Elamb Cybersecurity

Category: Main Digg

  • w32 serflike a

    I have never heard of any virus called "w32 serflike a", however if you believe you have this or any other malware a good place to start investigating this is to use Autoruns

    Autoruns is the most comprehensive knowledge of auto-starting locations of any startup monitor, shows you what programs are configured to run during system bootup or login, and shows you the entries in the order Windows processes them. These programs include ones in your startup folder, Run, RunOnce, and other Registry keys. You can configure Autoruns to show other locations, including Explorer shell extensions, toolbars, browser helper objects, Winlogon notifications, auto-start services, and much more. Autoruns goes way beyond the MSConfig utility bundled with Windows Me and XP.

    More on w32 serflike a

  • Riparare File Dnsrslve Da W32 Spybot Worm

    more on: Riparare File Dnsrslve Da W32 Spybot Worm

    Dnsrslve.exe [DNS Resolver] is a virus added by the W32/Rbot-WS worm also know as Backdoor.Win32.Rbot.gen, W32/Sdbot.worm.gen.g, WORM_SDBOT.APN.

    ref: http://sophos.com

  • w32 spybot worm window system32 msm7 exe

    W32 spybot and msn7.exe fixes..

    Msn7.exe is a Trojan/Backdoor with a few variants:

    Wurmarkb, rbot, CoolWebSearch

    Here are some tools that will help remove msn7.exe go to –> http://elamb.org/hacked/remove-virus.htm.

  • Social Security Gov Retirement Benefits

    To Baby Boomers,

    Don’t put your retirement completely in the hands of the government. Their incompetence is remarkable. Though I believe that government in some form is necessary, I think the larger a government is the more incompetent it becomes.

    I really hope your Social Security works for you as you retire, but the people we have been electing have been making really bad decisions. I believe we will eventually right these wrongs. Any changes that happen will have to come from “we the people”

    More Social Security Gov Retirement Benefits

  • Track the students but don’t protect them

    I read an article about fingerprinting kids in school and I am immediately thinking about privacy issues. The article mentions that the data is only used in house for things like the cafeteria. If it weren’t abused it would actually be a good idea (I personally would not trust the Department of Education, but I’m kind of paranoid). What really gets me here is that these schools want to spend money on biometric technology while remaining lacks on school security.

    Targeted school violence from elementary to college has double every decade since the 1980s.

  • Gathering ‘Storm’ Superworm Poses Grave Threat to PC Nets

    The Storm worm first appeared at the beginning of the year, hiding in e-mail attachments with the subject line: “230 dead as storm batters Europe.” Those who opened the attachment became infected, their computers joining an ever-growing botnet.

    Although it’s most commonly called a worm, Storm is really more: a worm, a Trojan horse and a bot all rolled into one. It’s also the most successful example we have of a new breed of worm, and I’ve seen estimates that between 1 million and 50 million computers have been infected worldwide.

     

    More here.

  • unixwiz: SQL Injection Attacks by Example

    Found this site via del.icio.us.  Pretty good post:

    “SQL Injection” is subset of the an unverified/unsanitized user input vulnerability (“buffer overflows” are a different subset), and the idea is to convince the application to run SQL code that was not intended. If the application is creating SQL strings naively on the fly and then running them, it’s straightforward to create some real surprises.

    SQL Injection @ unixwiz 

  • SCAM * Dear Sir, madam. Our logistics company, STS Logistics looking *SCAM

    Maybe I’m wrong but the Logistics Company, STS looks like a SCAM:

    Hello,
    My name is John Campbell, I represent STS Logistics company
    located in the USA (offices in Germany, Russia and Japan).
    Our company is seeking for a representatives part-time jobs in the USA, Germany, Spain, UK, Australia.
    This is not spam and we will not ask any money from you.
    Your minimal income will be $2000USD a month in average. You
    will be paid weekly.
    No relocation required, job duties include mail and payments
    processing, standart office duties and everyday reporting.
    All candidates have to be authorized to work with minimal
    computer knowledge.     If you’re interested in this Job please
    contact us through the contacts below:

    mail: job@onlinests.org

    Best Regards,
    John Campbell

    It has been posted all over the blogosphere as “spogs” (spam on blogs) in hundreds of comments.  I recieved it from several email accounts:

    fugpaivaevale | E-mail: @mail333.com

    hitcishIlluri | E-mail: @mail.ru

    dremodiam | E-mail: @mail15.com

    neanywamerabs | E-mail: @mail333.comInsitteintode | E-mail: @cccp.su

    SolidMalingop | E-mail: @cccp.su

     

  • DoD 8570.1 ISSEP coming?

    Honestly, you probably could get away with a Security+ for a while (if your already in a govt security position) because the 8570.01M indicates the need for a Security+ at the very least at IAM 1.

    But if your position actually requires you to take an IAM roles at the Field Operating Agency enlcave systems or some other MAJCOM equivalent level than you should go for the CISSP. The DoD is talking about requiring an **Information System Security Engineering Professional certification, ISSEP (a certification that actually requires the CISSP to even take the test) for enclave systems.

    This table is taken straight from the DoD 8570.01M:
    dod 8570
    from tao security

    More on the 8570:
    http://iase.disa.mil/eta/index.html#8570training

    **Notes: The 8570 FAQ mentions that “Future updates to the Manual will incorporate specialized elements of the IA workforce. Chapters on System Architecture and Engineering and Computer Network Defense Service Providers have been drafted and are currently entering the formal DoD staffing process.” I haven’t been able to find the new 8570 Draft that refers to ISSEP, ISSAP (specialized CISSP) but I’ve been seeing it in slides and at briefing for about a year now.

    Here is what is being proposed. This would actually affect me (I may have to get an ISSEP or ISSAP). Security+ will not cut it if this passes in the next DoD 8570 Draft.

    Chapter 10: Information Systems Security Architects/Engineers
    Level IASAE I IASAE II IASAE III
    Certs CISSP CISSP ISSEP
    ISSAP
    Chapter 11: CND Service Providers
    Role CND Analyst CND
    Infrastructure
    Support CND Incident Responder CND
    Auditor CND SP Manager
    Certs GCIA MCSA Security
    SSCP GCIH
    CSIH CISA
    GSNA CISSP-SSMP
    CISM

    Ref: www.disa.mil/conferences/2007/briefings/iatool_training.ppt (slide 19 from DISA Conference)

  • SCAM InterShipCo import export email SCAM

    *******************BULLSHIT SCAM***********

    [b]InterShipCo.[/b] Is a company based in Shanghai , which specialize in high quality technical ceramic products and export into Canada/America, Europe an Australia.

    Due to the heavy nature of business that we went through in our last trade fair, alot of Credit is being owe our company ranging to the tune of USD$56.5 million. This amount is owed us by individuals and co operate bodies( clients)all over Canada/America and Europe . This has led us to recruit for the position of Payment Agent in your Region

    [b]REQUIIREMENT FOR POSITION ARE:[/b]
    1.Honest, Responsible and Dedicated .
    2.Having no problem with the Authorities
    3.Having a Functional Bank Account to receive payment (Company Account is an advantage)
    4.Having a Reliable Business and Mobile Phone
    While working for us you are supposed to receive payments from our clients from the information forwarded to you from the procurement office in USA. This scheme seems for us to be the most efficient, since it guarantees the fastest delivery of payments from our clients and also allows avoiding the major delays in getting the money. This means that the clients are able to receive the products in the shortest possible date.

    [b]WHAT IS YOUR INTEREST?[/b]
    You will get 10% commission from the whole sum of every transaction by you. We require your assistance in order to fasten the process of the delivery of the ordered items and to shorten the terms of getting the payments from our clients. Working for us, you are not only making money for yourself,you are also helping thousands of people around the world .

    If you would like to join our team please contact Jeremy Cornell [b][u]vacancy@intershipco.com[/u][/b] with the following informations below:

    [u]FULL NAME:
    CONTACT ADDRESS:
    TEL/FAX NUMBER:
    EMAIL:
    AGE:
    MARITAL STATUS:
    FAMILY SIZE:
    PRESENT EMPLOYER:
    OCCUPATIONAL STATUS:
    PRESENT INCOME:
    COUNTRY:
    [/u]

    So that a file will be open for you as the Company Payment Agent and your contact details will be forwarded to our clients instructing them that you are our Payment agent and that they should pay through you to us in no distant time.

    Thank You for your time.
    Jeremy Cornell
    Staffing/Managment Group

    ***************BULLSHIT SCAM*************