PC repair,home callout,computer services,pc services,computer repair,computer sales,computer tuition,computer support,SJB Computing,computer,pc,laptop,notebook,virus removal,spyware removal,adware removal,antivirus specialist,spyware removal specialist,adware removal specialist,computer maintenance,mobile,repairs,tuition,training,plymouth,england,united kingdon,staddiscombe,plymstock,plympton,wembury,down thomas,heybrook bay,ivybridge,devon,website,webmaster,web design,graphic design,consultancy,repair,simon barnes

...SJB Computing - Computer services, repairs, sales, computer lessons & website/graphic design
 
 security home | services | contact 

Offering Plymouth and the surrounding area a first class, personal 'one-stop' computing service.

...all things I.T.
Security Issues...

 

A new and novel way of spreading viruses and trojans has come to light over the past weeks...
Several instances have been reported of people finding supposedly 'lost' USB sticks  just lying on the pavement or carpark floor.  These unlucky souls subsequently inserted the sticks into their computers or laptops which instantly became infected with a rather nasty and insidious Trojan Horse.  This file trawls the infected computer sniffing out  internet bank login details.  YOU HAVE BEEN WARNED!

NASTY COPY PROTECTION ON SONY CD'S
Sony BMG
said today it will offer a patch for one of its own exploits - one that comes bundled with its music CDs.

The code cloaks itself and by intercepting and redirecting low level windows system calls, forces the audio through a custom player, and restricts the number of CD burns that can be made.

As Sys Internals' Mark Russinovich discovered this week, removing the Sony code using standard anti-malware tools leaves the user with an inoperable CD drive.

Russinovich also pointed out that because the cloaking technique it used to hide itself was so crude, malware authors could hide their own nefarious programs on users hard disks using Sony's DRM software.

However, the patch that Sony will offer doesn't remove the 'rootkit' DRM: it only makes the hidden files visible.

Macintosh and Linux users are unaffected by the DRM kit, which only works on Windows PCs.

It isn't quite the "bombs" the RIAA once suggested it was developing to deter music downloads, but it's in the same spirit.

And here's the patch from First 4 Internet Ltd, the British company that developed the DRM software .

"This Service Pack removes the cloaking technology component that has been recently discussed in a number of articles published regarding the XCP Technology used on SONY BMG content protected CDs." [our emphasis]

The note continues: "This component is not malicious and does not compromise security. However to alleviate any concerns that users may have about the program posing potential security vulnerabilities, this update has been released to enable users to remove this component from their computers."

But wait! Don't do that just yet...

Anti-malware company F-Secure discusses the Sony DRM software here. F-Secure says its rootkit detection software will spot the hidden files, but strongly advises users not to remove it using its Blacklight software, and instead advises users to contact Sony.

"If you find this rootkit from your system, we recommend you don't remove it with our products. As this DRM system is implemented as a filter driver for the CD drive, just blindly removing it might result in an inaccessible CD drive letter," advises F-Secure.

It is alarming how little outrage there is from ordinary PC users. While Register readers are well versed in the restrictions of DRM and the dangers of malware, there's little sign the public shares this knowledge.

Incredibly, the Sony DRM malware has been out on the market for eight months and is bundled on 20 CD titles. Sony said it hadn't received a single complaint until this week. So, disturbingly, most people either haven't run into serious problems yet, or even more disturbingly, don't find the Sony DRM particularly onerous. We pray it's not the latter.

However, Sony's decision to offer a 'patch' that fails to remove the DRM code suggests it isn't too concerned by the howls of outrage heard this week from sophisticated PC users.

And with this level of apathy, the music giants will be emboldened to try these techniques again. And again. And again.

To combat this it will help you to disable autorun on your CD/DVD drive(s)


The UK now holds the mantle of being the worst country in the world for computer viruses and infestations of malware, spyware and adware - thanks to the very swift introduction of broadband!  Users who are unaware of these problems have switched to the super-fast broadband internet connections, unknowing of the problems ahead.

Judging by the amount of computers 'infested' with spyware, dialers (software which connects your computer to premium rate services), pornographic content (unwittingly or unknowingly and usually automatically downloaded) and general malware (malicious software) - all managed on a modem dialup connection, the future looks rosy for the hackers and ne're-do-wells!  Once these machines are permanently connected to the Internet, they will quite literally be able to 'fill their boots' with information gleaned from your computer!

ARE YOU SAFE?...are you SURE??  A security check and update, including disinfection & immunisation will save you time, sanity and money in the long run.  Don't wait until it's too late.  These are not scare tactics, they are annotations from real-life computers I have seen over the past year or so: instances are rapidly on the increase.  Don't wait until you have a telephone bill in the hundreds of pounds or a computer which steadfastly 'refuses' to connect to the internet any more - it will, in most instances, actually be connected to the internet, using your connection for it's own nefarious ends and just denying you access.  Do you use your credit card for transactions?  Brrr, doesn't bear thinking about does it?

Following a consultation and immunisation your Internet experience will be as safe as is possible to guarantee in this day and age.

Anti-Virus

If you use a computer, THIS IS A MUST!!!  The 'It won't happen to me' or 'I only get email from people I know' brigade are the first to suffer!  Also, this helps the viruses propagate themselves, they rely on people not being immunised thus passing the infection on to others.  It is the most innocuous piece of software, rather like buying tyres for a car...They don't make the car look any better, but when you need to stop in a hurry or manoeuvre quickly on a wet road you will be glad you fitted the new tyres!  Basically, anti-virus software sits as a safety net and will catch and quarantine any infected file before it gets it's grubby mitts on your computer!  - Value for money insurance!!

Firewalls A firewall is literally a computer term for a firewall!  A barrier between you and the internet, which will stop any unwanted traffic breaching the 'gap' between your computer and the World Wide Web.  It will also police any outgoing traffic in much the same way - so if you had 'caught a cold' with a trojan or worm, as the little devil tries to contact the outside world, your firewall will or should stop this 'illegal' movement of data.  This is obviously a simplified overview, but it will give you an idea of the importance of having a firewall - they're no longer the sole domain of business and commerce and large IT considerations - they are for you and me too!  Especially if we have a broadband connection.

Firewalls come in two favours - hardware and software...

Free Software? Remember, there is no such thing as a free lunch...usually!

Some free software is invaluable - most contain some form of spyware or malware.  No truly useful or legitimate software tries to automatically install itself, or nags you to install it.  Think of door stepping -  do you REALLY want everything offered to you on your doorstep?  Do you instantly accept the word of someone on your doorstep who tells you your roof needs repairing and let them do it?

Getting free software via the internet is very much like making love to a beautiful woman....umm I mean very much like the 'buying off the doorstep' analogy!  Any truly useful FREE software on the internet has to be sought out, downloaded and installed by the PC user - it never just  presents itself to you as if by magic.  Any window which pops up whilst you are surfing the internet extolling the virtues of their program and warning you of the dia consequences of NOT installing their program IS LYING!

DO NOT INSTALL ANYTHING OFFERED TO YOU VIA A POP-UP WINDOW...or you WILL regret it!  Your PC is not broadcasting anything it shouldn't be...the pop-up is just 'reading' your IP address - something EVERY website can and usually NEEDS to do.  They will try every trick in the book, including frightening you into downloading software; this will end up being porn or premium rate diallers, webpage hijackers or pop-up generators.

IF IN DOUBT...LEAVE IT OUT!

   

...Safe as houses?

©2004 SJB Computing .