 |
Virus Alert - New Mass Mailer Worm W32/VBMania@MM[Mcafee] or W32/Visal.B[Microsoft] using the social engineering technique called URL obfuscation to trick user to launch a malicious SCR file. Copying itself to local drive and network shares. To remove, click Mcafee Standalone Stinger VBMania virus cleaner. |
|
|
 |
Fraud email scams and phishing is a social engineering technique used to fool email user that pretends to be from a company or bank like eBay, CITIBANK, OCBC etc. and asks the victims to enter details of account data to a fake websites. Therefore, tricking the victims into thinking that they are logging to a real website. Fraudsters will steal identity and personal information to gain access to victim's accounts or commit crimes using victim's persona.
What are the tell-tale signs and the tricks used in a scam? What are the tips to protect oneself? Read more on an advisory to spot a scam from SINGCERT. |
|
|
|
|
Software misconfiguration is one of the most common reasons for security breaches. You can use the MBSA to detect common configuration errors on Windows 2000, XP, Server 2003, VISTA, Server 2008 or Windows 7 either on 32 bits or 64 bits machines to determine whether critical security updates are missing.
The tool will perform verification of the password strength and the host-base firewalling on the Windows OS. Download MBSA 2.2 tool to assess your 32 bits computer's security health if the following software is installed.
- Microsoft Windows 2000,XP, 20003, VISTA, 2008 and Windows 7
- Microsoft Office XP, 2002, 2003 and 2007
- Microsoft Exchange 2000, 2003 and 2007
- Microsoft SQL Server 2000 SP4 and SQL Server 2005
For security assessment on 64 bits machine, use MBSA 2.2[64bit] tool.
Read detail information on supported product and components and FAQ for information on its usage.
For the following legacy product support, Microsoft has endorsed vulnerability assessment tool from Shavlik. Download NetChksetup5.9.0.145.exe to assess vulnerability on the following installed software.
- Microsoft ISA server 2000, ISA Server 2004
- Microsoft FrontPage Server Extensions 2000/2002
- Microsoft Visual Studio.Net 2002/2003
- Microsoft Office 2000
- Microsoft Exchange 5.0 and 5.5
- Microsoft SQL Server 7.0 and SQL Server 2000 with Service Pack 3a (SP3a)
- Microsoft Content Management Server 2001 and Content Management Server 2002
- Outlook 2003 with Business Contact Manager
- SharePoint Team Services 2002 (STS)
- Windows SharePoint Services (WSS)
|
| |
|
 |
Have you turn on the Windows Firewall or ICF that come with Windows XP, Vista & Windows 7 to protect against illegal intrusion from the virus infected computers or hackers? Read more for an understanding of the Windows host base Firewall and the need for Anti-Virus software and Spyware. |
| |
|
 |
No Anti-Virus software to identify, thwart and eliminate computer viruses, spyware and other malicious software on your Windows XP/Vista or Windows 7? Download the Microsoft Security Essentials Anti-Virus or AVG Anti-Virus to protect your system.
How do you recognize and avoid Spyware? Read the security tips to remain vigilant. |
| |
|
|
|
Click web-based Trend Micro on-line scan to verify your system is free from viruses, worms,Trojans and spyware.
Alternatively, use Microsoft Windows Live safety scanner to perform security scan and on-demand PC health. |
| |
|
 |
Microsoft Malicious Software Remover-32bits & Malicious Software Remover-64bits (version 3.4 covers all known variants as of 10th Aug 2010)
Suspect that your PC has been infected? This Microsoft tool checks your computer for infection by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps to remove the infection if it is found. For Windows XP/Me users please disable your System Restore before use. |
| |
|
 |
Alternatively, you may also download and run the McAfee Stinger  to check your PC for viruses (version v10.1.0.1028 covers all known variants as of 9th Sep 2010). |
|
|
|
Subscribe Now Get first-hand updates on Virus Alerts from CITS by e-mail. If you're running Windows OS, you may wish to sign up for Microsoft Security Update newsletter as well |
| [Back to Top] |
|
Windows Security Updates
|
 |
Windows Security Update (2 Aug 2010) - Microsoft announce vulnerabilities that Allow Remote Code Execution.
- Windows Shell, SChannel, XML Core Services, MPEG Layer-3 Codecs, IE, SMB Server, Cinepak Codec, Microsoft Office Word, .Net Common Language Runtime and Silverlight
Vulnerabilities that Allow Elevation of Privilege
- Windows Kernel, Kernel-mode drivers, Movie Maker, Office Excel, TCP/IP and Tracing Features for Services.
Affected Windows OS - Windows XP, 2003, VISTA, 2008 and Windows 7 |
|
|
|
Windows Security Update (31 Mar 2009) - Security watchdog has issued a warning to take precautions against a fast-mutating malicious computer program that will strike on Wednesday 1st April 2009. The Conficker or Downadup worm infect Microsoft Windows system from a thumb drive, a network share or via the network if a computer is not install with the Microsoft MS08-067 patch. Read detail from Microsoft.
- Block access to the security sites such as Microsoft, Symantec, Mcafee, f-secure.
- Disable service such as Microsoft Windows update and Windows Defender, Background Intelligent Transfer Services.
- Accounts may be locked out.
- May flood the network with connections.
- Access to security related sites are block. Windows update service and Windows Defender disabled.
- Traffic on port 445 on non-Directory Service.
- No access to Admin Shares.
- Presence of unusual file permission on the System32 folder or directory after executing the Dir /ah on the command prompt.
Who are at risk?
- Have not installed the latest security updates from Microsoft and no antivirus software.
- If you have file-sharing turned on, the Confiker worm could allow remote code execution and take control of your computer fro malicious purposes.
How to remove Conficker worm?
|
