Another reason to Save Windows-XP

Yet another reason For Micro$oft toContinue distributing Win-XP. If you would like to help Save Windows XP, see the Banner at the top of this Blogs homepage, or use this link- Save Windows XP

Vista SP1 prerequisite updates send some PCs into endless reboot

Last week's updates prompt support complaints; problem first reported in December

By Gregg Keizer

February 17, 2008 (Computerworld) Updates that Microsoft Corp. began feeding Windows Vista users last week to prep PCs for next month's release of Service Pack 1 (SP1) have crippled some machines, according to messages posted to the company's support site.

Last Tuesday, Microsoft started sending Vista users two final prerequisite updates that are required before SP1 can be installed in March. The updates to the operating system's install components were delivered via Windows Updates, which automatically downloaded and installed them on the majority of Vista machines.

Users quickly started squawking.

In most cases, they reported that the final update hung while displaying the message "Configuring Updates Step 3 of 3 - 0% Complete," which was followed by a reboot of the PC. Which was followed by another reboot, and another. "[It] reboots ad infinitum," said Frank Melk on the Microsoft support newsgroup. A smaller number reported a different problem: After the update, their computer refused to boot normally.

Trying to boot into Safe Mode did no good, users said; the reboot loop cranked up then as well. "I am unsure as to what to do, because entering Safe Mode gives the same screen," Melk said. "Furthermore, I have no restore points saved, so going back to a known previous good config is no good either!"

Full Article @: ComputerWorld.com

Better Integrated Spy Chip ???

Method of reliably electroless-plating integrated circuit die

Abstract

The present invention is a reliable method of electroless-plating integrated circuit die that achieves high yield. Die are attached to a holder using a polyimide adhesive to eliminate voltage differences on bond pads which would otherwise interfere with the plating. The die are aggressively cleaned using multiple cleaning solutions, one heated to a user-defined temperature. Each cleaning is followed by an aggressive rinse in de-ionized water. Die are immersed into multiple metal solutions at user-definable temperatures. Each immersion is followed by an aggressive rinse in de-ionized water, one with heated de-ionized water.


Inventors: Pal; Rathindra N. (Beltsville, MD), Berlin; Kingsley R. (Odenton, MD)
Assignee: The United States of America as represented by the National Security Agency (Washington, DC)
N/A (
Appl. No.: 11/253,879
Filed: October 19, 2005


More:http://tinyurl.com/356pby

Save Windows-XP

You may have NOTICED the banner at the top of the Home page asking you to help Save Windows-Xp. Why Save Windows-XP, you might be asking yourself. Because there are some of us out here that still use it, and will continue too use it. But Why you ask, Don't you want VISTA? Well sure some of us want Vista. We just can't afford it.

I have 3 boxes running Xp-pro and it would cost me a pretty penny to replace them with ones that could run Vista.

They say you would be able to buy a NEW Computer with XP installed for awhile, you just wont be able to go and buy the OS as a stand alone. I have gone to ALL of the stores in my area and it is NO where to be found.I have ask the sales people at these stores if they could Order me a copy and the Answer was NO.

My other reason besides the one above is- 'If it ain't Broke, why fix it'.

There are many more reasons and you can find them HERE

Internet billing based on usage

I guess this is the Wave of the future, like most European countries.

So, Time Warner Cable Inc said on Wednesday it is planning a trial to bill high-speed Internet subscribers based on their amount of usage rather than a flat fee.

I don't have Time Warner as my ISP. If I did And they Jacked My Bill they would more than likely Lose a customer.

My Provider from what I have been able to find Charges one of the Highest Rates in the country for high-speed Internet. I don't have a package deal or Bundle where you have Cable TV, Phone and Internet for one LARGE price. I don't watch much of the BOOB-TUBE, nor do I make long distance or international calls. I only have high-speed Internet and Pay $60.95 a Month. If, in the Near future my provider follows suit, I would hope my bill would decrease. If it doesn't decrease and stays the same I will continue my service. If it goes Up, I will cancel my service because I feel what I already pay is extreme.

So what if I have multiple boxes in my network. It is very rare that all are on at the same time. I don't DL videos or large files. I do run Limewire once in awhile, but even then I don't DL any videos or MP3's. [Yes, there are other types of Files out there that do contain information.]

I have family that Has high-speed Internet with a different ISP than myself. Their Monthly rates are anywhere from $24.95 / $42.00. I wish I could Change my ISP but that is part of how they screw you. You would think I could as we Live within a Mile of each other, yet the services offered seem to Stop on the Property lines. Go figure. I guess it really doesn't matter though, as we all have a different ISP by name, They are ALL Operated By AT&T.

I don't look forward to going back to Dial-up service, but it may come to this.

Anyway, this is my rant.

Malware Quietly Reaching 'Epidemic' Levels

New reports say malware increased by a factor of five to 10 in 2007

JANUARY 16, 2008 | 5:40 PM
By Tim Wilson
Site Editor, Dark Reading

Everybody knew it was bad, but few knew it was this bad.

In separate studies released yesterday, two research firms now say that malware increased between 500 percent and 1,000 percent in 2007, and it shows no signs of slowing down.

"The number of new strains of malware that appeared in 2007 increased tenfold with respect to the previous year," said PandaLabs, Panda Security's research arm, in a report issued yesterday. "Over the last year, PandaLabs has received an average of more than 3,000 new strains of malware every day. This represents a malware epidemic which -- although silent, with little media coverage and no widespread alerts -- is nevertheless dangerous."

The results indicate that signature-based defenses for malware are no longer effective, the research firm said. Some 72 percent of networks with more than 100 workstations -- and 23 percent of home users -- are currently infected with malware, despite having operative antivirus or other signature-based tools in place, PandaLabs said.

Experts at AV-Test, an independent testing organization, also reported skyrocketing incidence of malware yesterday. After a detailed count, the organization said it identified nearly 5.5 million different malware files in 2007 -- more than five times as many as in 2006.

AV-Test counted the number of files with different MD5 hashes, sometimes called "fingerprints." This includes malware which is packed using a different run-time packer or is differently encrypted, the testing organization said.

In 2007, AV-Test found almost 5.5 million such files, up from about 973,000 in 2006 and 333,000 in 2005, the report said. And the trend is accelerating: The group already has identified more than 118,000 different malware files in the first two weeks of January.

The results drove AV-Test to concur with PandaLabs's assessment. "The figures clearly demonstrate that the signature-based approach of current anti-virus software is no longer appropriate," the report said.

Micro$oft or MicroShaft

I reformatted my Laptop back in December to a Dual-Boot running WinXP-Pro and Linux-Kubuntu. I didn't update winXP until this morning. I have another box running Win-XP pro and Another Dual-Boot running the same as the Laptop,so I had plenty too play with. Anyway............After I downloaded the updates on the laptop I went to install them. I always Choose the custom install as I don't require all the BS Micro$oft wants to install, such as the Malicious Software Removal Tool. After My first experience with running it some time ago, when it would detect some of my NON-Microsoft programs and wanted me to let it 'FIX MY PROBLEM'.......Well you get the point.

So after removing the CHECK by the updates I didn't want and installing the updates, I also check Do not show these un-installed updates again. The prompt says It will Not Show them Again,so I reboot. After doing this 4 times and doing the same as stated above, I decide I would Capture what was going on. PAY Attention to the Video especially if you like many others don't really pay attention to the Prompt when Installing updates in the custom mode.

The catch when doing it the custom way is, when it is complete the Next Prompt should be to restart your computer so I pretty much just click the next or restart button Without Paying Attention. I know those of you out there know what I'm talking about. Anyway Long story short, Watch the Screen capture Below. It isn't the Best Quality.




If you want a FREE open-source Screen Capture Program, this is the one I used.

http://camstudio.org/

Digital photo frame contains Virus/Malware part2

In a previous post HERE
we learned of people either buying or receiving NEW hardware loaded with a virus or malware. While the reports speculate that this is not widespread, or in the wild, this can not by any means be the end of this. Since most,'not unlike myself' do not suspect a NEW device to contain a virus, we don't even think of looking/scanning for it on said device. This being the case, I am sure there are many others out there in the world that have become infected in this manner and don't even realize it.

In my previous post on this subject I said:

"Well the who seems fairly easy. Correct me if I'm wrong. The who is China. I say this due to the fact most of these types of electronics and damn near everything else comes from them. Under the Direction of whom is all together another Question."

This appears to have been somewhat CONFIRMED in this latest post from SANS Internet Storm Center where a reader reports, "Google-ing the name of the virus executable turns up three Chinese-language links."

What makes this all the worse is that some have an autorun.exe file. For those that don't know/understand what this is I'll try and simply explain. You know when you put a music CD or a movie DVD in and it starts Automatically, that's what autorun does. If this is the case, there is NO WAY to SCAN the device to detect the infection before it runs.

As I stated before this is BIG, and NO telling how many devices are infected without people realizing it.
_______________________________

http://isc.sans.org/diary.html?storyid=3807

Digital Hitchhikers Part Two
Published: 2008-01-04,
Last Updated: 2008-01-04 02:51:08 UTC
by Marcus Sachs (Version: 1)

Several days ago David Goldsmith posted a diary concerning a digital photo frame that came with a value added feature. Since then, two more readers have sent us notes concerning malware on digital photo frames that were purchased or received as Christmas presents last week. We've been in contact with the security team of the retail store chain where they were purchased as well as the product vendor and both swear that no malware is on the units they are selling.

So, dear readers, here is your first project for the New Year. If you either purchased or were given a digital photo frame, GPS unit for your car, external hard drive, or any other device that connects to your computer via a USB cable and
appears to your operating system as one or more mounted drives, please let us know via our contact form if you experienced any suspicious behavior that smells like malware.

To give you an idea of what we are talking about, here are edited excerpts from the three notes we have received so far:

First notification.

Behavior after attaching the USB digital photo frame to the PC:

1. MSCONFIG would not run - it would briefly open and then terminate

2. Blue screen when starting in safe mode

3. Many antivirus websites would result in browser terminating

4. Various popups for random name.exe "not valid image messages"

Using the CA AV2008 product, a new aggressive virus named Win/32Mocmex.AM was found on the photo frame (filename: kwjkpww.exe ). No detailed info on it is listed yet in their database. (More information was later available at http://www.prevx.com/filenames/394470622808329496-0/KAWDHZY.DLL.html.)

Second notification.

The attached file is from a digital picture frame. This file was originally named "autorun.inf", was marked as a hidden, system file, and was located along-side the sample pictures shipped with the picture frame. The program file launched by this autorun was deleted, but is a variant of the trojan Win32/Agent virus. This file was also marked as hidden.

It did appear all seals were intact and the product was carefully wrapped when it was unpacked. However, I can't say for sure that this frame was not a victim of a prior connection.

The virus scanner I'm using tagged the virus .exe file "cfhskjn.exe" as shown in this log entry:

Threat Name:Trojan:Win32/Agent

Detection Date and Time:1/1/2008 4:23 PM

File Name:G:\kwjkpww.exe

Threat Severity:Severe

Threat Category:Trojan

Threat found by On Demand Scan:(ANTIVIRUS_ONDEMAND)

Threat Status:Removed

so I'm thinking it was not the autorun.inf worm or "silly worm" as described in this link. Although I've not dug into this particular .exe code that was found on this frame, the classification as a Win32/Agent threat tells me it is not of a worm (self-propagating) type and behaves more as a Trojan threat.

Google-ing the name of the virus executable turns up three Chinese-language links. Using the Google-translate function, you get this web page from the first link:

http://tinyurl.com/28w8vc

which tells me this virus has been in circulation since at least Oct 30 of 2007.

Third notification.

I too connected a digital picture frame to my computer and received the nastiest virus that I've ever encounterd in my 20 plus year I/T career. The product vendor tells me it's not true however I know exactly what, how and when. The virus absolutely came from the frame. Is there any way to cooberate this?

This virus was indeed on the frame. It propagates to any connected device by copying a script, a com file and an autorun file. It hides all systems files and itself while completely eliminating the user admin ability to show hidden files. It creates processes that negate any attempt to go to anti virus and anti spam web sites. It prevents the remote installation of any anti virus components. I was able to remove it by using the attrib command to unhide then delete the files, then run Symantec anti virus. I also manually deleted the files from my USB drive and and flash drive that I used to back up my data. I then had to long format and rebuild my computer because I had no trust that it was safe.

I was using my computer the morning that it crashed without any troubles at all. I web mailed, VPN connected to my business network which is FDA regulatory compliant and very secure. When I completed my work I then connected the picture frame and my system immediately went crazy. After this happened I ceased to use my system and went to a second computer here I your publication that re-enforced my immediate conclusion.

By the way, I also received a digital photo frame for Christmas but have not had any problems with it other than the resolution totally sucks. But that's a subject of another diary some day. The GPS unit I bought in November mounts as a drive letter in Windows but it too had no malware on it. We are pretty certain that this is not a wide-spread problem but we need to know if others have experienced anything like this. Please use our contact form to report any observed malware-like behavior in any of these external devices you recently purchased or received as gifts. Please be sure to include information about the model name, where you bought it, and if you've been in contact with the store or product vendor. We'll provide a summary in a few days with details on what was reported.

Many thanks to readers Edd, Larry, and Rick for bringing this issue to our attention.

Marcus H. Sachs
Director, SANS Internet Storm Center

Military Issues Warning on Chinese Hackers

I have known about China hacking various nations for awhile. They[meaning you know who] try and keep things like this from making the snooze in the USA. Hell, I'll go as far to say that 85% of all hacks come from China. At least thats what my Smoothie tells me.

Military Issues Warning on Chinese Hackers

By Jung Sung-ki
Staff Reporter
01-01-2008
http://www.koreatimes.co.kr/www/news/nation/2008/01/205_16537.html


The South Korean military has issued a warning that computer systems of soldiers and defense institutes have become the victims of presumed Chinese hacking activities, a military source said Tuesday.

The source said hackers, believed to be Chinese nationals, penetrated computers of soldiers by sending e-mail involving hacking programs falsely titled ``the situation on North Korea's arms power.''

``We are now investigating several cyber hacking cases believed to be conducted by Chinese nationals based on evidence that the hackers stole information stored in soldiers' computers,'' the source said, asking not to be named.

The hackers appeared to have penetrated Web sites of military units and retired soldiers to steal e-mail adresses of individuals registered to the sites, he said.

The Defense Security Command recently distributed up-to-date vaccine programs to service members as a precautionary measure, he added.

Cyber attacks from China have become frequent and aggressive in recent years, according to reports.

The Chinese military created a cyber-hacking unit named ``NET Force'' in 2000 operated by about 1 million hackers, the reports said.

In 2004, the state-funded Korea Institute for Defense Analyses was hacked by a Chinese person.

Reports said last year Chinese military hackers were preparing a detailed plan to disable America's aircraft carrier fleet as part of an aggressive push by Beijing to achieve ``electronic dominance'' over each of its global rivals by 2050, particularly the United States, Britain, Russia and South Korea.

The U.S. Department of Defense said China's military regards offensive computer operations as ``critical to seize the initiative'' in the first stages of a war.

gallantjung@koreatimes.co.kr

Of course you do know who pretty much controls the South Korean government;.........don't you? Of course you do.......

2008 Election to be decided in Tennessee

By:Ed
12/31/2007


From Will Bush Cancel The 2008 Election?Global Research, August 7, 2007 Via~freepress.org We find -

In Florida 2000, Team Bush had a game plan involving a handful of tactics. With Jeb Bush in the governor’s mansion, the GOP used a combination of disenfranchisement, intimidation, faulty ballots, electronic voting fraud, a rigged vote count and an aborted recount, courtesy of the US Supreme Court.

In 2000 a compliant Democrat (Al Gore) allowed the coup to be completed.

In Ohio 2004, the arsenal of dirty tricks exploded. Based in Columbus, we have documented more than a hundred different tactics used to steal the 20 electoral votes that gave Bush a second term. More are still surfacing. As a result of the King-Lincoln-Bronzeville federal lawsuit (in which we are plaintiff and attorney) we have now been informed that 56 of the 88 counties in Ohio violated federal law by destroying election records, thus preventing a definitive historical recount.

As in 2000, a compliant Democrat (John Kerry) allowed the coup to proceed.

In 2008 they plan on stealing the Election, by Stealing identifying information of every voter in Nashville.

It was revealed Friday, 12/28/07 from Tennessean.com, That Multiple Computers [Electronic Voting Machines] containing the names, addresses and complete Social Security numbers of more than 337,000 Davidson County voters were Stolen over the Christmas holiday from the Metro Election Commission offices at Howard School Building, 800 Second Ave. S..

County election officials are warning the public to monitor their credit accounts for any suspicious activity.
They say the information could be used by identity thieves.

Identity Thieves? Funny they don't Mention Election Thieves.

On the contrairy, They tell you 'Trust Us',"The theft should not cause any problems for Nashvillians casting ballots in the upcoming presidential primary. Early voting begins Jan. 16."

It gets Better

During the same period, the State Safety Department's Information Technology building in south Nashville was broken in to.
Several laptop computers and a desktop computer were stolen from The agency that issues Tennesseans handgun-carry permits, and in the past it has overseen the unit that issues drivers' licenses.

But again don't worry, The Safety Department officials said they believe personal information was not compromised, because nearly all of the computers were taken from a repair office and their memories are believed to be blank.

I guess they don't understand themselves How A Computer Works. Yeah Right..

So the Memory is believed to be blank. What About the Hard-Drives ?

So on this, the Last day of 2007, we find the E-Voting Corruption already beginning. 2008 should be an Exciting year.

---

"Our enemies are innovative and resourceful, and so are we. They never stop thinking about new ways to harm our country and our people, and neither do we."
—George W Bush Washington, D.C., Aug. 5, 2004

"The more we do to you, the less you seem to believe we are doing it".
- DR.Joseph Mengele

New Hardware contains Virus/Malware

This is another report of buying NEW Hardware with Virus/Malware pre-installed on it.

So lets see now......We have HD's with them, We have USB sticks with them, and now the Digital Picture Frame.[Which I still think are cool.] I'm sure there are many other devices out in the Wild we don't know about. I mean if some of these things happened on your Box, would you suspect the New Hardware of installing or having installed it??

My Question is: Who is doing this, and why.

Well the who seems fairly easy. Correct me if I'm wrong. The who is China. I say this due to the fact most of these types of electronics and damn near everything else comes from them. Under the Direction of whom is all together another Question.

Is this another way to prepare for the coming 'CYBER WARS'?
Infect and control as much as possible before your adversary has a chance.
Sounds about right in War strategy.

------------------------------------

Digital Hitchhikers

Published: 2007-12-25,
Last Updated: 2007-12-25 23:24:44 UTC
by David Goldsmith (Version: 1)
http://isc.sans.org/diary.html?storyid=3787

We received a report this afternoon from someone who had recently received a digital picture frame. Unfortunately, it had a extra component with it. The built-in storage came with what appears to be some malware already loaded on it -- a file called 'cfhskjn.exe' was on it when unpacked.

Some of the behavior seen when the digital picture frame was connected to the computer was:

* MSCONFIG would not run - it would briefly open and then terminate
* The system would blue screen when starting in safe mode
* Going to various anti-virus websites would result in the web browser terminating
* Various popups for random name.exe "with 'not valid image' messages

This specific product was an "ADS Digital Photo Frame - 8" (sold by Sam's Club - see http://www.samsclub.com/shopping/navigate.do?dest=5&item=368725) but this type of infection can, and has affected other portable devices with internal storage.

Kaspersky has a blog entry 'Adventures at altitude' (see http://www.viruslist.com/en/weblog?discuss=208187471&return=1) about one of their employees who bought a Kingston CF memory card that came with a virus on it.

Whether its a picture frame, a digital camera or any USB, CF, SD, etc memory card, the portable nature of these devices dredges up of memories of all the floppy boot viruses we used to have to deal with. [ What's a 'floppy disk' you ask? ;-) ]

Care should be taken when attaching storage devices to your computer to ensure you scan them for possible malware and handle them in as secure a fashion as is possible.

David Goldsmith (dgoldsmith -at- sans.org)