<?xml version="1.0" encoding="UTF-8"?><!-- generator="wordpress.com" -->
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	>

<channel>
	<title>badware &amp;laquo; WordPress.com Tag Feed</title>
	<link>http://wordpress.com/tag/badware/</link>
	<description>Feed of posts on WordPress.com tagged "badware"</description>
	<pubDate>Tue, 07 Oct 2008 17:36:29 +0000</pubDate>

	<generator>http://wordpress.com/tags/</generator>
	<language>en</language>

<item>
<title><![CDATA[How to Remove Antivirus XP 2008]]></title>
<link>http://oregonnerd.wordpress.com/?p=578</link>
<pubDate>Wed, 17 Sep 2008 07:27:09 +0000</pubDate>
<dc:creator>oregonnerd</dc:creator>
<guid>http://oregonnerd.pt-br.wordpress.com/2008/09/17/how-to-remove-antivirus-xp-2008/</guid>
<description><![CDATA[So you got taken in by one of the bogus ads and all sorts of strange things have been happening sinc]]></description>
<content:encoded><![CDATA[<p>So you got taken in by one of the bogus ads and all sorts of strange things have been happening since you downloaded the really cool program (they recommended it themselves!) and can't get rid of it.  <a title="this article" href="http://www.download.com/8301-2007_4-10041667-12.html?tag=nl.e415" target="_blank">This article</a> tells you how.  One first word, though, which actually is all-important:  <span style="text-decoration:underline;font-weight:bold;">don't panic.</span>  It's a minor scam that if you panic will turn into a major one.</p>
<p>--Glenn</p>
<p>P.S.  This is one that keeps recurring.  Business Week (as noted in the article) was the latest hit.  Even Ziff Davis isn't invulnerable, believe it or not.  Or Homeland Security (I have a lot of faith in that one, since I'm a criminal for being epileptic:  I invite the State of Oregon, Jackson County, the Sheriff's Office, or Mikey Winters to sue me for libel:  GFL, in old military communications terminology).</p>
]]></content:encoded>
</item>
<item>
<title><![CDATA[Yet Another You-Tube Danger]]></title>
<link>http://oregonnerd.wordpress.com/?p=562</link>
<pubDate>Mon, 15 Sep 2008 19:03:27 +0000</pubDate>
<dc:creator>oregonnerd</dc:creator>
<guid>http://oregonnerd.pt-br.wordpress.com/2008/09/15/yet-another-you-tube-danger/</guid>
<description><![CDATA[The details are here in the Reg.  Have I ever mentioned clicking on something from someone you don]]></description>
<content:encoded><![CDATA[<p>The <a title="details" href="http://www.theregister.co.uk/2008/09/12/youtube_fake_tool/" target="_blank">details</a> are here in the Reg.  Have I ever mentioned clicking on something from someone you don't know can be dangerous?</p>
<p>--Glenn</p>
]]></content:encoded>
</item>
<item>
<title><![CDATA[Badware and the Net]]></title>
<link>http://oregonnerd.wordpress.com/?p=520</link>
<pubDate>Fri, 29 Aug 2008 21:16:53 +0000</pubDate>
<dc:creator>oregonnerd</dc:creator>
<guid>http://oregonnerd.pt-br.wordpress.com/2008/08/29/badware-and-the-net/</guid>
<description><![CDATA[I&#8217;m continually seeing scare stories&#8211;from around the world, for that matter, as far as t]]></description>
<content:encoded><![CDATA[<p>I'm continually seeing scare stories--from around the world, for that matter, as far as those translated to English--about various traps being used.  There's the DNS flaw (it's been around for a long time, with evidently no known way to actually fix it) and a new kind of visual file that isn't static (from what I gather); it's a movie.  I would expect that latter especially to especially be at the porn sites <strong>right now</strong>; sorry, guys.  I'm assuming there won't be too much protest about sexually-based assumptions.  Oddly enough, I should add <strong><em>don't click on any links</em></strong> unless you're absolutely sure.  (Good luck.)</p>
<p> </p>
<p>Moving to Linux isn't a solution in any way, and I won't even ever migrate wholly to it.  I might go into why it's not anything approaching a solution at some other time...</p>
<p>--Glenn</p>
]]></content:encoded>
</item>
<item>
<title><![CDATA[Think your infected?  Did something try to tell you this?]]></title>
<link>http://deigratia.wordpress.com/?p=1006</link>
<pubDate>Tue, 26 Aug 2008 15:00:05 +0000</pubDate>
<dc:creator>deigratia</dc:creator>
<guid>http://deigratia.pt-br.wordpress.com/2008/08/26/think-your-infected-did-something-try-to-tell-you-this/</guid>
<description><![CDATA[Well Let me say this if this thing popped up anywhere on your computer, I would have good reason to ]]></description>
<content:encoded><![CDATA[<p>Well Let me say this if this thing popped up anywhere on your computer, I would have good reason to think you are infected so follow the steps on this Page and then check to be sure on the Page given at the bottom of this page.<br />
<a href="http://www.mywot.com/" target="_blank"><img class="alignnone size-full wp-image-383" src="http://deigratia.wordpress.com/files/2008/04/new_icons_12.gif" alt="" width="91" height="45" /></a> Updated today!  Also Many of you know That Anti-Spam software is not required for your system if your doing exactly what I hope to get done.</p>
[caption id="attachment_1016" align="aligncenter" width="450" caption="Does your computer tell you this, LOOK OUT!!"]<img class="size-full wp-image-1016" src="http://deigratia.wordpress.com/files/2008/08/xpav.png" alt="Does your computer tell you this, LOOK OUT!!" width="450" height="348" />[/caption]
<p>The executable that's offered could be <span style="text-decoration:underline;"><strong>AV2009Install_77011807.exe</strong></span> There could be any numbers in behind the words.</p>
<p>This malware has been removed from too many machines in the last month or so, ranging from home PC's, to corporate machines, that have corporate AV installed on them.</p>
<p>Note, that Malwarebytes Antimalware (malwarebytes.org) program removes the program with out any problems. You don't need to buy anything (unless you want continuous protection - but I run it once a week to keep an eye on things)<br />
<span style="color:#ff0000;">Run a full scan using the free version</span>, remove everything it finds and you should be good to go.<br />
Another issue I've found is that some machines infected with this <strong><span style="color:#008000;"><em>also have a secondary infection which turns your machine into a mass mailer spewing out thousands of spam emails</em></span></strong> (this may or may not be related to the first infection). So <span style="text-decoration:underline;">as well as doing the above</span>, make sure the <span style="text-decoration:underline;">PC has up to date anti-virus software and run a full scan.</span><br />
I hope that this will help others in the fight against the crap that is out there</p>
<h3 style="text-align:center;">~~~~~~~~~~~~~~~~~</h3>
<p style="text-align:center;">The <!--coloro:#ff0000--><span style="color:#ff0000;"><!--/coloro--><strong>AntiVirus 2009 attacks are particularly troublesome</strong><!--colorc--></span><!--/colorc--> as <strong><em>they can download and install silently on a PC by just visiting a website.</em> However, the payload still requires a mouse click when the Antivirus pop-up suddenly appears stating the user has an infection. These are v</strong><strong><!--coloro:#ff0000--><span style="color:#ff0000;"><!--/coloro-->ery advanced malware attacks <!--colorc--></span><!--/colorc-->to prevent, detect, and clean so avoidance is your best defence.</strong></p>
<p style="text-align:center;">In fact, this clever social engineering attack may simulate past experiences where the legitimate Anti Virus product has found a virus and presented it to the user. Users who are not technically inclined may even think this is their own Anti Virus system warning them.</p>
<p style="text-align:center;">When a malware pop-up appears of any type, your PC is in trouble at that point. Sometimes however you can avoid more extensive damage by exiting out and getting immediate help in cleaning. If you can safely exit out of these types of pop-up windows your system for silent downloaders, sometimes your PC may not become infected.</p>
<p style="text-align:center;"><!--coloro:#ff0000--><span style="color:#ff0000;"><!--/coloro--><strong>Avoid any clicking or pressing the enter key</strong><!--colorc--></span><!--/colorc-->, as “NO” or “CANCEL” may be secretly programmed to be a “YES”. Malware writers won’t have the best ethical conduct and they want to use any mouse click available to let the attack enter into the Windows environment (even a “NO” or “EXIT”).<br />
<span style="color:#ff0000;"><strong>Instead use this approach:</strong></span>
</p>
<p style="text-align:center;"><!--sizeo:4--><span style="font-size:14pt;line-height:100%;"><!--/sizeo--><!--coloro:#800000--><span style="color:#800000;"><!--/coloro--><strong>USE TASK MANAGER TO SAFELY EXIT MALWARE ATTACKS</strong><!--colorc--></span><!--/colorc--><!--sizec--></span><!--/sizec--></p>
<p style="text-align:center;">1. The easiest way to <strong><!--coloro:#008000--><span style="color:#008000;"><!--/coloro-->launch task manager in Windows<!--colorc--></span><!--/colorc--></strong> is to press: <strong><!--coloro:#008000--><span style="color:#008000;"><!--/coloro-->Ctrl+Shift+Esc <!--colorc--></span><!--/colorc--></strong></p>
<p style="text-align:center;">2. Press the <!--coloro:#008000--><span style="color:#008000;"><!--/coloro--><strong>applications TAB</strong><!--colorc--></span><!--/colorc--> (if it’s not already positioned there)</p>
<p style="text-align:center;">3. <!--coloro:#008000--><span style="color:#008000;"><!--/coloro--><strong>Select the pop-up TASK</strong><!--colorc--></span><!--/colorc--></p>
<p style="text-align:center;">4. Press <strong><!--coloro:#008000--><span style="color:#008000;"><!--/coloro-->End Task <!--colorc--></span><!--/colorc--></strong>button at bottom to close it</p>
<p style="text-align:center;">5. Then <strong><!--coloro:#008000--><span style="color:#008000;"><!--/coloro-->seek technical help on cleaning <!--colorc--></span><!--/colorc--></strong>… If you’re not experienced, my #1 tip is to have a friend or relative help you so that you do this safely and minimize losses to your PC.</p>
<p style="text-align:center;"><!--coloro:#800080--><span style="color:#800080;"><!--/coloro--><em>Additional resources can be found from these experts below:</em><!--colorc--></span><!--/colorc--></p>
<p style="text-align:center;"><strong><!--coloro:#008000--><span style="color:#008000;"><!--/coloro-->How to Safely Close a Pop-Up Window In Your Browser<!--colorc--></span><!--/colorc--></strong><br />
<a href="http://aumha.net/viewtopic.php?f=26&#38;t=32872" target="_blank">http://aumha.net/viewtopic.php?f=26&#38;t=32872</a></p>
<p style="text-align:center;"><!--coloro:#008000--><span style="color:#008000;"><!--/coloro--><strong>Don’t Close That Pop-Up Window! - Clicking “No” May Mean “Yes”</strong><!--colorc--></span><!--/colorc--><br />
<a href="http://netsecurity.about.com/od/popupsandspyware/qt/aaclosepopup.htm?nl=1" target="_blank">http://netsecurity.about.com/od/popupsands…epopup.htm?nl=1</a></p>
<p style="text-align:center;"><strong><!--coloro:#008000--><span style="color:#008000;"><!--/coloro-->How to invoke Task Manager<!--colorc--></span><!--/colorc--></strong><br />
<a href="http://en.wikipedia.org/wiki/Windows_Task_Manager" target="_blank">http://en.wikipedia.org/wiki/Windows_Task_Manager</a><br />
<a href="http://support.microsoft.com/kb/323527" target="_blank">http://support.microsoft.com/kb/323527</a>
</p>
<p style="text-align:center;">~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~</p>
<p>Frequently, people ask how they know if the site they landed on is serving up a safe program or if it is dangerous. One consideration is <a href="http://www.mywot.com/">Web of Trust</a>,  a free Internet security addon for your browser.  In fact, based on the results illustrated by <span style="font-style:italic;">Certified Bug</span> in <a href="http://certifiedbug.com/blog/2008/08/24/what-is-wot/">What is WOT</a>, it appears that WOT is much more responsive than the formerly acclaimed McAfee Site Advisor.</p>
<p>Other steps to take are to stay up to date with security updates for all your software, not just Microsoft updates, install and maintain anti-virus software and a firewall. Additional solid advice is available in Bill Pytlovany's recent article, <a href="http://billpstudios.blogspot.com/2008/08/where-did-my-spyware-come-from.html">Where did my Spyware come from?</a>.</p>
<p>What do you do if your computer does become infected with one of the rogues like XP Antivirus? First and foremost, do not fall for the scam and send any money. Do not click any of the links they provide. Next, I would recommend installing, updating and runing a scan with <a href="http://www.malwarebytes.org/mbam.php">Malwarebytes' Anti-Malware</a> (MBAM), allowing it to remove what is found. In providing help on the forums, I have seen how effective MBAM is in removing not only rogues like XP Antivirus but other malware as well.</p>
<h4 style="text-align:center;"><span style="color:#ff0000;">Concerns about your PC security? We help thousands of new users every day to rid their PC of high risk spyware, adware, trojan, virus and rootkit infections<br />
Is your PC really is safe? </span></h4>
<h4 style="text-align:center;"><span class="postcolor"><a href="http://www.malwarebytes.org/mbam.php" target="_blank">Malwarebytes’ Anti-Malware</a><br />
</span> <a href="http://www.malwarebytes.org/" target="_blank"><img class="linked-sig-image" src="http://www.malwarebytes.org/images/marcinsig.gif" border="0" alt="" /><br />
</a>Download it directly from <a href="http://malwarebytes.gt500.org/" target="_blank">this page…</a>(Win2K, XP, 2003 and Vista)</h4>
<h3 style="text-align:center;">*************************************************************</h3>
<p align="center"><a href="http://www.danasoft.com/"> <img src="http://www.danasoft.com/sig/RicD.jpg" border="0" alt="" /></a></p>
<p style="text-align:center;">*******************************************************************************************************</p>
<p align="center">
<p align="center"><a href="http://www.crossloop.com/RicDee.id?type=email" target="_blank"><img src="http://www.crossloop.com/images/badge-sm-black.jpg" border="0" alt="Get help from Ric Doerner!" /></a><br />
Click the green loops above to get the download and leave me a comment below this entry if you wish for some assistance.</p>
<h3 style="text-align:center;">*************************************************************</h3>
</p>
<p style="text-align:center;"><strong>Greetings and welcome to</strong>(TONS) of</p>
<p style="text-align:center;">information <span style="color:#ff0000;">site that can help you, your family and everything you do on the internet.</span></p>
<p style="text-align:center;">
<h3 style="text-align:center;">But <span style="color:#ff0000;"><span style="text-decoration:underline;">please</span></span> this is for <span style="text-decoration:underline;">personal computers only All prgrams that are offered on deigratia.wordpress.com and links from this site too are free!  In no way should anyone ask you for monies for any of these. I help and ask for no monies either. Donations to the actual sites that make these programs are suggested.<br />
</span></h3>
<p style="text-align:center;"><a href="http://www.danasoft.com/"><br />
</a></p>
<h3 style="text-align:center;"><span style="color:#ff0000;"><span style="text-decoration:underline;">SCAN YOUR COMPUTER !!!</span></span></h3>
</p>
<p style="text-align:center;">
<h3 style="text-align:center;"><span style="text-decoration:underline;">Antivirus *FSECURE*</span></h3>
<p style="text-align:center;"><span style="color:#e519e1;"><strong><em>Don’t stop when you find the first piece of malware. It is not uncommon for a computer that has been exploited through a security flaw to have been penetrated more than once. Also, some malware opens backdoors that facilitate the installation of software that enables use of the infected computer by remote control.</em></strong></span></p>
<p align="center">Most links on this site are going to open in a new window if you just click on them, but if you press down the ball on the mouse it will open a new Tab.</p>
<p align="center"><strong><a href="http://housecall.trendmicro.com/" target="_blank">http://housecall.trendmicro.com/</a></strong></p>
<p align="center"><strong><a href="http://www.pandasoftware.com/activescan/" target="_blank">http://www.pandasoftware.com/activescan/</a></strong></p>
<p align="center"><strong><a href="http://makeashorterlink.com/?I213211E4" target="_blank">http://makeashorterlink.com/?I213211E4-Symantec’s Security Check</a></strong></p>
<p align="center"><span style="color:#ff0000;"><strong><a href="http://support.f-secure.com/enu/home/ols.shtml" target="_blank">F-Secure  Online Virus Scanner</a></strong></span></p>
<p style="text-align:center;">
<p style="text-align:center;">
<p align="center">
<h3 style="text-align:center;"><span style="text-decoration:underline;">ANTISPWARE *X-CLEANER*</span></h3>
<p align="center"><strong><a href="http://www.webroot.com/services/spyaudit_03.htm?WRSID=048bb76e92c45f5dc7318ac1d39fda06" target="_blank">Webroot Software Free Spy Audit</a></strong></p>
<p align="center"><strong><a href="http://www.spywareguide.com/onlinescan.php" target="_blank">By FaceTime  Security Labs, makers of the <span style="color:#ff0000;">X-Cleaner Spyware Remover</span></a></strong></p>
<p align="center"><a href="http://www.ca.com/us/securityadvisor/pestscan/default.aspx" target="_blank"><strong>eTrust Pest  Scanner </strong></a></p>
<p align="center"><strong><a href="http://www.ewido.net/en/onlinescan/" target="_blank">http://www.ewido.net/en/onlinescan/</a></strong></p>
<p align="center">
<p align="center">
<p align="center">Thank you for that cleaning first, this will assist you in what you really require and the stuff here are security programs this should ensure that the program functions the way it should. Also note these programs are being used are no problem but Ram is suggested min. (512MB). Right-click on the "My computer" and click Properties. The main display window should say how much RAM.THE best and least expensive upgrade for your computer. <img class="wp-smiley" src="https://deigratia.wordpress.com/wp-includes/images/smilies/icon_smile.gif" alt=")" /><br />
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
</p>
<p style="text-align:center;"><a href="http://www.mywot.com/" target="_blank"><img class="alignnone size-full wp-image-383" src="http://deigratia.wordpress.com/files/2008/04/new_icons_12.gif" alt="" width="91" height="45" />Web of Trust (WOT)</a> as a way to help recognize rogues when surfing the web by warning you before you interact with a risky website. In a comment to that article, Deborah from WOT posted a link to a video illustrating another scam designed to part you with your money. As Deborah explained, WOT tested it on a clean virtual machine and it reported finding over 500 errors, 31 of them classified as severe!</p>
<p style="text-align:center;">Because the video is a clear example of what people are faced with every day, I decided to share it here. The information presented in the fake scan in the video appears credible so is it no wonder why people panic and fall for these scams? Don't you be fooled!<br />
<span style='text-align:center; display: block;'><object width='425' height='350'><param name='movie' value='http://www.youtube.com/v/c4ubAP62ero'></param><param name='wmode' value='transparent'></param><embed src='http://www.youtube.com/v/c4ubAP62ero&rel=0' type='application/x-shockwave-flash' wmode='transparent' width='425' height='350'></embed></object></span><br />
<strong>The extra layer of security provided by <a href="http://www.mywot.com/" target="_blank">WOT</a> will help keep you safe from online scams, identity theft, spyware, spam, viruses and unreliable shopping sites. Definitely worth considering!</strong><br />
<a href="http://www.mywot.com/" target="_blank">http://www.mywot.com/</a>
</p>
<p align="center">**********************************************************</p>
<p align="center"><a href="http://www.danasoft.com/"><img src="http://www.danasoft.com/citysign.jpg" border="0" alt="" /></a></p>
<h3><span style="color:#ff0000;"><strong>*If you need more sites for an online scan try these……*</strong></span></h3>
<div style="text-align:center;"><a href="http://www.ca.com/us/securityadvisor/virusinfo/scan.aspx" target="_blank">http://www.ca.com/us/securityadvisor/virusinfo/scan.aspx</a></div>
<div><img src="http://virus-protect.org/artikel/bilder/ca3.gif" border="0" alt="kaspersky" width="37" height="37" /> <strong>Kaspersky - Onlinescanner</strong><a href="http://www.kaspersky.com/de/virusscanner">http://www.kaspersky.com/de/virusscanner</a></div>
<div style="text-align:center;"><a href="http://www.zonealarm.com/store/content/promotions/spywarescanner/scanner.jsp" target="_blank">http://www.zonealarm.com/store/content/promotions/spywarescanner/scanner.jsp<br />
</a></div>
<div style="text-align:center;"><a href="http://virusscan.jotti.org/" target="_blank">A great one small file scanner    http://virusscan.jotti.org/<br />
</a></div>
<div><img src="http://virus-protect.org/artikel/bilder/ca5.gif" border="0" alt="Panda Online-Scan" width="37" height="37" /> <strong>Online-Scan (Panda </strong><strong>Total-Scan</strong><strong>)</strong></div>
<div style="text-align:center;"><a href="http://www.nanoscan.com/as/index/">http://www.nanoscan.com/as/index/</a></div>
<div><img src="http://virus-protect.org/artikel/bilder/ca8.gif" border="0" alt="ESET Online Scanner" width="79" height="34" /> <strong>ESET Online Scanner</strong><a href="http://www.eset.com/onlinescan/">http://www.eset.com/onlinescan/</a></div>
<div><img src="http://virus-protect.org/artikel/bilder/ca1.gif" border="0" alt="bitdefender" width="37" height="37" /> <strong>Bitdefender/Online</strong><a href="http://www.bitdefender.com/scan8/ie.html">http://www.bitdefender.com/scan8/ie.html<br />
</a>When a threat is detected by the the BitDefender Online scanner, it will first attempt to disinfect (repair) the file, and only if it cannot be repaired, it will delete it. However, you can elect to change the secondary action from delete to “Report Only” or “Prompt for User Action”, so an infected system file is not deleted. This is the safest option to guard against false positives and system files that have been “patched” by malware. It is also the safest option if heuristics are used in detection, which they are by default.<a href="http://www.bitdefender.com/scan8/ie.html"> </a></p>
<ul> Please refer to this <a class="external text" title="http://wiki.castlecops.com/Image:BDoptions.jpg" href="http://wiki.castlecops.com/Image:BDoptions.jpg">BitDefender Set Scan Options</a> image for further clarification.</ul>
<dl>
<dd>
<ul> The options which are checked (enabled) in the image are the BitDefender default scanning options, and they may be changed.</ul>
</dd>
</dl>
</div>
<p><img src="http://virus-protect.org/artikel/bilder/ca16.gif" border="0" alt="Windows Live OneCare Free Scan" width="40" height="35" /><strong>Windows Live Free Scan - PC safety scan</strong></p>
<div>
<p style="text-align:center;"><a href="http://onecare.live.com/site/en-us/default.htm">http://onecare.live.com/site/en-us/default.htm</a></p>
</div>
<div style="text-align:center;"><a href="http://www.microworldsystems.com/download/tools/mwav.exe" target="_blank"><strong><br />
</strong></a></div>
<h3 style="text-align:center;">McAfee Avert Stinger</h3>
<p style="text-align:center;">Stinger is a stand-alone utility used to detect and remove specific viruses. It is not a substitute for full anti-virus protection, but rather a tool to assist administrators and users when dealing with an infected system. Stinger utilizes next generation scan engine technology, including process scanning, digitally signed DAT files, and scan performance optimizations.</p>
<p style="text-align:center;"><a href="http://vil.nai.com/vil/stinger/" target="_blank">http://vil.nai.com/vil/stinger/<br />
</a></p>
<p style="text-align:center;"><span class="postcolor"><a href="http://www.malwarebytes.org/mbam.php" target="_blank"><br />
</a></span></p>
<p><strong>AntiTrojan Scans</strong> - Run one:  Install the 30-day trial of <a class="external text" title="http://www.misec.net/products/TrojanHunterSetup.exe" href="http://www.misec.net/products/TrojanHunterSetup.exe">TrojanHunter v. 5.0</a> (Win 98, ME, 2K, XP, 2003, and Vista)
</p>
<p style="text-align:center;"><a href="http://www.fileresearchcenter.com/whatsrunningpre.html" target="_blank"><img src="http://www.fileresearchcenter.com/images/IMGFreeReport.gif" border="0" alt="Click here to find out what's running on YOUR computer!" width="203" height="137" /></a></p>
<p style="text-align:center;">**********************************************************</p>
<p style="text-align:center;"><a href="http://www.danasoft.com/"><img src="http://www.danasoft.com/sig/RicD.jpg" border="0" alt="" /></a></p>
<p style="text-align:center;">
<p style="text-align:center;">These signs are created and served by danasoft.com’s webserver in real-time for each person that views them. Your IP address and other information are only visible to YOU, not to others, but because people see their own IP address and computer information displayed on a blog or in a public forum, they think that their information can be seen by everyone!</p>
<h3 style="text-align:center;">Read the privacy policy for more details. <a href="http://www.danasoft.com/privacy.php" target="_blank"><strong>Click Here!</strong></a></h3>
<h2 style="text-align:center;"><span style="color:#ff0000;"><strong><a href="http://www.us-cert.gov/reading_room/securing_browser/#Mozilla_Firefox">Securing Your Web Browsers</a></strong> document</span></h2>
<h3 style="text-align:center;"><span style="text-decoration:underline;">More Info found at <a href="http://deigratia.wordpress.com/2005/02/16/new-security-for-your-personal-computer-35/" target="_blank">this Page………click Here</a></span></h3>
<h3 style="text-align:center;"><strong><a href="http://deigratia.wordpress.com/2005/02/16/security-for-your-personal-computer/" target="_blank"><span style="text-decoration:underline;"><br />
</span></a></strong></h3>
<h3 style="text-align:center;"><strong><a href="http://deigratia.wordpress.com/2005/02/16/security-for-your-personal-computer/" target="_blank"> </a></strong></h3>
<h3 style="text-align:center;"><span style="color:#ff0000;">See anything that you think requires my attention?</span> I have changed somethings due to your requests, If for any reason you have not heard from me please scan your computer with the suggested programs above. Thanks for I do always reply, but the mail has to reach me first. Good Luck.</h3>
<p style="text-align:center;">Well then feel free to click on <strong> </strong>image<strong><a href="mailto:Rascal@myprivacy.ca" target="_blank"><img src="http://deigratia.files.wordpress.com/2006/10/emailmev.gif" border="0" alt="" width="90" height="80" /></a></strong><strong>.</strong>I will respond either soon or immediately!<img src="http://deigratia.files.wordpress.com/2006/10/rad16.thumbnail.gif" alt="rad16.gif" />Truth is the way things are.</p>
]]></content:encoded>
</item>
<item>
<title><![CDATA[Late night TV spammers Part Deux: Ryan Strikes Back]]></title>
<link>http://izanbardprince.wordpress.com/?p=722</link>
<pubDate>Sun, 17 Aug 2008 00:56:07 +0000</pubDate>
<dc:creator>Ryan</dc:creator>
<guid>http://izanbardprince.pt-br.wordpress.com/2008/08/17/late-night-tv-spammers-part-deux-ryan-strikes-back/</guid>
<description><![CDATA[I got annoyed by those &#8220;Finally Fast&#8221; Windows crapware spammers again, and so I decided ]]></description>
<content:encoded><![CDATA[<p><strong>I got annoyed by those <a href="http://izanbardprince.wordpress.com/2008/08/15/the-one-click-snake-oil-pc-optimizers-are-on-late-night-tv-now/">"Finally Fast" Windows crapware spammers</a> again, and so I decided to have some fun, I don't have a connector for my phone to my PC yet, so I'll condense the most interesting bits of the 25 minute long conversation here:</strong></p>
<p>FF Rep: "Thank you for calling Finally Fast, my name is Brian, may I have your first name please?"</p>
<p>Me: "My name is Steve."</p>
<p>Brian: "Hi Steve! And may I ask which of our software you are calling about today?"</p>
<p>Me: "Well, I saw your ad on TV and my computer isn't real slow, but it couldn't hurt to make it a bit faster, right?"</p>
<p>Brian: "Of course not, and may I have your last name?"</p>
<p>Me: "Shyster" (I didn't think this would work and had to bit my tongue afterwards)</p>
<p>Brian: "Thank you mister Shyster...Now Mr. Shyster, you remember when you first got your computer and it was really really fast? It's probably gotten a lot slower since then, hasn't it?"</p>
<p>Me: "Oh, not really too much, I don't think.....but your software will make my computer faster right?"</p>
<p>Brian: "Yes, because it goes through and eliminates registry errors and spyware and the fragmentation thats been happening on your computer"</p>
<p>Me: "I don't think I have a registry"</p>
<p>Brian: "Well, every PC has a registry, and the registry is where your programs store all their settings and things like that, and over time, it can have thousands of incorrect settings in it, and our software eliminates that, and the spyware and fragmentation.</p>
<p>Me: "What is fragmentation exactly? I've heard of that somewhere before."</p>
<p>Brian: "Fragmentation is what happens when the files stored on your hard disk are broken into pieces, and our patented software eliminates this"</p>
<p>Me: "So I need your software to get rid of these registry errors and fragmentation?"</p>
<p>Brian: "Yes, thats right. You may have some spyware too."</p>
<p>Me: "Spyware? I'm not following you..."</p>
<p>Brian: "Bad software that breaks into your computer and steals your private information"</p>
<p>Me: "Like my social security number and tax return information?"</p>
<p>Brian: "Yes, do you have any antivirus software?"</p>
<p>Me: "No, I've never really needed any"</p>
<p>Brian: "Hmmm, you probably have some spyware problems then..."</p>
<p>Me: "I've never seen any"</p>
<p>Brian: "Well, that doesn't mean it isn't there...I think I've determined the software you need from us, we've got a great deal on [product] for only $29.99 with a year of support, and we've seen that make internet connections 300% faster, and for $19.99 you can get [product] which will eliminate spyware, and for another $19.99, you can get [product] which will defragment your hard disk and clean up junk files....how will you be paying for this?"</p>
<p>Me: "Well, I have some licensing questions..."</p>
<p>Brian: "Of course"</p>
<p>Me: "I have a number of PC's I'm interested in using your software on, and I really wouldn't want to copy and use them again without your permission....so my question being..How many computers am I licensed to run this software on?"</p>
<p>Brian: "Well, we do offer all the software on CD ROM for an extra $12.95 each"</p>
<p>Me: "That sounds good."</p>
<p>Brian: "So may I have your credit card information? I'll make sure this gets right out to you."</p>
<p>Me: "I just a couple more questions, I'm sorry to impose..."</p>
<p>Brian: "Alright..."</p>
<p>Me: "Is your software compatible with Wine?"</p>
<p>Brian: "What is Wine? I have no idea what that is"</p>
<p>Me: "It emulates the Windows API, I run all my Windows software through it"</p>
<p>Brian: "Oh well, yes, our software is compatible with all versions of Windows"</p>
<p>Me: "So running it in Wine on Linux would be ok then?" (I thought he'd catch on here)</p>
<p>Brian: "Yes, it should support the Linux editions of Microsoft Windows" (punching myself on the forehead and grinding my teeth)</p>
<p>Me: "Oh, good! I was hoping you would say that"</p>
<p>Brian: "So are you ready to place your order?"</p>
<p>Me: "Sure."</p>
<p>Brian: "Is it a credit card, debit, check by phone?" (Like hell)</p>
<p>Me: "A credit card"</p>
<p>Brian: "Can you give me the 16 digit number?"</p>
<p>Me: "Sure, but I just thought of one more question"</p>
<p>Brian: "Yes?"</p>
<p>Me: "How do you spell SUCKER, sucker".......rick roll till the line goes dead (starting from "Never gonna give you up")</p>
<p><span style='text-align:center; display: block;'><object width='425' height='350'><param name='movie' value='http://www.youtube.com/v/A3_n0B1EaOY'></param><param name='wmode' value='transparent'></param><embed src='http://www.youtube.com/v/A3_n0B1EaOY&rel=0' type='application/x-shockwave-flash' wmode='transparent' width='425' height='350'></embed></object></span></p>
<p><strong>If you want to Rick Roll them by phone:</strong></p>
<p><a href="http://prankdialer.com/rickroll.php">http://prankdialer.com/rickroll.php</a></p>
<p><strong>Or there's the Captain Picard song:</strong></p>
<p><a href="http://prankdialer.com/dr.php">http://prankdialer.com/dr.php</a></p>
<p><strong>Or "You Spin Me Right Round"</strong></p>
<p><a href="http://prankdialer.com/spin.php">http://prankdialer.com/spin.php</a></p>
<p>Phone Number:</p>
<p>1800-384-1179</p>
<p><strong>I looked at the domain registry and found an Adam Schran, who is the CEO of the company, and left a few rickrolls in his voicemail by playing them into the phone, Schran is at:</strong></p>
<p>215-320-6000 Ext. 111</p>
<p>Finally, E-Commerce Guide mentioned Schran and his "company" back in 2001:</p>
<p><span class="body"><em><strong>"The company's CEO is 25-year-old Adam Schran, who told me that Ascentive's first two software programs, webROCKET and winROCKET, were developed by his brother Andrew, 14, who began writing the code when he was 11. </strong></em></p>
<p><em><strong> Andrew is "now serving in an advisory role," Schran said. "We have software developers on staff and they have engineered all of our other house-developed software (BeAware, ActiveTime, ActivePrivacy, RAMrocket)."</strong></em></p>
<p><a href="http://www.ecommerce-guide.com/news/trends/article.php/884011">http://www.ecommerce-guide.com/news/trends/article.php/884011</a></p>
<p></span></p>
]]></content:encoded>
</item>
<item>
<title><![CDATA[STOP Badware - Report it here.]]></title>
<link>http://mirmoiz.wordpress.com/?p=51</link>
<pubDate>Wed, 16 Jul 2008 09:07:11 +0000</pubDate>
<dc:creator>mirmoiz</dc:creator>
<guid>http://mirmoiz.pt-br.wordpress.com/2008/07/16/stop-badware-report-it-here/</guid>
<description><![CDATA[StopBADware.org
Great place to go and do something about the BAD sites.
- MIR
]]></description>
<content:encoded><![CDATA[<p><a href="http://www.stopbadware.org/home/index" target="_blank">StopBADware.org</a></p>
<p>Great place to go and do something about the BAD sites.</p>
<p>- MIR</p>
]]></content:encoded>
</item>
<item>
<title><![CDATA[Do not trust Godaddy security certificates!]]></title>
<link>http://izanbardprince.wordpress.com/?p=80</link>
<pubDate>Sun, 13 Jul 2008 04:11:02 +0000</pubDate>
<dc:creator>Ryan</dc:creator>
<guid>http://izanbardprince.pt-br.wordpress.com/2008/07/13/do-not-trust-godaddy-security-certificates/</guid>
<description><![CDATA[
Godaddy signing a security certificate for a SPYWARE VENDOR!
As part of the Chris Pirillo is an idi]]></description>
<content:encoded><![CDATA[<p><img class="alignnone" src="http://img155.imageshack.us/img155/1539/screenshotxpcleanerfileei4.png" alt="" width="839" height="584" /></p>
<p><em>Godaddy signing a security certificate for a SPYWARE VENDOR!</em></p>
<p><strong>As part of the Chris Pirillo is an idiot deal I checked out Godaddy:</strong></p>
<p>And found that they are providing security certificate signing for spyware vendors, this helps people like the type behind the rogue anti-malware look more legitimate when they take you to their page asking you for your credit card number.</p>
<p>Chris Pirillo is advertising for Godaddy's services heavily, so I just wanted to point out how unscrupulous they are right here and now.</p>
<p>(Note that I am using Linux, which is immune from their crap, do not go to their site!)</p>
]]></content:encoded>
</item>
<item>
<title><![CDATA[HijackThis Log Analyzing and Malware Removal &amp; Cleaning]]></title>
<link>http://smokeys.wordpress.com/?p=105</link>
<pubDate>Sun, 22 Jun 2008 14:58:12 +0000</pubDate>
<dc:creator>Smokey</dc:creator>
<guid>http://smokeys.pt-br.wordpress.com/2008/06/22/hijackthis-log-analyzing-and-malware-removal-cleaning/</guid>
<description><![CDATA[What is HijackThis
HijackThis is a free utility which quickly scans your Windows computer to find se]]></description>
<content:encoded><![CDATA[<h2><span style="color:#3366ff;">What is HijackThis</span></h2>
<p><strong>HijackThis</strong> is a free utility which quickly scans your Windows computer to find settings that may have been changed by spyware, malware or other unwanted programs. HijackThis creates a report, or log file, with the results of the scan.</p>
<p><strong>IMPORTANT:</strong> HijackThis does not determine what is good or bad.<br />
Do not make any changes to your computer settings using HijackThis unless instructed by a member of the HJT Analyzers/Malware Hunters group of Smokey's Security Forums.</p>
<h2><span style="color:#3366ff;">Procedures before submitting a HJT log to Smokey's Security Forums</span></h2>
<p>- Please register on the forum... <a href="http://www.smokey-services.eu/forum/ucp.php?mode=register">Here,</a> it is for free.</p>
<p>- Before submitting a HJT log to Smokey's Security Forums, we ask that you follow this procedure first as described... <a href="http://www.smokey-services.eu/forum/viewtopic.php?f=5&#38;t=15674">Here.</a></p>
<p>- At the moment you have followed all instructions post your HJT log on the forum... <a href="http://www.smokey-services.eu/forum/viewtopic.php?f=5&#38;t=15674">Here.</a><br />
Then please wait for your log to be answered. Answers, help and support will be given by full qualified HJT Log Analyzers/Malware Hunters. The offered HJT services are for free also.</p>
<p>See ya, ;)</p>
<p><strong>Starbuck<br />
Team Leader HJT Analyzers/Malware Hunters</strong></p>
]]></content:encoded>
</item>
<item>
<title><![CDATA[Akhirnya Sembuh :-)]]></title>
<link>http://alamster.wordpress.com/?p=580</link>
<pubDate>Mon, 05 May 2008 14:18:14 +0000</pubDate>
<dc:creator>alamster</dc:creator>
<guid>http://alamster.pt-br.wordpress.com/2008/05/05/akhirnya-sembuh/</guid>
<description><![CDATA[Udah lama ngeh kl blog saya yang lain ada &#8216;badware&#8217; nya.
Dulu  &#8216;udah ngadu&#8217;]]></description>
<content:encoded><![CDATA[<p>Udah lama ngeh kl blog saya yang lain ada 'badware' nya.</p>
<p>Dulu  'udah ngadu' untuk di rehabilitasi tapi ternyata baru di tanggapi sekarang :-) dan akhirnya.</p>
<p>Dapat surat cinta dari <a href="stopbadware.org" target="_blank">stopbadware</a> :</p>
<blockquote><p>We have received and processed your request for review of your website, <a href="http://rasyid.net/" target="_blank">rasyid.net/</a>.  Google's most recent test of your website found no badware behaviors on the site.  As such, the Google warning page for your site has either already been removed or should be removed shortly.  In addition, if your site has been listed in our Badware Website Clearinghouse, we will remove your site from the Clearinghouse list.</p>
<p>Sometimes website owners are confused about why Google placed a warning in the search results for their site.  In many cases, a website run by an innocent site owner has been hacked by a malicious third party, causing the site to distribute badware without the site owner's knowledge.  If your site was distributing badware because it has been hacked, then simply removing the bad code from your site is not enough to keep your site clean in the future.  You will also need to work with your hosting provider to fix all security vulnerabilities associated with your site.</p>
<p>Please note that we will be retesting your website at periodic intervals in order to monitor that it remains free from badware.  If we find that you are hosting or distributing badware in the future, the reviews process may take considerably longer than the original review.</p>
<p>Answers to commonly asked questions from site owners who are the subject of Google warnings can be found at:  <a href="http://stopbadware.org/home/faq#partnerwarnings" target="_blank">http://stopbadware.org/home/faq#partnerwarnings</a><br />
For tips on keeping your website clean and secure, please visit:  <a href="http://stopbadware.org/home/security" target="_blank">http://stopbadware.org/home/security</a></p>
<p>The StopBadware Team</p></blockquote>
<p>Efek yang terasa visitor dari google gak sungkan lagi tuk berkunjung hehehehe.</p>
<p><img src="http://alamster.files.wordpress.com/2008/05/pengunjung.png" alt="" /></p>
<p>kembali ke server.</p>
]]></content:encoded>
</item>
<item>
<title><![CDATA[Java Anonymous Proxy (JAP): once a Crook, always a Crook?]]></title>
<link>http://smokeys.wordpress.com/?p=75</link>
<pubDate>Sat, 26 Apr 2008 16:40:59 +0000</pubDate>
<dc:creator>Smokey</dc:creator>
<guid>http://smokeys.pt-br.wordpress.com/2008/04/26/java-anonymous-proxy-jap-once-a-crook-always-a-crook/</guid>
<description><![CDATA[Today&#8217;s post on DSLReports with subject &#8221;JAP&#8221; draw my attention.
From Java Ano]]></description>
<content:encoded><![CDATA[<p><a href="http://www.dslreports.com/forum/r20390025-JAP">Today's post</a> on DSLReports with subject "JAP" draw my attention.</p>
<p>From Java Anonymous Proxy (JAP) <a href="http://anon.inf.tu-dresden.de/index_en.html">Homepage:</a></p>
<p><em>JAP makes it possible to surf the internet anonymously and unobservably.Without<strong> Anonymization</strong>, every computer in the internet communicates using a traceable Address. That means:</em></p>
<p><em>- the website visited,</em><em><br />
</em><em> - the internet service provider (ISP),</em><em><br />
</em><em> - and any eavesdropper on the internet connection</em></p>
<p><em>can determine which websites the user of a specific computer visits. Even the information which the user calls up can be intercepted and seen if encryption is not used. JAP uses a single static address which is shared by many JAP users. That way neither the visited website, nor an eavesdropper can determine which user visited which website.</em></p>
<p>Sound great. Especially because the software and services are free. But after reading the DSLR post my mind about JAP changed.</p>
<p><strong>SUMware</strong> mentioned in the DSLR post an 2003 <a href="http://www.securityfocus.com/news/6779">SecurityFocus article</a> about the fact that JAPs anonymity service was (and still is?) back-doored. Sound not good anymore, sound really bad.</p>
<p>Excerpt SF article:</p>
<p><em>The popular Java Anonymous Proxy (JAP), used to anonymise one's comings and goings across the Internet, has been back-doored by court order. The service is currently logging access attempts to a particular, and unnamed, Web site and reporting the IP addys of those who attempt to contact it to the German police. </em><em><br />
</em><em><br />
</em><em>We know this because the JAP operators immediately warned users that their IP traffic might be going straight to Big Brother, right? Wrong. After taking the service down for a few days with the explanation that the interruption was "due to a hardware failure", the operators then required users to install an "upgraded version" (ie. a back-doored version) of the app to continue using the service.</em><em><br />
</em><em><br />
</em><em>"As soon as our service works again, an obligatory update (version 00.02.001) [will be] needed by all users," the public was told. Not a word about Feds or back doors.</em><em><br />
</em><em><br />
</em><em>Fortunately, a nosey troublemaker had a look at the 'upgrade' and noticed some unusual business in it, such as:</em><em><br />
</em><em><br />
</em><em>"CAMsg::printMsg(LOG_INFO,"Loading Crime Detection Data....\n");" </em><em><br />
</em><em>"CAMsg::printMsg(LOG_CRIT,"Crime detected - ID: %u - Content: </em><em><br />
</em><em>\n%s\n",id,crimeBuff,payLen);"</em><em><br />
</em><em><br />
</em><em>and posted it to alt.2600.</em></p>
<p><em>Soon the JAP team replied to the thread, admitting that there is now a "crime detection function" in the system mandated by the courts. But they defended their decision:</em><em><br />
</em><em><br />
</em><em>"What was the alternative? Shutting down the service? The security apparatchiks would have appreciated that - anonymity in the Internet and especially AN.ON are a thorn in their side anyway."</em><em><br />
</em><em><br />
</em><em>Sorry, the Feds undoubtedly appreciated the JAP team's willingness to back-door the app while saying nothing about it a lot more than they would have appreciated seeing the service shut down with a warning that JAP can no longer fulfill its stated obligation to protect anonymity due to police interference.</em></p>
<p><em>A press release from ICPP assures users that JAP is safe to use because access to only one Web site is currently being disclosed, and only under court-ordered monitoring.</em><em><br />
</em><em><br />
</em><em>But that's not the point. Disclosure is the point. The JAP Web site still claims that anonymity is sacrosanct: "No one, not anyone from outside, not any of the other users, not even the provider of the intermediary service can determine which connection belongs to which user."</em><em><br />
</em><em><br />
</em><em>This is obviously no longer true, if it ever was. And that's a serious problem, that element of doubt. Anonymity services can flourish only if users trust providers to be straight with them at all times. This in turn means that providers must be absolutely punctilious and obsessive about disclosing every exception to their assurances of anonymity. One doesn't build confidence by letting the Feds plug in to the network, legally or otherwise, and saying nothing about it.</em></p>
<p><em>Telling us that they only did it to help catch criminals isn't good enough either. Sure, no normal person is against catching criminals - the more the merrier, I say. But what's criminal is highly relative, always subject to popular perception and state doctrine. If we accept Germany's definition of criminal activity that trumps the natural right to anonymity and privacy, then we must accept North Korea's, China's and Saudi Arabia's. They have laws too, after all. The entire purpose of anonymity services is to sidestep state regulation of what's said and what's read on the basis of natural law.</em><em><br />
</em><em><br />
</em><em>The JAP Web site has a motto: "Anonymity is not a crime." It's a fine one, even a profound one. But it's also a palpably political one. The JAP project inserted itself, uncalled, into the turbulent confluence between natural law and state regulation, and signaled its allegiance to the former. It's tragic to see it bowing to the latter.</em></p>
<p>I don't know JAPs anonymity service is anno 2008 still back-doored.</p>
<p>Main queustion after the JAP back-doored issue is, can we ever trust JAP again?  <strong>My answer is a clear NO. JAP will always have an element of doubt.</strong></p>
<p>SecurityFocus hitted the nail with following remark in the article:</p>
<p><strong><em>Anonymity services can flourish only if users trust providers to be straight with them at all times. This in turn means that providers must be absolutely punctilious and obsessive about disclosing every exception to their assurances of anonymity. One doesn't build confidence by letting the Feds plug in to the network, legally or otherwise, and saying nothing about it.</em></strong></p>
<p>I share SFs opinion. Therefore, stay away from JAP.</p>
]]></content:encoded>
</item>
<item>
<title><![CDATA[RealPlayer é considerado "Badware"]]></title>
<link>http://tiagotec.wordpress.com/?p=188</link>
<pubDate>Fri, 08 Feb 2008 00:21:07 +0000</pubDate>
<dc:creator>Ti@go Gomes</dc:creator>
<guid>http://tiagotec.pt-br.wordpress.com/2008/02/07/realplayer-e-considerado-badware/</guid>
<description><![CDATA[O grupo StopBadware, que supervisiona o lançamento de softwares, classificou as duas versões mais ]]></description>
<content:encoded><![CDATA[<div class="texto_corrido"><img src="http://www.ceptive.it/icone/gallery/realplayer.png" align="left" height="256" width="256" />O grupo <a href="http://www.stopbadware.org/" target="_blank">StopBadware</a>, que supervisiona o lançamento de softwares, classificou as duas versões mais recentes do tocador multimídia RealPlayer como "<a href="http://en.wikipedia.org/wiki/Badware" target="_blank">badware</a>", alegando que elas não dão aos seus usuários o controle necessário sobre os componentes que são ativados durante sua instalação.</p>
<p>De acordo com o blog do StopBadware.org, a <a href="http://baixaki.ig.com.br/download/RealPlayer-11.htm" target="_blank">versão 11</a> do aplicativo instala uma versão reduzida do Rhapsody Player, programa necessário para reproduzir canções compradas através de um serviço mantido, também, pela RealNetworks, e que não é removido do computador caso o RealPlayer seja desinstalado.</p>
<p>Um dos problemas quando algo assim acontece é que, por não saber que o software é instalado e continua residente mesmo após desinstalação do software principal, falhas de segurança importantes que são corrigidas pelas empresas não receberão a atenção devida, deixando as máquinas vulneráveis.</p>
<p>Ryan Luckin, porta-voz da RealNetworks, se desculpou oficialmente pela falha e informou que uma correção que remova completamente os componentes está em desenvolvimento. "A RealPlayer não está fazendo nada de forma maliciosa ou colocando seus usuários em risco", explicou.</p>
<p>Em uma versão anterior (10.5), ainda disponível para download através do site oficial, um recurso chamado "Message Center", que enviava alertas sobre placares esportivos, vídeos e outros conteúdos, era ativado automaticamente, sem consentimento do usuário. Este recurso foi modificado para o lançamento da versão 11.</p>
<h6><i>Fonte: <a href="http://www.geek.com.br/modules/noticias/ver.php?id=16940&#38;sec=5" target="_blank">Geek</a> </i></h6>
</div>
]]></content:encoded>
</item>
<item>
<title><![CDATA[Consumer group slams RealPlayer as 'badware']]></title>
<link>http://mystitech.wordpress.com/2008/02/06/consumer-group-slams-realplayer-as-badware/</link>
<pubDate>Wed, 06 Feb 2008 00:44:02 +0000</pubDate>
<dc:creator>mystitech</dc:creator>
<guid>http://mystitech.pt-br.wordpress.com/2008/02/06/consumer-group-slams-realplayer-as-badware/</guid>
<description><![CDATA[                         San Francisco - A consumer advocacy group is blasting RealNetworks for inst]]></description>
<content:encoded><![CDATA[<p>                         San Francisco - A consumer advocacy group is blasting <span style="border-bottom:1px dashed #0066cc;cursor:pointer;" class="yshortcuts">RealNetworks</span> for installing adware and other software without properly notifying its users.</p>
<div class="lrec">
<table border="0" cellpadding="0" cellspacing="0">
<tr>
<td align="center"><font face="arial" size="-2"></font></td>
</tr>
</table>
</div>
<p>In a <a href="http://us.rd.yahoo.com/dailynews/infoworld/tc_infoworld/storytext/95081/26215200/SIG=12grbm22a/*http://www.stopbadware.org/reports/reportdisplay?reportname=realplayer01282008"><span style="background:transparent none repeat scroll 0 50%;" class="yshortcuts">report</span></a> published Thursday, <a href="http://us.rd.yahoo.com/dailynews/infoworld/tc_infoworld/storytext/95081/26215200/SIG=111kui6tn/*http://www.stopbadware.org/home"><span style="background:transparent none repeat scroll 0 50%;" class="yshortcuts">StopBadware.org</span></a> faults the latest version of RealPlayer for secretly installing its Rhapsody Player Engine during the RealPlayer installation.</p>
<p>"RealPlayer 11 does not disclose that it installs Rhapsody Player Engine, and does not remove the software when RealPlayer is uninstalled," StopBadware says in the report.</p>
<p>Rhapsody Player Engine is required to access RealNetwork's online music service. But because users are not told that they have installed the product, it could become a liability, using up the computer's hard-drive space or processing power, or even creating a security risk for consumers if bugs are discovered in Rhapsody, said Maxim Weinstein, StopBadware's manager.</p>
<p>Both RealPlayer 11 and the older RealPlayer 10.5 software are considered "badware," the report states.</p>
<p>Real Player 10.5 suffers from a different issue, however. Users who download the software without filling out the <span style="border-bottom:1px dashed #0066cc;cursor:pointer;" class="yshortcuts">RealNetworks product registration</span> page end up with a piece of software called Message Center, which then proceeds to deliver ads to the user's computer. "It's installing, essentially, a piece of adware without giving users information about that up front," Weinstein said.</p>
<p>RealNetworks spokesman Ryan Luckin said a check box on the registration page is used to notify users that Message Center would be installed. Users who clicked through the registration page without filling out any information would have the software installed.</p>
<p>Although the issue was fixed in version 11 of the player, RealPlayer 10.5 is automatically downloaded via the Firefox browser's "Missing Plug-in" feature and is still widely used, Weinstein said.</p>
<p>Until RealNetworks is up-front with users about what software they're actually downloading, StopBadware recommends that consumers avoid its media player.</p>
<p>Luckin called the Rhapsody issue an oversight. "The fact that when you uninstall RealPlayer we don't go back and uninstall Rhapsody is an oversight and is something we should address in the future," he said.</p>
<p>A widely used alternative to <span style="border-bottom:1px dashed #0066cc;cursor:pointer;" class="yshortcuts">Apple</span>'s QuickTime and <span style="border-bottom:1px dashed #0066cc;cursor:pointer;" class="yshortcuts">Microsoft</span>'s <span style="border-bottom:1px dashed #0066cc;cursor:pointer;" class="yshortcuts">Windows Media Player</span>, RealPlayer has a history of making invasive changes to users' computers. The Message Center software has come under fire in the past, and in 1999 computer security consultant Richard Smith <a href="http://us.rd.yahoo.com/dailynews/infoworld/tc_infoworld/storytext/95081/26215200/SIG=11k0rmi18/*http://www.computerbytesman.com/privacy/realjb.htm"><span style="background:transparent none repeat scroll 0 50%;" class="yshortcuts">discovered</span></a> that the software was quietly sending information to RealNetworks servers.</p>
<p>StopBadware's findings apply only to the Windows versions of RealPlayer's software, Weinstein said. RealPlayer also runs on other operating systems, including <span style="border-bottom:1px dashed #0066cc;cursor:pointer;" class="yshortcuts">Mac OS X</span> and <span style="border-bottom:1px dashed #0066cc;cursor:pointer;" class="yshortcuts">Linux</span>.</p>
<p>Supported with funding from <span style="border-bottom:1px dashed #0066cc;cursor:pointer;" class="yshortcuts">Google</span>, <span style="border-bottom:1px dashed #0066cc;cursor:pointer;" class="yshortcuts">Lenovo</span>, and <span style="border-bottom:1px dashed #0066cc;cursor:pointer;" class="yshortcuts">Sun Microsystems</span>, StopBadware evaluates software and warns consumers of products that engage in deceptive behavior, such as tracking user behavior or installing programs without telling consumers.</p>
<p>Although RealPlayer 10.5's Message Center feature may be more noticeable and annoying, Weinstein said Real Networks should fix both problems as soon as possible. "It's hard to say that one is worse," he said. "They're really two sides of the same concept of just not telling users what's going on."</p>
]]></content:encoded>
</item>
<item>
<title><![CDATA[RealPlayer tiene Badware]]></title>
<link>http://langaria.wordpress.com/?p=402</link>
<pubDate>Sun, 03 Feb 2008 18:02:30 +0000</pubDate>
<dc:creator>rob</dc:creator>
<guid>http://langaria.net/2008/02/03/realplayer-tiene-badware/</guid>
<description><![CDATA[
StopBadware asegura que la versión 10.5 de RealPlayer es un Badware, según argumenta &#8220;pues ]]></description>
<content:encoded><![CDATA[<div style="text-align:center;"><img src="http://img219.imageshack.us/img219/2906/realgm6.jpg" /></div>
<p align="justify"><a href="http://StopBadware.org">StopBadware</a> asegura que la versión 10.5 de RealPlayer es un Badware, según argumenta "<i>pues instala publicidad abiertamente y con toda impunidad en la computadora del usuario.</i>"Además aclara que hastala versión 11 es badware porque "<i>no documenta el hecho de que instala el Rhapsody Player Engine, y no lo remueve del sistema una vez que RealPlayer es desinstalado.</i>"</p>
<p align="justify">Ryan Luckin, vocero de <a href="http://www.real.com/">RealNetworks</a> insiste que ambas versiones antes mencionadas no son para nada badware, pero admite que hay errores y malas interpretaciones por parte de los usuarios para ambos productos. Dice que se harán cambios en ambas versiones para responder a la clasificación que <a href="http://StopBadware.org">StopBadware</a> les ha puesto. "<i>Ninguna de las versiones de RealPlayer ponen al usuario en riesgo, no son malware (programas maliciosos) ni instalan ningún programa de terceros en la PC,</i>" afirma Luckin.<br />
<!--more-->
</p>
<p align="justify">Según <a href="http://StopBadware.org">StopBadware,</a> la definición de Badware es "software malicioso que sigue los movimientos de un usuario en línea y reporta esta actividad a grupos de mercadeo para que éstos puedan atacarte con publicidad dirigida."</p>
<p align="justify">Según Luckin, en la versión 10.5 de RealPlayer, <a href="http://StopBadware.org">Stopbadware</a> argumenta que el centro de mensajes que viene integrado, muestra publicidad que usualmente son de contenidos de <a href="http://www.real.com/">RealNetworks</a>, como audio, video o actualizaciones. Este centro dem ensajes está contenido por default cuando al versión 10.5 es instalada. Luckin asegura que una versión futura de RealPlayer preguntará al usuario si quiere que se instale dicha característica, aunque también afirma que esta característica no debería ser etiquetada como publicidad, pues nungún comercial de terceros es mostrado en estas alertas.</p>
<p align="justify">El problema con la versión 11 es algo distinta, puesc uando desinstalas el programa, este no quita todos sis componentes del sistema, como por ejemplo el Rhapsody Player Engine que es usado para visualizar contenido codificado usando el formato Rhapsody. Hecho que Luckin reconoce, pues el control ActiveX de Rhapsody es dejado aún cuando se desinstala el RealPlayer 11.</p>
<p align="justify">Ryan asegura que <a href="http://www.real.com/">RealNerworks</a> está de acuerdo con <a href="http://StopBadware.org">StopBadware</a> en requerir que el programa sea removido en su totalidad cuand ose desinstale, "ese fue un error, y lo corregiremos," comenta Luckin, aunque no pudo asegurar cuándo ni cómo <a href="http://www.real.com/">RealNetworks</a> cambiará el comportamiento de desinstalación de RealPlayer 11.</p>
]]></content:encoded>
</item>
<item>
<title><![CDATA[Beware of RealPlayer]]></title>
<link>http://aboyandhisdog.wordpress.com/?p=9</link>
<pubDate>Sat, 02 Feb 2008 19:50:10 +0000</pubDate>
<dc:creator>aboyandhisdog</dc:creator>
<guid>http://aboyandhisdog.pt-br.wordpress.com/2008/02/02/beware-of-realplayer/</guid>
<description><![CDATA[Some interesting news on RealPlayer, video streaming software from RealNetworks has recently been la]]></description>
<content:encoded><![CDATA[<p>Some interesting news on RealPlayer, video streaming software from RealNetworks has recently been labeled as "badware" by Stopbadware.org. The group stopbadware.org gave RealPlayer a negitive rating for installing pop up ad software and <span style="color:#333333;font-family:'Times New Roman';" class="Apple-style-span">Rhapsody media player. Once uninstalled, RealPlayer leaves the Rhapsody media player behind on the users system. The part that I find interesting is that iTunes has surpassed RealPlayer in unique users. I find that interesting because I never would have thought that iTunes was below RealPlayer in the amount of users in the first place. It does make you wonder if the two stories could be linked in the first place? Although RealPlayer wasn't labeled as badware until several months after iTunes passed RealPlayer in he amount of users. Check out the two articles for more information.</span> <a href="http://blog.washingtonpost.com/securityfix/2008/01/realplayer_105_and_11_labeled_1.html?nav=rss_blog" title="WashingtonPost.com">WashingtonPost.com</a> <a href="http://www.ipodnn.com/articles/08/01/31/itunes.passes.realplayer/" title="ipodnn.com">ipodnn.com</a> <span style="color:#333333;font-family:'Times New Roman';" class="Apple-style-span"></span></p>
]]></content:encoded>
</item>
<item>
<title><![CDATA[RealPlayer is terrible... officially.]]></title>
<link>http://scathlock.wordpress.com/?p=38</link>
<pubDate>Fri, 01 Feb 2008 15:28:54 +0000</pubDate>
<dc:creator>KB</dc:creator>
<guid>http://scathlock.pt-br.wordpress.com/2008/02/01/realplayer-is-terrible-officially/</guid>
<description><![CDATA[
I&#8217;ve long hated RealPlayer for its obtrusive interface, its insistence on recording informati]]></description>
<content:encoded><![CDATA[<p><img src="http://www.krellan.com/rant/real-buffering.jpg" height="350" width="300" /></p>
<p>I've long hated RealPlayer for its obtrusive interface, its insistence on recording information, registering you for services you don't want or need, installing extra programs and spyware on your computer... basically, their overall blatant disregard for your privacy and their exclusivity with particular online content, etc.  I've been anti-RealPlayer since college.  That means these folks have been on my shit list for eight or nine years.</p>
<p>FINALLY, someone else has noticed.  <a href="http://www.stopbadware.org/reports/reportdisplay?reportname=realplayer01282008" target="_blank">StopBadware.org</a> consider themselves a "neighborhood watch" team that reports on downloadable software and outlines their recommendations as to what people should put on their computers.  They are lead by Harvard Law School's Berkman Center for Internet &#38; Society and Oxford University's Oxford Internet Institute.  Pretty heady credentials.</p>
<p>RealPlayer, I'm elated to report, has recently been added to the watchdog's <a href="http://www.stopbadware.org/home/reports" target="_blank">current list of internet badware</a>.</p>
<p>To put it simply, the software opens a line of communication between your computer and the skeevy folks at RealPlayer that not only transfers personal usage information, but also bogs down your computer by soaking up memory and littering your hard drive with <a href="http://members.cox.net/xpsetup/gator1.GIF" target="_blank">spyware</a>.   And as the report cites, if you try to remove the software from your computer, all of those background programs are still there, without your permission, and continue to communicate to RealPlayer.</p>
<p><a href="http://www.delvecchio.ca/images/apples.jpg" target="_blank">How bout <i>them</i> apples.</a></p>
<p>As if that weren't bad enough, RealPlayer also hides within their licensing agreement a clause that signs away rights to your computer's hard drive, so that at any time, Men in Black from RealNetworks have the right to show up at your door, confiscate your computer, step on your <a href="http://www.caninecompanions.org/national/images/puppies/SorenOctoberDay2.jpg" target="_blank">6-week-old puppy</a>, kidnap your children, and force you to eat silverware.  I'm telling you, these people are BASTARDS!!</p>
]]></content:encoded>
</item>
<item>
<title><![CDATA[Outbreak of Fake WebPages!]]></title>
<link>http://blogs.profitimo.com/2007/04/06/146/</link>
<pubDate>Fri, 06 Apr 2007 14:31:18 +0000</pubDate>
<dc:creator>Manas</dc:creator>
<guid>http://blogs.profitimo.com/2007/04/06/146/</guid>
<description><![CDATA[
The Microsoft researchers disclosed a complicated and complex scheme in which a small group, creati]]></description>
<content:encoded><![CDATA[<p><iframe src='http://digg.com/api/diggthis.php?u=http%3A%2F%2Fwww.digg.com%2Fmicrosoft%2FOutbreak_of_Freak_Webpages' height='82' width='55' frameborder='0' scrolling='no' style='float: right; margin-left: 10px; margin-bottom: 5px; padding: 4px 0 2px 4px; background: #fff;'></iframe><br />
<img vspace="2" align="left" width="288" src="http://profitimo.files.wordpress.com/2007/04/search-spam.png" hspace="2" alt="search-spam.png" height="246" style="width:288px;height:246px;" />The Microsoft researchers disclosed a complicated and complex scheme in which a small group, creating false doorway pages. The research i<a href="http://profitimo.files.wordpress.com/2007/04/search-spam.png"></a>s the ultimate consequences of the fact that thousands and thousands fake WebPages were multiplying itself to deceive the search engine users day by day. The fake WebPages are created by the small group that works with operators of the web based computers in which the traffic was redirected from search engines in one way and sending the advertisements gained from syndicator’s in the other way.<br />
<!--moreWhy the Microsoft Researchers are startled...?--><br />
“A small number of rogue actors who know what they are doing can create an enormous amount of disruption,” said David L. Sifry, chief executive of Technorati, a blog-indexing company that works to keep junk pages of this sort out of its indexes. “It’s sort of like putting a blindfold on you and spinning you around three times and then taking off the blindfold and showing you an ad.” The Microsoft Research team has worked extensively with the managers of Microsoft’s Spaces blog-hosting service to detect and identify search-engine spam, Mr. Wang said. Google would not comment for the record on its own efforts to combat such practices.</p>
<p>Search engine spamming or Black hat SEO is very active and have grown much prominent nowadays. The website owners (under the Black hat SEO groups), uses unethical, objectionable, and illegal techniques to deceive the search engines and get the higher rankings in the Search engine result pages. This a very chronic and pesky dealings of the search engines and is struggling very much to get rid of these spammers and complex groups.</p>
<p>The Microsoft researchers are also startled of the fact that the numerous junk listings were created from just two web hosting business firms. Also, 68percent+ advertisements were rested only by three advertising groups. The researchers also detected the fact that there are more than 30 percent fake web pages are created for the keywords like ‘drugs’ and ‘ring tone’. The average spam density was 11 percent for 1,000 keywords they used in their research.  They considered the large advertising companies guilty for a significant share of spam problem.</p>
<p>“Ultimately, it is advertisers’ money that is funding the search-spam industry, which is increasingly cluttering the Web with low-quality content and reducing Web users’ productivity,” they write in the paper, which will be presented in May at the International World Wide Web Conference in Banff, Alberta. Mr. Wang, group manager and senior researcher for cyber security and systems management at Microsoft, said, “The good guys are part of the problem.”</p>
<p>Search Engine spamming is growing interrupted and would prove a serious threat to the Search engine world in the near future. The overall amount of e-mail spam has more than doubled in the last year, according to Postini, a communications security firm. Everyday, we domestic internet users, get junk mails from different spam source, loaded with malicious softwares. So something need to be done to stop this.</p>
<p><strong>Realated Articles:</strong></p>
<p><a target="_blank" href="http://www.nytimes.com/2007/03/19/technology/19spam.html?ex=1176004800&#38;en=bea9e919c1b308d1&#38;ei=5070">Researchers Track Down a Plague of Fake Web Pages </a></p>
<p><a target="_blank" href="http://it.slashdot.org/it/07/03/20/1248202.shtml">Microsoft Tracks Down Mass Fake Web Pages</a></p>
<p><a target="_blank" href="http://www.itworld.com/Tech/2427/070319searchspam/">Research paper uncovers root of nuisance Web pages</a></p>
<p><strong>Related Link:</strong></p>
<p><a target="_blank" href="http://research.microsoft.com/SearchRanger/">War on Search Spam: Shifting the Battleground by “Following the Money”</a></p>
<p><strong>Recommended Download:</strong></p>
<p><a target="_blank" href="http://www.cs.ucdavis.edu/~hchen/paper/www07.pdf">Spam Double-Funnel:Connecting Web Spammers with Advertisers</a></p>
]]></content:encoded>
</item>
<item>
<title><![CDATA[Google flagged my site as Badware?]]></title>
<link>http://blogs.profitimo.com/2007/01/25/google-flagged-my-site-as-badware/</link>
<pubDate>Thu, 25 Jan 2007 18:47:34 +0000</pubDate>
<dc:creator>jhlim</dc:creator>
<guid>http://blogs.profitimo.com/2007/01/25/google-flagged-my-site-as-badware/</guid>
<description><![CDATA[What will you do when you site has been flagged as Badware by google?
Google is always making effort]]></description>
<content:encoded><![CDATA[<p>What will you do when you site has been flagged as Badware by google?</p>
<p><a target="_blank" href="http://flickr.com/photos/77886165@N00/8362585/"><img align="right" width="240" src="http://farm1.static.flickr.com/6/8362585_61e0f569f9_m.jpg" alt="spyware??" height="180" style="width:240px;height:180px;" /></a>Google is always making efforts to protect users from badwares (spyware, adware, malware, etc) by warning people using Google search before they visit sites that are known for distributing such malicious software. However unfortunately, your site may be tagged as such without you knowing it. Your site may in fact be distributing such badware even without your knowledge.</p>
<p><!--more--></p>
<p><strong>So how do u know u'r flagged as badware by Google?</strong> First go to <a target="_blank" href="http://www.google.com/webmasters/">http://www.google.com/webmasters/</a> and click on to Webmasters Tools. Select the site you want to manage. You should be able to see this under the Summary Section if your site has been flagged as a Badware.</p>
<p><strong>My site is Not distributing Badware! What to do now</strong>? </p>
<p>Now Google's algorithm for tagging your site as Badware is based on <a target="_blank" href="http://Stopbadware.org">Stopbadware.org</a>.  If you site is tagged wrongly, you'll have to send <a target="_blank" href="http://www.stopbadware.org/home/faq#partnerwarnings">appeal emails</a> to<em> appeals @ stopbadware.org</em>.</p>
<table border="1" bgColor="#ff9900" cellPadding="3" cellSpacing="0">
<tr>
<td width="100%"><font color="#ffffff"><strong>What is badware?</strong> (from stopbadware.org)</font><font size="-1">There are several commonly recognized terms for specific kinds of badware - spyware, malware, and deceptive adware. Badware is malicious software that tracks your moves online and feeds that information back to shady marketing groups so that they can ambush you with targeted ads. If your every move online is checked by a pop-up ad, it's highly likely that you, like 59 million Americans, have spyware or other malicious badware on your computer. </font></td>
</tr>
</table>
<p><strong>Related Links:<br />
</strong><a target="_blank" href="http://www.stopbadware.org/home/faq#partnerwarnings">Questions about websites that are the subject of Google warnings</a><br />
<a target="_blank" href="http://googlewebmastercentral.blogspot.com/2007/01/about-badware-warnings.html">Google Blog on Badware</a><br />
Google: <a target="_blank" href="http://www.google.com/support/webmasters/bin/answer.py?answer=45432">How can I find out if my site has been identified as a web site spreading malicious software and what can I do if it has?</a><br />
<a href="http://www.stopbadware.org/"></a></p>
]]></content:encoded>
</item>

</channel>
</rss>
