Patch Tuesday - Microsoft OneCare Live

Patch Tuesday

Here we go again, the eve of Patch Tuesday.  Patch Tuesday is the second Tuesday of each month, on which Microsoft releases security patches.  Patch Tuesday evolved out of "Windows Update" that started with Windows 98.

Initially the Windows Update system suffered from two problems. The first was that the less-experienced user was often unaware of Windows Update and did not run it.  Microsoft's solution to that was the "Automatic Update," which notified each user that an update was available for his system.  Secondly, the problem with Automatic Updates was that sometimes it broke previously working software programs which caused problems for customers with many copies of Windows.  IT techs not only had to update every Windows deployment in the company but also uninstall patches issued by Microsoft that broke existing functionality.

In order to reduce the costs related to the deployment of patches, Microsoft introduced "Patch Tuesday". Security patches are accumulated over a period of one month and then dispatched all at once on the second Tuesday of each month.  System administrators may prepare, troubleshoot and resolve any conflicts and decide the best appropriate course for their systems.

The contents of this month's Patch Tuesday updates can be found at the following link; http://www.microsoft.com/technet/security/Bulletin/MS10-sep.mspx

Also if you haven't already, you can sign up for an automatic notification from Microsoft that will be issued 3 days in advance, this link is; http://technet.microsoft.com/en-us/security/dd252948.aspx

Exploit Wednesday

Did you know that the day following Patch Tuesday has become known as Exploit Wednesday?  Malware writers analyze the patch and quickly develop code to attack new entry points knowing that there will be an entire month before Microsoft releases any patch to fix it.

Microsoft OneCare Live

Microsoft once had a for pay anti-virus/malware system, "OneCare" that is now available for free.  Not only does it scan for malware and viruses, it also has a Registry Check/Fix that works very well.  To do a full scan takes some time depending upon how many files you have on your system... so allow time for the scan to run.  Start it if you are going to be away from the computer for awhile.  It is well worth the time.  Click here for the Microsoft OneCare link.

WHS 2010 - Windows Home Server 2010

In this blog I would like to address a glaring problem in both the enterprise and home arenas, BACKUP. Whether you have a backup system in place already... be it tape, cartridge or cloud based, are all the important data files really being backed up? In the SOHO you may have the server or central data location backed up but what about My Documents and PST files which are by default kept on workstations. If the hard drive fails on the workstation the user is usually out of luck. Some cloud backups, MOZY, Carbonite and others offer limited backup space to home users for free, while business owners become locked in at a monthly fee or a per/gigabyte rate.

Home users who have experienced hard drive failure lose cherished family memories in lost photos, films and important documents.

Enter Microsoft Home Server 2010. This is a super solution for SOHO users. It is a capable server and OS that not only supports Active Directory, it becomes a centralized location for all of your digitized media.

WHS 2010 capabilities include;

Media Server - Store and organize digital memories and media in one central location. Stream the digital content to Media devices.

Backup Software - Effortlessly backup your home computers daily and automatically.

Data Recovery - Easily restore lost files or even entire hard drive contents in a few steps.

Document Management - Get complete access to files from both inside and outside the home.

Remote Access - Share photos and home videos with friends and family with the built-in secure and personalized website address.

Add-ins - Easily extend the capabilities of the Server using software add-ins. Expand storage capacity easily as your needs increase.

DRIVING FORCE has implemented WHS in both home and enterprise situations and offer a range of appliances to meet your needs.

We are currently offering: The Acer Aspire easyStore H340-UA230N Server (pictured above) for

$395

Product Description Acer Aspire easyStore H340-UA230N - Atom 230 1.6 GHz
Type Server
Form Factor Tower
Dimensions (WxDxH) 7.9 in x 7.1 in x 8.3 in
Weight 11.2 lbs
Localization Canada, United States
Processor 1 x Intel Atom 230 / 1.6 GHz
Cache Memory 512 KB L2 cache
Cache Per Processor 512 KB
RAM 2 GB (installed) / 2 GB (max) - DDR2 SDRAM - 800 MHz
Flash Memory 256 MB
Storage Controller Serial ATA ( Serial ATA-300 )
Server Storage Bays Hot-swap 3.5"
Hard Drive 1 x 1 TB - hot-swap - Serial ATA-300
Monitor None.
Graphics Controller Intel GMA 950 Dynamic Video Memory Technology 3.0
Networking Network adapter - Ethernet, Fast Ethernet, Gigabit Ethernet
OS Provided Microsoft Windows Home Server
Manufacturer Warranty 1 year warranty

The wait is over, Microsoft Office 2010 is here!

http://en.wikipedia.org/wiki/Microsoft_Office_2010

But even more exciting is the release of Microsoft Office 2010 Web Apps

http://office.live.com

Microsoft has now provided slim down versions of it's best selling Office Suite for free on the Web. The lightweight suite includes Word, Excel, PowerPoint and OneNote. In addition to these free to use apps, Microsoft is including SkyDrive, 25 GB of free space to store documents and other files of your choosing. The only requirements are a Windows Live ID and of course an internet connection. If you have a Microsoft Office Live account currently, your Office Live account will be converted to SkyDrive storage sometime in the near future.

Many new computer buyers will be able to forego the cost of the MS Office 2010 Suite. Most home users never need more than the basic formatting and editing features found in the MS Office Web Apps.

Portability: Office on the GO!

I have been using the beta version of MS Office 2010 for the past year and like it very much. However with the release of MS Office 2010 Web Apps, the scope of my office portability has just greatly expanded. I have been hesitant about purchasing an iPad because the device did not support Microsoft's Office for MACs (that and no way to attach an external keyboard). But now even though you are forced to use Apple's proprietary browser Safari, one is able to create/edit a basic Office document and save it to SkyDrive to be retrieved and edited later using a Desktop computer and Office Application.

BTW, I did this Blog posting using the new Office Web App!

Google Apps came close to satisfying my portable workspace needs but there is nothing like the real thing.

http://www.google.com/apps/intl/en/group/index.html

I had the first netbook, the ASUS eee 3 years ago and circumvented the use of Open Office by using the Mozilla Brower within the Linux OS to access my desktop via Log Mein, satisfactory but cumbersome. With the release of MS Office 2010 Web Apps I can fire up the little ASUS and wait for the Dell Streak Tablet or an HTC Android 2.2 based phone, both of which have connectivity features lacking in the iPad.

If you must know, I do like the iPad. It is helping to usher in a new era of computing. Facebookers and other social media fans can keep each other abreast of their daily lives without the need for a computer or the limitations of their Smart Phone app.

With the advent of GPS incorporated into the phones and new technologies such as NFC (Near Field Communication, credit card/cash transactions by cell phone), it is no wonder that anti-virus and security software vendors are introducing applications for mobile devices.

It is also no surprise that AT&T has dropped the unlimited data plans... device security and data plans. Sounds like new revenue streams to me...

Run Microsoft Office on Linux!

PATCH TUESDAY! Next week... it’s that time again, second Tuesday of the month.

“Microsoft plans to ship two bulletins next Tuesday to fix multiple remote code execution vulnerabilities in Windows, Microsoft Office and Microsoft Visual Basic for Applications. Both bulletins are rated “critical,” Microsoft’s highest severity rating. The company describes a critical flaw as one whose exploitation could allow the propagation of an Internet worm without user action.”

The above quote is from the article found at the link below. I can’t stress the importance of keeping your computers up to date. The bad guys are always attempting to extract information related to your banking and credit card information. The problem isn’t just the operating system but your browser, toolbars, Office Suite programs, Adobe Flash, Apple I-tunes and QuickTime. I am always amazed at the toolbars I find installed on some computers, maybe four, five or more rows of toolbars installed. Toolbars are programs classified by your browser as add-ons that contain flaws used to exploit access into user’s computers. Not only are they security nightmares but they also eat up resources by installing items in operating system startup files that use memory and processor power to check for updates. Keep it simple and disable un-needed toolbars.

http://www.zdnet.com/blog/security/ms-patch-tuesday-heads-up-2-critical-bulletins-but-no-sharepoint-fix/6364?tag=nl.e589

Nightmare on Elm Street, or Facebook? What a rush!

As I said, it’s not the operating system that is your only security concern; Facebook users read the following link. Who knew it was this easy to spy on others, simple mouse clicks? Beware of the info you share and remember when you are connected to the internet you have opened a door into your computer. It doesn’t matter what type computer or operating system you use, the browser opens the door that allows unwanted access over the threshold and into your web surfing experience.

http://www.zdnet.com/blog/security/facebook-site-flaw-exposes-live-chat-sessions-user-data/6358?tag=mantle_skin;content

Can you believe it, Freddie is back! It was back in 1987, my older brother Johnny called and said he went with his two sons John and Britt to see a movie, A Nightmare on Elm Street 3: Dream Warriors. He said, “if you want to be scared out of your wits go see this movie.” Yeah right, I thought. Needless to say I went to see it and when Freddie stripped the veins out of the kid’s arms and walked him like a string puppet, I almost bailed. Jeez I was tied in knots and hardly slept; it was a stormy night to boot.

http://en.wikipedia.org/wiki/A_Nightmare_on_Elm_Street_(franchise)

I wish to extend a Happy Mother Day’s wish to all the wonderful women out there who we owe a lot of thanks to! If you don’t believe me just ask them, they are women… kidding MOMs!!!

As I digress further... I received the following piece of propaganda from a female client today,

A SPANISH Teacher was explaining to her class that in Spanish, unlike English, nouns are designated as either masculine or feminine.


'House' for instance, is feminine: 'la casa.'
'Pencil,' however, is masculine: 'el lapiz.'
A student asked, 'What gender is 'computer'?'
Instead of giving the answer, the teacher split the class into two
groups, male and female, and asked them to decide for themselves whether computer' should be a masculine or a feminine noun. Each group was asked to give four reasons for its recommendation.


The men's group decided that 'computer' should definitely be of the feminine gender ('la computadora'), because:


1. No one but their creator understands their internal logic;
2. The native language they use to communicate with other computers is incomprehensible to everyone else;
3. Even the smallest mistakes are stored in long term memory for possible later retrieval; and
4. As soon as you make a commitment to one, you find yourself spending half your paycheck on accessories for it.


(THIS GETS BETTER!)  editor's note:  this was JudyC's comment, it goes downhill in my opinion.


The women's group, however, concluded that computers should be Masculine ('el computador') , because:


1. In order to do anything with them, you have to turn them on;
2. They have a lot of data but still can't think for themselves;
3. They are supposed to help you solve problems, but half the time they ARE the problem; and
4. As soon as you commit to one, you realize that if you had waited a little longer, you could have gotten a better model..


The women won.

I hope we talk again soon... until then happy and safe computing.

New Computer? - Pay attention to processor

If you have not heard, both Intel and AMD have new processor families available.  Intel's new architecture has been around for 6 months now and AMD has just introduced their AMD Phenom II, 6 core processors.  Intel's family is differentiated into 3 segments, Core i3, Core i5 and top tier Core i7.

Intel specifications click here ->     Desktop     Notebook

Not only do the new Intel processors have a different footprint than the older Core 2 Duo family, they also take advantage of the newest chip sets 55 & 58 introduced by Intel to advance new capabilities that will make all the new features in Windows 7 run cooler and faster.

I wanted to bring this to your attention, I know a lot of people are looking at moving up to Windows 7 and I see a lot of last year's technology being sold at discounted prices with Windows 7 installed, be it an upgraded Vista or Windows XP notebook/desktop.

If you watch the sales you should be able to pick up a new Core i3 or Core i5 notebook at a low premium over the older Core 2 Duo based systems.  Notebooks purchasers will want to get the most power possible for their buck to extend the life of their purchase.  Some notebook users make a new purchase every year, it was so fast when it was new.  A notebook's processor is actually a crippled version of the desktop product simply because of design.  Desktop replacement is a catchy phrase but actually a notebook user is trading performance for mobility.

When making that purchase be sure to check or ask about the processor.

BTW:  As of today, I am trying to get my hands on the new AMD Phenom II not available at most outlets yet.  Been trying since Sunday to intercept delivery truck at TigerDirect.

AMD HDT55TFBRBOX Phenom II 1055T Six Core Processor

Security Alert - 1.5 million Facebook Accounts for Sale

I first saw this news last night on ZD-Net and now the story is appearing on ABC News.  If you use Facebook or any other social networking be vigilant when online.  The article mentions one aspect that I have already witnessed on Facebook, download of rogue ware.  I was on my sister's wall and one of her Friend's account was posting links to sites with titles like, "You must see this" or "Too Funny".  Once the link was clicked it re-directed to a compromised/infected site that attempted to download and install one of the many "Malware or Rogue Ware" programs that are so prevalent on the internet today.

I contacted my sister and she responded that her friend had already notified her and others about it and that the posts were not being sent by the friend.

Read the link and safe surfing!  BTW, note the comments at the bottom of the article, it appears people are using the comments now to contact people with SPAM!

Click here for ZD-Net article.

Spammers Get Smarter by the Second

Every week I am asked about solutions to prevent spam. I am also questioned about why the sudden increase in spam in recent weeks. Computer Reseller News has a great column about why spam is on the increase and the costs organization incur in lost productivity and employing means to stop the spam.

http://www.crn.com/security/224202449;jsessionid=20XRD5EP2MUNRQE1GHOSKHWATMY32JVN?pgno=1

Today there are several methods being employed to prevent spam from entering e-mail inboxes. Some are cloud based, some software, others are hardware and some are a hybrid of all the above.

An example of Cloud prevention would be when a company has their e-mail auto routed to a 3rd party who scans the e-mail for spam, eliminating it before forwarding the e-mail to the IP address of the company's mail server or gateway. This alleviates a company from having to deploy software/hardware themselves but requires a monthly fee based on number of users. In the case of a large organization with an Exchange Server, this solution prevents all that spam from ever reaching the Information Store which has storage limits.

A software solution would be any of the anti-virus/spyware/spam software which scans your e-mail as it comes into your e-mail client/server and places it into a folder separate from the inbox. One could have the e-mail automatically deleted however this is not an ideal choice since good e-mail invariably becomes swept up with the bad sometimes. The main con with these programs is that most are resource intensive and maintenance has to be performed on each machine.

Last is the hardware solution that monitors incoming e-mail at the gateway. This is a good solution that prevents the spam from reaching individual inboxes like the cloud solution but it requires upfront hardware costs and generally a subscription to maintain up to date filtering definitions.

Spam today is being employed for more sinister purposes including download of rogue ware, zombie bot-nets and phishing, all this along with the usual pharmaceutical, Russian Bride and Acai Berry scams that are received each day.

No matter which of these solutions that are employed, one still has to pore through the junk e-mail to guard against valid e-mails from being caught in the spam filters. With the Cloud solution one would log into a website and check the junk mail. The software solution creates a junk e-mail folder that has to be monitored within the user’s mailbox or PST file. The hardware solution would provide a folder either internally or on a server that users would have to monitor to make sure legit e-mails are not being caught.

The costs are high, in addition to monitoring the junk folder, users have to be added to safe senders list and the spam that does slip through has to be added to the blocked lists.

Please contact us today about a solution that is right for you.

Phil Gilbert
Driving Force Software
dforce@drivingforce.net
www.sonicwall.com/us/

Patch Tuesday - April 2010

Everybody be aware that Patch Tuesday is upon us. Patch Tuesday is the day each month that Microsoft releases Security patches, OS fixes for Windows. It is the 2nd Tuesday of each month. This month includes 25 security fixes for all versions of Windows including the new Windows 7. If your computer is not set for automatic updates be sure to use Windows Update to patch your computer.

Click here for full article.

http://blogs.zdnet.com/security/?p=6070&tag=nl.e540

Malware - How did I get Malware?

Each time I remove Malware aka rogueware from an infected computer, I am always asked "How did I get this...?" When I try and explain the concept of drive-by surfing the response is that I never go to any suspect websites. So they think...

The bad guys hi-jack legitimate websites all the time, upload scripts to redirect your browser to a site of their choosing or plant the malware directly on the compromised site to download to your computer.

Now they are using search engines, ie they are seeding their websites to come up first based upon likely searches that may occur connected with an event, the past Oscars weekend created a big spike in Malware downloads. See the link below from the security device maker SonicWall.

https://www.mysonicwall.com/sonicalert/searchresults.aspx?ev=article&id=214&elq=8ff59992d92e456c8129bdb9f43f5c86