List Of Cheap Resorts In Ecr

New versions of IceSword, Rootkit

The new Secunia Personal Software Inspector is for application programs, which is Windows Update for Windows.


The beta version of the free program shows which require updates of installed programs - and most of them can also download the same (or tried it at least). The entire hard drive for installed programs.

The recognition is not always current. 7-Zip instead of 4:48 as 4:51 appeared to date. In general, the database seems to be not very good.

The penultimate version of Opera is recognized as a date. The FTP Client FileZilla is correctly recognized as obsolete, non of the downloads worked. A completely outdated version of UltraVNC is recognized as a date. XEmacs is not found.

Personal Software Inspector seems to work only when the user is logged in as Admin. Presumably because of the fact that it behaves like a virus scanner in the tray sets and watched the system in the background. This the driver psi_mf.sys installed.

What is the guardian of good? It does not prevent the installation of old versions, and has otherwise no apparent purpose. Why the driver is required is as much a mystery.

Personal Software Inspector has no local database, it collects information on all installed programs and send it over an encrypted connection to Secunia. There the data is stored anonymously and returned the result of the analysis. The collected data will be deleted at Secunia, 12 months after you cease to use the program or immediately if you delete the registry. However, the website no registration.

PSI shows a special service at many of the vulnerabilities of the security service provider Secunia advisories. It is not just "new version available" there, but a description of the vulnerability.


No alternative is Automatic Update client. This program automatically searches for installed applications, but recognizes only a handful. PSI is intended to recognize 4200th AUC is poorly maintained and incorrectly - it "recognizes" an ATI Catalyst driver where none exists. Contrast, an outdated version of Quicktime is as up to date.


A real alternative is Bernd Ott's software UpToDate (Picture). It is to recognize 5721 programs. In the test, it even knew the version 5.51 of 7-Zip, which was only a few hours old. Opera and UltraVNC were correctly recognized. FileZilla and XEmacs are not supported. At least the non-supported programs will be shown here if desired.

software UpToDate find any programs that were simply copied to a directory. The programs must be installed correctly. But the search process is very fast.

such thing as a Privacy Policy has not UpToDate software. The FAQ is "SUTD is a community project, that the client be updates reported." will obviously also held a data storage.

The program is purely passive, there is no background process that scans only one click.


Links

• Secunia Personal Software Inspector
• software UpToDate
• Automatic Update Client
• security risk: Users ignore updates for software . MSN

Mount And Blade 1.003 Hile

About Adobe Flash Player Unhooker and Sophos Anti-Rootkit

In recent days, new versions of our favorite anti-rootkit software appeared:

(I do not know exactly how long it Sophos Anti-Rootkit is 3.1, I've only noticed it just now.)


1:22 IceSword English version
important innovation: The Advanced Scan (see picture). Unhooker rootkit is there but somehow meaningful.

Update: I take the back. Looks like by the Advanced feature of the IceSword tcpip.sys manipulations of Rustock.B (RKU what is already doing more). The hidden driver is not found still.


In the context menu of Process is now Find Modules. There you can search the loaded modules known as DLLs.



Update: In View-> Hide signed items, there is now an option signed to hide files (as with the programs from Sysinternals). Unfortunately, the function a little primitive and I do not think IceSword validate the signatures.

also part of the Registry has a new search function (right mouse button). Explorer of the file will now find alternative data streams (ADS). The ADS implementation looks pretty good.

Update: IceSword refers to the new search function of the hidden ADS Unreal.A rootkits.

The new version can now restore a changed SSDT (a la rootkit Unhooker). Unwanted BHOs can be deleted immediately.

Note: Because this Chinese servers are somehow more difficult to reach, I have the program again uploaded to speedyshare.


rootkit Unhooker LE 3.7.300.501
important innovation: RKU now supports Windows Vista 32 bit.
Displays a Shadow SSDT at (no idea what exactly that is ...).


A new "About" box.



Sophos Anti-Rootkit 3.1
should have improved detection and cleanup functions.
The color of the icon has been changed slightly.


Links

• articles on PJF's Blog on IceSword 1.22en (in Chinese)
• IceSword 1.22en direct download (from China)
• IceSword 1:22 s of speedyshare download
  
• rootkit Unhooker homepage, download
• Sophos Anti-Rootkit

Can Yo Get Shingles On Your Breast

Apple is on Windows 2000, Windows polluted Java

The latest version of QuickTime 7.2, there are officially only for Windows XP and Windows Vista (and Mac OS). Apple tacitly the good old Windows 2000 has still taken from his official e nd of Life from the list of supported systems. In version 7.1 it was still on it. Because of the vulnerabilities it is now under W2k QuickTime virtually impossible . Use

Very nice for XP and Vista: QuickTime installed without asking QuickTime for Java . Even if you have turned off the QuickTime browser plug-in for security reasons, it contaminated the system. Each hole in QuickTime for Java transforms the latest Java plug-in an open barn door. Needless to say that the version is 7.1 a such a gap.

QuickTime for Java lives in the file \\ Program Files \\ Java \\ jre1.6.0_02 \\ lib \\ ext \\ QTJava.zip or similar. Simply delete the problem is resolved.

Alternative: VLC media player. Play mov files without Apple's code.


Links

• About the security content of QuickTime 7.2 . Apple
• Apple QuickTime download
• VLC media player

Making New Employee Announcement

shut down too slowly? - UPHC!

I found while looking around on the Microsoft Web site a miracle cure for the slow shutdown in Windows XP and Windows 2000: The User Profile Hive Cleanup Service . This is a small service from Microsoft, the recalcitrant programs separate from the registry. It runs as uphclean.exe in the background.

The effect is dramatic (for me). Used to take to shutdown or reboot very well be one or two Minutes (in which the computer was doing nothing), only a few seconds. Attention

side effect: The service seems to install Acronis True Image avoided. But it can terminate the services easy to manage temporary. The

User Profile Hive Cleanup service helps to Ensure user sessions are completely terminated when a user logs off system processes and applications occasionally maintain connections to registry keys in the user profile after a user logs off the user in those cases session is Prevented from completely ending. This can result in problems when using Roaming User Profiles in a server environment or when using locked profiles as implemented through the Shared Computer Toolkit for Windows XP.

On Windows 2000 you can benefit from this service if the application event log shows event id 1000 where the message text indicates that the profile is not unloading and that the error is "Access is denied". On Windows XP and Windows Server 2003 either event ids 1517 and 1524 indicate the same profile unload problem.

To accomplish this the service monitors for logged off users that still have registry hives loaded. When that happens the service determines which application have handles opened to the hives and releases them. It logs the application name and what registry keys were left open. After this the system finishes unloading the profile.

Aber nicht zu enthusiastisch downloaden: Windows kennt noch ca. 1000 andere Shutdown Probleme...


Links

• User Profile Hive Cleanup Service . Microsoft.
• Other tips from Peter Jasik.