The infection has been spreading via Java and in most cases has been installed by people getting emails with suspicious links that take users to the malware websites.

The difference between Flashback and SabPub is that SabPub is a backdoor trojan that allows full access to peoples systems from outside, while Flashback is a redirect type virus that hijacks your search engine results and points you to random websites.

At this point there has not been a fix released from Apple, but one should be released in time.

It has been advised to keep your Apple updates current so that the patch can cover up the loophole in Java.

A company called F-Secure has developed an app to get rid of the virus automatically, here is how you get rid of the Flashback virus from your device.

1) Download FlashbackRemoval.zip to the Mac machine you want to scan.
2) Double-click the zip package to unzip it in the current folder
3) Double-click the FlashBack Removal app to run the tool
4) Follow the instructions to check your system and clean any infections

The tools creates a log file (RemoveFlashback.log) on current user’s Desktop. If any infections are found, they are quarantined into an encrypted ZIP file (flashback_quarantine.zip) to the current user’s Home folder. The ZIP is encrypted with the password ‘infected’.

A big thanks for F-Secure for working this one out!

There will be an event held in Sydney, Bribane and Melbourne.

At the event they will demo the Lumia 710 and the Lumia 800 phones to the public and you will be able to get your hands on them to test them out and play with the new Windows Phone 7 operating system.

Details of the event:

• Sydney (Martin Place) – Friday 16th March: 7am – 7pm
• Brisbane (King George Square) – Friday 23rd March: 7am – 7pm
• Melbourne (Federation Square) – Saturday 31st March: 9am – 7pm

The symptoms for it are:

* Spammed windows showing an error with the hard drive, usally saying that there are bad clusters or sectors.

* Windows asking you to perform a checkdisk (chkdsk)

* A prompt to click on an agreement to perform a hard drive test

* The screen will usually flash black before starting the failed hard drive notifications

* All of the icons on the desktop, start menu and drives will disappear

From what I have seen, almost all infections are spread via google searches. Antivirus programs seem to be unable to block it from getting it from getting onto your computer.

It will hide all of your icons, as well as any usb devices that are plugged in at the time of infection.

The process of removal is:

1 ) Grab a usb hard drive/stick or create a network location with the rkill programs from the website bleeping computer.

http://www.bleepingcomputer.com/download/anti-virus/rkill

2 ) Make sure you have admin rights on the computer that you are trying to run the application from. The best practice is to do it from the user account that is infected and grant them temporary admin rights.

3 ) Plug the usb into the computer or navigate to the network path via task manager > new task

4 ) Run repeatedly the rkill (and variants) application to try and overpower the malware from blocking it

5 ) You will know when the process has been successful as the pop ups will disappear and you will be left with a text document showing what processes it closed down.

6 ) Hopefully if the rkill text document has nailed the processes that caused the popups you should have a drive path to the file that was causing it. Go to the folder where the malware is located and do a permanent delete to the file (shift + delete)

7 ) Install a copy of Malware Bytes and make sure you update it before running a full scan.

8 ) Run the full scan with Malware Bytes and let it finish.

9 ) Once complete it will more than likely have found the infections and will ask to remove them. Do so and reboot as required.

10 ) Once you are back in windows download and run a copy of unhide.exe  to bring back all your hidden icons

http://www.bleepingcomputer.com/download/anti-virus/unhide

11 ) Once unhide has finished download and run a copy of Kaspersky’s TDSSKILLER.

http://www.bleepingcomputer.com/download/anti-virus/tdsskiller

12 ) Once you have completed all the above you should be free of the infection, to tidy up run another full scan with Malware Bytes to be sure.

13 ) Sometimes you will find that all of your start menu icons are still missing, you can fix this by right clicking on the start button and going to the customize button to change the settings of icons in your start menu. If the option is there, just click on defaults to restore all the icons back.

14 ) Finally reboot and enjoy!

The above instructions have worked on all the computers that have been cleaned by myself, results may vary if you have more than the one infection of malware.

“Iertutil.dll Not Found”

“This application failed to start because iertutil.dll was not found. Re-installing the application may fix this problem.”

Ctrl-Alt-Del will still bring up Task Manager
where you can maneuver around and replace the file.

If the only problem with your system is that iertutil.dll is missing, you can replace it from the backup copy in the
dllcache folder. You may continue to get notices that iertutil.dll is missing, but just click OK to the reminder messages as they pop up so you can keep
working.

You would think that using Task Manager, you could browse to c:\windows\system32\dllcache and (after choosing
to Show All Files) copy the iertutil.dll file from there and then paste the iertutil.dll file into c:\windows\system32 where it belongs. That actually works, but it looks like it doesn’t work as you will get a stuck hourglass on the pasting operation and might wonder if it actually worked or not.

To feel better about replacing the missing file so you can actually see the file being copied and replaced…

from Task Manager, click File, New Task and in the box enter
(Assuming Windows is installed on your C drive):

 cmd

We know that XP likes to keep backup copies of critical
system files in this folder:

c:\windows\system32\dllcache

Knowing that, copy in the backup copy of the missing file
and replace the missing/suspicious file using this command:

 copy c:\windows\system32\dllcache\iertutil.dll
c:\windows\system32

 Respond in the affirmative if asked to overwrite the
existing file and then you should see a message that 1 file(s) was copied.

 copy c:\windows\system32\dllcache\ieframe.dll
c:\windows\system32

 Respond in the affirmative if asked to overwrite the
existing file and then you should see a message that 1 file(s) was copied.

 Type ‘exit’ to close the Command Prompt window.

Reboot and the computer should return to normal.IE can be updated manually if necessary with no problem.

In the end these are the settings I used:

1. username: domain\username
2. Password: users password
3. OWA Address: https://webmail.company.com/exchange/users email address

That is if we are to believe a interview with Stephanie Richards (CEO of major phone carrier France Telecom).

So when will it be available in Australia?
Traditionally Australia receive stock anywhere up to a month after an overseas launch. When the iPhone 4 was launched we had to wait a week.

The iPhone 5 will look similar to the iPhone 4 with only a slightly larger screen due to a finer bezel and 512MB of RAM.

Lets see if the reports are true.

These instructions are for migrating a web site running under IIS6 to a Server running IIS7
Before any of the following instructions are followed please make sure you fully backup your IIS 7 server.

On the Source IIS6 Server

Download and install Microsoft IIS Web Deploy v2.0
http://www.iis.net/download/WebDeploy

Install this onto the server. This server will create a folder IIS7.0 Extensions Folder with a Web Deploy Command Line application

Run this application making sure you run it as a local Administrator or Domain Administrator account.

From the command prompt check out all of the dependencies of the web site you are trying to export by typing the following command.

msdeploy -verb:getDependencies -source:metakey=lm/w3svc/12345

Where 12345 is the Identifier shown in IIS6 for the web site you want to migrate.

Read the output on the screen and take note of what dependencies are being used as these will also need to be used in the new IIS7 environment.

Now you need to backup the site including the application pool
To do this type the following

msdeploy -verb:sync  -source:metakey=lm/w3svc/12345 -dest:package=c:\IISite.zip -enablelink:AppPoolExtension > WebDeployPackage.log

Hopefully you get no errors.

On the Destination IIS7 Server

First you need to copy the file you saved on the C:\ drive of the IIS6 server to the IIS7 server.

Next you should backup the current IIS7 web site by running the following command.

%windir%\system32\inetsrv\appcmd add backup “PreWebDeploy”

Next you need to download and install Microsoft IIS Web Deploy v2.0
http://www.iis.net/download/WebDeploy

Install this onto the server. This server will create a folder IIS7.0 Extensions Folder with a Web Deploy Command Line application

Run this application making sure you run it as a local Administrator or Domain Administrator account.

Next you are ready to check if the IIS6 backup will import without any errors

From the Deploy Command Line run the following

msdeploy -verb:sync -source:package=c:\support\IISSite.zip -dest:metakey=lm/w3svc/12345 -whatif > WebDeploySync.log

Using the –whatiff switch will report any errors.

If no errors are reported just run the following script

msdeploy -verb:sync -source:package=c:\support\IISSite.zip -dest:metakey=lm/w3svc/12345 > WebDeploySync.log

And if all went well then you should be up and running.