How to Workaround Java Vulnerability

January 12th, 2013 by EKG Networking

My partner Ted is correct in we usually try not to scare people by constantly posting warnings.

We have seen a recent uptick in spyware, viruses and bugs and this one seems to be rising above others and looks pretty nasty.

Below is Ted’s suggestions to help keep your machines safe till the patch comes out (estimated) on Tuesday.

“I don’t usually do this because media reports of a vulnerability that could infect you is hyped beyond all reason, but this one might really be a problem.

There is vulnerability in Java that can allow bad guys to infect your system.

It is bad enough that the legitimate computer sites are recommending shutting off java in your browser until it is fixed. Java is predicting a patch will be out Tuesday.

The instructions for turning off Java are located here http://www.pcmag.com/article2/0,2817,2414191,00.asp

Look under “Disable Java in All Browsers”.

If these instructions are different than what you see in your Java control panel then, ironically, you may need to update your Java in order to turn it off.

To do so, go to http://www.java.com/ and click “Free Java Download” and then “Agree and Start Free Download”.

Internet Explorer will ask if you want to run or save, click Run. Other browsers might need to download it first and then you can run it after it downloads.

Follow the installation instructions, but make sure to UNCHECK “Install the Ask toolbar” during the installation.

Once updated, the instructions at PC Magazine should work.”

To read the detail:
http://www.informationweek.com/security/attacks/java-under-attack-again-disable-now/240146082

As always, any questions, please contact EKG Networking, Inc.

DO NOT CLICK on Microsoft Outlook on Behalf of Anonymous Caller

September 11th, 2012 by EKG Networking

Just when you think you have seen it all, the bad guys come up with a new vehicle to entice you into click on the link and infecting your machine.

A new one we saw this morning has the from: Microsoft Outlook on Behalf of Anonymous Caller

from outlook.voicemail_AT_domen.com

The email has the subject line: Voice Mail from XXX-XXX-XXX (55 Seconds)

The content is You Recieved a voice mail from and then a .WAV file

With caller id and message id and email id.

This is a virus laden email, DO not click on it.

Delete it.

Any questions, please feel free to contact EKG Networking at 508-460-1920.

In the news should you worry

July 8th, 2012 by EKG Networking

DNSChanger

What is DNS?

DNS (Domain Name System) is basically a phone book for computers. When we want to call someone and we don’t know their number, we look up their name in a phone book (at least we used to) which gives us that information. Then, we call that number to talk to them.

Computers do the same thing. When you browse to “www.google.com” your computer goes to a DNS server and asks for Google’s ip address (the computer equivalent of a phone number). Your computer then uses that ip address to connect to Google’s web site.

What is DNSChanger?

DNS Changer is a virus. Its purpose was to make your computer use their DNS server when your computer asks for a web site’s IP addresses. It would be like a criminal snuck into your house and replaced your phone book. Anytime you used their phone book to look up a phone number, that phone number would call one of their operatives whose purpose was to scam you. If infected with DNS Changer, anytime you went to a web site, their DNS server would send you to one of their servers which would try to scam you.

Why is this in the news now?

When the FBI discovered and took down these evil DNS servers. However, if they had simply turned them off, people who had been infected which DNS Changer would not have been able to get to web sites. It would be like someone suddenly threw your phone book away if a phone book was the only way to look up someone’s number.

So, instead of simply turning the evil DNS server off, the FBI replaced them with good DNS servers. On July 8th, the FBI is shutting off these good DNS servers. So, anyone still pointing to them will shortly not be able to get to web sites.

Am I infected?

If you were infected when the evil DNS server were still working, then you would have known immediately that something was wrong. However, if you had gotten infected after those evil DNS servers were replaced, then you might never know. Everything would appear normal.

Fortunately, some people have made an online test to determine whether you have been infected with DNSChanger. Simply, go here:

http://dns-ok.us/

What if I am infected?

There are many products that can remove this particular virus. The one we recommend is Kaspersky TDSSKiller.

The download and instructions are here:

http://support.kaspersky.com/faq/?qid=208283363