Sunday, August 24, 2003

NewsReaders

SmartDraw.
Without doubt, this brilliant
software just gets better and better. For business and home drawing.
Ideal for flowcharts, diagrams, flyers, and presentations. 'Best
Business Program' PC Magazine. Free Download. Found at
http://www.tudogs.com/smartdraw.php

-------------------------------------------------------------------

TuDogs Finds

1. Sobig.F Virus - Complete Removal Tool
W32.Sobig.F@mm is a mass-mailing, network-aware worm that sends itself
to all the email addresses it finds in files that have the following
extensions: .dbx .eml .hlp .htm .html .mht .wab .txt. The worm uses
its own SMTP engine to propagate and attempts to create a copy of
itself on accessible network shares, but fails due to bugs in the
code.

The email message has the following characteristics: From:
Spoofed address - which means that the sender in the From: field is
most likely not the real sender. The worm may also use the address
admin@internet.com as the sender. The spoofed addresses and the Send
To: addresses are both taken from the files found on the computer.
Also, the worm may use the infected computer's settings to check for
an SMTP server to contact. Proliferated emails have one of the
following as their subject: Re: Details, Re: Approved, Re: Re: My
details, Re: Thank you!, Re: That movie, Re: Wicked screensaver, Re:
Your application, Thank you!, Your details.

Sobig.f copies itself as %Windir%\winppr32.exe. %Windir% is a
variable. The worm locates the Windows installation folder - by
default, this is C:\Windows or C:\Winnt - and copies itself to that
location. It creates the file, %Windir%\winstt32.dat., adds the value:
TrayX=%Windir%\winppr32.exe /sinc to the registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run so
that the worm runs when you start Windows. It adds the value:
TrayX=%Windir%\winppr32.exe /sinc to the registry key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run so
that the worm runs when you start Windows. It enumerates any network
shares to which the infected computer has write access. It uses
standard Windows APIs to do this.

Sobig.F can download arbitrary files to an infected computer and
execute them. The author of the worm has used this functionality to
steal confidential system information and to set up spam relay servers
on infected computers.

The worm is set to expire on September 10th., and should be over
thereafter. In the meantime, even if your regular anti-virus software
has removed discovered virus files, one should run this tool as an
extra precaution. Windows 95/98/Me/NT/2000/XP. Free. 172Kb. Found at
http://www.tudogs.com/security.php

2. Password Corral
An effective Password Manager/Protector with strong encryption for
unbreakable security. Even if you are invaded by intrusive software
searching for your passwords, you will not be in danger. Password
Corral uses the 128-bit Diamond2 Block Cipher to encrypt all the
information you store in the program, keeping it safe from prying
eyes. Each password can have both a short description and a long
description which can also contain hyperlinks to launch your web
browser, open folders on your PC or launch applications. Each password
entry can also have an expiration date to remind you to change the
password. The program can be set to time out to the Windows system
tray area after a specified period of system inactivity and be
protected by your master password, so even if you forget to close
Password Corral and walk away from your PC, your password info can
still be protected. Windows 95/98/Me/NT/2000/XP. Free. 702Kb. Found at
http://www.tudogs.com/surftools4.php

3. NewsReaders
There are millions of internet users who haven't discovered
newsgroups. This is the site where you'll find out all you might ever
want to know about using news groups. Includes tutorials. Found at
http://www.tudogs.com/surftools3.php

Spyware Nuker.
Have you ever downloaded music
online? When you surf online, do you get pop up ads? If so, there's a
94% chance your PC is infected with potentially harmful SpyWare! Click
Here to scan your PC now. The scan is free. Then you decide if you
want to buy. Found at http://www.tudogs.com/sponsors/spynuker.php

No comments: