Top Viruses – July 2010
Virus Name   Risk
1.Trojan-Downloader.JS.Pegel.bp   
  Secretly downloads malicious script from a remote server, installs and redirects users to further malicious websites.
2. Exploit.Java.CVE-2010-0886.a   
  Allows attackers to download and execute arbitrary Java on vulnerable PCs by luring victims to malicious sites.
3. Trojan-Downloader.VBS.Agent.zs   
  Downloads and installs new versions of malicious programs, including Trojans and AdWare, on victim PCs.
4. AdWare.Win32.FunWeb.q   
  Displays unsolicited pop-up ads which do not appear to be relevant or associated with the user’s browser sessions.
5.Exploit.JS.Agent.bab   
  Uses a Microsoft Internet Explorer vulnerability to silently install malicious software onto the user’s …

A good friend of mine Gary Duffuiled a MCLC, from the UK has shared a very interesting post, wanted to share with you as is:
WHAT GOOGLE KNOWS ABOUT YOU ?
Source: Computer World link click here
Computerworld – “Google knows more about you than your mother.”
Kevin Bankston, senior staff attorney at the Electronic Frontier Foundation, recently made that statement to this reporter. A few years ago, it might have sounded far-fetched. But if you’re one of the growing number of people who are using more and more products in Google’s ever-expanding stable …

13 July 2010, should be marked up, highlighted and double underlined in your diaries if your organisation or customer uses Windows XP SP2, Windows 2000 Professional and Windows Server 2000. From this date, Microsoft will end support for these versions of our products as part of our normal product life cycle policy. End of supports means there will be no more security updates for these versions*. By now, Microsoft strongly recommends that: • You or your customer should have migrated to newer, supported versions of these products; or • You …

As a Penetrating Tester, Security Consultant I need always good tools which will make my job easier. Core Impact is one of the must software which will help to make me sure that everything under the control, but it’s not FREE.
The Microsoft Security Compliance Manager provides centralized security baseline management features, a baseline portfolio, customization capabilities, and security baseline export flexibility to accelerate your organization’s ability to efficiently manage the security and compliance process for the most widely used Microsoft technologies.
Take advantage of the experience of Microsoft security professionals, and …

Many people are asking / waiting for the service pack (SP), looking for history many businesses want to see SP1 so they can start to implement. I think this statement is not true when it comes to Windows 7 as it is solid any more than 90 million buyers seems happy.
So, if you ask when the SP can hit the Windows Update Centre, I would say “I don’t know “ but checking the last 2 release of windows may can give us some clue:

It came to my attention that some smart cookies has been creating a fake Anti Virus program, which is named so, that many end users may get conflict with the name…Security Essentials 2010 …Which comes with a fake Upgrade option and it gives nothing but HARM!
Where the free tool from Microsoft is named as  ”Security Essentials ” and do not offers a UPGRADE and in reallty its a nice free tool as extra protection, which can be used as second AV
Be aware! Below you will see a screenshot of real MS Security Essentials …

rating : 3.5 out of 5
A impressive lightweight software with some new features .
Eset, known as Nod32 for years, has brought its latest software which now inc. Firewall, HTTPS /secure POP 3 inspection , SysInspector tool which compares system states at different times (has also a bootable media builder).
The new Eset Software was designed to make users life easier , which it’s done. The interface is clean, the installation and configuration is easy but the Nod32 security which was best for years needs some improvement. The malware protection was much better …