<?xml version="1.0" encoding="ISO-8859-1"?>

<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/">
	<channel>
		<title>Tech Support Forum - General Computer Security</title>
		<link>http://www.techsupportforum.com</link>
		<description><![CDATA[Get Help With System Security - This forum is not for malware removal assistance. For malware removal assistance, read the sticky topic at the top of the Virus/Trojan/Spyware Help forum, or the "First Steps" link at the top right of each page.]]></description>
		<language>en</language>
		<lastBuildDate>Fri, 20 Nov 2009 23:11:16 GMT</lastBuildDate>
		<generator>vBulletin</generator>
		<ttl>60</ttl>
		<image>
			<url>http://www.techsupportforum.com/cwd/images/misc/rss.jpg</url>
			<title>Tech Support Forum - General Computer Security</title>
			<link>http://www.techsupportforum.com</link>
		</image>
		<item>
			<title>1 reason not to download torrents</title>
			<link>http://www.techsupportforum.com/security-center/general-computer-security/433739-1-reason-not-download-torrents.html</link>
			<pubDate>Fri, 20 Nov 2009 22:46:31 GMT</pubDate>
			<description>As most of you know the ongoing of security exploits is an all time high. each and every day hackers create malicious code to give them access to your personal info on your computers. well now if you download a torrent and it includes pictures of any sort once the picture is clicked and viewed your...</description>
			<content:encoded><![CDATA[<div>As most of you know the ongoing of security exploits is an all time high. each and every day hackers create malicious code to give them access to your personal info on your computers. well now if you download a torrent and it includes pictures of any sort once the picture is clicked and viewed your computer becomes infected :eek: with a simple .bat batch file a server can be binded to a picture without you knowing it. it can be used to spread viruses, host botnets from your computer and gather banking info and any personal info :4-thatsba.<br />
<br />
<br />
BEWARE :wink:</div>

]]></content:encoded>
			<category domain="http://www.techsupportforum.com/security-center/general-computer-security/">General Computer Security</category>
			<dc:creator>Threats</dc:creator>
			<guid isPermaLink="true">http://www.techsupportforum.com/security-center/general-computer-security/433739-1-reason-not-download-torrents.html</guid>
		</item>
		<item>
			<title>hijackthis</title>
			<link>http://www.techsupportforum.com/security-center/general-computer-security/433500-hijackthis.html</link>
			<pubDate>Fri, 20 Nov 2009 04:20:40 GMT</pubDate>
			<description>Logfile of Trend Micro HijackThis v2.0.2 
Scan saved at 23:03:02, on 2009-11-19 
Platform: Windows Vista SP1 (WinNT 6.00.1905) 
MSIE: Internet Explorer v8.00 (8.00.6001.18813) 
Boot mode: Normal 
 
Running processes: 
C:\Windows\system32\Dwm.exe 
C:\Windows\system32\taskeng.exe...</description>
			<content:encoded><![CDATA[<div>Logfile of Trend Micro HijackThis v2.0.2<br />
Scan saved at 23:03:02, on 2009-11-19<br />
Platform: Windows Vista SP1 (WinNT 6.00.1905)<br />
MSIE: Internet Explorer v8.00 (8.00.6001.18813)<br />
Boot mode: Normal<br />
<br />
Running processes:<br />
C:\Windows\system32\Dwm.exe<br />
C:\Windows\system32\taskeng.exe<br />
C:\Windows\Explorer.EXE<br />
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe<br />
C:\Program Files\TOSHIBA\AVCMan\AVCMan.exe<br />
C:\Program Files\Java\jre6\bin\jusched.exe<br />
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe<br />
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe<br />
C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe<br />
C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe<br />
C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe<br />
C:\Program Files\Alwil Software\Avast4\ashDisp.exe<br />
C:\Windows\RtHDVCpl.exe<br />
C:\Program Files\Windows Sidebar\sidebar.exe<br />
C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe<br />
C:\Program Files\ltmoh\ltmoh.exe<br />
C:\Program Files\Windows Live\Messenger\msnmsgr.exe<br />
C:\Windows\ehome\ehtray.exe<br />
C:\Program Files\Spybot - Search &amp; Destroy\TeaTimer.exe<br />
C:\Windows\ehome\ehmsas.exe<br />
C:\Users\simon\AppData\Local\Apps\2.0\HZW9WENB.TR3\DLEPM6V0.8WK\curs..tion_eee711038731a406_0004.0000_10385b9745e33e88\CurseClient.exe<br />
C:\Program Files\TOSHIBA\ConfigFree\CFSwMgr.exe<br />
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe<br />
C:\Program Files\Windows Live\Contacts\wlcomm.exe<br />
C:\Windows\system32\conime.exe<br />
C:\Windows\system32\NOTEPAD.EXE<br />
C:\Windows\system32\SearchFilterHost.exe<br />
C:\Program Files\Internet Explorer\iexplore.exe<br />
C:\Program Files\Windows Live\Toolbar\wltuser.exe<br />
C:\Program Files\Internet Explorer\iexplore.exe<br />
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe<br />
<br />
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = <a href="http://www.lge.com" target="_blank">http://www.lge.com</a><br />
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = <a href="http://go.microsoft.com/fwlink/?LinkId=54896" target="_blank">http://go.microsoft.com/fwlink/?LinkId=54896</a><br />
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = <a href="http://www.google.ca/" target="_blank">http://www.google.ca/</a><br />
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = <a href="http://www.lge.com" target="_blank">http://www.lge.com</a><br />
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = <a href="http://go.microsoft.com/fwlink/?LinkId=54896" target="_blank">http://go.microsoft.com/fwlink/?LinkId=54896</a><br />
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = <a href="http://go.microsoft.com/fwlink/?LinkId=54896" target="_blank">http://go.microsoft.com/fwlink/?LinkId=54896</a><br />
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = <a href="http://go.microsoft.com/fwlink/?LinkId=69157" target="_blank">http://go.microsoft.com/fwlink/?LinkId=69157</a><br />
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = <br />
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = <br />
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = <br />
O1 - Hosts: ::1 localhost<br />
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll<br />
O2 - BHO: Spybot-S&amp;D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search &amp; Destroy\SDHelper.dll<br />
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)<br />
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll<br />
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll<br />
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll<br />
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll<br />
O3 - Toolbar: &amp;Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll<br />
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe<br />
O4 - HKLM\..\Run: [AVCMan] C:\Program Files\TOSHIBA\AVCMan\AVCMan.exe<br />
O4 - HKLM\..\Run: [SunJavaUpdateSched] &quot;C:\Program Files\Java\jre6\bin\jusched.exe&quot;<br />
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe<br />
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe<br />
O4 - HKLM\..\Run: [TOSDCR] %ProgramFiles%\TOSHIBA\PasswordUtility\TOSDCR.exe<br />
O4 - HKLM\..\Run: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE<br />
O4 - HKLM\..\Run: [HSON] %ProgramFiles%\TOSHIBA\TBS\HSON.exe<br />
O4 - HKLM\..\Run: [SmoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe<br />
O4 - HKLM\..\Run: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe<br />
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe<br />
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe<br />
O4 - HKLM\..\Run: [Skytel] Skytel.exe<br />
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup<br />
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun<br />
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe<br />
O4 - HKCU\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe<br />
O4 - HKCU\..\Run: [msnmsgr] &quot;C:\Program Files\Windows Live\Messenger\msnmsgr.exe&quot; /background<br />
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe<br />
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search &amp; Destroy\TeaTimer.exe<br />
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')<br />
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')<br />
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')<br />
O4 - Startup: CurseClientStartup.ccip<br />
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe<br />
O8 - Extra context menu item: E&amp;xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000<br />
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll<br />
O9 - Extra 'Tools' menuitem: &amp;Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll<br />
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL<br />
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search &amp; Destroy\SDHelper.dll<br />
O9 - Extra 'Tools' menuitem: Spybot - Search &amp;&amp; Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search &amp; Destroy\SDHelper.dll<br />
O13 - Gopher Prefix: <br />
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe<br />
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe<br />
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe<br />
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe<br />
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe<br />
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe<br />
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe<br />
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe<br />
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe<br />
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)<br />
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe<br />
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe<br />
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search &amp; Destroy\SDWinSec.exe<br />
O23 - Service: TOSHIBA Navi Support Service (TNaviSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TOSHIBA HD DVD PLAYER\TNaviSrv.exe<br />
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe<br />
O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe<br />
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe<br />
<br />
--<br />
End of file - 8710 bytes</div>

]]></content:encoded>
			<category domain="http://www.techsupportforum.com/security-center/general-computer-security/">General Computer Security</category>
			<dc:creator>morgat</dc:creator>
			<guid isPermaLink="true">http://www.techsupportforum.com/security-center/general-computer-security/433500-hijackthis.html</guid>
		</item>
		<item>
			<title><![CDATA[Weird "Popup" mod DB page]]></title>
			<link>http://www.techsupportforum.com/security-center/general-computer-security/433348-weird-popup-mod-db-page.html</link>
			<pubDate>Thu, 19 Nov 2009 16:56:27 GMT</pubDate>
			<description><![CDATA[I was reading about the new source "snowball mod" and reading some of the comments, clicked a link to the development web blog, then a yellow paint splatter looking decal came up on the screen with text on it saying "you've been infected",  the website has adds for LFD 2, but I don't think there's...]]></description>
			<content:encoded><![CDATA[<div>I was reading about the new source &quot;snowball mod&quot; and reading some of the comments, clicked a link to the development web blog, then a yellow paint splatter looking decal came up on the screen with text on it saying &quot;you've been infected&quot;,  the website has adds for LFD 2, but I don't think there's a connection.<br />
<br />
This is the mod DB page:  <br />
hxxp://www.moddb.com/mods/snowball-source<br />
<br />
This is the link in one of the coments to blog site:  <br />
hxxp://www.snowball-devblog.blogspot.com/<br />
<br />
My question is, at the moment my pc is not to well protected by any av or firewall and could this just be &quot;scareware&quot; or a real threat?<br />
TY</div>

]]></content:encoded>
			<category domain="http://www.techsupportforum.com/security-center/general-computer-security/">General Computer Security</category>
			<dc:creator>Special2God</dc:creator>
			<guid isPermaLink="true">http://www.techsupportforum.com/security-center/general-computer-security/433348-weird-popup-mod-db-page.html</guid>
		</item>
		<item>
			<title><![CDATA[MSN & Hotmail Hacked/Virus]]></title>
			<link>http://www.techsupportforum.com/security-center/general-computer-security/433154-msn-hotmail-hacked-virus.html</link>
			<pubDate>Thu, 19 Nov 2009 01:49:30 GMT</pubDate>
			<description><![CDATA[Well recently a friend of mine warned me that her boyfriend was going to be "hacking" my MSN and that I should do something about it. Well, the day went on and it ended up being the case. I cannot check my Hotmail because it says "I've" attempted to sign-in too many times. I cannot change my...]]></description>
			<content:encoded><![CDATA[<div>Well recently a friend of mine warned me that her boyfriend was going to be &quot;hacking&quot; my MSN and that I should do something about it. Well, the day went on and it ended up being the case. I cannot check my Hotmail because it says &quot;I've&quot; attempted to sign-in too many times. I cannot change my password because of this as well. So I've lost contacts and possible credit card information. I try making new MSN accounts, but within minutes they get hacked. I managed to talk to the guy who did it (and he has no reason he even did it other than the fact that he's mentally unstable, but that's another story...), he said he has a program and no matter what new address I make it'll find it. MSN isn't usable, nor my Hotmail. What has he done exactly and how do I get rid of it? I kind of need my contacts and certain stuff out of the email. I've tried to leave a post on Windows support forum, but shocklingly enough *sarcasm*, you need a Windows ID to post. And if my ID gets hacked everytime I make it, I can't do that.<br />
<br />
And it first happened on my computer at home, but now it's also happening on another computer I use. I did tell him such things about the legality of him doing so, he denied he could get in any trouble for what he's doing. Nonetheless, I've filed for an internet crimes report, although I haven't heard anything back yet. I've sent an email out to Windows Support, there answer was basically a generic &quot;copy and paste&quot; sort of reply I expected to get, but HOPEFULLY (Not gonna get my hopes up) I can break it down to where I actually get some useful support and help from them. I have quite a bit of evidence that this person has done this. From chat logs, to screen captures. I even have information on him such as DOB and what city he is from, as he has several websites on the internet that have such information.<br />
<br />
I REALLY need help guys, this guy is not exactly a safe person. What is he using? How is he tracking me? What can I do to get rid of it? PLEASE help.</div>

]]></content:encoded>
			<category domain="http://www.techsupportforum.com/security-center/general-computer-security/">General Computer Security</category>
			<dc:creator>Chikara</dc:creator>
			<guid isPermaLink="true">http://www.techsupportforum.com/security-center/general-computer-security/433154-msn-hotmail-hacked-virus.html</guid>
		</item>
		<item>
			<title>Could this be bad?</title>
			<link>http://www.techsupportforum.com/security-center/general-computer-security/433130-could-bad.html</link>
			<pubDate>Thu, 19 Nov 2009 00:01:16 GMT</pubDate>
			<description>Ok, so I work for my dad, we run a farm, my Dad works with the money and all, but Im in charge of computer maintence, because my dad just learned how to use e-mail so I need to do his simple stuff on his like 5 different computers. Anyways he accesses his Bank through the computer sometimes. So...</description>
			<content:encoded><![CDATA[<div>Ok, so I work for my dad, we run a farm, my Dad works with the money and all, but Im in charge of computer maintence, because my dad just learned how to use e-mail so I need to do his simple stuff on his like 5 different computers. Anyways he accesses his Bank through the computer sometimes. So what are some ways of protecting his account from being hacked? Could he get hacked through history/cookies? I have it so it deletes all history after exit of iexplorer. I also got a few virus/trojan/spyware protections. So is this enough precaution or should I be doing more? BTW we have free AVG protection.</div>

]]></content:encoded>
			<category domain="http://www.techsupportforum.com/security-center/general-computer-security/">General Computer Security</category>
			<dc:creator>FarmerMars</dc:creator>
			<guid isPermaLink="true">http://www.techsupportforum.com/security-center/general-computer-security/433130-could-bad.html</guid>
		</item>
		<item>
			<title>Facebook problems!</title>
			<link>http://www.techsupportforum.com/security-center/general-computer-security/433078-facebook-problems.html</link>
			<pubDate>Wed, 18 Nov 2009 20:49:12 GMT</pubDate>
			<description><![CDATA[I am unable to log into Facebook.  There is nothing wrong with my password and i have reset it a few times to no avail.  I've tried logging in to my friend's facebook on my computer and have been able to do this no problem.  My friend has tried logging in as me on HER computer and is unable to do...]]></description>
			<content:encoded><![CDATA[<div>I am unable to log into Facebook.  There is nothing wrong with my password and i have reset it a few times to no avail.  I've tried logging in to my friend's facebook on my computer and have been able to do this no problem.  My friend has tried logging in as me on HER computer and is unable to do so.  It doesnt say 'incorrect password' or anything, just resets to the blank password box after I press enter.<br />
<br />
I have tried reporting my account/email address as being phished, and I was sent an email saying to reply to it to confirm my email address.  But when I tried to do so it said &quot;email address invalid&quot;.  There is no telephone contact number for Facebook at all, and I've looked everywhere.  Can somebody please please please help me?<br />
<br />
thanks<br />
Claire.</div>

]]></content:encoded>
			<category domain="http://www.techsupportforum.com/security-center/general-computer-security/">General Computer Security</category>
			<dc:creator>angelclaire</dc:creator>
			<guid isPermaLink="true">http://www.techsupportforum.com/security-center/general-computer-security/433078-facebook-problems.html</guid>
		</item>
		<item>
			<title>svchost.exe</title>
			<link>http://www.techsupportforum.com/security-center/general-computer-security/433037-svchost-exe.html</link>
			<pubDate>Wed, 18 Nov 2009 18:05:57 GMT</pubDate>
			<description>Hi, I have a question about this process. Why so meny of this processes runing, I have 12 of this process?:4-dontkno 
 
PS: I have Windows 7</description>
			<content:encoded><![CDATA[<div>Hi, I have a question about this process. Why so meny of this processes runing, I have 12 of this process?:4-dontkno<br />
<br />
PS: I have Windows 7</div>

]]></content:encoded>
			<category domain="http://www.techsupportforum.com/security-center/general-computer-security/">General Computer Security</category>
			<dc:creator>bilja2101</dc:creator>
			<guid isPermaLink="true">http://www.techsupportforum.com/security-center/general-computer-security/433037-svchost-exe.html</guid>
		</item>
		<item>
			<title>Dating website page opens frequently once i connect to the internet!!!</title>
			<link>http://www.techsupportforum.com/security-center/general-computer-security/432916-dating-website-page-opens-frequently-once-i-connect-internet.html</link>
			<pubDate>Wed, 18 Nov 2009 05:58:46 GMT</pubDate>
			<description>Hi frndz...im new to this forum...hope i ll get a solution for my problem...A dating website page is automatically opening whenever i connect to the internet...many of my colleagues also face a problem like this...it opens frequently and interrupts normal operation...my operating system is...</description>
			<content:encoded><![CDATA[<div>Hi frndz...im new to this forum...hope i ll get a solution for my problem...A dating website page is automatically opening whenever i connect to the internet...many of my colleagues also face a problem like this...it opens frequently and interrupts normal operation...my operating system is Xp...Need help in this...:upset:</div>

]]></content:encoded>
			<category domain="http://www.techsupportforum.com/security-center/general-computer-security/">General Computer Security</category>
			<dc:creator>Muktharze</dc:creator>
			<guid isPermaLink="true">http://www.techsupportforum.com/security-center/general-computer-security/432916-dating-website-page-opens-frequently-once-i-connect-internet.html</guid>
		</item>
		<item>
			<title>Physical Security vs. Cold Boot Attack</title>
			<link>http://www.techsupportforum.com/security-center/general-computer-security/432885-physical-security-vs-cold-boot-attack.html</link>
			<pubDate>Wed, 18 Nov 2009 03:16:01 GMT</pubDate>
			<description><![CDATA[Hello all. I'm devising ways to slow down a physical attacker attempting to decrypt data encrypted with TrueCrypt via the Cold Boot Attack revealed by Princeton students. If you haven't seen the video, "Lest We Remember", (it's been out for awhile) please watch it at  
 
YouTube - Lest We Remember:...]]></description>
			<content:encoded><![CDATA[<div>Hello all. I'm devising ways to slow down a physical attacker attempting to decrypt data encrypted with TrueCrypt via the Cold Boot Attack revealed by Princeton students. If you haven't seen the video, &quot;Lest We Remember&quot;, (it's been out for awhile) please watch it at <br />
<br />
<a href="http://youtube.com/watch?v=JDaicPIgn9U" target="_blank">YouTube - Lest We Remember: Cold Boot Attacks on Encryption Keys</a><br />
<br />
Everyone involved in I.T. Security should see this video. <br />
<br />
As I understand it, access to the RAM must be prevented possibly for a minimum of two minutes. The window of time to access the hash and then the key for TrueCrypt volumes can be extended using coolant as revealed in the video, but this must be done before the two minute window is up.<br />
<br />
I believe I have closed every software-related hole, forcing the attacker to power off the machine and remove the RAM chips.<br />
<br />
My system is set up as follows.<br />
<br />
Details:<br />
<br />
* FreeNAS unit (&quot;storage processor&quot;) hosting drives via iSCSI. All data is stored in TrueCrypt containers with 30-40 character passwords. The volumes are mounted with the password when needed from Truecrypt on the head end machine.<br />
 <br />
* The head end machine (Windows 7) has TrueCrypt full drive encryption (30-40 character boot time password) and a password-protected screen saver.<br />
<br />
* The head end machine requires a boot time BIOS password and of course a TrueCrypt boot time password as well as a password to alter BIOS settings.<br />
<br />
* Hibernation is disabled.<br />
<br />
* Power on after AC fail is disabled in the BIOS.<br />
<br />
* The head end machine's case is closed and locked with a padlock. <br />
<br />
* The power and reset buttons are disconnected. The computer is always on and the padlock must be unlocked, the door removed, and the power button reconnected to turn the machine on if power is removed.<br />
<br />
* Booting from CD/DVD, Floppy, USB devices, eSATA, and PxE is disallowed in the password-protected BIOS.<br />
<br />
* The RAM chips are wrapped into their slots using metal  wire. Tiny holes have been drilled into the heat sinks on the chips and the wire is wrapped<br />
through them. The wire is wrapped around screws secured into the motherboard plate.<br />
<br />
Scenario:<br />
<br />
I. Attacker gains entry.<br />
<br />
II. Access:<br />
<br />
a. The password protected screen saver prevents interaction with the Windows 7 head end machine. <br />
<br />
b. The system cannot be reset. It cannot be powered off and on again because the switches do not work. An attacker could pull the plug and connect the system to a UPS, but there is no way to turn the machine back on without opening the case and reconnecting the power switch. The case is locked.<br />
<br />
c. It takes time to cut off the lock or cut into the side door.<br />
<br />
d. The power switch could then be reconnected and then the system could be turned on, but nothing can be booted because the BIOS immediately requires a password. The BIOS chip cannot be removed and replaced. It is soldered onto the motherboard. A new identical chip could be soldered on, but think about how much time that would take and the compatibility issues.<br />
<br />
e. The metal wire must be unwrapped or cut to take the RAM chips out.<br />
<br />
Your input:<br />
<br />
The question will undoubtedly come up, why not just use a hardware encryption solution? Because that would add expense. Except for a little time with a micro drill, some cheap wire and a padlock, this is virtually free.<br />
<br />
What am I missing? Any ideas you may have are valued.<br />
<br />
Thank you.</div>

]]></content:encoded>
			<category domain="http://www.techsupportforum.com/security-center/general-computer-security/">General Computer Security</category>
			<dc:creator>barrettarcher</dc:creator>
			<guid isPermaLink="true">http://www.techsupportforum.com/security-center/general-computer-security/432885-physical-security-vs-cold-boot-attack.html</guid>
		</item>
		<item>
			<title>IP Address hijacked/Order on website made</title>
			<link>http://www.techsupportforum.com/security-center/general-computer-security/432872-ip-address-hijacked-order-website-made.html</link>
			<pubDate>Wed, 18 Nov 2009 02:39:33 GMT</pubDate>
			<description><![CDATA[Hey guys, newbie here.  
 
I have a friend that says Apple Fraud Prevention contacted him and claims that an Ipod Order was made over the Internet on the Apple website from his IP address using his name, but that somebody else's credit card was used.  
 
He knows nothing about this. He thinks that...]]></description>
			<content:encoded><![CDATA[<div>Hey guys, newbie here. <br />
<br />
I have a friend that says Apple Fraud Prevention contacted him and claims that an Ipod Order was made over the Internet on the Apple website from his IP address using his name, but that somebody else's credit card was used. <br />
<br />
He knows nothing about this. He thinks that his wireless internet was hijacked by some neighbor kids and they somehow used his IP to order an Ipod using his name but somebody else's credit card.<br />
<br />
Is this possible? He doesn't even have an Apple account. <br />
<br />
How can he prove that somebody hijacked his IP? I know you have to log into the Apple website to order an Ipod, so is this even possible with a hijacked IP address? <br />
<br />
Seems like the data would be returned to his computer (the real IP address) and that the hijackers could never complete the Order.<br />
<br />
Thanks in advance!</div>

]]></content:encoded>
			<category domain="http://www.techsupportforum.com/security-center/general-computer-security/">General Computer Security</category>
			<dc:creator>LawTiger87</dc:creator>
			<guid isPermaLink="true">http://www.techsupportforum.com/security-center/general-computer-security/432872-ip-address-hijacked-order-website-made.html</guid>
		</item>
		<item>
			<title>Dial Tone on a Fax Line</title>
			<link>http://www.techsupportforum.com/security-center/general-computer-security/432760-dial-tone-fax-line.html</link>
			<pubDate>Tue, 17 Nov 2009 19:43:35 GMT</pubDate>
			<description>My question concerns a fax line at a retail facility.  My tech has installed a new phone line piggy backed to the office fax line and gets no dial tone on the new line.  To test he jacked his analog phone into the office fax receptcale and again got no dial tone.  He then faxed to another site and...</description>
			<content:encoded><![CDATA[<div>My question concerns a fax line at a retail facility.  My tech has installed a new phone line piggy backed to the office fax line and gets no dial tone on the new line.  To test he jacked his analog phone into the office fax receptcale and again got no dial tone.  He then faxed to another site and was successfull.  Can anyone tell me how the fax works but there is no dial tone?  Thanks.</div>

]]></content:encoded>
			<category domain="http://www.techsupportforum.com/security-center/general-computer-security/">General Computer Security</category>
			<dc:creator>AMPHION</dc:creator>
			<guid isPermaLink="true">http://www.techsupportforum.com/security-center/general-computer-security/432760-dial-tone-fax-line.html</guid>
		</item>
		<item>
			<title>anti-viral software addtions requested</title>
			<link>http://www.techsupportforum.com/security-center/general-computer-security/432443-anti-viral-software-addtions-requested.html</link>
			<pubDate>Mon, 16 Nov 2009 21:56:35 GMT</pubDate>
			<description><![CDATA[I just got a computer with Vista and I'm running McAfee Security System on it.  My past XP computers I also had Malwarebytes and a few other programs.  I don't know if they're compatible with Vista (I would imagine they are) and McAfee - so what should I download to help keep my computer secure...]]></description>
			<content:encoded><![CDATA[<div>I just got a computer with Vista and I'm running McAfee Security System on it.  My past XP computers I also had Malwarebytes and a few other programs.  I don't know if they're compatible with Vista (I would imagine they are) and McAfee - so what should I download to help keep my computer secure with Vista?<br />
Thank you.</div>

]]></content:encoded>
			<category domain="http://www.techsupportforum.com/security-center/general-computer-security/">General Computer Security</category>
			<dc:creator>tierra</dc:creator>
			<guid isPermaLink="true">http://www.techsupportforum.com/security-center/general-computer-security/432443-anti-viral-software-addtions-requested.html</guid>
		</item>
		<item>
			<title>RE: Computer Security</title>
			<link>http://www.techsupportforum.com/security-center/general-computer-security/432307-re-computer-security.html</link>
			<pubDate>Mon, 16 Nov 2009 15:14:29 GMT</pubDate>
			<description>There is little chance of actual computer security.  Mindless ads flood our brains everyday touting the latest advances in computer security.  Be wary of hackers, get a firewall.  Be wary of virii, get an anti-virus solution.  I try to tell my clients how firewalls are basically good-for-nothing...</description>
			<content:encoded><![CDATA[<div>There is little chance of actual computer security.  Mindless ads flood our brains everyday touting the latest advances in computer security.  Be wary of hackers, get a firewall.  Be wary of virii, get an anti-virus solution.  I try to tell my clients how firewalls are basically good-for-nothing for them.  Unless they are a corporate entity, government, or have upset someone, the actual chances of a hacker trying to break into their computer is zilch.  So why have one running taking up memory?  Sure, one could argue that there are worms designed to do the hacking as well as many other malicious programs.  I've found the way around all of that.  With the security I use at home comes a little bit of work, but there is no way to break into my most important computer over the internet.  My security setup involves three computers.  The first one is the one that is directly connected to the internet.  It is a simple 1Ghz computer with a gig of ram, one dvd-rom, a couple USB ports, KUBUNTU and no hdd.  Since there is no hdd, there is no risk of a virus attacking the system with any success and everything must be saved to a jumpdrive.  For the second computer, again it is a simple computer 1 ghz with a gig of memory and a twenty gig hdd with no permanent access to the internet.  This computer runs windows xp, avast and a2squared.  Once I take the jumpdrive from the first computer, I take it to the second computer to scan it.  If it passes that computer I bring it to my most important computer.  The quad core, 6 gigs ram, 2tb sata hdds, windows 7 64bit machine that never gets updated.  Updates are for vulnerable computers.  This computer will never get hooked to the internet.  I have disabled the network card from within bios.  Have disabled everything that has anything to do with internet services.  Runs no extra programs related to the internet (ie, antivirus, firewalls, messengers, etc.).  This is the computer I do all my important work on and in no way would I ever want it to slow down, and/or crash due to malicious activity.  I write all this to see how other people have their home computers set up for security.  Thank you for taking time to read this short blurb.</div>

]]></content:encoded>
			<category domain="http://www.techsupportforum.com/security-center/general-computer-security/">General Computer Security</category>
			<dc:creator>AgentDrex</dc:creator>
			<guid isPermaLink="true">http://www.techsupportforum.com/security-center/general-computer-security/432307-re-computer-security.html</guid>
		</item>
		<item>
			<title>AVG Download problem!</title>
			<link>http://www.techsupportforum.com/security-center/general-computer-security/432100-avg-download-problem.html</link>
			<pubDate>Sun, 15 Nov 2009 20:10:40 GMT</pubDate>
			<description>I am trying to download AVG free anti-virus software but keep getting this error message: 
AVG Download Manager - Problem with setup! 
The AVG Download manager has encountered a problem. Clik Retry button to start the download process again, or Cancel to quit. If you cintunue to see this message,...</description>
			<content:encoded><![CDATA[<div>I am trying to download AVG free anti-virus software but keep getting this error message:<br />
AVG Download Manager - Problem with setup!<br />
The AVG Download manager has encountered a problem. Clik Retry button to start the download process again, or Cancel to quit. If you cintunue to see this message, please consult the product help for  further info.<br />
<br />
Error Code: OxE001C04E<br />
can anyone help?</div>

]]></content:encoded>
			<category domain="http://www.techsupportforum.com/security-center/general-computer-security/">General Computer Security</category>
			<dc:creator>jkfsdote1</dc:creator>
			<guid isPermaLink="true">http://www.techsupportforum.com/security-center/general-computer-security/432100-avg-download-problem.html</guid>
		</item>
		<item>
			<title>Error Msg - Software usage agent</title>
			<link>http://www.techsupportforum.com/security-center/general-computer-security/431594-error-msg-software-usage-agent.html</link>
			<pubDate>Sat, 14 Nov 2009 02:55:56 GMT</pubDate>
			<description><![CDATA[I get this pop up error message "Software usage agent " while i start Google talk. Pls help]]></description>
			<content:encoded><![CDATA[<div>I get this pop up error message &quot;Software usage agent &quot; while i start Google talk. Pls help</div>

]]></content:encoded>
			<category domain="http://www.techsupportforum.com/security-center/general-computer-security/">General Computer Security</category>
			<dc:creator>gjohn66</dc:creator>
			<guid isPermaLink="true">http://www.techsupportforum.com/security-center/general-computer-security/431594-error-msg-software-usage-agent.html</guid>
		</item>
	</channel>
</rss>
