Blogs

Win32.Polipos SYMPTOMS: Size of executable increases with about 60-70 KB. There could be detected unusual network activity. Suspect activity for the running processes (searching and modifying executable files). TECHNICAL DESCRIPTION: Win32.Polipos.A is a dangerous, polymorphic file infector, with a worm-like spreading capability. It’s targets are EXE and SCR files. It is a memory-resident virus, because once executed, it injects code in the running processes. The first files it infects are those located in %ProgramFiles% and %WINDIR% directories. But it hooks imported functions for the infected proceses, so that all executables accessed by those processes will be infected. ...

A new version of nero has been released. Version number has gone up from 7.0.8.2 to 7.2.0.3. Seems to be a major update. No official changelog as of yet though. I didnt find *much* difference as usual 😛 Get the update here.

Michal Zalewski, the researcher who announced in March an Internet Explorer vulnerability whose exploitation could crash the browser, has some news for Microsoft and the company’s security experts won’t be too pleased with them. The bug comes not long after Microsoft plugged numerous security holes with the April patches. Secunia has rated the bug as being “highly critical” (the last but one alert level used by the security company) and has warned that its successful exploitation could compromise a system. ...

A newly detected mobile phone virus is charging mobile phone users $5 to send a premium rate SMS message, security experts warned today at Infosec Europe 2006. F-Secure explained that this type of attack had been reengineered to make money illegally from mobile phone users. F-Secure warned that users are still leaving their mobile devices and laptops open to attack by using unsecured Bluetooth connections, despite the company’s warnings at trade shows such as CeBIT. ...

The much awaited yahoo messenger v7.5 is finally out of beta! Grab it here!

Just thought i’d let you know about this site, http://virusscan.jotti.org. Its a site using multiple anti-virus scan engines (15, as of yet, new engines being added regularly!) to scan files uploaded by users from across the globe. If you are suspicious of some file, and you think your current anti-virus is not detecting it, you can upload it to this site to get a second review on it! Basically, i just love it for the live stats it provides. The stats update every minute or so, depending on the activity on the site. Great effort Mr Jotti! ...

January 01-10 ~ Dog January 10-24 ~ Mouse January 25-31 ~ Lion February 01-05 ~ Cat February 06-14 ~ Dove February 15-21 ~ Turtle February 22-28 ~ Panther March 01-12 ~ Monkey March 13-15 ~ Lion March 16-23 ~ Mouse March 24-31 ~ Cat April 01-03 ~ Dog April 04-14 ~ Panther April 15-26 ~ Mouse April 27-30 ~ Turtle May 01-13 ~ Monkey May 14-21 ~ Dove May 22-31 ~ Lion June 01-03 ~ Mouse June 04-14 ~ Turtle June 15-20 ~ Dog June 21-24 ~ Monkey June 25-30 ~ Cat July 01-09 ~ Mouse July 10-15 ~ Dog July 16-26 ~ Dove July 27-31 ~ Cat August 01-15 ~ Monkey August 16-25 ~ Mouse August 26-31 ~ Turtle September 01-14 ~ Dove September 15-27 ~ Cat September 28-30 ~ Dog October 01-15 ~ Monkey October 16-27 ~ Turtle October 28-31 ~ Panther November 01-16 ~ Lion November 17-30 ~ Cat December 01-16 ~ Dog December 17-25 ~ Monkey December 26-31 ~ Dove ...

Changelog: Build [307] Resolved: Kaspersky Anti-Virus 6.0 FS 06273 Missing functionality for server connection for the user 08884 Events: Incorrect event type Feature Corrected locking when modules load Feature Exceptions around AV signatures code are removed for diagnostics Build [306] Resolved: Anti-Virus 6.0 04777 ODS: Progress bar is not correct for “StartUp” object scan 09039 Crashes when working Quarantine files 09399 ODS: Delayed cure is reported as “Logical sector” and not as “File” 09851 GUI: Incorrect protection status reporting in SecurityCenter 09932 Exceptions are broken in Trusted Zone 09941 ODS, GUI: Alert “Active Threat” is not coming up again 09954 OAS: WIN98 File-Antivirus does not start 09958 GUI: From OAS a tab with new settings is missing 09965 GUI: Unloading KAV from OAS, schedulling settings are not remembered ...

So.. Here’s my PC configuration.. AMD Athlon64 2800+ (754 pin) MSI K8NM (nForce3 250) Motherboard 1GB DDR400 Kingston RAM (Timings: 2.5-3-3-7) Nvidia FX5700LE Graphics Card with 128MB RAM (Gainward) Maxtor 120GB 7,200 RPM SATA-1 Hard Disk BenQ DW1650 DVD Re-Writer Sony CRX-320E DVD Combo Drive ViewSonic E70f 17″ True Flat CRT 350W SMPS (Mercury) Samsung Multimedia Keyboard Samsung Optical Mouse (800 dpi) 3,600W (PMPO) home theatre system 5.1 Audio on-board Airtel 128kbps *unlimited* connection APC 500VA UPS 24 hour power backup via 2.5KVA Genset 😛