I try to avoid software thats end of life but occasionally I get stuck with a few programs that just don’t have any updated versions or are tied to a piece of hardware that I need to use. LCDC is software designed to run little LCD displays you can buy for your computer. I have one in particular thats over 3 years old now but still runs great. However it hasn’t been updated well ever.
Today I took to scanning my PC and discovered that some of the plugins for LCDC were infected. I decided to check the web site http://www.lcdc.cc/downloads.htm for updates, it didn’t appear off hand that any were actually updated, but it does appear that some are not infected and others still are.
Continue reading 'LCDC Plugins Infected With Malware'»
Security
computer, dll, download, file, good, infect, LCDC, lcdc.cc, list, malware, online, OS, packed, pc, plugin, site, trojan, unknown, update, win32, windows media player, yabector
When it comes to passwords nearly everyone has their own system to deal with them. But how secure are they? Today most passwords under 9 characters are not really deemed secure thanks in large part to the databases that are available to simply look up the passwords. But aren’t they encrypted or secured from prying eyes you may be thinking? Sure but the most common form is to save them in MD5. SHA1 and similar variants are uncommon as well as better methods but for the vast array of online web sites, MD5 is considered standard.
Continue reading 'How Secure Is Your Password?'»
Security
cracker, data, login, md5, method, methods, online, OS, password, passwords, RC, site, ssl, Store, system, unknown
Received an email this week that looks like your typical spam and it comes with a DOC file attached to it. I included the md5 in the subject for ease of tagging and searching.
It is boring stuff, but it seems very familiar. I am sure this template of spam (if you will) has been sent to me before. Its subject says its from Ms. Cynthia Chalker (From Canada), but the reply to is a South African address, and it’s using msn.com/hotmail.com as the method of delivery (apparently).
And like it says, I have a winning notification that I have won the South African…something. But I have won. Phone number to call to claim my winning prize, and a DOC file attachment.
Obviously I have not won anything. This could be a very simple attempt to get you to call and give information away, or for them to convince you to charge your credit card for processing fees I am not certain.
Continue reading 'Unknown DOC file in email a7b207839f751a525f2328f3a07e7cb9'»
Security
chalker, claim, content type, core, doc, email, file, hotmail, lottery, md5, message id, method, microsoft, microsoft smtpsvc, nx, OS, phish, RC, return path, scam, spam, spam traps, unknown, update
I saw this comment today on a malware site and I normally read them to see how folks troll malware sites looking for blame.
Folks, malware is your problem, not anyone elses. I am constantly reminded how people fail to understand that its their actions and choices that cause the infections, and today social engineering is a big reason.
Even malware experts are not immune from falling victim to their tricks. Its been like this for years and outside of the increase in targetted attacks,
its still the #1 reason.
Continue reading 'Editorial: Understanding why Malware infects your PC'»
Security
7, adware, atm, bad, boot, bot, canadian government, change, claim, close, computer, criminal, cyber, data, doc, download, EAC, email, exact, falling victim, file, fix, free assistance, Game, good, good software, google, gui, honesty, infect, innocent victim, install, lifesaver, list, login, malicious software, malware, malware removal, method, methods, microsoft, moreso, mvp, online, OS, pc, phish, phishing, prevent, problem, RC, scam, shell, site, social engineering, software tool, solution, sping, Store, sun, system, system integrity, time protection, time troubleshooting, trend micro, unknown, virus products, windows
If you had an opportunity to view your local newspapers job classifieds this weekend you may well find an ad like this one. 
It looks like a highly sincere advertisement seeking folks who would like an opportunity like this. They obviously are seeking to appeal to anyone interested in a highly flexible and possibly rewarding (getting paid to shop) opportunity. The site seems to indicate a 4-12 hour work week on average and you are considered part time. This is all cool. However, what isn’t so cool is the lack of ANY security features for the sites ‘job application’ forms.
In my eyes this is very troublesome that anyone would submit this much personal information without any measures at encrypting the data to the site. And it wants a LOT of data from you.
Continue reading 'Looking for Work – Qualityshopper.org wants you, but does it secure your data?'»
Security
computer, criminal, data, domain name registration, e mail, email, gmail, good, hotmail, hunting, insecure, job, job application forms, list, local newspapers, mail telephone, methods, news, problem, public interest registry, qualityshopper.org, RC, registration record, registry, registry operator, safeway, safeway inc, site, solution, ssl, system, unknown, update, whois domain
Comments Off 
