Web blog d'un ingénieur en sécurité informatique. IT Security watcher's blog: news, threats analysis, AV issues, PoC, IT security, bugs... Contact: philippe.vialle@wanadoo.fr
Lors d'une simple mise à jour d'un pilote graphique NVidia, j'ai trouvé intéressant le fait qu'une installation imprévue de Kaspersky s'active, et aille même jusqu'à bloquer la procédure en cours pour Nvidia. La version affichée comme devant s'installer...
Even if you use a NAS to store your files, it does not prevent from deleting files by yourself, as a mistake. Okay so let's open the box, and pick a HDD up. Then use a USB to SATA adaptor, and plug it on a computer. On Win 7 , here is what disk management...
Voici l'avertissement que j'ai eu en me connectant ce soir à l'interface d'administration du blog : Cela me semble un peu surprenant sachant que la machine est un Windows 7, avec IE 9 (version 9.0.8112.16421), et tous les correctifs... Il est donc d'autant...
Message reçu le 20 juin à 6h09 : Vous avez reçu un nouveau message privé. Cliquez ici pour lire votre message. Ce message a été généré automatiquement Crédit Agricole 2011 En fait, le lien pointe sur : http://www.seko-gyoseishoshi. net/.credit-agricole.fr/...
En circulation en ce moment ! Texte du SMS : Vous avez reçu un message vidéo, pour le consulter: http://vvapvideo.com/a4869 Emetteur : +33664844033 On notera la ressemblance entre le "vv" de l'URL et un vrai "w", qui ferait donc "Wapvideo", certainement...
To those who do not speak/read French, the screenshot proves that: - KAV 2011 was updated the 12th of May, 10:40PM - 2 days after that, the 14th of May, 01h40AM, Kaspersky still claims it is up to date! - udpates are automatic, the default and recommended...
Un contact, que je remercie au passage, m'a informé que sa compagne avait eu une petite surprise en voulant choisir "son activité" dans une SmartBox. Par les entêtes HTT P , il semble difficile de déceler si le serveur n'était pas à jour en termes de...
To those who do not read French like easily ;), this screens comes from a Win 7 warning telling me that I should check the editor's identity of the file kav11.0.2.556FR-INT_213_VP.exe. The certficate provided by KLabs to digitally sign the setup of KAV...
While surfing on the web (cf. previous post), I came to download a file that looked suspicious to me: Shopper Report (ShprRprt.exe) Kaspersky Antivirus 2011, fully up to date, did not detect anything. But the problem is if I leave the file on my desktop,...
L'innovation technologique, c'est bien, mais quid de la sécurité de la Freebox v6 ? Commençons par un petit scan Nmap. Voici les options de scan : nmap -p 1-65535 -T4 -A -v -PE -PS22,25,80 -PA21,23,80,3389 192.168.1.254 Résultats nmap : PORT STATE SERVICE...
Don't think only "non-IT people", and above all "non-IT security people" would forget to harden their servers... Even some well know players in Computers security seem to be concerned, such as VirusTotal: What about Squid 3...? and in any cases, hide...
Une fois n'est pas coutume : un peu d'humour sur fond de virologie. Les juristes pourraient certainement parler de parasitisme de nom de domaine... ceux qui ont oublié le français diraient probablement "cybersquatting". Il n'est pas nécessaire (c'est...
Je vais rédiger cet article en Français, vu que le message et la cible sont francophones... :) J'ai reçu un message, et j'avoue que moi le premier j'ai failli me faire prendre. Heureusement, je me suis souvenu que j'avais résilié il y a quelques mois...
...et le mauvais élève du moment est : Finjan ! c'est à dire une société spécialisée dans la sécurité web... Visiblement, les infrastructures de Finjan sont en train d'être reprises par M86Security.... Et voici ce que cela donne quand certaines précautions...
Quite surprisingly, I was not even thinking about writing an article when I set up my Thunderbird for a MS Live mail account. One day, without any notice, I had the following warning: Because I use a 64 bits version (Shredder), there is no locale version...
Encore une fois, il ne m'a pas été nécessaire d'auditer quoi que ce soit pour tomber sur cette page intéressante, lorsque l'on tente de s'authentifier sur le site de Viadeo : En plus du fait que cela n'est pas très "joli", et incompréhensible aux yeux...
I had recently to deal with a compromised computer. It was though supposed to be protected by a up to date antivirus with real policies. The file has been detected using Spybot S&D: ZBot. It's been a long time ago since I did not find a malware which...
Just after the Adobe and French CERTA advisories, I wanted to talk a lil bit about the website that is said to host the Adobe 0day. Here is Adobe's advisory: http://www.adobe.com/support/security/advisories/apsa10-01.html According to Symantec (see: http://www.symantec.com/business/security_response/writeup.jsp?docid=2010-060601-3020-99,...
This is not the first, but I find this case quite interesting. Some PC that were formerly compromised (I don't know the malware details at the time of writing) started around 6PM UTC to send messages to their MSN contacts. Here is a sample of the message:...
I'd heard that Norton (I mean the last version) has improved quite a lot . It is said to be less system resource consuming, and more efficient. On my part, I spent almost 5 years cleaning computers that were supposed to be protected by Norton... (and...
First of all, the problem of you wanna try Firefox 64bits version, is to find a way to download it. I honestly don't even understand why Mozilla did not add any special page on the official Firefox portal, for the 64 bits version! Why so...? don't know....
Recently, a new contact requested me to add her/him as a new MSN one. Even if I did not recognize the address, I accepted the invitation. This was for analysing purpose, I do NOT recommend any people to do the same! Anyway, here is the contact: altagraciatehney09...
A few people I recently met asked me why I do write articles in English, and not (or almost not) in French. Well... the thing is Google Translation is not yet fully functional, and French used to be an international language but things change. So... voila....
As everybody would say, an antivirus is not supposed to take all the system ressources. Taking that into account, I tested ESET Nod on my computers, because I knew it was said to prove quite reasonable memory and CPU usage. Anyway, this was about real...
Well, this is not new, but it is not a reason not to talk about that, I guess. THis time, the supposed online MSN access server is hosted on the domain: come-face-the-truth.com. To be more accurate, I recently received the following MSN message, coming...
