Kaspersky unveils new security products

Kaspersky Lab has launched Internet Security 2011 and Anti-Virus 2011 which feature advanced tools for monitoring malware.

System Watcher, which is found in both products, monitors the system's behaviours from the creation and modification of files to system calls and changes to the system registry.

By monitoring the system, the software would be able to detect the activities of malicious programs, both known and new, the company claimed.

If the malicious program made changes to the system, the security products will be able to reverse the changes with just a few mouse clicks.

Additionally, the Internet Security 2011 security suite comes with the Safe Surf feature that blocks offensive websites and Safe Run website mode which provides added security for online banking and other similar activities.

It also comes with an improved Parental Control module that restricts a child's access to social networking sites and instant messaging. Plus, it can also control the downloading of files and the transfer of personal data.

SMS trojan targets Android phones

KASPERSKY has detected the first widespread malware that targets the Android smartphones.

Called the Trojan-SMS.AndroidOS.FakePlayer.a, it proliferates in the guise of a harmless media player, which when installed will send out premium rate text messages without the owner's knowledge.

Denis Maslennikov, the mobile research group manager at Kaspersky, said this form of malware, also known as SMS trojan, can rake up huge bills.

SMS trojan is the most widespread class of malware for mobile phones and the AndroidOS.FakePlayer.a is the first to target the Android platform. The new malicious program penetrates smartphones running Android in the guise of a harmless media player application. Users are prompted to install a file of just over 13 KB with the standard Android extension .APK. Once installed on the phone, the Trojan uses the system to begin sending SMSs to premium rate numbers without the owner’s knowledge or consent, resulting in money passing from a user’s account to that of the cybercriminals.

As the Android smartphone market is experiencing high growth, users can expect a rise in malware attacks in the future.

In light of this, the company plans to release Kaspersky Mobile Security for Android in early 2011.

In the meantime, Maslennikov urged users to pay close attention to the services that an application requests to access when it is being installed.

For a security concern, Android users are advised to download from a trusted source and avoid downloading media player files that request permission to access your text messages, particularly if they want to send messages from the phone.

IT Security Alert : Beware of "CONFICKER.C" Worm

The worm Conficker.C has been activated on 1st April 2009.

The worm when infects the PC will query about 30,000 websites for further instructions, thus when the PC queries 30,000 sites your Network most probably will be congested and users will be experiencing high latency in internet.

1. WHAT is the symptoms:

    So far, the worm is new, there's no unique signature, but basically, look for these:
   * task manager disabled
   * regedit disabled
   * user cannot view my network
   * network is up, but microsoft sites and all antivirus sites cannot be open


2. HOW to avoid..
 For Microsoft users,  please follow link below
 http://www.microsoft.com/technet/security/bulletin/ms08-067.mspx


3.HOW to clean the worms
     Refer to table below

Removal Instructions
Microsoft:  http://support.microsoft.com/kb/962007
Kaspersky:  http://support.kaspersky.com/faq/
BitDefender: http://www.bitdefender.com/VIRUS-1000462-en--Win32.Worm.Downadup.Gen.html
TrendMicro: http://www.trendmicro.com/vinfo/virusencyclo/default5.asp

To be able to access Anti-Virus vendors and SANS, Microsoft and others, from an infected Conficker.C machine, TrendMicro suggests to use "net stop dnscache" from the command line.
Sophos:  http://www.sophos.com/support/knowledgebase/article/51416.html

Removal Tools

Microsoft MSRT:  http://www.microsoft.com/security/malwareremove/default.mspx
F-Secure:  ftp://ftp.f-secure.com/anti-virus/tools/beta/f-downadup.zip
AhnLab:  http://global.ahnlab.com/global/file_removeal_down.jsp?filename=12371830475821&down_filename=v3conficker.zip
Symantec:  http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-011316-0247-99
McAfee:  http://vil.nai.com/vil/stinger/
ESET:  http://download.eset.com/special/EConfickerRemover.exe
BitDefender:  http://www.bdtools.net/
Kaspersky:  http://data2.kaspersky-labs.com:8080/special/KidoKiller_v3.3.3.zip
TrendMicro:  https://securecloud.com/support/sysclean
Sophos:  https://secure.sophos.com/products/free-tools/conficker-removal-tool-network/download (registration required)

Other Related Post About Conficker.C : ERM Blog