Just for fast refer...

OnLine Multi AV Scanner

GREEN (AV company friend)
http://virustotal.com/
http://filterbit.com/
http://virscan.org/
http://scanner.novirusthanks.org/
http://virusscan.jotti.org/

YELLOW (unknown)
http://scanner.virus.org/
http://viruschief.com/
http://virus-trap.org/
http://killv.com/

RED (virwriter used)
http://virtest.com/
http://avcheck.ru/
http://avcheck.biz/
http://scan4you.net/
http://avhide.com/
http://nicescan.net/

OffLine Multi AV Scanner


HH Multiscan (Hackhound)
KIMS (indetectables.net)

Google vs Facebook (who will control your default NET social identity?)

A new war is starting.. a virtual war for control of user’s NET social identity. Two the big players: Google vs Facebook.

GOOGLE
Google keep track and profile your identity through your searches in the NET and your use of its web applications (mail, talking, etc..). They probably trying to profile your real life identity, the one that everybody express by searches (google search, translate,..) and by the infos & content managed by their social NET apps (gmail, gtalk,...) that you use.
It’s not simple to correlate all the info’s and derive the user profile’s from his behaviors on the NET, but it’s his real identity getting profiled, including all those infos and aspects he’ll never reveal to anybody. We can call this INdirect “REAL LIFE ID” profiling.
 
FACEBOOK
Instead Facebook is trying to profile user “best looking & wanna be” social NET identity through his self-published contents. Everybody considers his Facebook’s page like the presentation card and put there only his best photos, best ideas, best comments, sometimes also best willing but… NEVER a real secret & unmentionable  fears, wishes, feelings. NEVER NEVER something that could “stain” his social NET identity and his social NET LOOK!!!
It’s easier to correlate all the info’s that are published from the user and directly derive his profile, and only his virtual identity getting profiled. We can call this Direct “VIRTUAL LIFE ID” profiling.
 
In both case, why profiling users? Simple answer: money!!!
FREE SERVICE for YOU -> USERS PROFILING –> CUSTOM ADS –> MONEY (a lot of…) for THEM !!!

OPEN QUESTION
Which ID is more valuable, REAL or VIRTUAL?? Profiling which one more dangerous for user’s privacy? And how user feel being profiled?

SANS Cyber Security Awareness Month - My little contribute..

WINDOWS CLIENT

1. Verify checksum of Microsoft CD/DVD you are installing from. Here (http://msdn.microsoft.com/en-gb/subscriptions/downloads/default.aspx) you can find original MS checksum for all product.
2. Ensure Windows Update is turned on, set to install recommended updates and configured to install updates daily at a time when the computer is likely to be on!!
3. Install latest version Secunia Personal Software Inspector (PSI). PSI monitors your Windows applications, lets you know when applications are out of date, and provides download links to help remediate. PSI is free for non-commercial use (Configure it to show also vulnerable DLL unchecking Show only "Easy-to-Patch" programs in Settings tab).
4. Consider keep auto-updated the major ATTACK VECTOR client apps used by malware agent:

 

• Adobe Flash Player

Installed version checking (http://www.adobe.com/software/flash/about/)

Flash_Player_10_ActiveX (Internet Explorer for Windows only)

(http://fpdownload.adobe.com/get/flashplayer/current/install_flash_player_ax.exe)

Flash_Player_10_Plugin (All other Windows browsers)

(http://fpdownload.adobe.com/get/flashplayer/current/install_flash_player.exe)

>>End-user<<autoupdate settings management

(http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager05.html#118377)

>>Enterprise IT Admin<< autoupdate settings management

(http://kb2.adobe.com/cps/167/16701594.html)

 

• Adobe Acrobat & Reader

Installed version checking (Adobe Acrobat & Reader Menu –> Help –> About)

>>End-user<< autoupdate settings management

(http://help.adobe.com/en_US/Acrobat/9.0/Standard/WS58a04a822e3e50102bd615109794195ff-7fef.w.html)

>>Enterprise IT Admin<< autoupdate settings management

Updater changed in version 9.3.2 and 8.2.2 and later (http://kb2.adobe.com/cps/838/cpsid_83813.html)

AutoUpdate Settings management (http://kb2.adobe.com/cps/837/cpsid_83709.html)

 

• Java JRE

Important: Previous to JRE 6 Update 10, installing or updating to a newer Java version would add a new Java Runtime Environment (JRE) instead of replacing the existing version. Starting with JRE 6 Update 10, future Java updates will patch the current version by default instead of adding an additional version. This will prevent an accumulation of unused and potentially insecure older JRE versions.

Installed version checking (http://www.java.com/en/download/installed.jsp?detect=jre&try=1)

>>End-user<< autoupdate settings management

(http://www.java.com/en/download/help/java_update.xml)

>>Enterprise IT Admin<< AutoUpdate Settings management

Autoupdate policy settings ([HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Update\Policy])

Deployment Configuration File and Properties

(http://download.oracle.com/javase/1.5.0/docs/guide/deployment/deployment-guide/properties.html)

Deployment - Java Control Panel – Update

(http://download.oracle.com/javase/1.5.0/docs/guide/deployment/deployment-guide/jcp.html#update)