Saturday, November 22, 2008

A new virus and free/sharware software for something internet related

Search the Internet to find a "new" virus. Tell me about the virus, what is does, and more importantly, how to remove it. Don't use technical terms, I can look that up myself. Tell me like you are telling your mother to watch out for it and once she got it, how to remove it.

Also, use the Internet to find a free OR shareware software that is either used for FTP, mail or something Internet related. Give me a link and describe what it does, how you would use it and if you think it is worthwhile.

There was a new virus discovered on November 10, 2008 called Infostealer.Keylog.KU. It is also known as Troj/Keylog-KU. The Trojan attempts to lower security settings by disabling the registry editor and the taskmanager. This virus is a keylogger, what a keylogger can do is allow someone on a remote computer to "see" what you are typing as you type it. These are used by criminals to steal personal information and passwords off of someone elses computers.

This is a "Trojan", a Trojan type virus comes in with something down loaded off the internet like an Mp3 or other software. Emails are also a popular way that Trojans get into your system. You might get an email saying click here for a cute screensaver, the The trojan is embedded into the screesaver program that you downloaded, and once you run the program, it opens and releases the Trojan.

The best way to remove a Trojan is not to ever get one. It is best to have a good virus program that has a real time scan of your internet activity and email server, have your firewall settings set on and disable autoplay so if you accidentally get a virus it wont "self execute." Avast anti virus is one such program and it is free to home users. But if you have already been infected with this or another Trojan, the best way to remove it is to run your anti virus file scanner and allow it to remove it, or if you can use "Restore Point" in Windows 9x and above to restore your computer to earlier settings and then run your virus scan.

Technical stuff from Symantec.com: Infostealer.Keylog.KU

Discovered: November 10, 2008
Updated: November 10, 2008 5:33:31 PM
Also Known As: Troj/Keylog-KU [Sophos]
Type: Trojan (This is a Trojan detection. Unlike viruses, Trojans do not self-replicate. They are spread manually, often under the premise that they are beneficial or wanted.)
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Vista, Windows XP

When the Trojan is executed, it copies itself to the following location:
%System%\scvhost.exe

Next, the Trojan creates the following registry entries so that it executes whenever Windows starts:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Runservices\"SCVHOST" = "%System%\scvhost.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"SCVHOST" = "%System%\scvhost.exe"

It may steal confidential information from the compromised computer.

The Trojan attempts to lower security settings by disabling the registry editor and the Taskmanager.
Retrieved November 25 from Symantec.com http://www.symantec.com/security_response/writeup.jsp?docid=2008-111017-2529-99&tabid=2


A nice FREE FTP client/and or FTP server is available from FileZilla.org.
FTP stands for "File Transfer Protocol" An FTP client allows you to upload your files directly to an internet "host", a place to store your web pages or blog or what ever and where ever you see a web page. An FTP server also allows you to upload these files to a host, but they also allow others who know your IP address to down load your files that you have given them permission to, on to their computer.
This program is a must if you have your own website and domain and want fast and direct access for uploading those files. The interface at first looks a little complicated but doesn't take long to get used to. This is really the best FTP program I personally have ever used. There is a screen shot below showing the interface.

The review from CNET's Download.com is below:

"The straightforward interface offers translations in most of the world's major languages. Caching directories speeds up browsing FTP sites, and multiple secure connection options ensure that you can move files around without concern. Bookmarking comes in two flavors: the Site Manager for all your major FTP locations, and QuickConnect for fast switching on the fly.

The program lets you download or upload multiple files at once from and to several servers. If your bandwidth is somewhat limited, you'll appreciate a feature that lets you automatically adjust transfer speeds based on the time of day or date. FileZilla also lets you browse FTP sites mid-transfer. The lack of a task scheduler is compensated for, in our eyes, by a powerful filter so you only see the files you need."

Retrieved November 25, 2008 from Download.com http://www.download.com/FileZilla/3000-2160_4-10308966.html?cdlPid=10898944


No comments: