and AMD Athlon 64 CPUs. Apple has had 64-bit Power Mac G5 systems for years and now also offers an Intel Xeon-based Mac Pro with four 64-bit cores. Do-it-yourselfers can easily buy 64-bit motherboards for Intel and AMD 64-bit processors from hundreds of vendors on the Web.

There are also 64-bit versions of Mac OS X (10.5), Linux, and Microsoft Windows XP and Windows Vista to run on 64-bit hardware. Software developers are now writing true 64-bit programs that can make full use of the resources of 64-bit operating systems, and not simply rebuilding 32-bit programs with a 64-bit compiler. Power, speed, and capacity for the future are all part of the 64-bit promised for consumers.

But, despite the increasing available of 64-bit technology, do you really need a 64-bit desktop computer?

Read the rest of this entry »

Microsoft Windows Patch Tuesday for May 2007

May 9th, 2007

A happy Microsoft Windows Zero-Day Wednesday to you all! Microsoft had released its monthly and ongoing series of updates for Microsoft Windows and applications for May 2007. These updates address a total of 19 security vulnerabilities, including two known zero-day vulnerabilities. The zero-day vulnerabilities involve Microsoft DNS Server and Microsoft Word 2000, and exploits have been verified to be in use or have had proof-of-concepts released to the Internet.

The Microsoft DNS Server zero-day vulnerability involves a stack-based buffer overflow in its RPC interface, which allows remote code execution using the account privileges of the DNS Server. This vulnerability affects Windows 2000 Server SP4 and Windows Server 2003 SP1 and SP2.

The Word 2000 zero-day vulnerability causes Word to crash when performing an undisclosed action, possibly when opening a Word file containing the exploit.

There are also three known remaining zero-day exploits for Microsoft Windows or Microsoft applications that are active but still unpatched. Hopefully, these patches for these vulnerabilities will be released next month.

The remaining updates repair remote execution vulnerabilities in Microsoft Office Applications (Word and Excel), Microsoft Exchange, and an ActiveX control associated with the Windows Cryptographic API. There is also a cumulative security update for Internet Explorers 6 and 7 which also fix several remote code execution vulnerabilities. These patches apply to Windows 2000, XP, Media Center, Vista, and Server 2003.

If you need to know more details about this month’s Microsoft Windows updates or the problems they address, please visit the links below. See you next month!

Microsoft Security Bulletin Summary for May 2007

Microsoft Security Bulletin Summaries and Webcasts

eEye Digital Security - Microsoft Patch Disclosure - May 2007

[tags]Security Patches,Windows[/tags]

Just say "No" to WEP

May 5th, 2007

Network security people have long warned about the dangers of unsecured 802.11 wireless networks. Failing to enable even basic security measures on a wireless network will leave your computers–and your private data–exposed to any wireless hackers that might be in living your neighborhood, or simply driving by your house. So how do you keep the information streaming across your wireless network secure?

The recommendation for many years has been to enable WEP encryption. WEP (Wireless Equivalent Privacy) was the very first security mechanism for 802.11 wireless networks. It provided data privacy by encrypting the data contained within each wireless network packet. WEP provides a greater level of privacy than found on a open wireless networks, and insured that your data could not be “sniffed from the air” by someone using a scanning or packet capturing tool. However, in the present day, it has been proven that WEP itself is not secure–and therefore neither is your WEP-encrypted wireless network.

Read the rest of this entry »

Buying a Dell PC? Ubuntu it!

May 1st, 2007

Today Dell announced that by the end of this month it will offer laptop and desktop system pre-installed with Ubuntu Linux. Dell has partnered with Canonical to make Ubuntu 7.04 available on select systems for customers desiring an alternative to the Windows operating system on Dell computers. Dell has previously sold enterprise system pre-installed with Red Hat Linux, but the move to sell systems with Ubuntu is in response to many requests from Dell’s customers.

This announcement on Dell’s blog features a video interview with Canonical’s CEO and Ubuntu’s founder Mark Shuttleworth.

Do you have questions about Ubuntu on Dell computers? Visit the Dell Linux Community Board.

Do you have question about Linux itself? Visit the LinuxQuestions.org Wiki.

[tags]ubuntu,linux,dell[/tags]

Reading and Writing Office 2007 Files in Office 2000, XP, and 2003

April 27th, 2007

The programs of Microsoft Office 2007 are capable of reading files created by all previous versions Microsoft Office and even earlier releases. For example, Word 2007 can read .doc files created by any version of Word from 1.0 to 2003. When an Office 2007 program opens a file saved using an older Office format, it uses Compatibility Mode to correctly interpret and render the file’s contents. This excellent functionality, however, is not all that you need to make the move to Office 2007.

A great concern among possible Office 2007 adopters is the ability to share Office 2007 files (Word, Excel, PowerPoint) with people who haven’t yet made the move to Office 2007. Microsoft has addressed this concern by releasing the Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats. Using this update, users of Microsoft Office 2000, Office XP, or Office 2003 will be able to open, edit, and save files created using Word, Excel, and PowerPoint 2007. It also upgrades Microsoft Office Word Viewer 2003, Excel Viewer 2003, and PowerPoint Viewer 2003 to view files saved using the new Office 2007 formats.

Even if you are not considering making the move to Office 2007 yourself, do consider the possibility that one day you may download or receive files created using Office 2007. Having already downloaded and installed this upgrade will save yourself the time of searching for this blog article telling you how to do it.

Xbox 360: Three red lights flash on the Ring of Light

April 25th, 2007

There has been a lot blogged about the apparent hardware problems with the Xbox 360. I don’t own an Xbox 360 (I’m strictly a PC gamer), but I have many friends that own and love their 360, and none of them has had more than the occasional crash (these are mostly due to software problems in the game). However, this situation finally caught my attention when the Penny Arcade guys blogged about it and linked to Microsoft Knowledge Base article 907534, indicating that Microsoft says too the problem is real.

The specific problem Xbox 360 owners are seeing is three of the lights on the Ring of Light (RoL) continually flash red indicating a hardware failure. 360 users commenting at DevLib and 1UP note that when the three RoL appears, the 360 sometimes continues to operate, it may need to cool down, or sometimes it’s a complete brick. This seems to happen with 360 boxes that have been used for only a few months, indicating if you’ve made good use of your 360 for more than six months you may never see this problem.

What should you do if your beloved 360 gives you the three-flashing-lights salute? Just like when you see and idiot light on the dashboard of your car, you can know that something has gone terribly wrong–regardless if the 360 continues to operate. The Microsoft Knowledge Base article points to a few other articles containing things to try, but with three flashing reds it’s like giving a Windows user false hope by telling them all they need to do to fix the problem is to defrag their hard drive. Instead, immediately call Microsoft and make use of your warranty (you did buy the extended warranty, didn’t you?).

Thunderbird 2 Released! Why are you still using Outlook Express?

April 19th, 2007

Mozilla has released Mozilla Thunderbird 2, the newest version of its free and open source email, RSS, and NNTP client. Thunderbird 2 supports both POP and IMAP email servers and Google Gmail, and is an RSS News and Blog feed reader and a USENET Newsgroup reader. The new features of Thunderbird 2 include advanced folder viewing options, faster email folder searching and browsing, saving email searches for later use, creating customizable email templates, and the organization of email using text-based tags, the same tagging feature found on blogs, photo, and link-sharing Web sites. And like the Mozilla Web browser FireFox, Thunderbird supports hundreds of add-ons (plug-ins) to add many useful features.

Thunderbird is a very popular email program commonly used in place of Microsoft Outlook and Outlook Express. Thunderbird installs and starts up quickly and has a well-organized and intuitive user interface. It includes an excellent junkmail (spam) filter and a spelling checker, both features which are sorely lacking in the aging Microsoft Outlook Express. Thunderbird also supports the ability to access Web-based email services, such as Google Gmail, without using a Web browser.

Read the rest of this entry »

Have a Spare PC? Ubuntu it!

April 18th, 2007

I have a lot of inactive PCs in my house. They include several Pentium and Pentium III workstations, a dual-180MHz CPU Pentium Pro server, and even a Winbook 486 laptop (fondly known as “the brick that ate my data”). The oldest in my collection is an 80386 motherboard with 4MB of RAM that I bought “at cost” for $800US back in 1989 (retail was $1200US) from a place called Beaver Computers somewhere in Oregon. My oldest machines, a Heath/Zenith Z-89A (1983), a Radio Shack (Tandy) TRS-80 Model 1 (1984), and a Polo System I (MS-DOS) from Polo Microsystems (my first PC clone, 1985), have sadly long been scraped.

So what does this high-tech nostalgia have to do with Ubuntu? And just what is Ubuntu? Well, you know how each new release on Windows is less likely to work well on older computers? And how you actually have to pay for each copy of Windows that you install? (Wipe that smirk off your face.) Well, unlike Windows XP and Vista, Ubuntu an operating system that happily runs very well on older PC computers–and is completely free.

Read the rest of this entry »