Online Computer Tips Monthly Newsletter - November 2009

Facebook Phishing Scam

There is a Facebook email scam making its rounds recently. It asks recipients to update their login credentials for security purposes. It then instructs them to click the URL provided in the email message. When the user clucks the URL, it points them to s spoofed Facebook website where they are required to input their password.

Once the users hit the login button it will redirect them to another fraudulent page where a link to download a suspicious update tool file is provided.

Click here for examples of the spoofed email.

Virus Help
Spyware Help

Windows Vista Parental Controls

The parental controls built into Windows Vista help you determine which games your children can play, which programs they can use, and which websites they can visit. You can restrict computer use and programs to specific times. Vista Parental Controls come with Vista Home Basic, Home Premium and Ultimate.

Parental Controls allows you to configure such items as setting appropriate limits on your children's game playing, web browsing, and overall computer use. You can also turn parental controls on and off as well as block or allow specific programs, games, and websites.

You can also use the activity reports to show how your children have been using the computer and then, refine and modify parental controls based on actual feedback. When the pre set time has come for their computer usage to end, Windows will suspend their session and display the logon screen so another user can use the computer.

The Parental Controls panel is part of the User Accounts and Family Safety Control Panel applet and is also available with Windows 7 but is setup a little different.

All Tips

Details:

Acer Aspire AS1410-2497 Notebook comes with these specs: Intel Celeron Processor 743, Windows 7 Home Premium, 11.6" HD Widescreen CineCrystal LED-backlit Display, Mobile Intel GS45 Express Chipset, 2048MB DDR2 667MHz Memory, Intel Graphics Media Accelerator 4500MHD, 250GB SATA Hard Drive, Acer Crystal Eye Webcam, Multi-in-1 Digital Media Card Reader, Dolby Sound Room Audio Enhancement, Intel WiFi Link 1000 802.11a/b/g/Draft-N

Microsoft Releases Critical and Important Updates

Microsoft has released some critical and important updates for November. You should always keep your system up to date to avoid any security or performance issues.

Here are the Critical updates.

Vulnerability in Web Services on Devices API Could Allow Remote Code Execution (973565)
This security update resolves a privately reported vulnerability in the Web Services on Devices Application Programming Interface (WSDAPI) on the Windows operating system.

Vulnerability in License Logging Server Could Allow Remote Code Execution (974783)
This security update resolves a privately reported vulnerability in Microsoft Windows 2000. The vulnerability could allow remote code execution if an attacker sent a specially crafted network message to a computer running the License Logging Server.

Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (969947)
This security update resolves several privately reported vulnerabilities in the Windows kernel. The most severe of the vulnerabilities could allow remote code execution if a user viewed content rendered in a specially crafted Embedded OpenType (EOT) font.

Here are the Important updates.

Vulnerability in Active Directory Could Allow Denial of Service (973309)
This security update resolves a privately reported vulnerability in Active Directory directory service, Active Directory Application Mode (ADAM), and Active Directory Lightweight Directory Service (AD LDS).

Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (972652)
This security update resolves several privately reported vulnerabilities in Microsoft Office Excel. The vulnerabilities could allow remote code execution if a user opens a specially crafted Excel file.

Vulnerability in Microsoft Office Word Could Allow Remote Code Execution (976307)
This security update resolves a privately reported vulnerability that could allow remote code execution if a user opens a specially crafted Word file. An attacker who successfully exploited this vulnerability could take complete control of an affected system.

If you dont use Automatic Updates then make sure to visit the Microsoft Update site and get your patches installed.

More Resources

Test your internet speed at Speedtest.net

Sharon writes in with a hardware question.

Q. Is there any way the CD drawer can be opened manualy?

A. You should have a tiny pinhole sized hole right underneath the CDROM tray. You can take one of the larger size paperclips and bend it so its straight and push it in the hole. It will take a little pressure to pop open the tray but that is what that hole is made for.

All Questions

Web Site Security Holes Make Case for Protection

Two-thirds of the sites that tend to care most about security still have serious unfixed vulnerabilities, according to an analysis from web security firm WhiteHat Security.

Historically, 83 percent of the sites WhiteHat looks at have had a serious vulnerability at some point. Currently, 64 percent still have at least one flaw. These numbers represent flaws in custom apps the companies make themselves, and not basic security holes resulting from a missing operating system or Web server patch, for instance.

Web surfers should take the findings as further evidence that the days of being able to stay safe online by simply avoiding sketchy sites are long gone. Online crooks often exploit these prevalent site vulnerabilities to hide attack code on otherwise benign Web sites, so to stay safe from these drive-by-download risks, even careful surfers should use capable antivirus protection and keep all software up-to-date.

According to WhiteHat's report, cross-site scripting vulnerabilities were the most common type of problem found, while social networking sites were the most likely to be vulnerable.

Full Story

Go to The OCT News Blog

Is there something you would like to see on the newsletter or OnlineComputerTips.com?

Please send us a suggestion

• October 09
• September 09
• August 09
• July 09
• June 09