MikesWhatsNews, 15, 08, 2003
in today's issue #667
HackFix Updates
2 Blaster Worm Continues to Spread
3 Mission Space
4 McAfee AVERT Stinger
5 Zone Alarm Launches Instant Messaging Security Program
6 SafeKids.org
7 CleanUp! 3.1
8 CCC Math Art
9 Name and Password Required Webbrowsing
10 Clear the 'Documents' in XP
11 Portable Drives Present New Security Threat
12 Name That Tune
____________________________________________________________

NOTE: Any time you see the " ++ ", it means there is more
of the article, or story, on the linked site. Mike
____________________________________________________________

There is a complete archive of past MikesWhatsNews newsletters
available to members on the Yahoo page, it is searchable by word
or issue #. Here is the address direct to the messages;
http://groups.yahoo.com/group/MikesWhatsNews/messages
and; http://www.freelists.org/archives/mikeswhatsnews/
____________________________________________________________

Please rate this Ezine at the Cumuli Ezine Finder

http://www.cumuli.com/ezines/ra20853.rate

<a href="http://www.cumuli.com/ezines/ra20853.rate">
AOL Users</a>
___________________________________________________________


HackFix updates, thanks to Christy;
staff@...
Http://www.hackfix.org

** I checked these myself, any errors blame me MIKE

All Software listed Alphabetically by Company name as some
companies manufacture more then one product.


Aladdin Knowledge Systems

Esafe Desktop/Gateway/Enterprise
Last Updated Aug 13/2003
To update your software
Visit: http://www.esafe.com/esafe/downloads/virusig.asp
Or
>From the Esafe folder in your Start Menu select Download Updates
~~~~~

AlWil Software

Avast Antivirus
Last Updated Aug 13/2003
To update your software:
Visit: http://www.avast.com/i_kat_69.html
Or
Right click on the AVAST icon in the system tray, Select iAVS Update,
AVAST will check for updates and download the appropriate files as needed.
~~~~~

Center for Antivirus Technologies (CAT)

Quickheal
Last Updated July 07/2003
To update your software
Visit: http://www.quickheal.com/winupg.htm
Or
Open Quickheal select Utility from the top toolbar and liveupdate. Follow
the
onscreen prompts. Alternately you can select Liveupdate directly from the
QuickHeal program menu on the startmenu.
~~~~~

Command Software Systems

Command antivirus/Fprot
Last Updated Aug 13/2003
To update your software
Visit: http://www.complex.is/f-prot/Download.html (F-Prot)
http://www.commandcom.com/downloads/virus_definition_updates.html (Command)
Or
Open Command antivirus click Update Deffiles
~~~~~

Computer Associates

E-Trust
Last updated Aug 15/2003
To update your software
http://support.cai.com/Download/virussig.html
Or
>From the Respective folder in your Start Menu select Autodownload

For Vet Anti virus
http://www.vet.com.au/html/software/update.html

Be sure to have your Customer ID and your registered email address
handy for verification.

**Note**

We knew this time would come eventually, that Computer Associates would
not continue to support/update the older program
https://www2.my-etrust.com/services/ipe_support??
~~~~~~


GeCad Software

Rav (Reliable AntiVirus)
Last Updated: July 10/2003
To update your software:
Visit: http://www.ravantivirus.com/pages/dldupdate.php?type=Daily
Or
Open Rav and select Rav Update from the toolbar
~~~~~

Grisoft Inc.

AVG
Last updated Aug 15/2003
To update your software
Visit: http://www.grisoft.com/html/us_updt.php?avg=fe
Or
Open AVG and click Virus Database to check for updates
Or
Open AVG control centre and click Update Manager/update now

**Note: To help speed up AVG updates you can set your program to use
an alternate download site.
Open AVG control centre->update manager->download from server. The
drop downbox should have listed www.grisoft.com (default) and
www.grisoft.cz. (be sure to select "apply" when done to save the changes)
The default site is most often used so can at times become temporarily
unavailable. By using the secondary site (www.grisoft.cz) helps to ease
the server and makes your update go quicker as most don't use it!
~~~~~

H+Bedv

AntiVir
Last updated Aug 14/2003
To update your software
Visit: http://www.free-av.com/antivirus/allinonen.html
Or
Open AntiVir, from the top toolbar select Tools->
start internet update and follow the on screen prompts.


Vexira
Last updated Aug 14/2003
To update your software
Visit: http://www.centralcommand.com/updates.html
Or
Open Vexira, from the top toolbar select Tools->
start internet update and follow the on screen prompts.

Vexira Antivirus is marketed by Central Command however it is the same
program as Antivir with only a different name.
~~~~~

Kaspersky

Kaspersky Anti-Virus (formerly AVP)
Last updated Aug 15/2003
To update your software
Visit: http://www.kasperskylabs.com/updates.asp
Or
Open AVP from the top toolbar click Tools-> Update virus definition
Or
>From the Kaspersky folder in your Start Menu select AVP updater


*Note* Avp now has available a cumulative update and a
daily update with the daily being any important items they
feel shouldn't wait till the next cumulative update. Our
dates here are based on the most recent Major update.

**Note: Improved update accessiblity. To ease the update web traffic
Kaspersky labs has additional servers for autoupdating. The program
defaults to use one server but can be altered to check a variety of
servers. Select Kaspersky updater, select update via the internet to
open the drop down box(es) select "location" Check the box labeled
"Use alternate locations from the list" select next and next to update.
This option should stay selected after the first time. This helps
Kaspersky lighten the load for updates and helps you obtain updates
easier.
~~~~~

Network Associates

Mcafee
Last updated Aug 13/2003
To update your software
For Mcafee Visit
http://www.networkassociates.com/us/downloads/updates/superdat.asp
(for Virus and Engine updates)


Drsolomn (Product no longer available for new users however
updates still available for current users): Go to the following
Internet site: http://download.mcafee.com/updates/4x.asp
IMPORTANT: When you get to this site you may notice that it refers
to VirusScan. This update is not only for VirusScan. It also works
with Dr.Solomon's.

Or
Open your respective software virus scan scheduler, double click
Auto update, click Run Now to do a manual live update, or click
Schedule to set up a timed live update.
~~~~~

Norman Data Defence

Norman Virus Control
Last updated Aug 15/2003
To update your software
Visit: http://www.norman.com/downloads.shtml#definition_files_updates
Be sure to have your Valid Username and password handy for verification.
Or
>From the Norman folder in your Start Menu select Internet Update

**Note Norman Virus Control web updates are only for version prior to
5.0. Norman 5.0 can only be updated via the update in the program itself.

Thunderbyte Anti Virus
Current Version: This product is no longer being supported.
http://www.norman.com/tbav.shtml
~~~~~

Softwin

BitDefender (Previously known as AVX - AntiVirus eXpert as of Nov 06/01)
Last Updated Aug 13/2003
To update your software
Visit: http://www.bitdefender.com/html/updates.php
Or
Open BitDefender select Protection Options->live upgrade
Or
>From the BitDefender folder in your Start Menu select Bitdefender Live

Press Release on the software change
http://www.bitdefender.com/press/ref1.php
~~~~~

Sophos

Sophos Anti Virus
Last IDE available aug 15/2003
To obtain the latest IDE files
Visit: http://www.sophos.com/downloads/ide/

**Note: Sophos does not update as other products do. They update
the Engine/software once a month (or so) to include all the previous
IDE files. New IDE files are available with new virus threats and must
be downloaded individually until the next software update is available.
Our update dates reflect the most recent available IDE file.
~~~~~

Symantec

Nortons AntiVirus
Last updated Aug 13/2003
To update your software
Visit: http://www.symantec.com/avcenter/defs.download.html select
your language -> product from the list
Or
Open Nortons software and click the "live update" button
Or
>From the Nortons folder in your Start Menu select LiveUpdate -
Norton Antivirus
~~~~~

Trend Micro

PcCillin
Last updated Aug 14/2003
To update your software
Visit: http://www.antivirus.com/download/pattern.asp
Be sure to have your Registration number handy for verification
Or
Open PcCillin click Update then click Update Now (or Update later
to Schedule a timed update)
~~~~~~~~~

If there is an Anti Virus program that is Not listed here that
you would like to see added to the weekly updates list Please
feel free to let us know.

Remember Your anti virus software is only as good as the user...
If you don't keep it updated it won't provide you with maximum
protection.

This weekly Update will be sent every Thursday on or after
6pm (eastern) to keep you up to date on virus pattern updates
available. Virus patterns are checked for most recent update
date as of 6pm Thursdays.

~~~~

~ Hackfix Project Staff
staff@...
Http://www.hackfix.org
____________________________________________________________
2
Blaster Worm Continues to Spread
Also Known As: W32/Lovsan.worm [McAfee], Win32.Poza [CA],
Lovsan [F-Secure], WORM_MSBLAST.A [Trend],
W32/Blaster-A [Sophos], W32/Blaster [Panda]

This worm is continuing to sperad even though Microsoft issued a patch for
it back in July.
W32.Blaster.Worm is a worm that exploits the DCOM RPC vulnerability
(described in Microsoft Security Bulletin MS03-026:
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security
/bulletin/MS03-026.asp) using TCP port 135. This worm attempts
to download and run the Msblast.exe file.
Removal
Symantec has a remover here;
<http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.rem
oval.tool.html>

Microsoft - What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp
Another repair site that came up is;
http://www.bitstorm.pwp.blueyonder.co.uk/FixBlast.exe

How to Protect Your Computer From 'Blaster,' Step by Step
http://www.washingtonpost.com/wp-dyn/articles/A51894-2003Aug12.html
How to Protect Your Computer From 'Blaster,' Step by Step

To fix the problem on a computer running Windows XP, experts at
Atlanta-based Internet Security Systems Inc. say:

• Stop the reboot loop by pressing the Ctrl, Alt and Delete keys
simultaneously. Then search for a file in the pop-up "applications" list
that will appear called "msblast.exe." Click on the "msblast.exe" file name
and then click on "End Task" to stop the worm from running.

• Use the computer's search program to find the culprit file --
msblast.exe -- on the hard drive. To do that, click the "Start" button on
the lower left corner of your screen, then "Search." That will bring up a
search box.

• Choose the option to search all files and folders. Once the search
prompt opens, enter the search term "msblast.exe." Delete any matching
files, then empty your recycle bin.

• Turn on the firewall software included in Microsoft XP. From the Start
menu, click on the "Connect To" menu, then select "Show all connections."
Select the first icon you see there, right-click it and select "Properties."
Click the "Advanced" tab, the last one on the right, and check the box next
to "Internet Connection Firewall." Repeat this step for each icon in that
connections window.

• Download the Microsoft software fix to protect your computer against the
Blaster worm from the Web site windowsupdate.microsoft.com.

• Unplug your Internet connection. Restart your computer. Once the
computer is fully rebooted, reconnect it to the Internet.

• If you have not been keeping up to date with patches from Microsoft, go
back to Windows Update and let Microsoft scan your computer for other
critical updates. Download and install all of those listed.

• Make sure anti-virus software is installed, and update virus
definitions.

-- Brian Krebs
From; www.washingtonpost.com

IRA WILSKER uploaded an updated page on the BLASTER worm, including direct
downloading of the patches from Microsoft, and other information.
http://www.mycomputershow.com

Good removal instuctions page from Sophos;
http://www.sophos.com/support/disinfection/blastera.html
____________________________________________________________
3
Mission Space

http://www.disney.go.com/vacations/missionspace/index.html

Disney and HP combine to bring you a great website; educational and fun.
Quizzes, games and lot's to do all around.

Thanks to Christy
____________________________________________________________
4
McAfee AVERT Stinger
http://vil.nai.com/vil/stinger/
Stinger is a stand-alone utility used to detect and remove specific viruses.
It is not a substitute for full anti-virus protection, but rather a tool to
assist administrators and users when dealing with an infected system.
Stinger utilizes next generation scan engine technology, including process
scanning, digitally signed DAT files, and scan performance optimizations.

____________________________________________________________
5
Zone Alarm Launches Instant Messaging Security Program
<http://www.zonelabs.com/store/content/catalog/products/sku_list_ims.jsp?>

IMsecure Pro Free Trial
<http://www.zonelabs.com/store/content/company/products/imsp/trial/imspDownlo
adTrial.jsp>
Windows 98SE/ME/2000 Pro/XP
Zone Labs® IMsecure is the first comprehensive instant messaging (IM)
security solution for any program that accesses the most popular IM services
such as AOL Instant Messenger, MSN Messenger and Yahoo! Messenger. IMsecure
Pro ensures that IM conversations are private and secure, protecting PCs and
valuable personal information from spammers, identity thieves, hackers and
predators who exploit vulnerable IM connections. IMsecure Pro protects the
PC transparently, regardless of service or client used, requiring no change
to existing habits or software. Use it with the awarding-winning
ZoneAlarm® Pro to secure your computer, your browser, your email, and your
IM activity. All your major Internet activities are now protected by Zone
Labs.
++
____________________________________________________________
6
SafeKids.org
http://www.safekids.org/
"The National SAFE KIDS
Campaign promotes fire safety, car safety and home safety to both adults and
children. Their mission is to prevent the number one killer of children —
unintentional injury."
++
____________________________________________________________
7
CleanUp! 3.1
Hi all,
After a couple of months of testing, I'm pleased to announce that the beta
test program for CleanUp! 3.1 is complete. The final release is now
available for download from the CleanUp! web site. It is actually
version 3.1.1.

You can download the new release from the Downloads section of the CleanUp!
web site:
http://cleanup.stevengould.org/

The size of this download executable should be 276,741 bytes.
If it is not, then your downloaded may be corrupt. Delete it, and try again.

Let me know what you think - good or bad - of the new release.
Thanks for your interest in, and support of CleanUp!

Sincerely,
Steven Gould
Author of Windows CleanUp!
WebSite: http://cleanup.stevengould.org/
____________________________________________________________
8
'Christy's Computer Corner'
thanks to Christy;
http://www.1stpick.org

Math Art
Freeware
http://bethsanswers.com/mathart/index.htm

Beth's Math Art draws Mandelbrot-set and Julia-set images. It runs very
fast, has many color options and the images can be zoomed in using a mouse.
It also animates and has a variety of mathematical extensions to the
standard images. It runs under Microsoft Windows 95/98/ME/NT/2000/XP and
requires Internet Explorer to view the help.
~~~~~~~~
9
Name and Password Required Webbrowsing

When you access a site that requires a user name and password, you can
simply type the whole thing into the Address box. As an example, suppose you
want to access www.mysite.com using a name and password. You would enter
http:// username:password@... and press Enter.

If you need to access the same site frequently, you can simply save the
address as a URL and place it in the Links bar for easy access.

Was this forwarded to you ?
Get your own subscription here:
<1stpickPCtips-request@...?Subject=subscribe>

____________________________________________________________
10
Mike's friday Tip ~ Clear the 'Documents' in XP
Have you noticed the Documents listed when you the "Start" menu.
You can manually remove them.

Right-click the task bar located beside the Start menu button, and click
Properties.
Click on the Start Menu Programs tab.
Under "Documents Menu" section, click on the Clear button.

The list is also cleared if you use the Windows Disc Cleanup found in
accessories.

____________________________________________________________
11
Portable Drives Present New Security Threat. by Mike Baynes

The most common security breeches in business are most often caused by
current or former employees.

However new technology is providing an unexpected method of virus and other
undesirable programs transmission.
The problem occur when the new portable "Pen" drive or portable USB drives
are used to transfer data from a computer at work to a computer at home.

If the portable drive is used to save document or other data from a home
computer which has become infected, Virus, Trojan, malware or Key
loggers/data miners, the infection may be transferred to the computers at
work when the device is plugged into the computer.

Frequently the security setting are set to block and/or scan all files when
they are being read. But the USB drives are often overlooked in the setting
up of the security.

The relative "Newness" of the USB storage medium has created an opening in
the security system by virtue of the fact that it is new technology that not
all system administrators are repaired for.

____________________________________________________________

Have you played "Name That Tune"?
http://www.geocities.com/computer_tricks_and_tips/tune.html
____________________________________________________________

If you wish to unsubscribe from our list send an email to
mikeswhatsnews-request@...?Subject=unsubscribe


Antivirus software is a good choice to scan your system for possible viruses,
however no virus scanner is 100% effective as manufactures cannot keep up with
the rapid change of viruses that happens daily.
Be sure to update yours regularly.
http://www.hackfix.org/software/antivirus.html
______________________________________________________________________
Please feel free, to offer constructive criticism, as that will help me keep it
interesting.
I also welcome any submissions about new products, web pages, or articles of
interest.

All submissions posted in MWN will be given proper credit.
"MikesWhatsNews" believes in giving credit where credit is due but at times
deadlines and information that is very important to readers we accidentally
misspost an item.

If you believe something to be miscredited, or you know the author of one of the
articles which we have posted as 'unknown', please do let us know so we can
correct the information where applicable.

Many times in a article you may see a click here for more information, or to go
to a link, these often will not work, as the original information, was taken
from a page with HTML links. This is when you will want to go to the webpage
indicated in the article, ++ ,for 'the rest of the story'
***MfM*** indicates that I am adding my own information to a particular
article.
`~*~*~*~*~*~`
Mike ~It's a good day if I learned something new.
You can read a sample of my newsletter on my web page http://www.mwn.ca
My virus pages ~ http://virusinfo.hackfix.org
mytech@...
~*~*~*~*~
Was this forwarded to you? Want to subscribe? Send an email
to mikeswhatsnews-request@...?Subject=subscribe.

For a complete list of email commands for our list send an email
to ecartis@... with a subject line of "info mikeswhatsnews" without
the quotes.

If you wish to unsubscribe from our list send an email to
mikeswhatsnews-request@...?Subject=unsubscribe

To contact the list moderators send an email to
mikeswhatsnews-moderators@...
~*~*~*~*~