November 2005

Firefox 1.5 Released

The latest and greatest Firefox browser has been released. If you still use Microsoft Internet Explorer do yourself a favour and try the latest Firefox - you'll be more secure and enjoy a host of features you just don't find with IE. The download is here: http://www.mozilla.com/firefox/.

Opera 8.51 Released

The latest version of Opera, Version 8.51, which patches a nasty security hole and should be downloaded, is available here: http://www.opera.com/download/.

The why's and where for's are here: http://www.opera.com/support/search/supsearch.dml?index=818.

More on Sober.Y virus

An excellent overview with links is available from the BBC: http://news.bbc.co.uk/1/hi/technology/4466016.stm

Below is a (probably partial?) list of Subject headers associated with this virus:

• You visit illegal websites
• Your IP was logged
• Your_Password
• Registration Confirmation
• Your Password
• Mail delivery failed
• smtp mail failed
• hi,_ive_a_new_mail_address
• Account Information
• Ihr Passwort
• Mailzustellung wurde unterbrochen
• SMTP Mail gescheitert
• Ermittlungsverfahren wurde eingeleitet
• Sie besitzen Raubkopien
• RTL: Wer wird Millionaer
• Paris Hilton & Nicole Richie

Beware the Sober.Y virus

Beware of emails purporting to come from official security agencies such as the FBI, CIA or German BKA. Like the previous ones this virus sends itself inside a ZIP archive as an attachment in email messages with English or German texts. All the details are here: http://www.f-secure.com/v-descs/sober_y.shtml.

Never open unexpected attachments. Always have an updated anti-virus installed.

MS to Remove Sony Rootkit via Anti-Spyware & Malicious Software Removal Tool

Microsoft has decided that the Sony Rootkit poses a threat to its operating systems. Future updates to the Microsoft AntiSpyware application and the now commonly updated Malicious Software Removal Tool will contain the signatures required to remove the truly evil Sony Rootkit. Thanks Bill!

Time to Update ReaPlayer

Secunia is reporting the 'ole buffer overflow in RealPlayer, RealOne and HelixPlayer. Time to upgrade! That includes you Mac Heads, right?

Trojans Using Sony Rootkit

Those dumbasses at Sony can thank themselves now that the first and second Trojans have been found in the wild - both Trojans use the oft mentioned Rootkit to hide themselves - the exact thing that Sony claimed would not happen. The details from F-Secure are here: http://www.f-secure.com/v-descs/breplibot_c.shtml. This is a good time to remind you to make sure you have the usual precautions in place: updated anti-virus, organized firewall(s) and some common sense.

Sony Rootkit UNinstaller Almost Worse than Rootkit!

According to Mark Russinovich of Sysinternals.com (the chap who initially discovered the menace) the uninstaller only forces XP to issue the Windows command "net stop" that disables the driver. This inept handling can and has caused XP to crash. The President of Sony BMG's global digital business division Thomas Hesse has explained it all, "Most people, I think, don't even know what a rootkit is, so why should they care about it?" Right. I don't know what Sony stock is either so why should I care if it drops like a rock? Check out the story at The Register here: http://www.theregister.co.uk/2005/11/09/sony_drm_who_cares/ and don't miss the link to the NPR interview with the clueless Sony Prez.

Microsoft Patches You Need

Secunia reports two vulnerabilities which can be exploited by evil people to compromise a vulnerable system. The operation systems affected and the links to the patches are here: http://secunia.com/advisories/17498/.

Mac OS X 10.4.3 Update (Delta)

Apple has introduced a minor fix for OS X - Read about it here: http://docs.info.apple.com/article.html?artnum=301984.

Sony Rootkit Uninstaller Available

Sony is now offering users an uninstaller for the Rootkit that would have secretly installed on their PCs if they had placed a Sony music CD in their CD drive anytime after March 2005. While the Rootkit is (probably) not in itself dangerous it does allow hackers a potential entry point into a users PC and for this reason alone should be removed. Bad Sony, bad dog!

Windows Live Accepts Reality

Sony, DRM & Rootkits

Sony BMG is currently using a rootkit-based DRM system on some CD records sold in USA.

The system is implemented in a way that makes it possible for viruses (or any other malicious program) to use the rootkit to hide themselves too. This may lead to a situation where the virus remains undetected even if the user has got updated antivirus software installed.

The quotes above were taken from F-Secure - The whole article is here.