<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	>

<channel>
	<title>Stephane Asselin's Blog</title>
	<atom:link href="http://www.sans-cs.com/blog/?feed=rss2" rel="self" type="application/rss+xml" />
	<link>http://www.sans-cs.com/blog</link>
	<description>Security knowledge for the masses...</description>
	<pubDate>Mon, 23 Mar 2009 03:45:33 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.7.1</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>Always wear protection, even from Windows Update&#8230;Sort of&#8230;</title>
		<link>http://www.sans-cs.com/blog/?p=7</link>
		<comments>http://www.sans-cs.com/blog/?p=7#comments</comments>
		<pubDate>Mon, 23 Mar 2009 03:31:34 +0000</pubDate>
		<dc:creator>sasselin</dc:creator>
		
		<category><![CDATA[Security advice]]></category>

		<guid isPermaLink="false">http://www.sans-cs.com/blog/?p=7</guid>
		<description><![CDATA[Protect yourself at all time, not at all cost!]]></description>
			<content:encoded><![CDATA[<p>Sometimes, viruses, trojans and spyware are more tenacious than others. One apparent virus swimming around the Internet has been called the &#8220;Windows Update virus,&#8221; because it looks like a message to update your Windows software but has been identified as a trojan called dnetc.exe.</p>
<p>If you&#8217;re running a Windows XP operating system and for some reason, you&#8217;re still not running an Anti-virus software and anti-malware software, then you are probably infected.</p>
<p>if you really want to get scared, look at the <a title="ShadowServer" href="http://www.shadowserver.org/wiki/">Shadowserver Foundation,  </a> they are a group of security professional monitoring the web to estimate the number of owned PC&#8217;s that are acting as Bots for bad people. This is a scary statistics, we&#8217;re talking hundreds of thousands of PC&#8217;s, the majority of them used without the user even noticing that he&#8217;s compromised.</p>
<p>This is sad because clearly, no true Microsoft program would be identified as a Trojan virus, so this should be removed from your PC immediately.</p>
<p>If you want to stay out of the statistics or if you want to know if you&#8217;re infected, you don&#8217;t have to pay the big bucks, just a little know-how and a about an hour of your time and you should be able to clean up any virus or malware from your machine.</p>
<p>My personal recommendation, invest the money, pay a reasonable price to get a good anti-virus and anti-malware program. There are a bunch of signature-based program on the market today, usually bundled with a good firewall and anti-malware program. I&#8217;m not saying the Microsoft Firewall is bad but an all-in-one security suite is usually better, less processing cycles, less overhead and less chances of program conflicts.</p>
<p>Take the time to look it up, look at reviews, if you can, get a hold of the 2008 Gartner Endpoint Security magic quadrant <a href="http://www.mcafee.com/us/local_content/misc/2006_av_mq.pdf">(this one is from 2006)</a> or look for <a href="http://www.2009softwarereviews.com/Default.aspx?Refer=GCO12&amp;Keyword=antivirus%20security">software reviews</a>.</p>
<p>My top three picks for paid yearly subscription: <a href="http://www.mcafee.com">McAfee</a>, <a href="http://www.ca.com/us/threat-management-products.aspx">CA</a>, <a href="http://www.kaspersky.com/">Kaspersky</a>.</p>
<p>The acceptable free ones: <a href="http://free.grisoft.com">AVG</a> and <a href="http://www.avast.com/eng/avast_4_home.html">Avast</a></p>
<p>For free anti-malware, if you&#8217;re already infected, it&#8217;s not too late, a lot of these sites will ofer online scanning for free (CA does a pretty good job of this). If you&#8217;re clean or if you know for a fact that you have a healthy MAC or PC, you should either use the paid and more robust Internet security suite from one of the vendors mentioned above or try one of the free ones.</p>
<p>Free anti-malware: Microsoft (<a href="http://www.microsoft.com/downloads/details.aspx?displaylang=en&amp;FamilyID=435bfce7-da2b-4a6a-afa4-f7f14e605a0d">Windows Defender</a>), <a href="http://dw.com.com/redir?edId=3&amp;siteId=4&amp;oId=3000-8022_4-10804572&amp;ontId=8022_4&amp;spi=62d1b93119e1feb32c7f89652f93152b&amp;lop=link&amp;tag=tdw_dltext&amp;ltype=dl_dlnow&amp;pid=11004434&amp;mfgId=6290020&amp;merId=6290020&amp;pguid=33-uhwoPjAYAABd9hxcAAABz&amp;destUrl=http%3A%2F%2Fdownload.cnet.com%2F3001-8022_4-10804572.html%3Fspi%3D62d1b93119e1feb32c7f89652f93152b">Malware bytes</a></p>
<p style="text-align: center;"><strong>So, take the time, take action and clean up after yourself <img src='http://www.sans-cs.com/blog/wp-includes/images/smilies/icon_smile.gif' alt=':-)' class='wp-smiley' /> </strong></p>
]]></content:encoded>
			<wfw:commentRss>http://www.sans-cs.com/blog/?feed=rss2&amp;p=7</wfw:commentRss>
		</item>
		<item>
		<title>&#8220;A lie gets halfway around the world before the truth has a chance to get its pants on.&#8221; - Winston Churchill</title>
		<link>http://www.sans-cs.com/blog/?p=3</link>
		<comments>http://www.sans-cs.com/blog/?p=3#comments</comments>
		<pubDate>Mon, 23 Mar 2009 02:51:26 +0000</pubDate>
		<dc:creator>sasselin</dc:creator>
		
		<category><![CDATA[My two canadian cents]]></category>

		<guid isPermaLink="false">http://www.sans-cs.com/blog/?p=3</guid>
		<description><![CDATA[Please stop sending undesired and wasteful emails...]]></description>
			<content:encoded><![CDATA[<p>It&#8217;s always easier for people to believe a big news article mentioning the next big hack or the next exploit than for people to actually take the time to understand what is going on.</p>
<p> I&#8217;ve been doing this for close to 18 years now and it really irritates me when someone sends me an E-mail that talks about a new phishing scam warning, a supposedly legitimate security alert coming from his best buddy or a chain letter asking for help with someone in Siberia and that the person who sent me the original email thinks that he or she is the first one in the world to send me this.</p>
<p>It would take that person 5-10 minutes maximum to go on the web and look on any search engine or myth buster site to see if there is any truth to this, it would save some very valuable electrons and it would make everyone on his or her mailing list a lot safer.</p>
<p>I&#8217;ve seen friends, family members and co-workers get infected because they clicked on links they were not suppose to, just because it came from a trusted source.</p>
<p>My advice to everyone out there that every received it, please take that 5 minutes and look it up!</p>
<p>I searched for a good 30 seconds on Google and found numerous site that helps decipher the truth from the hoaxes, one of the good one out there, VMyth: <a href="http://vmyths.com/">http://vmyths.com/</a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.sans-cs.com/blog/?feed=rss2&amp;p=3</wfw:commentRss>
		</item>
	</channel>
</rss>
