Tbone's BLOG

Vista SP1

Xnoty (tbone) — Thu, 24 Apr 2008 09:13:08 GMT

Windows Vista SP1 Contains Over 200 Major Improvements

Deploying a major new Operating System is never straightforward. But I believe Windows Vista SP1 is an update that covers not only the expected security and performance patches, but also provides added capabilities to make the environment more manageable and robust.

The Operating System You've Been Waiting for

In the past 14 months the Windows ecosystem has matured, with over 2,500 applications and over 15,000 devices earning either the 'Works with Windows Vista' or 'Certified for Windows Vista' logo.

Around 100 top selling applications and 46 of the top 50 downloaded applications on Download.com are now compatible with Windows Vista.

The Smoothest Possible Transition

Windows Update has also helped us understand which additional device drivers were needed - since the original Windows Vista launch, the number of additional drivers on Windows Update has grown from 13,000 to more than 54,000.

So,......

What is RATS?

Xnoty (tbone) — Tue, 01 Apr 2008 13:31:37 GMT

This week My conversations were about Remote Access Trojans (RATs) and the majority of people I spoke too didnt know or understand what they were(RATS) are malicious software programs that Third-parties can use to control your computer through your Internet connection.

A RAT can let a Third-parties view and change your computer's files and functions, monitor and record your activities, and use your computer to attack other computers without your knowledge.

How RATs get on your computer

RATs often come hidden in illicit software and other files and programs that you might download from the Internet. They can also appear in e-mail or instant messages disguised as attachments such as funny images, greeting cards, or audio and video files.

If you click the attachments to open them, a RAT might be secretly downloaded as well. Sometimes a RAT can even get on your computer without any action from you, by taking advantage of vulnerabilities in software or the Internet.......

Todays choice

Xnoty (tbone) — Sat, 29 Mar 2008 20:46:09 GMT

For the trekkies got to see this one.

malicious code in your future

Xnoty (tbone) — Thu, 27 Mar 2008 09:50:36 GMT

we have observed some suspicious activity on the Chinese Yahoo astrology site, http://astrology.cn.yahoo.com. Upon investigation, we determined that the site in question contained an iframe that was linking to the domain luckty.com, an astrology-based match finding company. This page contained an embedded iframe that linked to a malicious site that was exploiting the Real Player ierpplug.dll ActiveX Control Buffer Overflow Vulnerability and the MSIE ADODB.Stream Object File Installation Weakness to download malicious code onto a compromised machine.

The downloaded malicious code samples are detected as Downloader with definitions version 03/22/2008 revision 2 and later.

Posted by Hannah Chen on March 24, 2008 05:00 AM

Virus continued

Xnoty (tbone) — Mon, 24 Mar 2008 19:14:14 GMT

Discovered: March 20, 2008

Updated: March 20, 2008 5:21:47 AM

Type: Trojan

Infection Length: 11,264 bytes

Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Vista, Windows XP

Trojan.Dronjaga

Risk Level 1: Very Low

When executed, the Trojan copies itself as the following file:
%System%\userinit.exe

The original version of the above file is copied as the following file:
%System%\userini.exe

The compromised computer is unable to restart.

The Trojan attempts to download a potentially malicious file from the following URL:
[http://]djaga-djaga.cn/harisma/gate[REMOVED]

This url is no longer available wonder why???? please dont attempt too unless you know what you doing and if you do be cool to talk to you.

Removing the beast is as follows:

Restart the computer using the Windows Recovery Console
Disable System Restore (Windows......

Computer virus

Xnoty (tbone) — Mon, 24 Mar 2008 12:29:14 GMT

Here is a little something to read over a coffee. Iam open to disscussion on the subject anyone having trouble with recurring trouble should check out these files and also the programs they are using this is an example of one of them.

W32.Alcra.F
What it does

Discovered: February 17, 2006
Updated: February 13, 2007 12:51:25 PM
Also Known As: Win32/Alcan.I [Computer Associ, P2P-Worm.Win32.VB.dw [Kaspersk, W32/Generic.m [McAfee], W32/VB-YY [Sophos], WORM_GAOBOT.DF [Trend Micro]
Type: Worm
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

When W32.Alcra.F is executed, it performs the following actions:

Attempts to disable several programs by creating the following empty files with the hidden and system attributes set:

%System%\cmd.com
%System%\netstat.com
%System%\ping.com
%System%\regedit.com
%System%\taskkill.com
%System%\tasklist.com
%System%\tracert.com

Note: %System%......

Letters to you

Xnoty (tbone) — Sun, 23 Mar 2008 21:10:01 GMT

As promised

Song Chords

Song Title: Letters to You
Artist: Finch
Chords used: G,D,A,E,Em,Am

(G)Can't you (D)see that i wanna (Am)be there with (Em)open (D)arms

(G)It's empty to(D)night and i'm all a(Am)lone

Get me thr(D)ough this (A)one

(E)Do you (G) notice i'm (D)goooo(A)oone?

(E)Where do you (G)run to so (D)far a(A)way?

(D)I want you to (A)know that I (G)miss you I (A)miss you (G) so

(D)I want you to (A)know that I (G)miss you I (A)miss you (G) so

(G)I'm writing a(D)gain these letters to (Am)you on (Em)much I (D)know

(G)But i'm not (D)sleeping......

Vista and Nero

Xnoty (tbone) — Sun, 23 Mar 2008 20:35:10 GMT

00:25:29 2008-03-24

How many people get caught in the trap? Your best friend has just bought a computer and doesn't really understand what they are doing, you with having a little knowledge feel obliged too help them and you install the software for them inadvertently installing the wrong file version by mistake and they get loads of warnings and all of a sudden you are to blame for the obvious demise of their machine and yet they still don't know what is wrong.

This week I have had numerous conversations about Nero and Windows Vista™both of which I was informed were no good and neither were the people who were trying to help them. This is completely untrue and unfounded there is usually a solution for all P.C. bugs.

Nero supports the new operating system Windows Vista™ since the October 2006 Web Release
(version 7.5.7.0 and higher). As previous versions of Nero 7 cannot be installed on
Windows Vista™; you need to update to the newest version of......