Tuesday, 31 December 2013

Download Total Video Converter TVC 3.71 + Serial Full Version

Download Total Video Converter 3.71 plus Serial Key.Stay up to date with bookmark this blog or subscribe. TVC is one of the best converter software which serves to convert video or mp3 to a file type that you want. Total Video Converter TVC 3.71 final has been able to burn and convert to several types of files such as H.264 TS, MPEG-2 TS, WMV-HD, MKV-HD, DivX-HD, DivX-HD, HD-MOV, FLV-HD and MP4-HD. not only that the features of this version can also be integrated in Windows Explorer with the context menu.


Total Video Converter TVC 3.71

Total Video Converter 3.71 Features:
  • Integrate into Windows Explorer with context menu.
  • Add a brand new Skin.
  • Fully support Windows 7.
  • Convert all kinds of videos to mobile videos or audios (mp4, 3gp, xvid, divx mpeg4 avi, amr audio) which are used by cell-phone, PDA, PSP, iPod, iPhone, Xbox360, PS3 etc.;
  • Photos slide show combines multi-photos and musics with more than 300 photos fantasy transition effect;
  • High compatibility and high efficiency for Importing RMVB or RM video/audio;
  • Convert various videos to MPEG videos compatible with standard DVD/SVCD/VCD;
  • Burn the converted videos to DVD/SVCD/VCD;
  • Rip DVD to popular videos of all sorts;
  • Extract audio from various of videos and convert which to all kinds of audios (mp3, ac3, ogg, wav, aac);
  • RIP CD to audios of all sorts directly;
  • Support using with command line;
  • Combine several video and audio files to one video file;
  • Demultiplex or extract video and audio;
  • Multiplex video and audio to one file;
  • Flv Nelly Mosser audio extract and decode.
Download : Total Video Converter TVC 3.71 incl. Serial Full Version
Just wait for 5 seconds and Click Skip Ad and you will go to Download page

 Don’t forget to share it on Facebook with your Friends and others all around the web also via twiiter.

IcoFx :Icon MakEr fullversion free download

If you make your own icons ICOFX is the best SoftwarEs to make icon easily and faster. IcoFX is a professional icon and cursor
editor used to create icons with
transparency for Windows XP,
Vista ,7,8 and Macintosh. IcoFX allows users to create custom
icons using a variety of tools. IcoFX is an award winning
professional icon and cursor editor. It
is an all-in-one solution for icon
creation, extraction and editing. It is
designed to work with Windows XP,
Windows Vista, Windows 7 and Macintosh icons supporting
transparency. Create icons and cursors Create icons for Windows and
Macintosh. Support for Windows Vista
icons with PNG compression. Convert
your Macintosh icons to Windows
icons and vice versa. Support for static
and animated cursors. Create a favicon for your website or blog. Batch process multiple files You can easily work with multiple files
using the batch processing capability
of IcoFX. Create, convert, extract or
export all your icons or cursors with
just a few clicks. Adjustments and effects With more than 40 effects at your
fingertips, there's virtually no limit to
the icons you can create. IcoFX
features a collection of intuitive color
correction tools. Using these tools you
can fine-tune hue, saturation, and luminance, adjust color levels,
brightness and contrast. Images with layers You can quickly create layer based
images using IcoFX. It allows you to
rearrange, blend layers and change
their opacity. This gives you more
control, and you can more easily
change the image in the future. Import, export and extract You can easily convert your favorite
images into icons or cursors, or icons
into images. Supported image formats
BMP, PNG, JPG, JPG2000, TIF and GIF.
With IcoFX you can extract icons from
other files, including Windows Vista, Windows 7 and Macintosh files. Resource editor IcoFX gives you the possibility to
create icon libraries or change icons
inside exe files. You can also create
cursor libraries. Full assortment of tools IcoFX features a full blown image
editor with many useful tools. You can
use different brush sizes, shapes,
hardness, even blending modes when
painting. Soft selections With IcoFX's collection of selection
tools you can quickly and easily select
any part of your images. You can then
edit and apply special effects to
portions of your image, remove
unwanted objects or cut out objects from one image and paste into
another. Using the QuickMask you can
use the painting tools to refine your
selections. Technical Specifications Supported File Formats Import and export: PNG, JPEG, TIFF,
GIF, JPEG2000, BMP Open and save: ICO, CUR, ANI, ICNS,
ICL, CUL, IFX Extract from: EXE, DLL, OCX, Mac
Binary, AppleSingle, AppleDouble Capture: Ability to capture images
from your desktop Image Processing Layers-based image editing (IFX
images) Over 20 tools for selection, crop,
painting, retouching, typing,
measuring and navigation Use over 40 filters Adjust image size and resolution Scale, Rotate, Flip (vertical or
horizontal) Fill images, layers or selections Batch process Extract icons or cursors from files Export icons or cursors to image Create icons or cursors from
images Resource editor Create/modify icon libraries (ICL)
and cursor libraries (CUL) Modify icons/cursors inside 32 bi
EXE files Advanced brush settings Size, angle, spacing, width, heigh Dynamic parameters: size jitter,
angle jitter, width jitter, height
jitter, opacity jitter, hue jitter,
saturation jitter, brightness jitter,
x/y position jitter Powerful multicolor gradients Many predefined gradients Gradient editor to create custom
gradients Tools Selection Tools: Rectangular, Elliptical,
Lasso, Magic Wand, Move selecte
pixels Move/Modify selection Smooth selection Inverse selection Edit selection in Quick Mask mode Crop tool Painting Tools: Brush, Pencil, Gradient, Fill,
Line, Curves Specify blend mode, opacity,
brush for painting tool Shapes Tools: Rectangle, Ellipse, Rounde
Rectangle, Shape Specify blend mode, fill of shapes Retouching Tools: Eraser, Color Eraser, Blur,
Sharpen, Brighten, Darken Specify brush and strength Text tool Measuring and navigation Color Picker, Hand, Zoom, Ruler Image Adjustments Color Balance Brightness and Contrast Hue/Saturation Opacity Fade Out Transparent Color Shadow Rotate Effects Use over 40 predefined effects or
create your own filter Invert, Grayscale, RGB Channel
Mixer Emboss Color, Emboss Dark,
Emboss, Emboss Light Average, Blur, Blur Soft, Blur Mor
Motion Blur Sharpen, Sharpen Less, Sharpen
More, Directional Sharpen Find Edges (vertical), Find Edges
(horizontal), Enhance Edges,
Detect Edges, Edges Strong, Edge
Weak, Contour Glow, Waggle, Pattern, Paint Dark
Paint Bright, Shake, Shake Less,
Pale, Scene, Drop Shadow Ability to create custom filter Layers Layers-based image editing (only for
images) Create new, duplicate, delete,
rename, import or hide layers Change blending mode for layer Normal, Multiply, Additive, Color
Burn, Color Dodge, Reflect, Glow,
Overlay, Difference, Negation,
Lighten, Darken, Screen,
Exclusion, Hue, Saturation, Color,
Brightness, Soft Light, Hard Light, Pin Light, Freeze, Heat, Subtractiv Adjust layer opacity Merge layers Flatten image Arrange layers User Interface Interface designed to work with
small images Dockable panels Tools, Tool Options, Layers,
Brushes, Swatches, Palette,
Gradients, Colors, History,
Explorer, Preview, Info panels Quick Mask mode Use grid and zoom up to 10000% to
edit small images Customizable shortcuts Explorer panel to easily import
images Save/Load work spaces Sidebar to view all the images in the
icon Create Win/Mac icon from image Snapshot Many customizable preferences Colors RGB, HSB, Gray color modes Transparent color Access to the palette of palette base
images Add, remove and pick colors from
Swatches panel Eyedropper allows picking colors

Vistarts For Windows xp free download

Download Vistart for your windows .It makes your windows
xp start button & menu just look like window7 Start menu & button.
Features Of vistart :- Launch Programs
faster then ever before ViStart
dramatically
decreases the time taken to search for programs by indexing
your program
shortcuts.
Then you can simply type part of the program into the start menu and ViStart will "instantly" find it.
Find files faster then
Vista ViStart not only indexes programs but also files as well. Just type the file you are looking for and in miliseconds ViStart will return results (Up to 4 times faster then the orignal Vista start menu!). Vistart basi transperen Microsoft Vista skin ViStart includes a skin that looks exactly like the Windows Vista's start menu and it also supports 3rd party skins. A wide range of skins made by ViStart fans are available through deviantart. Fading Menu Icons As you roll over each option on the menu ViStart will blend each option just like Vista's icons. Vistart aero transperen Multi language
support ViStart supports natively English, Japanese, German, French, Italian, Russian, Korean, Chinese and Dutch. Choose your vistart skin which you want to download.

Windows X live(Se7en transformation Pack 5.1) free Download

Windows X live released the Se7en transformation Pack 5.1 for Free
download . It make your windows xp
look same to win7 Features Seven Transformation Pack will
replace many of the resources in
Windows Vista/XP/Server 2003. It can
change such things as: Boot screen Welcome Screen / Logon Screen New msstyles files (visual styles) New desktop and file icons New toolbar icons Progress Dialogs Sounds scheme System Tray icons New Wallpapers Some Windows 7's popular features And much more Changes in Version 5.1-Fixed infamous welcome center being in
used while reinstalling
-Fixed missing files bugs in setup
integration
-Fixed missing taskkill.exe error in
some machines -Fixed potential dwwin.exe errors
during shutdown
-Fixed shutdown dialog resource
patching glitches when new updates
are available
-Fixed unsubscribing to Windows X's Live failure in Welcome Center
-Improved deferred launcher to give
startup applications lower priorities for
better system performance

Driver Easy Free

Driver Easy is a program which provide to your computer drivers latest updates for your devices and provide you to new devices Drivers for making your windows up to date.
Click below link to Download it:
"www.mediafire.com/?vl59i77b49h41z0"
All brought to u by Muhammad Salman Asghar.
Bookmark my Site and get great programs.

Windows 7 sidebar for xp free download

If you have windows xp and you
would like to make your xp look
like window7 . Download the
sidebar of window 7 into your xp
and make your xp look window7. It
is also containing the vista sidebar .The sidebar is full version
only open the rar file and intall the
application. . If you don't understand see
instructions before you proceed to
download 1.firstly download the rar file
2. then extract the rar file and open
folder
3.In the folder open a second folder
"Alky For Applications" .
4.Run the "installer"application 5.Follow the instruction click next
to proceed steps.
6. after installing this go back to
"Windows Sidebar for Windows XP
- Package by Joshoon (www.djjoshoon.com) " 7. Run the application "sidebar" and
follow the instruction.
8.The sidebar is installing to your
windows
9.It is atomically start on windows
startup. 10.It is quite look like window7

Microsoft Office 2010 Professional Plus Activator || 1000% Work |

Microsoft Office 2010 Professional Plus Activator || 1000% Work || 2.4 MB
1. Disable your AntiVirus.
2. Run Activator As Administrator.
3. Install and Activate KMS Activator.
It will activate for lifetime......If not then do it again every six months :)

VLC Media Player 2.0.1 Final + Portable - Maltese media

VLC Media Player 2.0.1 Final softwarewith size less than 99 percent from the same software can watch films that will apply to most users. Volume low and very simple software environment of the most important features application is considered. Consider your DVD should run heavy applications such as Cyberlink PowerDVD or Corel WinDVD installed on your system. This software, while the relatively large hard drive space you occupy, for the film too much space of system memory they occupythe Ram. But do you download VLC from soft 98 is very compact and lightweight while DVD can easily display them. The tool can replace allthe software that the Player can be installed on the system because it is able to support up to 99 percent extension. Also is able to convert to different formats. The stone can be afew that were targeted.
Features software VLC Media Player 2.0.1 Final :
*. Playback formats including MPEG-1,MPEG-2, MPEG-4, DivX, mp3, ogg, ...
*. Playback of DVD, VCD
*. Full support of various audio and video formats
*. Playback of DVD, VCD quality FULL HD
*. Very small volume relative to its great capabilities, and also compared to similar software
*. Very simple and user-friendly environment, completely free
*. Support for partial download files and corrupted discs player
*. Support in various languages ​​including sweet Persian language
*. Most operating systems that run on Windows, Linux, Macintosh, and ...
*. Multiple skins for different tastes
*. Support for various audio and videoformats and subtitles

Adobe Photoshop CS 8 Full Version ( With Key )

Description
Adobe Photoshop CS 8 Full Version ( With Key ) is a famous and most downloaded Graphics Software. Adobe Photoshop CS 8 Full Version ( With Key ) is the latest version of Adobe Photoshop with great features available in it.
Adobe Photoshop CS 8 Full Version ( With Key ) helps to edit pictures and give them alovely and lively appearance to look
TO DOWNLOAD COMPLETE OR FULL VERSION OF ADOBE PHOTOSHOP CS 8 (ABSOLUTELY FREE) WITH SERIAL KEY CLICK THE BELOW LINK.
Just wait for 5 seconds and then skip ad and you will be directed to Download page of Adobe.,... with key

CCleaner Optimization and Cleaning

CCleAnerFeatures
CCleaner is our system optimization , privacy and cleaning tool. It removes unused files from your system - allowing Windows to run faster and freeing up valuable hard disk space. It also cleans traces of your online activities such as your Internet history. Additionally it contains a fully featured registry cleaner. But the best part is that it's fast (normally taking less than a second to run) and contains NO Spyware or Adware!
Cleans the following:
Internet Explorer
Temporary files, history, cookies, super cookies, Autocomplete form history, index.dat files.
Firefox
Temporary files, history, cookies, super cookies, download history, form history.
Google Chrome
Temporary files, history, cookies, super cookies, download history, form history.
Opera
Temporary files, history, cookies, super cookies, download history.
Safari
Temporary files, history, cookies, super cookies, form history.
Other Supported Browsers
K-Meleon, Rockmelt, Flock, Google Chrome Canary, Chromium, SeaMonkey, Chrome Plus, SRWare Iron, Pale Moon, Phoenix, Netscape Navigator, Avant and Maxthon.
Windows
Recycle Bin, Recent Documents, Temporary files, Log files, Clipboard,DNS Cache, Error Reporting, Memory Dumps, Jump Lists.
Registry Cleaner
Advanced features to remove unused and old entries, including File Extensions, ActiveX Controls, ClassIDs, ProgIDs, Uninstallers, Shared DLLs, Fonts, Help Files, Application Paths, Icons, Invalid Shortcuts and more...

Wednesday, 25 December 2013

Vista SP1 Beta Predicted for Mid-July


Mary Jo Foley has reported that her unnamed sources have indicated that Microsoft is expected to release the first Beta for SP1 (Service Pack 1) for Windows Vista the week of July 16, with the anticipated final version in November, 2007.

With so many people holding off purchase of Windows Vista until after the Service Pack, a November release would be just in time for the Holiday shopping frenzy.

The rumored inclusions, according to Mary Jo, are
  • Performance tweaks lessening the amount of time it takes to copy files and shut down Vista machines
  • Improved transfer performance and decreased CPU utilization via support for SD Advanced Direct Memory Access (DMA)
  • Support for ExFat, the Windows file format for flash memory storage and other consumer devices
  • Improvements to BitLocker Drive Encryption to allow not just encryption of the whole Vista volume, but also locally created data volumes
  • The ability to boot Extensible Firmware Interface (EFI) on an x64 machine
  • Improved success rate for firewalled MeetingSpace and Remote Assistance connections
If Mary Jo's sources are correct, we should be finding out in another week what to expect in Windows Vista SP1.

See Vista SP1 beta 1 to launch in mid-July

Edit to add:

  • It appears that we will be seeing fine-tuning elsewhere with SP1. For example, from Mark Russinovich's blog post today, The Case of the Unexpected PsList Error, regarding providing read access to to PerfLib permissions for standard users will be included in SP1:
    "To make a long story short, I filed a bug against Windows Vista Service Pack 1 (SP1) and Windows Server 2008 to have Interactive Users added back to PerfLib’s permissions. The reliability and diagnostics team reported back that the permissions changed inadvertently during the release of Windows Server 2003, but I convinced them it didn’t make sense, so in SP1 and Windows Server 2008 you won’t need to edit PerfLib’s permissions to be able to run tools like PsList as a standard user.
    Another case closed by Process Monitor!"
    PsList is a utility in SysInternals which can be used to obtain detailed information about a process.

BugHunter - MalWare Removal Tool - v2.2c


A good tool to have on hand. From the official description:

"BugHunter is a DOS based malware scanner which has a frequently updated database of signatures as well as engine updates. The program is designed to quickly scan for and optionally disable/remove any malware found. BugHunter is able to detect browser hijackers, rogue programs, adware, keyloggers, spyware (including some commercial ones), rootkits which are file based, malicious java/html/vb scripts, and various worms. As BugHunter is DOS based and does not require installation of any sort, it can easily be copied to various media and used to disinfect other systems without those systems having potentially harmful code present in memory. BugHunter gets along fine with most memory resident programs, and supports being run from a boot diskette/cdrom, such as BartPE."

Java SE 6 - Update 1.6.0_02


Sun Java has been updated to 1.6.0_02. As shown in the Release Notes, the update includes a long list of bug fixes, including this classic: "sloppy developer missed testcase when fixing 6490790."

I have not installed Sun Java on this machine yet but will be updating my posted Sunflowers and SunJava instructions in due course.

Vista SP1 Beta Predicted for Mid-July


Mary Jo Foley has reported that her unnamed sources have indicated that Microsoft is expected to release the first Beta for SP1 (Service Pack 1) for Windows Vista the week of July 16, with the anticipated final version in November, 2007.

With so many people holding off purchase of Windows Vista until after the Service Pack, a November release would be just in time for the Holiday shopping frenzy.

The rumored inclusions, according to Mary Jo, are
  • Performance tweaks lessening the amount of time it takes to copy files and shut down Vista machines
  • Improved transfer performance and decreased CPU utilization via support for SD Advanced Direct Memory Access (DMA)
  • Support for ExFat, the Windows file format for flash memory storage and other consumer devices
  • Improvements to BitLocker Drive Encryption to allow not just encryption of the whole Vista volume, but also locally created data volumes
  • The ability to boot Extensible Firmware Interface (EFI) on an x64 machine
  • Improved success rate for firewalled MeetingSpace and Remote Assistance connections
If Mary Jo's sources are correct, we should be finding out in another week what to expect in Windows Vista SP1.

See Vista SP1 beta 1 to launch in mid-July

Edit to add:

  • It appears that we will be seeing fine-tuning elsewhere with SP1. For example, from Mark Russinovich's blog post today, The Case of the Unexpected PsList Error, regarding providing read access to to PerfLib permissions for standard users will be included in SP1:
    "To make a long story short, I filed a bug against Windows Vista Service Pack 1 (SP1) and Windows Server 2008 to have Interactive Users added back to PerfLib’s permissions. The reliability and diagnostics team reported back that the permissions changed inadvertently during the release of Windows Server 2003, but I convinced them it didn’t make sense, so in SP1 and Windows Server 2008 you won’t need to edit PerfLib’s permissions to be able to run tools like PsList as a standard user.
    Another case closed by Process Monitor!"
    PsList is a utility in SysInternals which can be used to obtain detailed information about a process.

Microsoft Malware Protection Center


In April, we were provided with a preview of the Microsoft Malware Protection Center. The Malware Protection Center is no longer in "preview" mode but rather final form. A nice addition to the portal is the inclusion of the latest definitions for both Windows Defender and Microsoft Forefront Client Security Antivirus.
It comes as no surprise to see positions 1-3 of the top MSRT Detections as variants of the Zlob trojan. This trojan is often referred to as the "SmitFraud" infection or Trojan-Downloader.Win32.Zlob. I'll provide more information on the Zlob trojan in another post. In the meantime, check out the new Microsoft Malware Protection Center

Update 10 July 07:

The Antimalware Engineering Team Blog posted an update today announcing the official Version 1 of the Microsoft Malware Protection Center Portal.

Microsoft security updates for July 2007


Microsoft released the following security updates today:

Critical:
  • MS07-036: This security update resolves three vulnerabilities that could allow remote code execution if a user opens a specially crafted Excel file.
  • MS07-039: This security update resolves two vulnerabilities in implementations of Active Directory on Windows 2000 Server and Windows 2003 Server that could allow remote code execution.
  • MS07-040: This security update resolves two vulnerabilities that could allow remote code execution and one information disclosure vulnerability on client systems with .NET Framework installed.
Important:
  • MS07-037: This security update resolves a vulnerability that could allow remote code execution if a user viewed a specially crafted Microsoft Office Publisher 2007 file.
  • MS07-041: This security update resolves a vulnerability which could allow remote code execution if an attacker sent specially crafted URL requests to a Web page hosted by Internet Information Services (IIS) 5.1 on Windows XP Professional Service Pack 2.
Moderate:
  • MS07-038: This security update resolves a vulnerability that could allow an attacker could to gather system-specific information about the affected host.
The following security bulletin was re-released:
  • MS06-078 has been updated to support the release of Windows Server 2003 SP2 (KB 923689 and KB 925398)

How to get the updates

To get the Windows updates and Microsoft Office updates for your home computer or laptop go to the Microsoft Update Web site now.
If you are using Windows Vista you can manage your updates through the control panel. For more information, see Windows Vista: How to update your operating system.
To manually download available updates, go to Microsoft Update or in Windows Vista go to your control panel. After your computer has been scanned to see which updates it needs, click the Custom button to find and choose the update you want to install. We recommend you install all High-Priority Security and Critical updates immediately.
We recommend that you get the updates delivered automatically to your PC. When your computer is on and connected to the Internet, the most current security updates are automatically downloaded and installed. To learn how to turn on automatic updating for your particular operating system, see Update your computer automatically.

Adobe Flash and Quick Time Updates


Critical vulnerabilities have been identified in both Adobe Flash Player and Apple Quick Time. Please follow the links below to update your computer. Not sure if affected versions are on your computer? Use the Secunia Software Inspector to check if your system is missing security updates or have insecure applications installed. The Software Inspector:
  • Detects insecure versions of applications installed
  • Verifies that all Microsoft patches are applied
  • Assists you in updating your system and applications
  • Runs through your browser. No installation or download is required.

Adobe Flash Player
Critical vulnerabilities have been identified in Adobe Flash Player that could allow an attacker who successfully exploits these potential vulnerabilities to take control of the affected system. A malicious SWF must be loaded in Flash Player by the user for an attacker to exploit these potential vulnerabilities. Users are recommended to update to the most current version of Flash Player available for their platform.
Adobe Flash Player 9.0.45.0 and earlier, 8.0.34.0 and earlier, and 7.0.69.0 and earlier.
Reference: Adobe Security Bulletin


Apple Quick Time

Secunia describes the updates as vulnerabilities reported in Apple QuickTime, which can be exploited by malicious people to compromise a user's system. QuickTime 7.2 addresses critical security issues and includes support for full screen viewing in QuickTime Player, updates to the H.264 codec and fixes numerous bugs.

About: The Microsoft MVP Program


Have you ever wondered what the Microsoft MVP (Most Valuable Professional) Program is about? Channel 9 is presenting a series on The Voice of Support. The 12th podcast in this series is a four-part look at The MVP Program In-Depth:
"The next 4 podcasts will focus on the ins and outs of the MVP program. Microsoft Most Valuable Professionals (MVPs) are exceptional technical community leaders from around the world who are awarded for voluntarily sharing their high quality, real world expertise in offline and online technical communities."
Tune in to the podcasts:

Windows Vista Drivers


A major complaint by Windows Vista users, and an issue that may be keeping many people from upgrading to Windows Vista, is the slow response by vendors to release or update drivers for Windows Vista.

To that end, Ed Bott is doing his part to help Windows Vista users keep track of download locations for Windows Vista-compatible drivers for common hardware types in a single location. The rules Ed will be following for inclusion in the list are as follows:
"1. Only primary download locations (official sites run by hardware maker) are allowed. I don’t trust or recommend third-party sites that allow direct downloads of drivers.
2. Whenever possible, I’m linking to the information page or the search page rather than the driver file itself. Linking to the file runs the risk that you’ll grab the wrong driver, miss an update or a readme file, or bypass other important information that might be on the info page."
Have no doubts, the link to The Vista Master Driver List has been added to Drivers, Hardware and Software in Windows Vista Bookmarks.

Firefox 2.0.0.5 Update -- Fast Work on Reported Exploit!


Last week, a highly critical risk was reported, with proof of concept, involving registering a "firefoxurl://" URI (uniform resource identifier) handler on a computer with both IE and Firefox 2.0 (or later). This was described by Mozillazine as follows:
"When installed on Windows, Firefox registers a URL protocol handler to handle firefoxurl:// URLs (this works much like a http:// or ftp:// URL protocol handler). If an IE user visits a webpage that tries to call a firefoxurl:// URL (for example, using an iframe), IE will launch Firefox with no further prompting, passing it the URL. Neither IE nor Firefox escape or sanitise the URL, which allows an attacker to inject additional parameters into the command line used to invoke Firefox. Used in combination with the -chrome parameter, the attacker can make Firefox execute dangerous JavaScript code."
If you read the above-referenced Mozillazine article, note the finger pointing as to whether the problem is caused by IE for passing untrusted data to another application or by Firefox for not validating input properly. Regardless of where the problem resides, Mozilla reacted quickly and included the fix in Firefox 2.0.0.5.

Note: By default, Firefox automatically checks for updates. If you have changed that setting, go to Menu > Help > Check for updates.


Included in Firefox 2.0.0.5:
  • MFSA 2007-25 XPCNativeWrapper pollution
  • MFSA 2007-24 Unauthorized access to wyciwyg:// documents
  • MFSA 2007-23 Remote code execution by launching Firefox from Internet Explorer
  • MFSA 2007-22 File type confusion due to in name
  • MFSA 2007-21 Privilege escalation using an event handler attached to an element not in the document
  • MFSA 2007-20 Frame spoofing while window is loading
  • MFSA 2007-19 XSS using addEventListener and setTimeout
  • MFSA 2007-18 Crashes with evidence of memory corruption

Opera Browser Update 9.22


Following the Mozilla Firefox browser update yesterday, Opera has released an update due to a vulnerability in BitTorrent header parsing which can be exploited by malicious people to compromise a user's system. The vulnerability description from Secunia:

"The vulnerability is caused due to Opera using already freed memory when parsing BitTorrent headers and can lead to an invalid object pointer being dereferenced. This can be exploited to execute arbitrary code, when the user is tricked into clicking on a specially crafted BitTorrent file and then removes it via a right-click from the download pane."

Tuesday, 24 December 2013

Windows Vista USB Cumulative Update


Microsoft KB Article 941600 is a cumulative update package addressing the issues described below that have affected USB components in Windows Vista.
  • KB 925528 - Stop errors occur on a Windows-based computer that has 2GB or more of RAM and is using an NVIDIA nForce USB controller
  • KB 929734 - You may experience problems after you resume a Windows Vista-based computer from sleep or from hibernation
  • KB 930568 - Error message when you try to put a Windows Vista-based computer to sleep or into hibernation: "STOP 0x000000FE BUGCODE_USB_DRIVER"
  • KB 929478 - After you use the Safely Remove Hardware option to remove a built-in optical drive from a portable Windows Vista-based computer, you may be unable to reconnect the drive
  • KB 930570 - Error message in the Usbhub.sys process when you wake a Windows Vista-based computer from sleep or from hibernation: "STOP 0x00000044"
  • KB 928631 - A USB device may no longer work correctly after Windows Vista resumes from sleep or from hibernation
  • KB 933433 - Recording quality is poor when you use a USB microphone on a Windows Vista-based computer that has 4 GB of RAM or more
  • KB 933442 - A USB composite device does not work after you disable and then enable the device in Device Manager on a computer that is running Windows Vista
  • KB 934633 - When you connect a USB multifunction printer device to a Windows Vista-based computer, a second instance of the printer object is created, and the first instance no longer works
  • KB 934796 - Error message on a Windows Vista-based computer that is running a USB composite device: "STOP 0x000000FE"
  • 933824 - The Safely Remove Hardware feature and the Windows Explorer "Eject" command do not work correctly with an Apple iPod that is connected to a Windows Vista-based computer
  • 935782 - A USB device takes a long time to resume from "selective suspend" mode on a Windows Vista-based computer that uses UHCI USB controllers
  • 935783 - When you resume a Windows Vista-based computer from sleep, you may experience unexpected behavior from a USB device

October 2007 Microsoft Security Bulletin Release


Microsoft has released the following six security bulletins, having withdrawn one bulletin from release:
  • MS07-055 addresses a vulnerability in Kodak Image Viewer, and is rated as a Critical bulletin.
  • MS07-056 addresses a vulnerability Outlook Express and Windows Mail, and is rated as a Critical bulletin for earlier versions of Windows and as an Important bulletin for Windows Vista.
  • MS07-057 is a Cumulative Security Update for Internet Explorer, and is rated as a Critical bulletin.
  • MS07-058 addresses a vulnerability in RPC, and is rated as an Important bulletin.
  • MS07-059 addresses a vulnerability in Windows SharePoint Services 3.0 and Office SharePoint Server 2007, and is rated as an Important bulletin.
  • MS07-060 addresses a vulnerability in Microsoft Word, and is rated as a Critical bulletin for earlier versions and as an Important bulletin for more recent versions.
In addition to the bulletins mentioned above, Microsoft also re-released bulletin MS05-004. This re-release updates detection includes Server 2003 Service Pack 2 and Vista as affected platforms. There were no changes to the update binaries, so if you have already successfully installed this update, you do not need to reinstall it. Customers who have applied MS07-040 are unaffected by this detection update, as their systems are up-to-date from a .NET Framework security stance. Please refer to the bulletin revision history for more information.

Microsoft Security Advisory 943521 Released


This alert is to notify you that Microsoft has released Security Advisory 943521 – URL Handling Vulnerability in Windows XP and Windows Server 2003 with Windows Internet Explorer 7 Could Allow Remote Code Execution - on 10 October 2007.

Summary

Microsoft is investigating public reports of a remote code execution vulnerability in supported editions of Windows XP and Windows Server 2003 with Windows Internet Explorer 7 installed. This vulnerability does not affect Windows Vista or any supported editions of Windows where Internet Explorer 7 is not installed. We are not aware of attacks that try to use the reported vulnerability or of customer impact at this time.

Recommendations

Review Microsoft Security Advisory 943521 for an overview of the issue, details on affected components, mitigating factors, suggested actions, frequently asked questions (FAQ) and links to additional resources.

Customers in the U.S. and Canada who believe they are affected can receive technical support from Microsoft Product Support Services (http://support.microsoft.com/security) at 1-866-PCSAFETY. There is no charge for support calls that are associated with security updates.

International customers can receive support from their local Microsoft subsidiaries. There is no charge for support that is associated with security updates. For more information about how to contact Microsoft for support issues, visit the International Support Web site (http://support.microsoft.com/common/international.aspx).

Upon completion of this investigation, Microsoft will take the appropriate action to protect our customers, which may include providing a solution through a service pack, our monthly security update release process, or an out-of-cycle security update, depending on customer needs.

Microsoft Security Bulletin MS07-056 Revised


On 10 October 2007 Microsoft revised security bulletin MS07-056 - Security Update for Outlook Express and Windows Mail (941202) to add Windows XP Professional x64 Edition to the "Affected Software" section.

Important Note: This change only affects the bulletin text and does not affect the security update itself. No update files or detection logic were changed.

Customers who have already installed this update will not need to reapply it. When initially published, existing detection and deployment tools (EST, MBSA 2.0.1, SMS 2.0 with EST and SMS 2003) correctly offered this package for Windows XP Professional x64 Edition.

Within the bulletin the following additional changes were made: 1) Known Issues set to none 2) Corrected missing file information to the bulletin text for Outlook Express 6.0 Service Pack 1 on Windows 2000 Service pack 4 and Outlook Express 5.5 Service Pack 2 on Windows 2000 Service pack 4.

Microsoft Office Tips & Tricks Sidebar Gadget



The people avidly watching the countdown to Windows Vista most likely remember the "Live Clock" gadget that so many bloggers and webmasters displayed on their sites. I had one in the sidebar here at Security Garden and enjoyed watching the days get closer to the official release of Windows Vista.

As posted in the Windows Experience Blog today, the creator of the "Live Clock" has an Office Tips & Tricks gadget that provides a different tip every day on the Microsoft Office system. I haven't seen a lot of gadgets that I feel worthwhile cluttering the sidebar with, but this is one I definitely plan on giving a try. It is available from LiveGadgets, and added to the Customizing Vista bookmarks.

Adding Congratulations for the MVP Award to the developer!

Firefox 2.0.0.8 Security Update, 18 October 2007

Mozilla released a security update for Firefox, including MFSA 2007-35 and MFSA 2007-29 which are identified as critical.

Release Notes, Firefox 2.0.0.8
If you have Firefox set to "ask" (Tools > Options > Advanced > Update), get the update now rather than waiting for it to be offered. It is as easy as 1, 2, 3:

1. Select Help > Check for updates

2. Click Download & Install Now


3. Click Restart Firefox Now


Since it is that simple, go ahead and update now.

Daylight-saving Time Ends Soon. Is your PC updated?


In March, we all dealt with the first onslaught of changes resulting from the new law enacted in 2005, resulting in daylight saving time starting and ending on a different cycle in both the United States and Canada. In addition to companies using custom scheduling, time calculation or billing applications that are date dependent, this change impacted international companies that interact with servers in North America.

Of course we all know the effect daylight saving changes have on our sleep. At least when November 4 rolls around in the U.S. and Canada, we will get back that hour of sleep we lost in March. We have a lot of clocks in our house that I have to adjust but, what about the computer time? Since I use Automatic Updates, my computer is properly patched for the time change. To confirm that your computer is updated, visit the
Daylight Saving Time Help and Support Center.

Setting Up a Home Network with Windows Vista


The day has finally arrived -- the kids have their own computer for school work, your spouse has a new laptop and you have a remodeled home office. As a result, you are ready to set up a home network. The problem is that you have no idea where to begin, let alone what is needed and how to make sure it is secure.

Microsoft has prepared a series of instructions that will go a long way in assisting you in getting the job done correctly, available from Windows Vista Help:
Should you need some extra assistance, Vista 4 Beginners has some additional tutorials that may come in handy:
While you're at Vista 4 Beginners, you may also want to learn How to setup a Bluetooth connection.

There is so much to learn, I suggest taking it one step at a time. Read all the instructions first, assemble the parts, read the instructions again and start slowly. If in doubt, read the instructions again. Good luck!

Edit 28Oct07:

After you have completed setting up your network, follow the instructions from the Vista Knowledgebase on how to create a Vista Network Map

Edit 01May08:

Added Joel Hruska's "The ABCs of securing your wireless network"as well as the earlier published Wireless Security Blackpaper. From Vista4Beginners are newly published tutorials on How to share a printer with other computers from your network, and How to install a network printer.

Microsoft Security Incident Report Available


Vinny Gullotto reported in the Microsoft Anti-Malware Team Blog that the January-June 2007 Security Incident Report is now available from the Microsoft Malware Protection Center. Before you read Vinny's report, let me familiarize you with some of the acronyms:
  • FCS: Forefront Client Security
  • MMPC: Microsoft Malware Protection Center
  • MSRC: Microsoft Security Response Center
  • MSRT: Microsoft Malicious Software Removal Tool
  • SIR: Security Incident Report
  • TwC: Trustworthy Computing
Changes have been made to the SIR, including new sections and a new look and feel. One statistic I found interesting is that 65% less "potentially unwanted software" and 60% less malware has been found on Windows Vista machines than Windows XP SP2.

Detect Changes to Windows Automatic Updates with WinPatrol

On September 13, 2007, Scott Dunn of Windows Secrets reported
"Windows Update (WU) started altering files on users' systems without displaying any dialog box to request permission. The only files that have been reportedly altered to date are nine small executables on XP and nine on Vista that are used by WU itself. Microsoft is patching these files silently, even if auto-updates have been disabled on a particular PC."
There has been a series of articles on numerous sites about mysterious changes to user Automatic Update settings, many of which are shown below as references. The most likely explanation to the changes in the AU settings is explained by Scott Dunn as attributable to Windows OneCare.

Well, instead of beating the drums, Bill Pytlovany took action. As of the WinPatrol update issued today, WinPatrol 12.2.2007 will alert you if changes are made to your Automatic Update settings. Bill explained the purpose of the update:
"Like most features, the intention is to protect users from changes made by malicious programs. As a side however, it will also detect if Microsoft or one of their applications decide to change these settings without your knowledge.
Also included in this new version will be detection of a few other unique settings like the prefix inserted by your browser (http://). If you don’t include http:// when you type in an address, Windows automatically adds it. If I changed this setting tono matter what you typed into your browser you’d always come to me. Depending on what comes after it, I could display a fake look-alike phishing page and grab your eBay, or Paypal account number."
As a devoted WinPatrol fan, I installed the update, launched the Security Center and selected "Turn Automatic Updating on or off". As you can see from the screen copy below, WinPatrol notified me that a change was detected in Windows Auto Updates (AU), providing the opportunity to prevent the change or restore the previous settings.

For a change intentionally being made to AU, tell Scotty "No" and WinPatrol will leave your changes untouched. However, if some unknown force attempts to change the settings without your permission, merely click "Yes" to give Scotty permission to restore the original settings.

Way to go Bill!

There is so much more that WinPatrol can do to monitor your computer. The WinPatrol update today is frosting on the cake.


Friday, 20 December 2013

Pwn2Own Trifecta: Safari/MacBook, IE8 and Firefox



CanSecWest is underway in Vancouver, British Columbia. A part of CanSec is the Pwn2Own contest. In order to be owned, the competitor must demonstrate both loss of information (user data) and that financial cost would be incurred.

As described by Sarah Blankinship, Microsoft Senior Security Strategist, she said that it is
"a contest that pits researchers against technologies to see whether technology or human wins. It’s also a contest that presents interesting challenges to Microsoft and a contest which you might think Microsoft opposes. Like many other issues in the security ecosystem – it’s not that simple. The contest exemplifies two basic tenets behind the TwC Security teams’ efforts. You can’t hide from the truth (wishing doesn’t make it so) and every issue is an opportunity to learn and improve."
Interestingly, it took seconds for a fully patched MacBook with the Safari browser to be hacked. As described by Ryan Naraine at Pwn2Own 2009: Safari/MacBook falls in seconds:
"Charlie Miller has done it again. For the second consecutive year, the security researcher hacked into a fully patched MacBook computer by exploiting a security vulnerability in Apple’s Safari browser.

“It took a couple of seconds. They clicked on the link and I took control of the machine,” Miller said moments after his accomplishment."
It took longer to perform a clean drive-by download attack against Internet Explorer in what was described as a “brilliant IE8 bug!”, that in the wake of the release of IE8 today at the Mix Conference today. Ryan Naraine's report can be found at Pwn2Own trifecta: Hacker exploits IE8, Firefox, Safari.

In accordance with the contest rules, Tipping Point will be the owners of the vulnerabilities and will not release the details until a patch is ready. Tipping Point will also work with security vendors on expediting patches.

Symantec Ask/IAC "Safe Search" Update




After reading the Safe Search update by Rowan Trollope, Symantec Senior Vice President, and the eloquent response by Don Hanson my response to Safe Search update, I was prepared to write an explanation about why I still cannot recommend Symantec products. However, I could not have explained it half as well as my friend Donna Buenaventura did in the discussion thread at Calendar Of Updates.

You too will have a better understanding of why I feel as I do about Symantec products after reading the references. There are other excellent vendors who do not need to resort to relationships with third-parties in order to sell their product. I encourage Symantec customers to consider a different vendor for their security software. In fact, Avira has launched its new Version. See http://www.avira.com/en/promotion/new_av9.html for information.

I suggest you start with the first article and follow through the list, being absolutely certain not to miss Donna's posts.

IE8 Installation Do's, Don'ts and Resources



Unless you have not been online the past few days, you have already heard the Internet Explorer 8 Final Available Now announcement made at the MIX09 Conference. Internet Explorer 8 is available in 25 languages and is available in 32- and 64-bit versions for Windows Vista, Windows XP, and Windows Server

An updated IE8 will be available for Windows 7 Beta testers as part of the next Windows 7 milestone.

Before installing IE8, review the complete installation instructions and the known compatibility issues listed in the Release Notes. IE8 will be distributed via Automatic Update (AU), Windows Update (WU) and Microsoft Update (MU) sites. For information and screen copies of how AU will work, see IE8 Blocker Toolkit Available Today!

Problems reported at Calendar of Updates:

There is high CPU usage if you use SpyBot Search and Destroy with Immunization. The response by Eric Law, MSFT, was provided in following her report at Internet Explorer 8 Final Available Now:
"@Donna: We have determined that there is a problem with the SpyBot Search and Destroy "innoculate" feature which puts 10000 domains in the restricted sites list.
*** It's possible that this might be causing the performance problems on startup that some folks are reporting here. ***"
Similarly, IE8 will not load fast or it will hang if restricted sites exist in the IE Restricted Sites zone, e.g. using IE-SPYAD or Spyware Blaster.

IE8 Overview:
IE 8 Beta Users:

Although the Release Notes do not specify that it is necessary to uninstall IE8 Beta or RC, it is generally advisable prior to updating to the released version, but not required. Following are the instructions provided by Ed Bott in How to uninstall IE8:
"Microsoft has made a confusing and inconsistent decision in the way it handles IE8 under XP/Server 2003 and Vista/Server 2008.
  • In XP, open Add or Remove Programs from Control Panel, where you will find Windows Internet Explorer under the Currently Installed Programs list. Select its entry in the list and click Remove.
  • In Vista, you won’t find IE8 in the Programs and Features list, because Vista considers IE8 an update. Instead, look for the View Installed Updates link in the navigation pane. (A similar link is available from Windows Update; look in the lower left corner for Installed Udpates.) You’ll find Windows Internet Explorer 8 under the Microsoft Windows category. Click its entry in the list and then click Uninstall.
If you want to remove an earlier IE8 beta or the release candidate, or if you need to install the released version and roll back to IE7 on your Vista machine, you should be able to do so pretty easily at this point.
Update: In the comments, Dan asks whether it’s necessary to uninstall the Release Candidate first. I checked the Release Notes and the IE8 Readiness Toolkit and the Internet Explorer TechCenter and found no indication that uninstalling the older version was required. It is a reasonable precaution, but probably not necessary."

IE8 Installation Instructions:

A. Make sure all necessary updates have been installed first:
  1. Open Windows Update: Click the Start Start button button > All Programs > Windows Update.
  2. In the left pane, click Check for updates, and then wait while Windows looks for the latest updates for your computer.
  3. If any updates are found, click Install updates. If you are prompted for an administrator password or confirmation, type the password or provide confirmation.
    • Note: Install all updates to ensure Internet Explorer has everything needed to install properly.
  4. Restart your computer.
B. Create a System Restore point.
  1. How to set a system restore point in Windows XP
  2. Create a Restore Point for Windows Vista's System Restore :: the How-To Geek
C. Disable your antivirus scanner and any "real-time" protection.

D. Close all open any applications and do not run any other programs during the installation process.

E. If you use a "security suite" or other vendor firewall, disable the third party firewall and enable the Windows Firewall. Reverse the steps after the installation is complete.
  1. How to configure the Windows Firewall feature in Windows XP Service Pack 2
  2. Turn Windows Firewall on or off - Windows Vista Help
F. Download only the official version from the Microsoft site: Download IE8
  1. Begin the process by clicking Run. Depending on your connection speed, the download may take up to a few minutes.
  2. Follow the steps shown in the wizard to choose your settings. You will have to restart your PC once setup is complete.
  3. The first time you open Internet Explorer 8, you’ll be asked to select a few more settings to personalize your browsing experience. Follow the onscreen steps or select Ask me Later to be prompted with these setup questions when you have more time. You’ll only be asked these questions once.
  4. Restart the computer one more time.
No-charge support for Internet Explorer 8 installation, set-up and usage (only) is available via the phone based on your locale through 31 December 2009. Customers must be running Windows XP or Windows Vista in a non-domain environment.

Meet Ciprian -- WinVistaClub Interviews the Interviewer



Ciprian has been having all the fun conducting the interviews. In a turn-about, Anand Khanse (HappyAndyK) decided it was time that we had the opportunity to learn a bit more about the person doing the interviewing.
Meet Ciprian of vista4beginners.com at Windows Vista Help Forum.

Win a Kodak OLED Wireless Photo Frame!



Would you like to win a Kodak OLED wireless photo frame (worth around 800$)? The folks at OLED-Info would love to give you one if you are the winner of the contest. The Kodak photo frame has a 7.6" AMOLED display, 800x480 resolution and a contrast ratio of 30,000:1 (made by CMEL). It has built-in Wi-Fi, 2GB of storage and accepts USB drives or memory cards.

Details for entering the contest are available at OLED-Info Kodak Photo frame contest.

Not familiar with OLED? These days, LCD monitors, camera and cell phone displays are fairly commonplace. However, you may well find a different image in the future -- OLED, organic light emitting diode.

Seeing is believing and if you have not seen an OLED screen, you may want to watch the first few minutes of the video below. (If you are like me, you will enjoy the full 15 minutes.) The contrast between an LCD screen and an OLED screen is, as described in the video, "Kodak OLED - From Any Angle",
"Bold, bright and beautiful. From any angle, the future belongs to Kodak OLED, the enabler of the future display industry."
You have a chance to be part of that future today and own your own Kodak OLED Wireless Photo Frame! There are three ways to enter. Check out the details at OLED-Info Kodak Photo frame contest. The contest is open to world-wide participants.

About the video:
Kodak Organic Light Emitting Diode: "Kodak OLED - From Any Angle" video shows a recent overview of Kodak's key technical advancements, cutting edge Kodak OLED products, and an in-depth discussion from some of Kodak's OLED leadership team on how Kodak's efforts will continue to enable the OLED industry from within both the solid state lighting and flat panel display markets.

ESET NOD32 Smart Security 4.0



Congratulations to WinVistaClub Forum member JonPaulOnLine, the winner of the first ESET license in the 7 license give-away.

There are six more chances to win an ESET license. The current contest runs until 29 March, with the illustrious judges Choto Cheeta and HappyAndyK, with new chances in the following weeks.

If you not yet a member of the WinVistaClub, you can register here for free instantaneously. To enter is simple.
  • Post a tip or tech article in the appropriate forum at WinVistaClub Forum.
  • Prior submissions will not be considered.
  • Entrants must post the link of 1 or more of their entry posts in the Announcement topic. is thread.

Exploit code sends Mozilla scrambling to fix Firefox



I have just a couple minutes to post this before my lunch break is over but wanted to share this report by Ryan Naraine, ZDNet.com, about what is being referred to as a "Zero Day" security flaw.
"Mozilla’s security response team is scrambling to ready a patch for what appears to be a serious security flaw affecting its flagship Firefox browser. The vulnerability, released alongside proof-of-concept code on several security sites, could lead to malicious code execution attacks if a Firefox user is lured to a Web site rigged with exploits. It affects all versions of the open-source browser, including the newest Firefox 3.0.7."

Microsoft DreamSpark: MS Software for Students



As part of the Microsoft Elevate America program, verified students can download Microsoft developer and design tools at no charge.

As reported at Windows Talk Blog,
"This site enables students to download professional-level Microsoft developer tools to advance your learning and skills through technical design, technology, math, science and engineering activities."

Firefox 3.0.8 Critical Security Update



Mozilla has updated Firefox to 3.0.8 version to address two security issues. As of this posting, the Firefox 3.0.8 Release Notes have yet to be updated to identify the issues. However, Bug 485217, that I quickly reported on Wednesday as a "Zero Day" security flaw has been identified as resolved.

Resolved/Fixed: Bug 485217 – Exploitable crash in xMozillaXSLTProcessor::TransformToDoc

Update: Via Ryan Naraine, the second bug fixed in the security update was the drive-by download issue used to win the CanSecWest competition

Use the "Help -> Check for Updates" option to update your browser.