12. June 2011 by admin.

Starting on September 1st, 2011, GFI is going to drop their free ClearCloud DNS service, which saves countless people from surfing to web sites known to be infected or otherwise listed as a bad destination.  To me, this is an incredibly bad, self serving decision considering the number of infected web sites increases daily and has been estimated to number no less than 100,000 on any given day. 

To me, this lack of concern for public safety shows that GFI’s policy is, as always ”me first!”.  In true GFI fashion,  they somehow try to  rationalize their decision by saying mostcustomers do not want to receive this very valuable free service, but instead would prefer to purchase GFI’s (originally SunBelt Software’s) Vipre Premium product for their web filtering.

Well, it’s their product and we just need a “work-around”, so here are my suggestions:

1) Web of Trust (WOT) provides about the same function but in a different way. Go to http://www.mywot.com and download their plug-in(s) or your web browser(s).

2) Change your DNS server settings to OpenDNS:   208.67.220.220 and 208.67.222.222

These two changes will give you the same protection without relying on the commercial sector.

Below is the message that is displayed when you enter a non-existent website or an infected website while using ClearCloud DNS:

“Effective September 1, 2011, GFI’s ClearCloud DNS service will be discontinued and no longer available for consumer use. While we have many loyal ClearCloud DNS users, we have found that most customers prefer the more robust web filtering solution available as a feature in our VIPRE Premiumproduct. We would like to thank all of the beta testers for their valuable feedback throughout this last 12 month evaluation period. To discontinue using the ClearCloud DNS service, you will need to reconfigure your network connection. If this is not done prior to September 1, 2011, your Internet connectivity will be interrupted. Learn how to remove ClearCloud DNS from your computer by clicking here.”

Posted in Drive-by Infection, security, DNS, Malvertising, Beta Versions, Trojan, Virus, Worm, Malware | Print | No Comments »

18. April 2010 by admin.

A serious vulnerability exists in Java and Sun has known about this vulnerability since around April 9th. This exploit can occur because the Java Browser Plugin  is running “javaws.exe” without validating command-line parameters.  Last week, when confronted about the problem, Oracle said they did not consider this vulnerability to be of high enough priority to break their quarterly patch cycle.

A U.S.-based Web site, Songlyrices.com was compromised by attackers, and was redirecting visitors to a Russian server feeding the Java attack as well as other exploits.

Now that users have started reporting that they are being infected by the drive-by Java attacks, Oracle has changed its mind and issued a patch.  If you haven’t already patched this vulnerability you can download Java software at http://www.java.com/en/download/index.jsp

Posted in security, Drive-by Infection, Patches, Malware, Computers | Print | No Comments »

10. April 2010 by admin.

The coming “Patch Tuesday on April 13th, 2010 features 11 important security and functional patches.

Here are the patches Microsoft says will be released:

Bulletin 1: Critical (Remote Code Execution) – Affects Windows
Bulletin 2: Critical (Remote Code Execution) – Affects Windows
Bulletin 3: Critical (Remote Code Execution) – Affects Windows
Bulletin 4: Critical (Remote Code Execution) – Affects Windows
Bulletin 5: Critical (Remote Code Execution) – Affects Windows
Bulletin 6: Important (Elevation of Privilege) – Affects Windows
Bulletin 7: Important (Remote Code Execution) – Affects Windows
Bulletin 8: Important (Remote Code Execution) – Affects Office
Bulletin 9: Important (Denial of Service) – Affects Windows & Exchange
Bulletin 10: Important (Remote Code Execution) – Affects Office
Bulletin 11: Moderate (Spoofing) – Affects Windows

To learn more about these patches, visit the Microsoft Security Bulletin page.

Posted in security, patch testing, Patch Tuesday, Patches, Uncategorized | Print | 1 Comment »