Archive for April, 2008

In My Daughter’s Eyes

Monday, April 7th, 2008

To Cheska, light upon my world.. I love you sweetie.

Cheska_1

In my daughter’s eyes I am a hero
I am strong and wise and I know no fear
But the truth is plain to see
She was sent to rescue me
I see who I wanna be
In my daughter’s eyes

In my daughter’s eyes everyone is equal
Darkness turns to light and the
world is at peace
This miracle God gave to me gives me
strength when I am weak
I find reason to believe
In my daughter’s eyes

And when she wraps her hand
around my finger
Oh it puts a smile in my heart
Everything becomes a little clearer
I realize what life is all about

It’s hangin’ on when your heart
has had enough
It’s giving more when you feel like giving up
I’ve seen the light
It’s in my daugter’s eyes

In my daughter’s eyes I can see the future
A reflection of who I am and what will be
Though she’ll grow and someday leave
Maybe raise a family
When I’m gone I hope you see how happy
she made me
For I’ll be there
In my daughter’s eyes

The worst computer viruses of all time

Friday, April 4th, 2008

by Christopher Null

If you haven’t experienced a computer virus yet, just wait — you probably will.

Fortunately, you missed the real heyday of computer viruses when anti-virus software wasn’t very widely used, and virus attacks caused millions of dollars in damages overnight. Today’s viruses can still be nightmarish, but for the average user, cleanup is considerably easier than it was just a few years ago, when the only solution in many cases was reformatting your hard drive and starting from scratch (and even that didn’t do the trick sometimes).

So join me on a trip down memory lane as we revisit some of the worst viruses of all time and count our blessings that our computers are still up and running despite it all. (Though, please note, "worst" is a matter of considerable debate in the security industry, as the number of infected machines and amount of financial loss is always estimated. If you think another virus was worse than these, please post it in the comments to remind us!)

The worst viruses of all time

Brain, 1986
It all started here: Brain was the first "real" virus ever discovered, back in 1986. Brain didn’t really hurt your PC, but it launched the malware industry with a bang and gave bad ideas to over 100,000 virus creators for the next 2 decades.

Michelangelo, 1991
The worst MS-DOS virus ever, Michelangelo attacked the boot sector of your hard drive and any floppy drive inserted into the computer, which caused the virus to spread rapidly. After spreading quietly for months, the virus "activated" on March 6, and promptly started destroying data on tens of thousands of computers.

Melissa, 1999
Technically a worm, Melissa (named after a stripper) collapsed entire email systems by causing computers to send mountains of messages to each other. The author of the virus was eventually caught and sentenced to 20 months in prison.

ILOVEYOU, 2000
This was notable for being one of the first viruses to trick users into opening a file, which in this case claimed to be a love letter sent to the recipient. In reality, the file was a VBS script that sent mountains of junk mail and deleted thousands of files. The results were terribly devastating- one estimate holds that 10 percent of all computers were affected, to a cost of $5.5 billion. It remains perhaps the worst worm of all time.

Code Red, 2001
An early "blended threat" attack, Code Red targeted Web servers instead of user machines, defacing websites and later launching denial-of-service attacks on a host of IP addresses, including those of the White House.

Nimda, 2001
Built on Code Red’s attack system of finding multiple avenues into machines (email, websites, network connections, and others), Nimda infected both Web servers and user machines. It found paths into computers so effectively that, 22 minutes after it was released, it became the Internet’s most widespread virus at the time.

Klez, 2001
An email virus, Klez pioneered spoofing the "From" field in email messages it sent, making it impossible to tell if Bill Gates did or did not really send you that information about getting free money.

Slammer, 2003
Another fast spreader, this worm infected about 75,000 systems in just 10 minutes, slowing the Internet to a crawl (much like Code Red) and shutting down thousands of websites.

MyDoom, 2004
Notable as the fastest-spreading email virus of all time, MyDoom infected computers so they would, in turn, send even more junk mail. In a strange twist, MyDoom was also used to attack the website of SCO Group, a very unpopular company that was suing other companies over its code being used in Linux distributions.

Storm, 2007
The worst recent virus, Storm spread via email spam with a fake attachment and ultimately infected up to 10 million computers, causing them to join its zombie botnet.

How to beat spyware and viruses, 2008 edition

Friday, April 4th, 2008

by Christopher NUll

The last time I wrote a piece on how to remove spyware from your computer was in 2006. Time for an update, I think. Here’s my perennial "How to Beat Spyware" howto, revised and updated for 2008 (and combined into a single file instead of two parts).

Here’s what to do if you suspect an infection on your Windows PC. (Please note these steps apply to both Windows XP and Vista.)

1) Are you sure it’s spyware or a virus? Windows pop-ups and alerts can often seem invasive enough to be viruses, especially with Vista. Try searching the web for the exact text you see on the screen to make sure you aren’t dealing with an aggressive Windows message. (Many of these can be turned off, so try whatever instructions you find.) On the other hand, some viruses masquerade as Windows alerts, so tread lightly.

2) Boot in safe mode. If you have a virus, first step is to try booting in safe mode. You can get to safe mode (a simplified version of Windows that disables a lot of extra gunk, possibly including some spyware apps) by restarting your PC and tapping F8 during boot. Soon you’ll get a menu of options. Select "Safe Mode" (it’s at the top of the menu) and wait for the machine to fully boot. The system will look funny (with a black background and larger icons, probably), but don’t worry about it. This is only temporary. (Also note that many spyware applications can disable safe mode, so if you find this doesn’t work, just boot normally.)

3) Run your antivirus application. This is of course assuming you have an antivirus application. (Need one? Check here.) You’re in safe mode now, so run a full scan of your PC at maximum security levels (include the option to scan within compressed files, for example). This will probably take an hour or more, so be patient. Fix any problems the virus scan turns up. Then reboot into safe mode again using the procedure in step 2.

4) Run one or two anti-spyware applications. I used to recommend running multiple anti-spyware apps, but virtually all antivirus apps now do a pretty good job at getting rid of spyware too, so you don’t need an army of additional applications just for spyware. Also, I now recommend starting with AdAware (which is free) and moving on to Spyware Doctor (free as part of the Google Pack) if you feel you need additional help. (Please note that recent versions of Spyware Doctor and Norton Antivirus have some trouble with each other.) You can try other apps too, but the once-recommended SpyBot Search & Destroy is no longer very effective, sadly. (Neither is Microsoft’s own Windows Defender.) Of course, fix anything and everything these apps find.

5) Reboot normally. (Not in safe mode.) Now take stock. Still got spyware? It’s time to move along to my more advanced techniques for removing the nasties.

6) Run HijackThis. HijackThis is a free software tool that scans your computer to find malware that other apps might miss. Scroll down to "Official downloads" to download the tool. Next, simply open the ZIP file you downloaded, extract the application, and run the tool (you don’t need to install it). Click the "Do a system scan and save a logfile" button. You’ll receive a large text file as well as a dialog box which gives you a list of active software processes, which you can then choose to delete. Unfortunately, this list includes both helpful and unhelpful software, so don’t just start deleting items. Continue in step 7 to figure out how to fix your spyware infection.

7) Post your log file online. Visit this page, which offers a list of forums staffed by volunteers who can help you interpret your HijackThis log. The SWI Forums are especially busy, but most of the forums on the list are equally apt. Go to SWI and visit the "Malware Removal" forum which has over 50,000 topics listed: Those are all people like you who are seeking help getting rid of spyware. Register for an account, read the FAQ, then visit that Malware Removal forum, and post a new topic. Paste the content of the text file you created in step 5 into this topic and (politely) ask for help. You will get a response from a volunteer helper, typically within 3 days. You’ll be given specific advice on what entries to remove with the HijackThis tool, and you might be pointed to additional software to run to help remove common spyware infections. Follow all the instructions and keep working with the forum helpers until either you or they give up. (And no, don’t send your log file to me or post it here. I am not nearly the spyware removal expert that these guys are.)

7a) Alternately: Paste your log file into an automated tool. Don’t have three days? Try simply pasting your HijackThis log file into this form. It does a pretty good job at auto-analyzing what’s wrong with your machine, with no waiting. As well, if that doesn’t work, you can search for the items you find in the HijackThis log by name to see what they are and how to remove them, if they’re spyware. This can be quite time consuming, though.

8) Try System Restore. If that doesn’t work, you might try running Windows System Restore to roll back your OS to a time before the infection happened. This isn’t foolproof: You might not have System Restore turned on, or the spyware might have shut System Restore off, as well. But it’s worth a shot. With either XP or Vista, System Restore can be found under Start > All Programs > Accessories > System Tools > System Restore.

9) Give up and wipe your hard drive. At this point, you’ve exhausted all the options I know of. You might try again at steps 6/7 to make sure you’ve done everything you can to salvage the PC. Forum helpers will often work with you for weeks to help fight a spyware infection, but there are tens of thousands of possible variants out there, with new ones cropping up every day. It’s just not possible to clean them all, every time. Sometimes the only thing you can do is call it quits, reformat your hard drive, and reinstall your OS. Again, make sure you have your backups ready and verified. Once you’re up and running, reinstall your antivirus and anti-spyware applications, and stay vigilant against infection. Good luck.