Fishpc- Computer, Gamer Blog

Java.Trojan.Downloader.OpenConnection.AI

2011-03-21T03:52:00.000+10:00

( Trojan-Downloader.Java.Agent.hx TrojanDownloader:Java/OpenStream.AM Java.Downloader.123 )

Spreading:	high
Damage:	medium
Size:	3703
Discovered:	2010 Nov 12

SYMPTOMS:

Increased network activity. The presence of java.exe in the process list.

TECHNICAL DESCRIPTION:

Java.Trojan.Downloader.OpenConnection.AI is a malicious Java applet that downloads and executes arbitrary files. In the wild, it can be found as a Java archive. The malicious HTML passes the encrypted URL of the file to download and execute as the parameter a to the applet. The applet uses the CVE-2010-0840 exploit to bypass the Java sandbox.

The JAR file contains four class files in the bpac package:

KAVS.class;
a$1.class;
a.class - the applet;
b.class - the URL decrypter.

The applet starts out by generating a random name for the executable under the system temporary directory. The name is made up entirely of random digits and has the extension ".exe" appended.

Next, it checks whether the operating system is Windows, by searching for the string Windows in the os.name system property.

If the OS checks out, the applet downloads the file and executes it with a call toRuntime#exec.

The code is somewhat obfuscated, for example, the names of the system properties java.io.tmpdir and os.name appear reversed.

We have observed two variants of the decrypter:

One performs a series of single-character replacements on the URL, then appends
the string "?i=1".
The other one is a bit more complex, it assumes the URL isn’t encrypted at all, and duplicates some of the applet’s code. It downloads the file at the given URL, assumes it’s a PE executable and checks the Characteristics field of the IMAGE_FILE_HEADER for 0x2000, i.e., IMAGE_FILE_DLL.
It generates a random name made up of digits for the executable, under the system temporary directory, it appends the proper extension taking into account whether the file is a DLL or an EXE. If it’s an EXE, it executes it with a call toRuntime#exec, just like the applet does, if it’s a DLL, it registers it usingregsvr32.

Trojan.AutoIt.TD

2011-03-13T04:38:00.000+10:00

( Worm:Win32/Sohonad, W32/YahLover.worm.gen, W32.Imaut.N )

Spreading:	medium
Damage:	medium
Size:	464 KB
Discovered:	2008 Mar 07

SYMPTOMS:

The following files will be found on an infected computer:
   C:\Windows\RVHOST.exe
   C:\Windows\system32\RVHOST.exe

The following file will be found on infected removable storages:
   \New Folder.exe

Other symptoms: disabled Task Manager, disabled Registry Editor

Win32.Worm.Downadup.Gen

2011-03-08T03:55:00.002+10:00

( W32.Downadup, W32/Worm.AHGV, Net-Worm.Win32.Kido.bg )

Spreading:	high	Download removal tool
Damage:	medium
Size:	varies
Discovered:	2008 Dec 31

SYMPTOMS:

    Connection times out while trying to access various antivirus-related websites.
    Windows Update has been disabled.
    Presence of autorun.inf files in the root of mapped drives pointing to a .dll file inside the RECYCLER folder of the drive.

BehavesLike:Win32.Malware

2010-08-29T07:44:00.000+10:00

BitDefender reports BehavesLike:Win32.Malware: "BehavesLike:Win32.Malware
Spreading: medium
Damage: medium
Size: variable
Discovered: 2004 Oct 08

SYMPTOMS:
Not applicable.

TECHNICAL DESCRIPTION:
A heuristic detection of B-HAVE engine, commonly encountered on malware programs that try to disguise as legitimate applications.

Removal instructions:
Please send this file for analysis.
ANALYZED BY:
BitDefender Research Team"

BehavesLike:Win32.Malware

2010-08-29T07:43:00.000+10:00

BitDefender. BehavesLike:Win32.Malware: "BehavesLike:Win32.Malware
Spreading: medium
Damage: medium
Size: variable
Discovered: 2004 Oct 08

SYMPTOMS:
Not applicable.

TECHNICAL DESCRIPTION:
A heuristic detection of B-HAVE engine, commonly encountered on malware programs that try to disguise as legitimate applications.

Removal instructions:
Please send this file for analysis.
ANALYZED BY:
BitDefender Research Team"

Bitdefender virus real-time report - Adware.Myway.AD

2010-08-27T08:04:00.000+10:00

Bitdefender - Adware.Myway.AD: "Adware.Myway.AD
( MySearch )
Spreading: very high
Damage: low
Size: approx 1.5KB
Discovered: 2004 Mar 01

SYMPTOMS:
The presence of a toolbar in Internet Explorer or Netscape Navigator that may contain one of the strings: “My Way”,”MySearch”"

Google Overtakes Microsoft in Japan Brand Ranking - PCWorld

2010-08-26T13:54:00.000+10:00

Google Overtakes Microsoft in Japan Brand Ranking - PCWorld: "Google has overtaken Microsoft to secure the top spot in a major Japanese survey of corporate brand perception.

The company has been growing in Japan and easily attracts more traffic each month than competing Microsoft Web sites, but Microsoft's long history in Japan and deep ties with Japanese IT vendors had given it an advantage until this year.

Google scored 782 points in the survey, a single point ahead of Microsoft, which was ranked in second place. The latest ranking reverses last year's top spots and puts the two U.S. tech giants almost equal. Last year Google was 25 points behind Microsoft.

The annual survey is carried out online by Nikkei Research and this year received responses from 33,033 consumers and 14,184 business people. It asks respondents how they perceive major brands and the experiences they gain from using a company's products or services.

Yahoo Japan, Google's biggest competitor in Japan and operator of the country's most popular Web portal, managed to climb a couple of positions to fourth place. That put it behind Sony, which kept hold of its number-three position." -According to PC World.

P2P-Worm.Win32.BlackControl.g - Securelist

2010-08-26T11:27:00.001+10:00

P2P-Worm.Win32.BlackControl.g - Securelist Kaspersky Lab ZAO.

P2P-Worm.Win32.BlackControl.g

Detected	Aug 18 2010 13:59 GMT
Released	Aug 18 2010 20:24 GMT
Published	Aug 20 2010 09:51 GMT

P2P Worms spread via peer-to-peer file sharing networks (such as Kazaa, Grokster, EDonkey, FastTrack, Gnutella, etc.).

Most of these worms work in a relative simple way: in order to get onto a P2P network, all the worm has to do is copy itself to the file sharing directory, which is usually on a local machine. The P2P network does the rest: when a file search is conducted, it informs remote users of the file and provides services making it possible to download the file from the infected computer.

There are also more complex P2P-Worms that imitate the network protocol of a specific file sharing system and responds positively to search queries; a copy of the P2P-Worm is offered as a match.

Virus Information & Security Intelligence | BitDefender Virus Info

2010-08-26T10:45:00.001+10:00

Latest Threats:

Exploit.CplLnk.Gen

Spreading:	medium
Damage:	low
Size:	approx 4200 bytes
Discovered:	2010 Jul 19

SYMPTOMS:

Presence of shortcut files on removable media or network shares

TECHNICAL DESCRIPTION:

The detection is specific to lnk files (shortcut files) that make use of a vulnerability in the Windows operating system to execute arbitrary code. The vulnerability is caused by the routine that tries to display the icon for the shortcut file. In some cases, when the shortcut points to a module in the Control Panel, the operating system will try to load the module - to display the icon. In order to exploit this vulnerability, a special shortcut file is crafted that will make the operating system think that it points to some module in the Control Panel when in fact it points to amalicious module.

For the attack to be successfully carried out, the user has to view the file with Windows Explorer or other program that makes use of the shell32.dll functions in order to display the icon. The vulnerability is currently exploited by malware that BitDefender detects as Rootkit.Stuxnet.A.

Removal instructions:

Please let BitDefender disinfect your files.

Free online scanner.

Complete Rock Band 3 tracklist confirmed - for News - VideoGamer.com

2010-08-26T09:42:00.000+10:00

Complete Rock Band 3 tracklist confirmed - for News - VideoGamer.com: "83 songs from the '60s, '70s, '80s, '90s and noughties on the game disc.

Harmonix and MTV Games today confirmed the entire 83 song on-disc track list for Rock Band 3, including tracks from the noughties, '90s, '80s, '70s and '60s"-Read more on Videogamer.com

Facebook Pledges to Improve Chat Feature - PCWorld

2010-08-26T09:29:00.001+10:00

Facebook Pledges to Improve Chat Feature - PCWorld: "Responding to complaints from users, Facebook is promising to revamp its instant-messaging Chat feature, which has become one of the social-networking site's most popular.

'Many of you have told us that sometimes your Chat session comes and goes or even stops completely. We're working hard to end those interruptions so that your experience is stable and consistent,' wrote Facebook software engineer Rodrigo Schmidt in an official blog post on Wednesday.

Work is already in progress to improve the stability and speed of Chat, which was launched about two years ago, and the enhancements will continue over the coming weeks until the IM experience is 'hassle-free and uninterrupted,' according to Schmidt.- PC World"

New Kindle eBook reader

2010-08-26T06:44:00.000+10:00

Kindle 3G Wireless Reading Device, Free 3G + Wi-Fi, 6" Display, Graphite, 3G Works Globally - Latest Generation

Huawei to Launch Android 2.2 Smartphone at IFA - PCWorld

2010-08-25T07:08:00.000+10:00

Huawei Technologies plans to launch the U8150, which is based on Android version 2.2, at the Internationale Funkaustellung (IFA) consumer electronics show, the company said via e-mail.

The U8150 has a 2.8-inch capacitive touchscreen, a 3.2-megapixel camera and GPS. Users will also be able to access the Internet using 802.11n, which is quickly becoming a more common network feature on new smartphones. The processor is clocked at 528 MHz, according to Huawei.

The use of Android version 2.2 will allow users to turn the phone into a wireless hotspot. Users will connect to the smartphone with Wi-Fi and the device will then connect them to the Internet using HSDPA (High-Speed Downlink Packet Access).

Huawei hasn't announced when the phone will start shipping or what it will cost, only saying that the price "will be very attractive."

The company is planning a launch event for Sept. 2, the day before IFA officially kicks off in Berlin. The show runs until Sept. 8. Huawei to Launch Android 2.2 Smartphone at IFA - PCWorld

Home - Fish3w.com Markets

2010-08-25T07:05:00.001+10:00

Fish3w.com Your one-stop-shop for the very best values the Internet has to offer. Please visit our “Shopping” page, and don’t miss the great values featured on this page! We hope you enjoy your shopping online at Fish3w.com We are always updating this site with new and exciting products from the Internet’s best online shopping sites, so please bookmark this page and visit us often. Home - Fish3w.com Markets

Rustock Botnet Responsible for 40 Percent of Spam

2010-08-25T06:41:00.002+10:00

More than 40 percent of the world's spam is coming from a single network of computers that computer security experts continue to battle, according to new statistics from Symantec's
MessageLabs' division.

The Rustock botnet has shrunk since April, when about 2.5 million computers were infected with its malicious software that sent about 43 billion spam e-mails per day. Much of it is pharmaceutical spam. -PC World

make skype clearer

2010-08-24T15:18:00.000+10:00

If your router has a quality of service (QoS) feature, use this to make clearer skype calls without the voice dropouts scrambling you'd get on a congested network. QoS options are found in router settings. Consult the router manual for details. Source: PC Advisor

Beware Cameron Diaz -- She'll Trash Your PC

2010-08-24T11:57:00.001+10:00

I just got this information from PC World site. Cameron Diaz is the most dangerous celebrity on the Web, antivirus company McAfee said last Thursday.

Search strings using Diaz's name have a one-in-ten chance of coming up with a site infected with or spreading malware, said Dave Marcus, McAfee's director of security research and communication. Search for "Cameron Diaz and screensavers," and the risk doubles, Marcus added.

Win CASH Contest - BidHere.com.au

2010-08-23T12:28:00.000+10:00

Win CASH Contest - BidHere.com.au

Where to buy ebooks

2010-08-23T12:00:00.000+10:00

With ebook readers (iPad, Kindle, etc) on the rise. I've got a couple of websites to try for download at a competitive price.

Borders
Officeworks (For Readers only)

3d laptops

2010-08-23T08:10:00.000+10:00

Yes 3d laptops with those glasses. Is this a step to far? Acer 3d laptop aspire 5738z is capable at a modest price.

optical kill usb port

2010-08-23T06:45:00.002+10:00

Intel to use optical cable technology instead of usb 3. To give the user speeds of 10gbps. The technology will be available later this year. Fast enough to send a full blu-ray movie in less than 30 seconds. This will be a break through. Read more on Gadgetlab.

50 Bid Pack - BidHere.com - Cheap Auctions

2010-08-22T14:10:00.000+10:00

Wow you need to check this out! You can buy bids for $.75 AUD which gets you 50 bids. Then bid on stuff like TV's, cameras, games, etc using your bids you brought and win auctions. You can win these for next to nothing. I won 50 extra bids for $.86 AUD which usually costs you $37.50AUD. Check it out, click on this link 50 Bid Pack - BidHere.com - Cheap Auctions.

ATI radeon HD 5850

2010-07-26T13:12:00.000+10:00

graphics cards

2010-07-26T13:09:00.000+10:00

Good graphics card for direct x 11. My pick would be ATI Radeon HD 5850 1GB around $370. Looks like things are on the up for graphics. About time.

games comin up

2010-07-26T10:17:00.000+10:00

Good games arrivin soon: call of duty black ops 9th nov. Medal of honor 14th oct. Civilization 5 pc only 24th sep. Killzone 3 ps3 only feb 2011.