ExploitJava...Dangerous Malware Virus! Laptop infection @ Valley Hospital Medical Center!

Was there any connection?

Yesterday afternoon, while doctors were running a series of medical tests at the Valley Hospital Medical Center, a piercing alarm sounded from a myriad of speakers on the 4th floor all around me.

In tandem with a continuous loop, a recorded voice urgently noted that there was an "Emergency" underway in the Hospital's records department.

The alert continued for about ten minutes.

Then, stopped.

When I asked the Nurse if there was a fire, she hesitated, then informed me that a drill was underway.

Intriguing.

If that was the case, why did all the nurses and hosptial employees scatter this way 'n that?

Then, two other events caused me to sit up and take notice that something may be awry.

For instance, shortly after the "innocent" drill, a dialogue box popped up on my laptop.

VIRUS ALERT!

I clicked on the History files for Microsoft Security Essentials.

Whoa Nellie!

According to the anti-virus software, the laptop suffered a severe attack on Wednesday July 22nd @ 1:07 p.m.

Microsoft labelled it as follows:

ExploitJava/CVE-2008-5353.gg

The intruder, according to Microsoft, is a dangerous virus capable of compromising privacy and  damaging the computers (SEVERE)

Exploit.Java. contains malicious code which exploits vulnerability in java applets.

The attacker inserts malicious code to a web page to exploit this vulnerability, so that the users who visit the web page and load java applets, get their systems infected.


Type: TT_Trojan


Curiously, Microsoft Defender is not able to track the malware.

In contrast, Microsoft Security Essentials will uncover the virus, contain it, and remove it.

In closing, it may be important to note that the malicious ExploitJava Virus  laptop infection gained access through the WiFi Internet Service at the Valley Hospital Center in Las Vegas.

Now, for the intriguing news!

A nurse informed me today (in a casual conversation about the body scan apparatus used  to monitor the liver, the heart, and so forth and so on) that the high-tech equipment relies on Nuclear energy.

"We've been having difficulty securing the nuclear materials to operator the machine in recent months, so the tests have been limited to just two or three a day."

In addition, there were a couple other comments uttered up about the source of the "nuclear materials" that caused my antennae to soar into hyper-drive.

A detailed report on the "Nuclear data" will follow.

It may be explosive!

News at 11!

http://www.julianayrs.com

Soldier Virus...scam extorting money & holding PC users hostage! BEWARE consumers!!!

Some folks cruising the internet today were upset to learn that their computer was infected with a virus designed to extort money, block access to software programs, and quite generally fu** with their heads.

For instance, one victim was browsing over some material on a web site, when a dialogue box popped up and warned that their computer was infected.

Without their permission, the program - ironically named the "Security Tool" - began a scan.

During that unauthorized probe the user was startled to find that they were blocked from accessing software programs or conducting various functions on their PC.

In fact, when the individual attempted to launch their anti-virus software, the Security Tool blocked their access to the program on the grounds that myriad files were infected).

Then, the scan stopped, and issued an alert that there were 38 viruses and/or trojans threatening to damage their PC, steal credit card information, passwords, etc.

The software instructed the user to request a fix for the problem.

However, when the individual clicked on the link, he was transported to a suspicious-looking page that filled the whole screen.

Now, there was a demand for money to download  the necessary "upgrade" to quarantine and remove the threatening intruders.

The shocked computer owner was asked to input his credit card number, home address, and so forth and so on.

Did the bozos think he was born yesterday?

Curiously, there wasn't any "address" at the top of the page confirming the name of the software developer, their physical addresx, or where they could be contacted online, etc.

Weird, eh?

At this juncture, the victim clicked the X in the top right corner of the web page, to close the dialogue box and order form.

Guess what?

The pop-up box, and scanner, continued to bounce on and off the computer for the rest of the evening non-stop!

The user was also startled to spy an entry for "Security Tool" on the  list of installed programs on the menu.

When the unhappy internet cruiser attempted to use the "uninstall program" function he was unable to.

Why?

Cleverly, the culprits at the back of the scam, programmed "Security Tool" so that it didn't show up on the program list where it should have been posted (thus preventing the victim from being able to uninstall the rogue virus).

Imagine that!

The user hadn't even downloaded (or ordered) the alleged anti-virus program.

After clicking on various links, the upset computer geek finally located a notice tucked away at the bottom of one page (in very fine print!) with  insructions on how to remove the so-called soldier virus.

However, the link for the instructions failed to open, and the dialogue box continued to give alerts, blocks functions, and scan the computer!

At this juncture, the user scoured the order page, in a desperate effort to  locate some individual, web address, or company entity to contact to resolve the problem.

Finally, he stumbled on a two-line notice that stated that if a party was having trouble removing the software program (Security Tool) that they should contact the following web site.

http://www.softsailor.com/how-to/9824-how-to-remove-uninstall-windows-soft-soldier-virus-removal-guide.html

At the web site instructions were provided on what action to take to expunge the offending intruder.

The steps that were mapped out have been posted below.

However, although the site explained in detail the nature of the malicious virus - and the damage it could cause to a laptop or regular desk PC - no "free assistance" was offered up.

No, sir!

The owners of this site were asking a hefty little sum for an anti-virus software program they asserted would remove the dangerous virus from computers.

My antennae went up!

Part of the elaborate scam?

News at 11!

________________________________________________
Info & Instructions

http://www.soldiervirus.com/
________________________________________________

If your computer got infected with the SoftSoldier rogue anti-malware (Scareware) this article will provide all the information about what SoftSoldier is as well as instructions on how to remove it and all related files from your computer.

Just like we stated above, SoftSoldier is a rogue anti-malware. Soft Soldier works in a way that is highly similar to the other rogue anti-malware we talked about in our past articles (Cyber Security, Trust Soldier, Windows Enterprise Defender).

This malware will take the form of video codecs required for an online video or flash updates to install itself on your compute

Once installed, Soft Soldier will create a bunch of files that have random names.

When you restart your computer, you will notice that Soft Soldier will automatically start a scan (it’s actually a fake scan) of your computer.

When this fake scan will be complete, Soft Soldier will tell you that these files are infections and that you need to buy the program to remove them from your computer.

This article is part of our “Malware Removal Tips” series of articles.

Click here for more articles.

These files will be placed in C:\Windows and C:\Windows\System 32.

You won’t know that these files are created.

When you restart your computer, you will notice that Soft Soldier will automatically start a scan (it’s actually a fake scan) of your computer.

When this fake scan will be complete, Soft Soldier will tell you that these files are infections and that you need to buy the program to remove them from your computer.
In addition, Soft Soldier will also display some security alerts stating that your computer is under attack and that malware has been detected.

It will even fake a Windows Security Center that advises you to buy Soft Soldier to protect your computer (the original windows security center does not recommend any program).

SoftSoldier is just a scam, so don’t buy it (contact your credit card company if you already did) and don’t believe the warnings it will give you.

Here is a quick guide on how to remove Soft Soldier from your computer.

Tip: you should print these instructions as you will be needed to close all windows a little later.

Make sure that you follow closely these instructions:

1.Click here to download Malwarebytes’ Anti-Malware (MBAM). Save the file on your desktop. Don’t run it yet.

2.Close all open windows and then run the setup file for Malwarebytes’ Anti-Malware.

3.Follow the wizard instructions and complete the install without changing any settings.

4.When the install is complete, leave both “Update Malwarebytes’ Anti-Malware” and “Launch Malwarebytes’ Anti-Malware” boxes checked before clicking Finish.

5.Go to the Scanner tab and select Perform quick scan. Now click on the scan button.

6.Wait for the scan to complete. When it is, click the OK button.

7.Go to the scanner screen and click on the Show Results button.

8.When taken at the screen that shows all detected infections, select them all and click Remove Selected.

9.Wait for MBAM to remove all the infections. Note that MBAM may ask for a restart in order to remove all threats. Allow it to do so if prompted.

10.When the scan is finished, a scan log will be opened. Close it when you are done reading it.

Now you should have removed SoftSoldier and any related files from your computer.

http://www.thetattler.biz

Google...postpones Android phones for China! Ouch...

As I reported this past week, Google has taken a stand against China on the heels of quarrels with officials overseas in respect to privacy issues, censorship, and recent cyber atttacks launched against google (and ten top U.S. companies) in search of intellectual property and "Corporate secrets" to steal.

In retaliation, google has pushed back its release date for android phones in China.

The nifty google product was manufactured with leading-edge technology by Motorola, Inc. and Samsung.

The two wireless phones were to be introduced to combat hacking maneuvers in respect to internal network security issues.

Anxious consumers are now forced to sit out the stand-off between Google and the Chinese government until the dispute is resolved.

Industry experts on the sidelines note that the Chinese have rarely ever backed down on established National policies geared towards keeping foreigners and adversaries at bay.

In fact, in respect to the issues at hand, it's the same old same old.

The wall protecting China will probably get higher, wider, and longer.

http://www.julianayrs.com/

Google...Chinese cyber attacks! Virus & trojan alerts posted weeks ago...

Google cyber-attacks in China!

A few weeks ago when I was conducting a search at GOOGLE,one of  my anti-virus program issued an alert about malicious viruses and trojans at the GOOGLE site.

I proceeded to pen a post to alert internet surfers.

Post: 12/12/09

http://ijulian.blogspot.com/2009/12/blogspotsecurity-alert-intruder-posts.html

Over the next few days, GOOGLE and media outlets failed to report the  incidents, which I thought was a bit odd.

Meanwhile, on FACEBOOK - after the alert was posted on my home page - a hacker slipped into my site and began to post messages with my photograph and name without my knowledge or permission (in retaliation or was the intrusion just a coincidence?)

The unknown individuals used the FISH TANK game to gain access, so I immediately stopped participating in those kind of software programs being offered by FACEBOOK (or other members).

After I reported the incident to FACEBOOK the hacking at that portal stopped.

So, I expect that technical staff at the popular social hub took action.

Just this past week, though, GOOGLE admitted to having been under attack a few weeks ago during the time frame I mentioned the attacks originally occurred.

So, it appears in retrospect, that my report was correct.

For some inexplicable reason, GOOGLE and the team at their headquarters, kept silent for a couple of weeks.

On Friday, it was reported that GOOGLE and about twenty other companies, were sent e-mails or instant messages addressed to their senior technical managers in a sly effort by hackers to entice them into clicking on a web page links.

When a major anti-virus company got caught up in the ruse, they discovered a flaw in Internet Explorer's Web browser (the one I used to search at GOOGLE when I stumbled on the virus and trojan activity).

Attackers capitalized on the glitch to take control of PC's and began probng the network for intellectual property of high value that they could hijack surreptiously.

Microsoft is now working on a patch to alleviate the problem.

Meanwhile, internet users are being advised to not only use a firewall, but set the level on high.

Officials have underscored that the perpetrators were not naive young hackers tampering on the internet to bolster their egos.

In fact, they believe that sophisticated individuals which high-tech capabilities (who plotted their steps quite carefully) were involved.

It is speculated that their home base of operations was in China.

Google has considered pulling out of China, in fact, because of the security breaches.

It is alleged that China and other overseas nations in that region (and elsewhere) have been involved first-hand in state-sponsored cyber intrusions of commerical and military targets.

James Lewis, a Program Director at the Center for Strateic and International studies,  noted to the press recently that China has been actively pursuing a tech industry.

He has levelled an accusing finger at Chinese officials and alleged that they have sought to accomplish that end by engaging in illicit technological transfer of intellectual property (theft) without permission (and sometiimes even knowledge of the victims).

News at 11!

http://www.julianayrs.com

Blogspot...security alert! Google has 9 known malicious viruses & trojans! Intruder posts drafts at blogspot web page...

Shortly after I logged on and checked e-mail earlier this afternoon, I surfed over to the Tattler @ Blogspot to pen a post.

When I shifted into edit mode, and the list of published posts and saved drafts popped up in the dashboard, I was quite shocked to spy approximately forty (40) posts inputted as "Untitled" items and saved as drafts.

This startling turn of events occurred at 1:30 pm (PST).

Of course, I was might curious to open the mysterious drafts, but my inner voice issued a warning.

Don't touch 'em!

Google's blogspot has a help center where bloggers at the site are welcome to report  issues to the technical team so that snafus and glitches in the system may be immediately addressed.

So, I posted a notice at the site about the mysterious intruder, with a request that an expert at google offer up suggestions on how to proceed.

Should I just delete the little suckers?

Or, quarantine them somehow, so they may be studied as to their origin - and most of all - their intent?

Curiously, the Norton Security software was operating at the time of the intriguing "attack".

I have to wonder if a hacker slipped in while I was online, or somehow, came in backdoor and also infected other blogger sites.

A few minutes ago, when I zipped over to google's search web site, a Norton Security warning flashed a warning alert on the computer screen.

According to the Norton software, there are nine (9) malicious (dangerous) viruses and trojans on the google web site search page.

Looks like I'm switching to Bing, folks!

http://www.julianayrs.com

Twitter...quote of the day! In the wake of the fall-out...

Within twenty-four hours of the initial "fall-out" at Twitter - shortly after the social hub fell down and went boom - Internet Security experts and anti-virus aficionados scrambled to shed a searing penetrating light on the unexpected attack which swept across the blogosphere - like a giant computer tsunami - and crippled a host of web sites in its powerful wake.

Was it a new-fangled worm?

Some speculated that it was all about bragging rights.

Just betcha, it was the invisible hand of a pimply-faced computer nerd out to flex (and draw-attention-to) his potent hacking skills for the mere thrill of it, Dudes.



In a report I penned and posted yesterday afternoon, I noted that individuals at Sophos ( a leading anti-virus expert) were quite emphatic that the cyber attack was instigated by savvy criminals with an agenda in mind (either personal or professional in nature).

Post: 08/07/09

http://ijulian.blogspot.com/2009/08/twittercyber-attack-paralyzes-tweet.html

Meanwhile - in other quarters - investigators directly involved with hands-on security issues on the pervasive world-wide-web, hinted that it was an army of computers (taken hostage unbeknown to their owners) known as "Botnets" that triggered the domino effect which ultimately overwhelmed the Internet.

Today, pieces of the intriguing puzzle are being put into place, with the precious hope that the footprint of the intruder may be tracked to the source.

There will be an update this afternoon on the painstaking investigation underway and a rundown on the findings of the experts.

In the meantime - it should be noted that a posse of pundits, notables in the IT field, and probing media types (for starters) - have tossed in their own two-cents worth on not only the ramifications of the calamitous event - but the profound meaning of it all in a pop culture (& Internet phenomenon) subtext.

A journalist at the McClatchy Newspapers gets a nod for their summary on the Twitter "attack" - and likewise - their astute assessment of the resulting fall-out in the aftermath.

"Twitter's site crashed, leaving approximately 23 million unique visitors without the ability to "tweet" about themselves for several hours."

Devastating!

http://www.julianayrs.com