New Recycling Partner for cat-man-du Green

June 22nd, 2009

After a brief search, cat-man-du Green has found a non-profit willing to pick-up the large amounts of donated computers and other electronic waste that have been piling up in the cat-man-du offices and recycle them properly. cat-man-du contacted the Amarillo Downtown Women’s Center after hearing very helpful suggestions from the community in response to our plea for help. Even after the indefinite shutdown of Goodwill, our previous recycling partner, cat-man-du continued taking donations from the public in the hope that unwanted technology would not end up in landfills. Electronic waste contains harmful pollutants, such as lead and mercury, which are harmful to the environment, and cat-man-du has a strict zero-landfill policy. “We adopted our zero-landfill policy because of our commitment to the environment and our beliefs,” commented Ray Wilson, President and CEO of cat-man-du. The Downtown Women’s Center is a local non-profit that specializes in helping homeless women and their children. The DWC will reuse the working components they receive. They have promised to adhere to cat-man-du’s request to keep the waste out of landfills and find a responsible way to dispose of the unwanted hardware.

For more information, you can visit the cat-man-du Green website at:

https://cat-man-du.com/green/

cat-man-du Announces Upcoming Amarillo Office Move

June 9th, 2009

cat-man-du will be moving its Amarillo operations from 3706 Mockingbird to 8501 SW 34th this July. cat-man-du is very excited about this move, as the new location is in a more visible and convenient location. The new office is hard to miss, with a large statue of an elk and a waterfall out front. This location will also enable cat-man-du to better serve its clients with more room for technology-related merchandise, seating and technician space. cat-man-du also plans on having a learning center where clients may bring their computers, pull up a chair and have an experienced technician show them how to perform tasks they have found problematic or confusing. “Some of the most exciting things about the new location will be our ability to perform one-on-one training as well as a larger room for classes,” said Ray Wilson, President and CEO of cat-man-du. “We will be adding to the value our customers get from in-house repairs by allowing for more space and better check-in and check-out procedures. I am also pleased to announce the fact that half of the 3,720 square feet will be designated for new computers as well as computer parts and accessories.”

cat-man-du is not just a service and repair company - our team includes experts in programming, web design, cabling and data recovery. After the Amarillo office move, cat-man-du will have moved and expanded all three offices during the past two years. Each cat-man-du office plans on continuing growth in the next two years and beyond. cat-man-du will later announce the date for the grand opening celebration and the 6th anniversary celebration.

cat-man-du Seeks Help for Recycling Program

June 4th, 2009

cat-man-du is faced with a recycling dilemma, and we are asking for your help. cat-man-du has a division dedicated to the proper recycling of technology waste: cat-man-du Green. In the past, cat-man-du Green was partnered with Goodwill to recycle unwanted or donated technology from anyone who would drop items off at one of our offices in Amarillo, Canyon or Dumas. Hardware that had not yet passed its useful end-of-life was used to build computers that could be re-sold by Goodwill to support their operations. Hardware that had already passed its useful end-of-life would be broken down to base components and was properly disposed of by Goodwill. As you have likely learned by now, Goodwill has closed its doors indefinitely. cat-man-du refuses to throw the waste and donated computers in the landfill and is still taking unwanted technology at no cost. We continue to take these donations in fear that if we do not take them, the technology will be thrown into the landfill. As a result, all three cat-man-du offices are quickly filling up with computer products with nobody to take them, and we are running out of space. “We adopted our zero-landfill policy because of our commitment to the environment and our beliefs,” said Ray Wilson, President and CEO of cat-man-du. “We can’t see going back on that commitment now. Goodwill was our partner and friend in this.” This is why cat-man-du is asking our clients, friends, business partners and our community for help, suggestions, donations or other assistance. If cat-man-du were provided with a trailer or storage unit, we may be able to either keep storing these parts until a local partner can take them or drive them to Dallas to be recycled. Some of these computer parts are still working and have some value, but we need all these materials disposed of. If another organization were to take these donations, they would have to take all donations, and any unwanted parts would need to be recycled properly and not thrown into the landfill. Computer parts may contain harmful and hazardous materials such as mercury, lead, and hexavalent chromium. If improperly handled or discarded, these toxins can be released into the environment and harm plant, animal and human life. If you or anyone you know has a solution or can help, please contact cat-man-du. For more information, you can visit the cat-man-du Green website:

https://cat-man-du.com/green/

Newsletter for June 2009

June 3rd, 2009

Marketing Your Business through Social Networking

cat-man-du CEO Ray Wilson will be instructing a class on how to create more awareness for your business through social networking on the Internet. Each social networking site is unique, with a different structure and culture. This class will explain the differences between sites such as LinkedIn, Facebook and Twitter and how they may help your business. Social media is becoming a popular tool for business promotion. Find out why from cat-man-du’s social networking expert. This event will take place on June 4th from 8am to 12pm at the Business & Industry Center at Amarillo College on 1314 South Polk Street. Tickets are $39.00 per person and can be purchased on the Amarillo College website at:

http://www.actx.edu/ce/index.php?module=article&id=11

Use System Recovery with Caution

cat-man-du has seen a rise in the number of clients bringing in their computers after utilizing their system recovery disc or startup option. System recovery tools are useful in some situations, but are by no means a cure for all computer problems. System recovery tools will reset your computer’s software to the exact state it was in the day you bought it. Any alterations since then may be erased, often including all data that has been added. This includes all programs you have installed since the day you purchased the computer. Using your system recovery tool is easy, but make sure to proceed with caution. If you are thinking of using your system recovery tool, contact your local cat-man-du office first to learn about your options and risks. Just remember that once you use your system recovery tool, your data and programs may be gone forever.

Valuable Coupons from cat-man-du

We would love to hear from you! Fill out our survey and you will be rewarded with valuable coupons worth up to $109. Tell cat-man-du how your experience with us was and we will give you a free diagnostic coupon and a coupon for $10 off of a memory upgrade. Filling out our survey is quick and easy. Just go to cat-man-du.com and click on the i=matter box in the middle of the home page. The survey should take you less that 5 minutes. After the survey is complete, you will be given your coupons - just print them out and bring them in!

Still No Fix for Mac Java Vulnerability

May 22nd, 2009

Back in December, Sun released a fix for its popular Java virtual machine, which is used by programs and websites everywhere to run on Windows, Mac and Linux systems, often right inside an Internet browser. The flaw that Sun corrected allows an attacker to perform any action they want on a vulnerable machine, and all they have to do is get a victim to visit a web page to do it. In many ways, this is the worst kind of client-side security flaw.

Apple provides Java on every Mac OS X system, but has not yet released an update that includes this fix, so every computer running Mac OS X is still vulnerable. Apple has yet to answer the question of when they will release an update to correct the problem. Apple has also not specified which versions of Mac OS X will receive such an update. The only defense is to disable Java, which can break any other website that requires it. Java and JavaScript are not to be confused - disabling JavaScript will not protect against this problem. The flaw will affect Safari, Firefox, Camino or any other Internet browser on Mac OS X that can load the Java plugin.

The flaw itself is not specific to Mac OS X, but updates have been release for Java on Windows and Linux, so users that have updated Java since December are protected. Until a fix for Mac OS X is released, cat-man-du encourages all Mac users to disable their Java plugin.

If you are running Mac OS X, and would like to see a demonstration of this flaw, a proof-of-concept example can be found here:

http://landonf.bikemonkey.org/code/macosx/CVE-2008-5353.20090519.html

The SANS Internet Storm Center has a post on the issue here:

http://isc.sans.org/diary.html?storyid=6442

cat-man-du Welcomes Shelby Wilson to the Team

May 21st, 2009

cat-man-du is happy to have Shelby Wilson as an addition to our team. Shelby is a graduate of Texas A&M University in College Station and lacks only 9 hours for his Master’s degree at West Texas A&M University in Canyon. He has been working in Information Technology for 5 years, working different positions in PC and network support, AS/400 operations and as a programmer/analyst. Shelby has knowledge of all current Windows operating systems, MS-SQL databases and digital document imaging systems. He has been programming on the Internet since he was a teenager, including experience with VB.NET, VBScript, Java and HTML. Shelby’s wife, Liz, also has her Master’s in speech communication and works at Ascension Academy in Amarillo.

Windows Small Business Server 2003 Severe Vulnerability

May 18th, 2009

A vulnerability in the web server component of Windows Small Business Server 2003 has been found that will let hackers download and upload files to and from the server, bypassing password protection. This component, Internet Information Services (IIS) version 6.0, can also be found on other Windows Server 2003 versions. Microsoft has not released a fix for this issue and there is no information on if or when one will be made available.

Because there is currently no fix available, there are only two ways to protect your Small Business Server. You can block all access to the web services at your firewall, or if you have a cat-man-du security appliance, we can configure it to filter the traffic and prevent exploitation of the vulnerability. This workaround is currently the only known way to protect a server without completely blocking access.

Once an update is released by Microsoft for this flaw, we will need to update your server and reverse this work around on your security appliance.

The initial fix will take 2 billable hours to complete, and the “undo” and update will take 1 billable hour, provided there are no other issues to be addressed.

In 2001, a very similar vulnerability in older versions of IIS led to a widespread worm attack. This vulnerability is extremely new, and so no worms have emerged yet, but it is likely that worms will arise to exploit this vulnerability in large-scale attacks.

More information on this vulnerability can be found here (we will also be sending out an emergency news bulletin to those who subscribe to our mailing list):

http://blog.zoller.lu/2009/05/iis-6-webdac-auth-bypass-and-data.html

If you do not have a cat-man-du security appliance, you will need to speak to your cat-man-du technician about temporarily disabling access to your web services and purchasing a cat-man-du security appliance to protect you from this and other threats. Most common routers, such as those from Linksys, Netgear, Belkin, D-Link and Cisco, do not have the ability to filter against this flaw.

Update
2009-05-19 06:43 CDT
Microsoft has posted a Security Advisory regarding this issue:

http://www.microsoft.com/technet/security/advisory/971492.mspx

It has also been determined that IIS 5 and 5.1 may also be affected. There are a number of mitigating factors that may reduce the risks, but the full potential of this vulnerability has not yet been determined, and risks may be higher on systems that are not fully updated or which have customized configurations.

Facebook Under Fire

May 15th, 2009

Social networking sites, particularly leaders Facebook and Twitter, are coming under bigger and more organized assaults from criminals seeking to steal personal information, infect computers or otherwise abuse their networks for illegal gains.

Recently, Facebook users have been faced with an onslaught of attacks by criminals compromising accounts to steal account names and passwords and to spread malware[1]. As they compromise accounts, they send messages to their victim’s friends, to trick those friends into visiting fake Facebook pages that ask for login credentials. Since the messages appear to come from friends, unsuspecting visitors plug in their usernames and passwords, which are collected by the attackers to use however they please. This newly-heightened onslaught of phishing attacks joins the recent spread of the Boface.BJ virus in targeting Facebook users. Facebook has been actively disabling compromised accounts to combat the spread and urging users to take precautions to avoid becoming victims[2].

As part of their strategy to stem the abuse of their network, Facebook has announced “Verified Apps”[3], a new feature of their Application Directory that aims to deliver a safer collection of third-party applications to users.

[1]
http://blog.facebook.com/blog.php?post=81474932130

[2]
http://www.facebook.com/security?v=wall&viewas=0

[3]
http://developers.facebook.com/news.php?blog=1&story=244

Newsletter for May 2009

May 12th, 2009

Faulty Graphics Processor the Culprit for Failing Notebooks

Thousands of HP and Dell notebook owners have experienced the frustration of realizing that their new notebooks are doorstops just a few months outside of the standard 1-year warranty. Some believe that these companies have somehow devised a way to make this happen on purpose, like a timebomb set to go off just outside of the warranty. Many people have little choice but to speculate as to why their notebooks, along with several hundred others like them, would fail two or three months outside of the warranty. The real reason for this issue, however, is the Nvidia graphics processor, which is overheating enough to fry the motherboard. According to Nvidia, the failure rate of these chips is so high that the company had to take a $196 million charge against their earnings in the second quarter of its 2008 fiscal year, in anticipation of the money it would take to cover the reimbursements they may have to pay. Nvidia did ultimately release another chip without this particular malfunction, to be put into the newest versions of Dell and HP notebooks.

Especially frustrating to owners of these notebooks is the initial behavior of Dell and HP. According to Windows Secrets, they have either charged their customers for the repairs or refused to service them at all because they were past the warranty service. Allegedly, they also continued to sell more notebooks containing the faulty chip long after they became aware of the problem. These notebooks failed at 18 months on average, shortly after the warranties had expired. Many owners called Dell or HP and yelled at telephone support technicians that did not have the power to resolve the issue. Of course, yelling at the technicians got these customers nowhere, and as a result, some customers came up with another way to get HP and Dell to hear their complaints. They created blogs, such as one called “HP Lies”, and they explained their displeasure on the Internet to get some attention. These heated blogs pressured HP and Dell to list the defective model numbers on their websites and extend their warranties for that specific problem. Instead of recalling these defective products, they sent out a “patch” for the problem, according to Windows Secrets. This “fix” caused the notebook fans to run continuously to try to cool down the graphics card that was still overheating, sucking the battery life from the notebooks and slowly melting the motherboard anyway. This is leaving customers even more angry and frustrated. If you own a Dell or HP and think it may have this issue, bring it in to cat-man-du for a free check and some free advice.

Follow Us on Twitter

cat-man-du is now on Twitter, and you can follow us for more tips and information as it emerges! If you are wondering what Twitter is, it is a social networking site where people answer the question “what are you doing?” It is easy to create an account, and it can be plenty of fun. To get started, visit twitter.com and create your account, then visit our page to follow us:

http://twitter.com/cat_man_du

Friendly Reminder for Website Owners

If you have your own domain name, such as a “.com”, “.net” or “.org”, you must renew that domain name with your domain name registrar before it expires. Domain names can be registered or renewed for a minimum of one year and up to ten years. Once your domain name expires, anyone else may take it. Once that happens, you may not be able to get it back, or you may be forced to purchase it from the new owner at a highly inflated price. It is important to keep track of who your registrar is and when your domain name expires. You must also watch out for scammers that may try to trick you into paying them, instead of your actual registrar, for your domain services. Even if you have purchased website services from cat-man-du, you are still responsible for maintaining your domain name. If you need help managing your domain name, or if you are not sure who your registrar is or when your domain name expires, contact cat-man-du for assistance.

Newsletter for March 2009

March 31st, 2009

Fake Anti-Virus Continues to Pay Off

Criminals are making a killing by redirecting Internet surfers from legitimate websites to sites that install harmful software. A person will be surfing a legitimate site of some kind, when they are suddenly redirected to a cyber-criminal’s malicious software site. Typically, this software displays a message saying that your PC is infected and encourages you to buy their fake anti-virus software. If the criminal is lucky, the person will try to buy this software, often for $50 or more, with their credit card. Then, not only do these crooks make $50, but they also have the credit card information. Any software that they then provide is usually no good.

Finjan, a firm that specializes in corporate web security, came across a traffic management server in the Ukraine that criminals were using to keep track of the number of redirects to their malicious sites. Finjan discovered that between 7 and 12 percent of people exposed end up installing the malicious software, and about 1.79 percent of people with infected computers are giving scammers $50 or more for the bogus software. Aside from the money and credit card information for future “transactions,” they also get 9.6 cents from their “affiliate network” for every legitimate website redirect to their site. According to Finjan, during the 16 days they monitored the network, there were about 1.8 million unique users redirected to the harmful site, which equals about $10,800 per day for these criminals.

Researchers at Finjan have not figured out how these legitimate websites have been compromised. They do know that once these websites are compromised, these cyber-criminals use typos and popular keywords or phrases to get their compromised sites high on the search engine result lists, thus making it more likely that someone will click on a site with their malicious software attached.

We are still seeing a large number of computers affected by of this type of attack in our cat-man-du offices, so please do not give any pop-ups your credit card information and call cat-man-du immediately if you see one. Your computer may already be infected if you have seen a pop-up of this nature. Please continue to be careful when surfing the Internet. cat-man-du recommends Firefox for its safety features. Also, make sure your anti-virus is fully updated and that your Windows updates are applied.

cat-man-du a finalist for the BBB Torch Awards

cat-man-du was again a finalist at the Better Business Bureau’s Torch Awards for Market Place Ethics. The Torch Awards were started by the Better Business Bureau to recognize businesses with outstanding ethics and repeated customer satisfaction that promote a fair marketplace. Once a business is nominated, the company must go through a thorough review of their business practices by five West Texas A&M professors that were chosen to be judges. This year, there were four categories; small business, medium business, large business and non-profit. cat-man-du was one of the four finalists in the medium business category. cat-man-du has been a member of the Better Business Bureau for three years and has not had a single complaint filed. We would like to thank all of our clients that sent us referral letters to help in this process, we were a 2009 Torch Award for Marketplace Finalist because of you!

Beware of April Fools Worm

Security teams are doing what they can to prepare for an event that comes around only once a year - April Fools. Malware authors love to release some of their deadliest wares on this day, even when we see it coming. This latest attack, labeled by some security experts as “Conficker”, could be the most damaging we have seen in years. Conficker is spreading further every day, but we do not really know how bad it will be until April 1st arrives. According to Yahoo Tech News, what we know for sure is that, on April 1st, infected computers will come under the control of a master computer that could give them any instructions. These hijacked computers could steal data, scramble hard drives, shut down machines or attack other computers - only the criminals behind it know for sure.

Microsoft has placed a quarter-million-dollar bounty on the writer of the worm, which means security teams are racing to find this criminal, or a patch, before it is too late. “Some security experts estimate 10 million computers have already been infected worldwide. Now Conficker is lying dormant, waiting for April 1st, when it will ask for further instructions,” said Ray Wilson, President and CEO of cat-man-du, “This means that no one in the industry knows what it will do once those instructions are given. This could be the worst worm ever or the biggest dud ever.” Many of these criminals are never found, especially when they are in a country that does not actively fight Internet crimes.

One of the largest problems that security teams have found with this particular worm is that it uses a large number of URLs to hide its tracks and to communicate with its peers. The first version, Conficker.A, used about 250 URLs each day, and security teams were able to individually find and disable or buy these URLs, but this version may use up to 5,000 URLs, a number which cannot be tracked or disabled.

In January of 2009, the first Conficker worm made headlines as it infected over 9 million computers, according to Yahoo Tech News. This upcoming Conficker storm will be in its third, and therefore most sophisticated, variant. To protect your computer, make sure your Windows and anti-virus updates are applied, as Conficker may have disabled them if your computer is infected. Microsoft has released updates to fight the spread of Conficker, and these updates are available through Microsoft Update and Automatic Updates. If you believe your computer may be infected, seek professional assistance immediately. The cat-man-du team has experience in removing Conficker and all other malware infections and can remove Conficker without reintalling Windows. Additional information is available from the US-CERT Cyber Security Alert SA09-088A:

http://www.us-cert.gov/cas/alerts/SA09-088A.html

Microsoft has set up an article covering Conficker’s progress and defense details:

http://technet.microsoft.com/en-us/security/dd452420.aspx