I try to avoid software thats end of life but occasionally I get stuck with a few programs that just don’t have any updated versions or are tied to a piece of hardware that I need to use. LCDC is software designed to run little LCD displays you can buy for your computer. I have one in particular thats over 3 years old now but still runs great. However it hasn’t been updated well ever.
Today I took to scanning my PC and discovered that some of the plugins for LCDC were infected. I decided to check the web site http://www.lcdc.cc/downloads.htm for updates, it didn’t appear off hand that any were actually updated, but it does appear that some are not infected and others still are.
Continue reading 'LCDC Plugins Infected With Malware'»
When it comes to passwords nearly everyone has their own system to deal with them. But how secure are they? Today most passwords under 9 characters are not really deemed secure thanks in large part to the databases that are available to simply look up the passwords. But aren’t they encrypted or secured from prying eyes you may be thinking? Sure but the most common form is to save them in MD5. SHA1 and similar variants are uncommon as well as better methods but for the vast array of online web sites, MD5 is considered standard.
Continue reading 'How Secure Is Your Password?'»
Well it appears they were not really screensavers or themes after all. Instead they were DDoS related Malware.
The Gnome ‘waterfall’ Screensaver http://jamesfriesen.net/762
The Ninja Black Theme article http://jamesfriesen.net/f6q
A quick fix for these can be found on http://ubuntuforums.org/showthread.php?t=1349801 and the gory details are http://ubuntuforums.org/showthread.php?t=1349678
This command below should remove the offending scripts for an infected machine. DO NOT run this unless you know you are infected.
sudo rm -f /usr/bin/Auto.bash /usr/bin/run.bash /etc/profile.d/gnome.sh index.php run.bash && sudo dpkg -r app5552
I recevied a rather interesting spam the other day and it would seem to have included some well private details. It looks like this email contains login information for various mail systems but I honestly did not follow up with it. I figured it may be of interest to the owners of these sites so I’m posting it here rather than attempt to start tracking abuse emails for various domains.
Continue reading 'Spam with a bonus — ‘Oops’'»
With a great deal of disappointment I have to make this post. I have been a avid user of this tool in the past (I’m still running a pretty old version of this on a XP box) since it expedited deleting of files that were locked by an application. It would clearly identify whom locked the file and give me the option to delete it. However it appears that it is in fact bundled with ADWARE. This is defined by some AV products as a Trojan, including Microsoft Essentials as TrojanClicker:Win32/Yabector.gen
It should be noted that CNet’s Download.com ‘verifys’ its spyware free, yet obviously either this was a clear ‘miss’ on their part, or they do not classify adware as spyware. This confirms my thinking that anything on Download.com should be considered ‘risky’ software since they either mislead or don’t bother to check the software that’s uploaded or availble from download.com. My thinking is they simply are misleading by ‘verify’ing it contains no spyware. Others have disclosed this over the past year and a bit that this version has been around for download so I think ample time was provided for Cnet to correct this.
Continue reading 'Unlocker 1.8.7 Infected with Trojan Adware'»
Security
adware, ample time, audio, availble, cnet, copy, disappointment, EAC, ebay, ebay link, essentials, exact, malware, microsoft, old version, trojan, unlocker, win32, yabector