Security Cadets Blog Archive

Closing down after five years

AndyAtHull — Tue, 02 Aug 2011 19:47:44 +0000

We’re closing the site down this week coming. Please read the announcement at an external site:

http://maddoktor2.com/forums/index.php/topic,52665.0.html

Turning 5!

AndyAtHull — Fri, 08 Apr 2011 13:17:38 +0000

Today is the 5th anniversary since we registered this domain. Time flies, huh?

To be honest, this will not be a huge celebration. Why? Well times change and so do websites. I haven’t got a big amount of time. And whatever time I do have left tends to be used more wisely across all parts of my own life. However, to still be offering support five years on is something everyone can be satisfied with and proud of.

The fith birthday, in support forum traditions, tends to be a big event. Products are given away and competitions are held. We’re keeping it small. No hassle, just continued support.

I just own the domain, but all who have visited us in whatever capacity, I am gratefull for your support. It takes a network of people to continue the hunger and desire to help across all support sites outthere. However big of a site. We’re just a small piece of the puzzle.

Forum Announcement – Turning 5!

Stay in touch – Twitter, Facebook

SCars Beta v0.6.7b2 Released

AndyAtHull — Wed, 16 Mar 2011 20:45:27 +0000

We’re happy to inform you of a new SCars version. SCars Beta v0.6.7b2 is the fifth installment of beta versions since we released it.

Here is what is fixed and added in the latest version:

Changelog:

[Fixed] First news item has Unicode char at start (XP)
[Fixed] Updater not automatically killing/restarting notification module during updates
[Added] Check-box dialog for selecting active reminders on installation
[Added] New feature: Automatic program detection

This version is a major update as it introduces the program dection feature. This scans your computer for third party installed programs and windows security features so you can add them as reminders and launch them to be updated. You may also notice that we skipped v0.6.6b2. Simply because it was not deemed fit for release at the time of development.

Please note, the new feature uses a database on our servers and uses that to detect against what you have installed. Naturally we may have programs not included, please tell us here.

How can you download SCars? We have four download locations, so there is a wide choice. But here are two.

http://scars.securitycadets.com/download.php

http://fileforum.betanews.com/detail/SCars/1273694727/1

To report bugs or problems for this version, please visit this topic.

For general technical support or suggestions, visit SCars Support.

And for more info, visit http://scars.securitycadets.com/

System Tool rogue increases dramatically

AndyAtHull — Tue, 01 Mar 2011 21:58:26 +0000

The past week has seen a dramatic increase in one particular rogue program. System Tool exploded onto the scene everywhere!

I have assisted in removing this infection from computers from local neighbours and seen computer users on support forums in need of help.

BleepingComputer posts: “Here at BleepingComputer.com there has been a massive explosion of visitors to the System Tool Removal Guide since the 25th of February. Starting on the 25th, it appears that a System Tool affiliate, or numerous ones, have started a campaign to infect visitors with the System Tool rogue anti-spyware infection.”

The guys at BleepingComputer have also drafted in a removal guide which I have used on neighbours computers with great effect. See link below.

Rogues have been around for a long period of time now and at times, now and again, we get an upsurge of certain infections and rogues. Whether this one has reached it’s climax, we don’t know. What we do know is that many users have been affected.

If you have had this posed upon you, go down the folllowing routes;

Follow Bleeping Computer’s – System Tool Removal Guide, or
Get help in our forums – Malware Removal – Log Analysis

DefenceInspector v1.0.1 Released

AndyAtHull — Sat, 26 Feb 2011 11:10:54 +0000

We’ve released a new version of DefenceInspector. The new version is v1.0.1.

DefenceInspector will quickly scan your computer and generate a log file providing basic information about your computer and listing your installed security programs. Thus helping experts on support forums like ours to easily identify your setup.

Changelog v1.0.1:

[Fixed] Stack overflow crash on Windows Firewall error
[Fixed] Improved error codes to aid troubleshooting
[Added] Preliminary support for security program version numbers
[Changed] Version numbering of the software. Starting with v1.0.1

You can download a copy here (Right-click and “Save As”).

Related Links:

DefenceInspector should not be mirrored without permission from the author. The only download links to the public are ours at this stage.

Windows 7 Service Pack 1 now available

AndyAtHull — Tue, 22 Feb 2011 20:09:04 +0000

Microsoft has officially released the first Service pack for Windows 7. Which is now available from Windows Update.

It comes after SP1 was in their plans since early 2010. Our friends at Winrumors.com have a bit more info to share:

“Work on Windows 7 SP2 has already begun as early as fall 2010. Microsoft is reportedly planning 132 updates for x86 Windows 7 SP2 and 171 updates for x64 Windows 7 SP2 at the time of writing. Microsoft hasn’t officially started talking about SP2 but expect it to land in the 2012 timeframe.”

“SP1 includes RemoteFX which provides rich 3-D graphical experience for remote users. The service pack also will include a series of incremental updates, previously released on Windows Update for both Windows 7 SP1 and Windows Server 2008 R2 SP1.”

You can get this Service Pack from Windows Update on Windows 7. But also at the Microsoft Download Center.

Microsofts’ next release is believed to be the full version of IE 9.

WinPatrol 2011 – Kill Task issues on Windows XP SP3

AndyAtHull — Mon, 21 Feb 2011 20:18:59 +0000

It’s been a week since WinPatrol 2011 was released by BillP Studios. However, only now has it come to light of a bug with a key function within WinPatrol 2011. This glitch relates to the Kill Task function within the Active Task tab.

If you use Windows XP with Service Pack 3, you will notice this function not working. We have had this confirmed by several members (1,2) in our support forum for WinPatrol and over at the Dell Community forums.

How can you fix this?

At this moment in time Bill Pytlovany is away on his travels. This means there is no current fix for this bug for WinPatrol 2011 on Windows XP SP3.

In the meantime, whilst we wait for Bill to return, there are a few options:

One is to uninstall WinPatrol 2011 and install the last known good version (if you use WinXP SP3), which is v19.3.2010.5.

You can download it from here.

The other, offered by SecurityGarden’s Corrine:

“Unless someone uses the KillTask feature regularly (and cannot access Task Manager via Ctrl Alt + Del), Windows XP SP3 users may not want to bother downgrading. In fact, if that feature is used regularly, I would suggest re-evaluating surfing habits or programs installed.”

Bill is very swift to fix any problems with WinPatrol. So rest assured he will endeavour to correct it as soon as he is able too. And we will update you when it is fixed.

Update – Please read this articles comments to view a message from BillP

DefenceInspector v07.01.11.1 Released

AndyAtHull — Thu, 13 Jan 2011 20:31:50 +0000

We’ve released a new version of DefenceInspector.

Changelog v07.01.11.1:

[Fixed] XP run bug – Meaning DI could not run on certain versions of Windows XP
[Added] Chrome, Opera and Safari support under ‘Other Programs’

You can download a copy here (Right-click and “Save As”).

DefenceInspector should not be mirrored without permission from the author. The only download links to the public are ours at this stage.

Spam Scam via Facebook Mobile

AndyAtHull — Tue, 11 Jan 2011 21:08:06 +0000

Today I came across a spam scam which managed to get sent from a friends account via what appears to be Facebook Mobile. I am waiting on verification from the possible compromised system to get feedback on their actions in the last 24 hours and see where this scam possibly came from.

If you are not aware, in Facebook you can send messages in private to friends etc. A bit like e-mails or private messages. What appears to have happened is someones account has been compromised.

How? I do not know. A message has been sent to random people in their friends list with a link and random letters after. To anyone unconscious of scams that occur on the internet, they may ask why their friend has sent a message of this nature. And even click on it. This is a big no-no!

The screenshot below gives you an idea of the content:

Once you click on the link it sends you to a page like this:

(Click to enlarge)

That in itself is a smokescreen as whatever you click on (as it uses an image as a link - hxxp://microhobby.no/z/11.php with image hxxp://microhobby.no/z.jpg) you get sent to the following URL:

hxxp://biopharmdrugs.ru/

And a quick search on the interwebs and I get all kinds of usefull information. Spamtrackers.eu is just one source of information.

So if you get sent this via Facebook or you have been informed you have sent this when in fact you have not. Check your settings for Facebook Mobile and warn of any friends of this scam. And rememeber, do not click the link!

Once I know a bit more, I’ll update you. Have you been affected by this scam? Let us know in our support forums.

If you are aware of a scam on Facebook, tell us on our Facebook page!

Merry Christmas and a Happy New Year

AndyAtHull — Fri, 24 Dec 2010 15:25:24 +0000

It’s that time again were we lay down our tools. Put away our bad happenings of the last twelve months and look for to a festive time with friends and family. It’s no different for me.

The last twelve months have gone past quicker than you could blink your eyes. Probably not reality, but it feels that way.

Whatever you are up to over the next week or however you will celebrate, Securitycadets’ wishes you all a Merry Christmas and a Happy New Year. Stay safe, stay warm and all the best for 2011.

Forum Topic | Merry Christmas and a Happy New Year

AVG & Symantec Short-Changing Subscribers?

AndyAtHull — Mon, 06 Dec 2010 20:42:29 +0000

AVG and Symantec hit the headlines again. From Which? News, Anti-virus upgrade offers short-changing customers:

“Consumers who upgrade their anti-virus protection via discounted offers by Symantec and AVG are in danger of being short-changed, a Which? Computing investigation into security software charging problems has found.

Discounted offers are sent via emails or appear as pop-up alerts to a user’s PC urging them to upgrade their existing anti-virus protection to a more powerful version – usually at a reduced price.

But Which? Computing has heard from several customers who claim that by signing up to these offers they lost months off of their existing anti-virus subscription. Following the complaints, we decided to investigate the upgrade policies of several anti-virus software makers.”

PC Pro provides AVG and Symantec responses in their updated copy of the Which? News report which you can view in our forum topic.

Have you got AVG or a Symantec product? What’s your viewon the matter? Tell us!

LimeWire Returns!

AndyAtHull — Wed, 10 Nov 2010 20:39:51 +0000

Yup, you probably heard it elsewhere already. But for added views, I thought I’d post on the matter.

Just last week I posted a short blog that LimeWire was killed by the US Courts. Well this week I can tell you it is back in the wild. And by back, I mean re-named, re-branded and given a totally awesome spin that ‘we are behaving and LimeWire is better than ever.‘ (Sarcasm)

Firstly, it has been renamed to LimeWire Pirate Edition. Now if that isn’t the attraction. What is? It certainly pulls in the punters.

I mean, if we renamed SCars to SCars Pirate Edition, would you use it? Or Windows Ultimate to Windows Ultimate Pirate Edition? I can see the lawsuits already rattling in the background.

According to a source who ‘told’ TorrentFreak:

“On October 26 the remaining LimeWire developers were forced to shut down the company’s servers and modify remote settings in the filesharing client to try to harm the Gnutella network. They were then laid off. All dependencies on LimeWire LLC’s servers have been removed, all remote settings have been disabled, the Ask toolbar has been unbundled, and all features of LimeWire PRO have been activated for free. LimeWire Pirate Edition should work better than the last functioning version of LimeWire (5.5.10), and it should keep working for longer. There’s no adware or spyware: the piratical monkeys are doing this for the benefit of the community.”

Let me disect:

“…the Ask toolbar has been unbundled…” - No big loss.

“…it should keep working for longer…” – Like Duracell batteries?

“There’s no adware or spyware…” – Sorry, but it is still a file-sharing application. So unless you get a major security vendor on board (which I doubt), how are you going to check all files and make sure any file shared is adware or spyware free? Nevermind malware free. Nice spin, but no cigar. It will not be safe by any means.

“…the piratical monkeys are doing this for the benefit of the community.” – I rest my case. Keyword “monkeys”.

I know I’m a bit harsh in some aspects. But sometimes you have to be. LimeWire was shut down for a reason. Legal reasons. Not to mention the extreme dangers of becoming infected by files downloaded from within it.

You have a choice, and if you choose to uninstall or not use the renamed version of this software, I take my hat off to you. If you continue, you may experience problems as you use it. Your safety and security online whilst using any P2P is compromised from the get go. And with LimeWire continued under “piratical monkeys”, I dread to think how it will run as a project.

What’s your view on the resurrected LimeWire? Good or bad news? Tell us!

Limewire Service Killed by US Courts

AndyAtHull — Sun, 31 Oct 2010 11:47:27 +0000

This week gone it was confirmed that Limewire, a popular P2P network, was shut down by a US court.

“October 26, 2010 — Popular online file-sharing service LimeWire was shut down by a US federal court on Tuesday following a lawsuit filed by the music industry.

The move came a little more than five months after a US judge ruled in favor of 13 music companies in a copyright infringement and unfair competition case brought against LimeWire.

LimeWire.com featured a legal notice on its home page on Tuesday stating it was “under a court-ordered injunction to stop distributing and supporting its file-sharing software.”

The legal notice linked to the court order from US District Court Judge Kimba Wood ordering the closure of the service.” – Physorg.com

It comes to no surprise that this was on the cards. Limewire was probably one of the most popular P2P networks in recent years and one of the most used in terms of music file sharing.

What is even better from a security point of view is that a big danger of infection has now been removed. It is to no secret that you are very much more at risk of downloading infected files from such networks. We even added a policy for this area in our forums.

What’s your view? Are you an avid P2P user? Do you think Limewire has run it’s course? Tell us!

DefenceInspector – Check your computers defence!

AndyAtHull — Sat, 25 Sep 2010 21:10:53 +0000

Not everyone requires Malware Removal assistance. However, the Security Cadets Staff have observed that people frequently have questions about whether they have too many or not enough security programs, if programs will conflict or if their computer is secure. As a result, Security Cadets is delighted to introduce a fast method of checking the security of your computer. The new aid is a small, but effective tool, DefenceInspector.

DefenceInspector will quickly scan your computer and generate a log file providing basic information about your computer and listing your installed security programs. In addition to listing security-based programs, version numbers and any additional windows based settings (such as Internet Explorer version, etc.), DefenceInspector will also list information about frequently exploited programs, like web browsers, Java and Adobe products. In this way, a member of Security Cadets staff can check the version number installed and, if required, advise accordingly.

With this tool and our experience, we have opened up another door for computer you to use in keeping your computer secure.

To get started, go to the Is My Computer Secure? forum and follow the simple instructions in ‘How to Check my Computer for Security’.

About DefenceInspector

DefenceInspector is a small tool, compatible with both 32-bit and 64-bit Windows operating systems. Once downloaded, by a click of a button, you have the option to let it scan your system. The scan will take a few moments to generate the log and is not resource intensive.

The tool uses a database to compare what secuity software you have installed and what versions and list the findings.

Note: Registration is required in order to receive help. If you are not already a member, registration is free and simple. Click here to Register a free account.

Useful links:

DefenceInspector should not be mirrored without permission from the author. The only download links to the public are ours at this stage.

Internet Explorer 9 Beta set to launch 15th September

AndyAtHull — Fri, 13 Aug 2010 10:21:38 +0000

It has been revealed that the Beta version of Microsofts’ next Internet Explorer version is set to be launched on the 15th of September 2010.

“A select group of VIP web developers, designers, bloggers and press begin receiving their invitations to an event we’re holding in San Francisco on September 15th to celebrate the Beauty of the Web and to mark the launch of the IE9 Beta.” - The Windows Blog.

Way back in March of this year they allowed the public to test drive Internet Explorer 9, wich had great interest. Have you tested it? Will you be attending the above event? Tell us your thoughts on IE9, whatever it is.

Stay in touch – Twitter, Facebook.