Security

Infopackets Reader 'ZZ' write s: " Dear Dennis, I would like to know what the files "internat.exe" and "ptsnoop.exe" mean. I found them on msconfig/startup tab . Should I clear their checkboxes? " My Response: After searching for those file names ... using the Google search engine, it appears that there are legitimate Windows files (internat.exe and ptsnoop.exe) -- however, there are also files with the same names that carry malicious intent. In short, the trojan file Internat.exe steals passwords and sends them to the trojan creator; the trojan file Ptsnoop attempts ... (view more)

Similar to ICQ and Yahoo Messenger , MSN Messenger is a chat program that allows you to interact with other people around the world. If my memory serves correct, ICQ is the "Grand Daddy" of all Windows-based chat programs with a graphical user ... interface (GUI), but MSN Messenger and Yahoo Messenger are gaining in popularity. Conveniently, MSN Messenger comes bundled with the Windows XP operating system. Wait a sec -- did I say that was 'convenient'? No it's not. Since I installed Windows XP, MSN Messenger has been in my face multiple times asking me if I want to sign up for an ... (view more)

I had a few people email me with regards to the Alexa Registry Key (Spyware) that Chris B. submitted yesterday. OK, So is the Alexa registry key Spyware or not? There is much debate . Let me try to outline some of the issues. 1. It has been said ... that the "Spyware" part of the tool will only activate if you choose to use the Alexa tool provided in Internet Explorer. Long story short: you can't activate the Spyware component used in Alexa if you don't use the Alexa tool. You have the ability to change this (see below). 2. Spyware software is considered "Spyware" because ... (view more)

This issue of the Gazette is a continuation of yesterday's article, regarding Parental Control Software which is used to block "bad" web sites (pornography, gambling, bad language, nudity, sex, and violence). You know -- all that kind of bad stuff ... we normally see on day-time TV talk shows. Anyway, I decided to test out a highly recommended web-filtering program, called "We-Blocker". The results of that test were mixed . We-Blocker was able to block only a *very small* selection of "bad" web sites. I was able to break through We-Blocker's filtering control and ... (view more)

Yesterday's Visitor Feedback posed the question, "where can I get free parental control software that will filter out pornography , gambling, bad language, nudity, sex, and violence?" Since I was unfamiliar with the subject, I decided to ask the ... readers of the Gazette to send me their thoughts. Jeanne A. writes: " Thank you for your great newsletter. In response to your request about parental control software, I use We-Blocker on my kids' computer and it does an excellent job. You can set the level of control and allow or disallow additional sites. Best of all, it's free and ... (view more)

This issue of the Gazette is dedicated to "tying up a few loose knots" from our ongoing discussions about Hackers and Security threats . First, I'll give you all an update to Gazette issue dated October 10, 2002 (Windows Security Threat -- NTFS ... Alternate Data Streams ). To recap: an anonymous reader (John Doe) sent in an email that discussed a potential security risk in Windows which might allow a hacker to take a screen capture of a computer with the NTFS file system installed. I realize that this article was a bit on the "technical side", but I did my best to clear up ... (view more)

Since we're on the hot topic of hackers and hacking lately, I thought I'd share with you another great resource that Eric B. sent me. The web site is called myNetWatchman . The myNetWatchman program (agent) gives users a heads-up that they have a ... security problem, if their system becomes infected with an Internet Worm virus. There's also some super-cool reading on their web site (RE: ' Windows Forensics ') which shows how multiple non-hostile applications combined can lead to a hacking threat. I'm not going into great detail because I don't want to spoil it for you; however, I will say that ... (view more)

Yesterday's Visitor Feedback asked, " Can I track down a hacker ?" My answer to that question was a passive one -- mainly based on the fact it would take an inconceivable amount of time to prosecute each and every hacker who tries to wallow his way ... into your computer system. An algorithm for a typical Hacker might look something like this: Randomly select a computer to hack; Attempt to gain access to randomly selected computer; If access is granted, deliver a payload (send virus/trojan, delete files); If access is not granted, disconnect from this computer; Repeat process. With the ... (view more)

Infopackets Reader Merle A. writes: " Dear Dennis, I want to know if there is a way to find out who is trying to hack into your computer. I have the "remote address, local address, and remote computer address." Someone tried twice, but my Norton ... Antivirus stopped them (this time). " My Response: Trying to hunt down a hacker may prove to be fruitless, especially if: There is more than one 'hacker' attack The hacker spoofs his IP address Chances are that most hackers will do everything possible to cover his/her tracks in an effort to thwart "being caught". Even *if ... (view more)

This Sunday, I received the "friendship4u" (W32.Yaha.E) email virus about 30 times. I couldn't believe how this little bugger of a virus kept emailing itself to my mailbox. Thank goodness I have a virus scanner in place and Outlook Express 6 which ... do a decent job of protecting me from dangerous email attachments . Although this is a somewhat effective combination of software to combat an email worm virus, it didn't stop the fact that the virus kept showing up in my INBOX under Outlook Express. Every time I received the virus, I would have to weed through good emails and delete all ... (view more)