Get rid of Desktop Gadgets and Windows Sidebar ASAP!

Security blogs have lit up this week of a vulnerability in Windows Desktop Gadgets and Windows Sidebar.

If you are using the Windows Sidebar there is new news going around about how new malware can easily exploit the Windows Sidebar and everyone, including Microsoft, is advising to get rid of the Windows Sidebar ASAP.

More info…

Microsoft fix kills Windows Gadgets, warns it could lead to PC hijacks

Microsoft Offers Robo-Tool For Killing Desktop Gadgets and Sidebar Due to Vulnerability

Windows Vista/7 Users Need To Run This Killswitch Before Thursday

The Fixit is offered part way down the page in this Sophos blog post. Disable Windows Sidebar and Gadgets NOW on Vista and Windows 7. Microsoft warns of security risk

by Graham Cluley on July 12, 2012 | Sophos
Clearly Microsoft is worried about the security researchers’ findings, and has issued a “Fix It Tool” which will protect Windows 7 and Vista users by entirely disabling the Windows Sidebar and Gadgets functionality.

Posted in Uncategorized. Comments Off on Get rid of Desktop Gadgets and Windows Sidebar ASAP!

Check if your Yahoo Account has been compromised

Pretty cool service from the folks at http://sucuri.net

Check if your Yahoo Account has been compromised as part of the recent Yahoo Voice Password leak.

http://labs.sucuri.net/?yahooleak

QUICK TIP: If your email was compromised, we recommend you follow these steps: ASK Sucuri: What should I do if my email is in the Yahoo Leak?

Posted in Uncategorized. Comments Off on Check if your Yahoo Account has been compromised

Use Bing, Get Real Rewards!

Update! Thanks to Andy from Issviews.com for catching this.

BING REWARDS TERMS OF USE

The Program is open to users who reside in the fifty (50) United States and District of Columbia and who are at least thirteen (13) years of age.

I have officially switched to the Bing Search Engine and not just for the perks. Google does a lot of thinking for users and it has gotten to me… finally! I’m still an avid Google user and fan I just don’t use the Google Search Engine as much as I once did.

I have been a member of the Bing Awards Program for a while now and had collected a few points towards the Bing Rewards Offers. There are a variety of options to earn points. For new rewards members just use the bonus search offers and you can rack up some quick points usually just by clicking a link to a Bing search term. You can also earn up to 20 points a day right now just for using the Bing Search Engine. If you do a lot of searching it’s a pretty easy goal to reach.

Not long after starting to use Bing regularly I “cashed in” my points for two $5 Amazon.com gift cards. I was needing a new dock for my Motorola XOOM Tablet but didn’t really want to put out the $30 they wanted on Amazon for it. Well with my Bing Rewards I now have my new dock and only paid $18 bucks out-of-pocket. Not a bad deal…

You can also earn up to 100 points by referring friends to the Bing Rewards program. So, if anyone is interested please CLICK THIS LINK and join Bing Rewards. In return just post your Bing referral link in a reply in this blog post and I will return the favor.

Thanks and happy searching!

Dr.Web for Android 7.0

This blog topic is inspired by Krumpelt at the Raymond.cc forums with the forum topic Dr.Web for Android 7.0

I had used a previous version of Dr. Web on my devices and uninstalled it in favor of another antivirus. But, that antivirus has been annoying me lately due to it reporting some apps as adware. That’s fine but I know what I’m installing when I install it and if Push Notifications are included I don’t need my antivirus reminding me all of a sudden when the apps have been installed now for a while. Furthermore I have never received any Push Notifications from them or they would have been uninstalled already.

So I think I will give Dr. Web another go.

First I need to mention that I prefer using AndroidLost.com for my anti-theft app so any antivirus that does not have anti-theft built into it will be my first consideration.

I just installed Dr.Web Anti-virus Light.

Dr.Web Anti-virus Light features:

  • SpIDer Guard that monitors system security real-time. Also has an option to scan the SD card upon mounting.This was turned off by default, not sure why.
  • Autorun protection that checks the SD card for autorun files. Is turned off in default settings.
  • Scanner. Has separate option for scanning files in archives. Is turned off in default settings.
  • Auto updates are set to off by default but you can set to automatic for daily definition updates.

I ran a quick scan and it found 1 threat. ‘not a virus Adware.Airpush.origin.3‘ This is obviously a warning that an app I have includes push notifications (adware).

Next I ran a full scan and that found the same threat.

TrustGo Antivirus was finding 5 threats all related to adware push notifications.

Final verdict is that this is a good antivirus but it didn’t find as much as TrustGo.

——————–

I uninstalled Dr.Web Anti-virus Light and have installed the full version of Dr.Web Anti-virus. The full version is a paid app with just a 14 day trial. It costs €9.9 and that comes to about $12.50 per year in US dollars.

Dr. Web also has Dr.Web Anti-virus Life license that is a $75.00 lifetime license. That’s pretty high for an app when there are free versions of security apps out there but if you have company or a lot of Personally Identifiable Information (PII) on your device you may feel more comfortable with your security app having some live support options just in case of emergency.

Dr.Web Anti-virus has the same features as the light version also turned off by default but also includes more options including Cloud Checker and also a Backup option for importing/exporting application settings..

The full version also found the same adware app ‘not a virus Adware.Airpush.origin.3‘ in both scans.

The Cloud Checker has options to block a variety of websites in different categories.

  • Chats
  • Drugs
  • E-mail
  • Gambling
  • Known infection source
  • Obscene language
  • Social networks
  • Terrorism
  • Violence
  • Weapons
  • Adult content
  • Not recommended sites

The option for blocking websites that are of a Known infection source is the only one set to block by default. The rest must be manually turned on if you choose to use any of them.

I tested this on my Motorola Xoom Wi-fi tablet and it does not have a phone so this may be why I am not seeing the ‘Protection from unwanted incoming calls and SMS’ features.

I then installed the full version on my Samsung Transform SPH M920 and it does have the Black and White lists for numbers, Force lock, Reset password, Erase all data and more.

The anti-theft registration was quick and easy and seems to work as described.

I did not test the black and white lists but it looks the same as other apps that offer black and white lists options.

I also tested both versions on the phone and tablet with the EICAR Anti-virus Test file and both caught it right away. When a threat is found the antivirus makes a sound similar to the camera taking a picture so it gets your attention.

Overall both versions are good apps and should keep most users safe when using their devices.

Dr.Web Mobile Security Suite works on the following Android mobile devices 1.6/2.0/2.1/2.2/2.3/3.0/3.1/3.2/4.0

Posted in Uncategorized. Comments Off on Dr.Web for Android 7.0