Introduction to Security Notes.

  I hope that all of you know what security means. It means keeping your property safe from attacks and theft. Well with regard to Windows XP it means a lot. It also means securing your computer from attacks on the Web and loss of data from insurgency. The best way to keep Windows XP secure is to enable the firewall, install an antivirus scanner and keep it updated with the latest virus definitions. Microsoft has provided a method to keep the operating system upto date with the latest security fixes. The process is known as Windows Update and it is a simple process where the user has to connect to the web and then allow the site to scan his computer for updates, determine the list of updates that are necessary for his computer, then download the same and apply the fixes to the computer.

Microsoft has also provided a feature where the user can be informed about latest updates when they are available for download. This feature is known as Automatic Updates and can be configured as follows:-

  • Notify me before downloading any updates and notify me again before installing them on my computer.
  • Download the updates automatically and notify me when they are ready to be installed.
  • Automatically download the updates and install them on the schedule that I specify.


  • The following notes describe about the security incidents that occured in the past and also explains the symptoms of them and how to remove them from your computer.


      Download.Ject.

       Microsoft teams have confirmed a report of a security issue known as Download.Ject that affects customers using Microsoft Internet Explorer, a component of Microsoft Windows.When a user visits a Web site hosted on a server that is infected with Download.Ject, the Web pages download a Trojan horse to the user's computer. This Trojan horse is named Backdoor:W32/Berbew, also known as Backdoor-AXJ, Webber, or Padodor. When this Trojan horse runs on the user's computer, it may perform several actions, including monitoring Internet access to capture sensitive information such as logon names and passwords, or opening fake dialog boxes that prompt the user to enter confidential information such as ATM card codes, credit card numbers, or other confidential information. Microsoft has released a tool to help you remove Backdoor:W32/Berbew Trojan horse variants from your computer.

      A tool to detect and remove this virus is available for download.

      Note that Users of Windows XP Service Pack 2 Release Candidate 2 (Windows XP SP2 RC2) are not at risk.

      Read more about this virus and details how to remove the same here.


      Sasser Worm.

       The Sasser worm (W32.Sasser.A and its variants) exploits the Local Security Authority Subsystem Service (LSASS) issue that was addressed by the security update released on April 13 2004. Those who havent installed the updates in April 2004 are susceptible to attack by this worm. This worm may cause LSASS.EXE to stop responding, which forces the operating system to shut down after 60 seconds.

      A tool to detect and remove this virus is available for download.

      Read more about this virus and details how to remove the same here.


      My doom Virus.

       The Mydoom.A worm installs a "back door" on infected computers, which virus writers can use to gain access to your PC. Variants of the Mydoom worm, known as Doomjuice.A and Doomjuice.B, spread to computers that are infected with Mydoom.A. Customers who have successfully removed Mydoom.A from their computers are not at risk for infection by Doomjuice.

      A tool to detect and remove this virus is available for download.

      Read more about this virus and details how to remove the same here.


      MSBlast Virus.

       The Blaster worm (W32.Blaster.A and its variants) exploits a security issue related to the Remote Procedure Call (RPC) function that was addressed by the security update released on July 16. Computers that have been infected may not notice the presence of the worm at all, while others who are not infected may experience problems because the worm is attempting to attack their computer. Typical symptoms may include Microsoft® Windows® XP and Windows Server™ 2003 systems restarting every few minutes without user input, or Windows NT™ 4.0 and Windows 2000 systems becoming unresponsive.

      A tool to detect and remove this virus is available for download.

      Read more about this virus and details how to remove the same here.

     
     
    Best viewed with 1024 x 768 px Resolution
    Developed in association with K K Webtech P Ltd.