RE: Auditmypc.com



After your positive feedback about adutmipc.com I suspected that something was wrong about consultant's technical report that claimed that classes were downloaded from the site mentioned above.

So I purged Java's cache and I repeated some tests available on the site. The classes were not found again!

At this point I scheduled a mass scanning of Java cache directory and I noticed that another ws had that classes.

They were downloaded from another site that I will publish after some checks.

So could I think that auditmypc.com is not responsible in any way of that classes?

In the meantime the consultant has been invited to have an holiday... and to change is job!

Michele

-----Original Message-----
From: Alexander Bolante [mailto:alexander.bolante@xxxxxxxxx]
Sent: mercoledì 8 marzo 2006 23.40
To: Nappa Michele
Cc: security-basics@xxxxxxxxxxxxxxxxx
Subject: Re: Auditmypc.com

You'll see various references to the viruses you listed below at the
following website:
http://www.trendmicro.com/vinfo/virusencyclo/alphalisting.asp?NAV=12&ltr=J

Trojans are common w/ websites. Doesn't look harmful to me.

1) Run Disk Cleanup.
2) Run your Spyware Removal Program (e.g. Lavasoft Ad-aware)
*Make sure you update Ad-aware before running
3) Run your Antivirus Program (e.g. Symantec Antivirus)
*Make sure you update your virus definition files before running

Good luck. Cheers!

On 3/8/06, Michele.Nappa@xxxxxxxx <Michele.Nappa@xxxxxxxx> wrote:
Does anyone knows more about auditmypc.com?. I used their web functionality called "CHECK YOUR PRIVACY" and they installed some java classes. Scanning with Microsoft Windows Live Safety Center I noticed among results what this tool calls viruses:

* Java/Bytverify
* Trojan:Java/Classloader
* TrojanDownloader:Java/OpenConnection.F

???

Michele Nappa


Nota di riservatezza: il presente messaggio, corredato dei relativi allegati, contiene informazioni da considerarsi strettamente riservate ed è destinato esclusivamente al destinatario sopra indicato, il quale è l'unico autorizzato ad usarlo, copiarlo e, sotto la propria responsabilità, diffonderlo. Chiunque ricevesse questo messaggio per errore o comunque lo leggesse senza esserne legittimato è avvertito che trattenerlo, copiarlo, divulgarlo, distribuirlo a persone diverse dal destinatario è severamente proibito ed è pregato di rinviarlo immediatamente al mittente distruggendo l'originale. Grazie.


Confidentiality notice: this message, together with its annexes, contains information to be deemed strictly confidential and is destined only to the addressee(s) identified above who only may use, copy and, under his/their responsibility, further disseminate it. If anyone received this message by mistake or reads it without entitlement is forewarned that keeping, copying, disseminating or distributing this message to persons other than the addressee(s) is strictly forbidden and is asked to transmit it immediately to the sender and to erase the original message received. Thank you.



---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------




--
Alexander Bolante | Alexander.Bolante@xxxxxxxxx

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------




---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------



Relevant Pages

  • Re: University Degree or CISSP
    ... The Norwich University program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. ... Tailor your education to your own professional goals with degree customizations including Emergency Management, Business Continuity Planning, Computer Emergency Response Teams, and Digital Investigations. ...
    (Security-Basics)
  • Re: System Monitor
    ... The Norwich University program offers unparalleled Infosec management ... education and the case study affords you unmatched consulting experience. ... Computer Emergency Response Teams, and Digital Investigations. ...
    (Security-Basics)
  • Re: System Monitor
    ... > The Norwich University program offers unparalleled Infosec management ... > education and the case study affords you unmatched consulting experience. ... > Computer Emergency Response Teams, ...
    (Security-Basics)
  • Re: Auditmypc.com
    ... The Norwich University program offers unparalleled Infosec management ... education and the case study affords you unmatched consulting experience. ... Computer Emergency Response Teams, and Digital Investigations. ...
    (Security-Basics)
  • RE: Windows Log
    ... > EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... > The Norwich University program offers unparalleled Infosec management ... > education and the case study affords you unmatched consulting experience. ... > Computer Emergency Response Teams, ...
    (Security-Basics)