Please visit the LangaList Home Page

Please note: Older issues may contain information that is now out of date.


How To Subscribe and Unsubscribe is at the end of this note. Mailing List Trouble? See http://www.langa.com/help.htm
Questions about the advertisers? See the end of this note. Please also see legal notices at the end of this note. LangaList: ISSN 1533-1156

Please recommend the LangaList to a friend! (And maybe win $10,000 !)

An easier-to read formatted HTML version of this newsletter is available
<a href=" http://www.langa.com/newsletters/2002/2002-03-11.htm ">here</a>

The LangaList
Standard Edition

2002-03-11

A Free Email Newsletter from Fred Langa
That Helps You Get More From Your Hardware, 
Software, and Time Online

Please visit our sponsors and help keep the LangaList S.E. free!

Contents:

1) Feedback on "Ethical Hacking"
2) A New Scumware Source Emerges...
3) ... And An Old Kind Of Scumware Returns
4) "Scanpst"
5) Free Web Server Snooping Tool
6) Want $10,000 To Spend This Season?
7) Last Item On Weird Washings
8) They Loaded The Code
9) How Just About Anything Works
10) Just For Grins
11) Plus! Edition Highlights

 

--- ( Your Clicks On Ad Links Help Keep The LangaList Free! ) ---

--------------( the above is an advertisement )--------------

 

1) Feedback on "Ethical Hacking"

The InformationWeek article on ethical--- and unethical--- hacking is generating a lot of good responses. For example in reference to Herb, the reader who was laid off for using a password revealer, "Sherri" writes:

He had been hurt and was receiving compensation....IMHO he was fired due to the injury and them having to pay for it, using anything at all for an excuse. Should he be determined disabled, then the company would have to pay disability to him. My suspicious side even wonders if he was set up; someone sending in the secretary with a sob story, to what was probably the most computer savvy employee (who they wanted to cut loose). Even computer illiterates know from the media that there are plenty of password breaking programs that are easily found; if this is the only reason offered for termination, it sounds suspicious to me....

Other readers sent in information on additional password tools, such as:

NTAccess can replace the administrator password of a Windows NT, Windows 2000 or Windows XP system by rebooting the computer with a special set of boot disks. This is useful if you forgot the administrator password and cannot access the Windows NT/2000/XP system. ($70; http://www.mirider.com/ntaccess.html

ERD Commander 2002: When your Windows XP/2000/NT system won't boot, ERD Commander 2002 boots the system using the ERD Commander 2002 product CD, right out of the box. Once booted, the easy-to-use ERD Commander 2002 windowing environment provides
numerous powerful tools to diagnose and repair a wide array of problems which could prevent a system from booting. And it provides built-in network support so that you can move data safely off of, and on. ($400; http://www.winternals.com/products/repairandrecovery/erdcommander2002.asp )

... and more. Please come check out the article at http://www.informationweek.com/story/IWK20020301S0004 , and then join in the associated discussion: Does your company let you do more or less what you want with your PC, or are you bound to a rigid set of rules? If your company has an "acceptable use" policy, does it make sense? How does your company handle cases like Herb’s? Have you ever run afoul of a too-restrictive or too vague computer-use policy? Join in!

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

--- ( Your Clicks On Ad Links Help Keep The LangaList Free! ) ---

--------------( the above is an advertisement )--------------

2) A New Scumware Source Emerges...

Dan Freeberg was the first of a number or readers to report the same site:

I got a new kind of scumware for you. You can get infected at www.lop.com . Some how this site was a pop-up on some other site I visited and maybe I clicked on the wrong thing. Anyway, Zone Alarms with the settings I had did not stop it from infecting my computer. So far, what I have found is that it put links to its advertisers all over your computer.

1. It added about five icons to my desktop window that links to their sites.

2. It has caused the accessory bar on IE 5.0 to be implemented with links to their sites. I have not figured out how to eliminate this problem. Turning it off does not seem to affect it because it just shows up again when IE is re-launched.

3. What really tees me off is that it has added favorite folders and sites to my favorites file on IE. This is not just one or two but many including an Adult folder with 8 sites and a Gambling folder with 9 sites. A "On Lifestyle" folder has 12 sites and 3 folders with an additional 10 sites.

Several things may help. First, we've covered "home page hijacking" before, and the fixes we've discussed might help break Lop's grasp on your system:
http://search.atomz.com/search/?sp-a=0008002a-sp00000000&sp-q=hijack

We've also covered Scumware in general, and anti-scumware resources, at http://search.atomz.com/search/?sp-q=scumware&sp-a=0008002a-sp00000000

And here's a new (to me) anti-scumware site http://scumware.com/ (suggested by reader Chet Kolar).

Thanks to all who wrote in!

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

3) ... And An Old Kind Of Scumware Returns

We've written previously about software that abuses your "Hosts" file:

The Hosts file is mainly meant to be used on a LAN; it tells your PC the fixed numeric address of the internal server--- Host---  you need to connect to. But some less-than-stellar internet speedup software tries to shave a few fractions of a second off your Internet connections by placing the numeric IP of external web sites in the Hosts file so your browser won't have to look up the name and address externally. This works---as long as the site's numeric IP address never changes.

But IP addresses *do* change--- and they're supposed to be able to. The Web operates via "dynamic" naming, where a human-friendly name (such as "www.langa.com") is actually an alias for a numeric address (in this case, 64.41.108.95). The numeric address can and will change from time to time as a site is moved or reconfigured.

People with out-of-date addresses hardwired into their Hosts file can no longer connect to any site whose address has changed--- the Hosts entry is permanently pointing them to a dead location!

There's lots more information on Hosts file abuse at
http://search.atomz.com/search/?sp-a=0008002a-sp00000000&sp-q=evil+hosts . But the reason I bring it up now is a note from frequent contributor Suresh Ramasubramanian that discussed a new twist on that technique:

It's a fake email greeting card notification that contains a link you're supposed to click to see the actual card. But when you click on the link, you get an error message saying something like "Sorry, We are closed for scheduled maintenance. Please come back in a few hours to view and send your postcards."

The error message is fake. What really happens is that the page runs a script that creates a new Hosts file that associates the names of many popular sites--- hotmail, yahoo, google, microsoft, icq, msn, netscape, aol and dozens of others--- with the numeric address of a spam/p o r n site: Any time you enter, say, "www.microsoft.com," the Hosts file kicks in and substitutes the spam/p o r n address, and your browser then obediently takes you there instead of to the site you intended.

Good anti-scripting security will prevent the script from running in the first place. But here's how you can recover from this or any kind of Hosts file abuse:

If you have trouble connecting to a site you know should be there, or if a site that should be OK is delivering content you know is not normally part of that site, use NotePad to examine the contents of your Hosts file in the Windows directory.

If you're on a LAN, your system administrator can tell you if you really need entries in the Hosts file, and what they should be; delete any others. And if you're not on a LAN, chances are you don't need the Hosts file at all. Rename it HOSTSBAK or something similar, reboot, and see what happens. Chances are, the only thing that will change is that you may be able to connect to sites that were giving you trouble. But, if it turns out you do need the Hosts file, just rename it back to Hosts.

If you wish, you can also try setting your known-good Hosts file to Read-Only, so no software can alter it without your knowledge.

(By the way, HOSTS.SAM is a fake sample HOSTS file placed in the Windows directory by default. It's not involved in any of the foregoing; you can ignore it.)

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

--- ( Your Clicks On Ad Links Help Keep The LangaList Free! ) ---

--------------( the above is an advertisement )--------------

4) "Scanpst"

Fred, I'd like to pass along a situation I experienced this morning when I realized my Outlook PST file had become corrupt. I realized just how reliant I am on Outlook! I track everything from contacts to tasks to appointments, the works! Outlook informed me to run the Inbox Repair Tool on my PST file in an attempt to repair it. That's great, but where was the repair tool? I searched the Outlook help file and even the standard Windows help file for information about the repair tool. Nothing turned up!

Fortunately, I had a backup of the PST file and proceeded to copy it onto the hard drive from a CDRW disc. I backup at least once a week all my pertinent data. Murphy's Law...the disc turned out to have irrecoverable errors and returned errors reading the disc! The file would not copy!!

I finally turned to Google to search for the tool and the very first link directed me to Microsoft's site ( http://support.microsoft.com/default.aspx?scid=kb;EN-US;q197315 )  which informed me that the repair tool was named Scanpst.exe and was located in the Windows folder. I ran the app and it repaired the file. Talk about the long way around.

I am now going to use only CDR's for my backups and now copy my entire My Documents folderto my D drive everyday as a precaution.

Moral When you make a backup, test a few of the files before assuming the backup is good! Best Regards, Larry W.

Thanks, Larry. That's one of the drawbacks with CDRWs, or any disk that's repeatedly re-used, because wear-and-tear can create read errors. This is also one of the reasons why I prefer one-use CDs for backups--- the odds of read errors developing are reduced. (But even there, it's wise to test your backups from time to time.)

In any case, the tip about SCANPST is one I'm sure many readers will snap up. Thanks. 8-)

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

5) Free Web Server Snooping Tool

Hey Fred, I came across this site the other day; found it to be very interesting and thought you and some of your readers might think the same.

Check it out here: http://netcraft.com/  They report a site's operating system, web server, and netblock owner together with, if available, a graphical view of the time since last reboot for each of the computers serving the site.  Thanks and keep up the GREAT work! I am absolutely thrilled with each and every LangaList Plus edition that I receive. For once, I really do "get more than I paid for!" --- Jeff Jost

Thanks Jeff, for the kind words and the pointer.

Netcraft looks like a normal search engine at first, but the links near the logo (at the top of the page) make it different: That's where you can access the "what's that site running?" functions and statistics. You can ask it for information on any public site. (If you'd like guinea pigs for two different site types, check out www.langa.com ---a Linux/Apache-based site--- and www.langalist.com--- a Windows2000/IIS-based site.)

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

6) Want $10,000 To Spend This Season?

The Recommend-It site gives away up to $10,000 as an incentive to use their service to recommend newsletters like this one!

If you think the LangaList is a worthwhile read, just use the following link to recommend the LangaList to a friend. Your friend just may find a new source of useful information; I just may gain a new subscriber; and you just may win $10,000 or other prizes from the folks at "Recommend-It:"
http://www.recommend-it.com/l.z.e?s=143182

Or, win a no-strings $30 Gift Certificate for any item at Amazon.Com--- books, software, hardware, kitchenware, toys... and more. (Full details also available via this link): http://www.langa.com/recommend.htm

Either way, thank you, and good luck!

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

7) Last Item On Weird Washings

OK, we've just about beaten to death the subject of washing your electronic gear ( http://search.atomz.com/search/?sp-q=washing&sp-a=0008002a-sp00000000 ). This week's batch of emails brought in a story from a reader whose cell phone had died after being dropped into a muddy puddle; a careful disassembly and washing (after removing the battery) brought it back to life.

But perhaps this item is more generally useful:

Once, back in the early days of CD-ROMs, I had a brand new disk that my drive just could not read, so I called Customer Service at the (noted large antivirus) software company that produced the product to request a new disk.

The rep asked, "Have you tried washing it?" Of course I hadn't. He suggested a dot of liquid dishwashing soap and some warm (not hot) water; rub gently; rinse thoroughly and dry. Damned if it didn't work!

I've since used this on several skipping audio CDs, and even another data disk and it's worked every time. He believed the factories producing the disks skimped on the rinse, leaving something on the disks that reflected the laser just enough to mess things up. Sounds reasonable to me.

All I know is, it's worked enough times that it's now the first thing I try when I get a disk error. -- Al Lowe

Thanks, Al. The data on a CD is actually on the *top* side of the disk, beneath the label. The bottom of the disk is just clear plastic. If anything causes haze or spots or scratches on the clear plastic, the CD drive's laser can't see up to the data bits, and the CD won't read properly.

Gently cleaning or polishing any optical imperfections off the clear plastic underside of a CD often is all that's needed to restore it to full functionality, as long as the top of the disk--- where the actual ones and zeros are written--- isn't harmed. (For more info on CDs, see http://www.informationweek.com/story/IWK20010719S0003 )

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

8) They Loaded The Code

Do you have a home page or website? (It doesn't matter what size.) Please click over to http://www.langa.com/code.htm , and maybe you can join the hundreds and hundreds of LangaList readers who have "Loaded the Code!" (If you've already "Loaded The Code" and are wondering if your site will appear here or on the Langa.Com web site, please see http://www.langa.com/link.txt )

Speaking of which: Here's another eclectic sample of reader sites--- some professional, some very personal:

View A Randomly-Chosen Reader Site
http://www.langa.com/randomlink.htm

Manually Browse All Posted-to-Date Sites Starting At
http://www.langa.com/readersites.htm

Tech Fool
http://deanrich.home.attbi.com/

Pane In The Glass (blog)
http://nexstep.blogspot.com/

Rick's Web Cam
http://www.rangerrick102.camarades.com/

Tennessee Real Estate
http://www.lorybreckler.com/

Radio-Controlled Cars
http://www.epiovani.cjb.net/

Pho Consulting
http://www.phoconsulting.com/

Travel Ascending
http://www.travel-ascending.com/welcome.htm

Simple Page O' Links
http://members.cox.net/nfmcptsales/

BSA Pack/Troop 324
http://www.bsa-packandtroop324.org/

Port Glasgow
http://www.portglasgow4u.co.uk/

'in·fo·tain·ment'
http://www.bmgwebdesign.com/

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

--- ( Your Clicks On Ad Links Help Keep The LangaList Free! ) ---

--------------( the above is an advertisement )--------------

9) How Just About Anything Works

If you have never seen this web site, watch out!!! it will suck *A LOT* of your time! it is *VERY* well done with brief, simple explanations and *EXCELLENT* animations. This is definitely one of the great internet success stories.

main page http://www.howstuffworks.com

Be sure to read his HOW 'HowStuffWorks' WORKS article at  http://www.howstuffworks.com/hsw.htm

Just a few computer related articles...

How a PC Works http://www.howstuffworks.com/pc.htm
How CD Burners Work http://www.howstuffworks.com/cd-burner.htm
How Computer Viruses Work http://www.howstuffworks.com/virus.htm
How Ethernet Works http://www.howstuffworks.com/ethernet.htm
How IDE Controllers Work http://www.howstuffworks.com/ide.htm
How Internet Search Engines Work http://www.howstuffworks.com/search-engine.htm
How USB Ports Work http://www.howstuffworks.com/usb.htm
How Wireless Networking Works http://www.howstuffworks.com/wireless-network.htm

and its not all computer related. other categories are automotive, body & health, home & garden, money, etc. --- mike champion

Thanks, Mike.

The site is one of those things where you'll either love it and want to poke around a lot, or you'll spend two minutes, shrug your shoulders, and never go back. I'll admit it: I stayed somewhat more than two minutes. <g>

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

10) Just For Grins

As I write this issue, Microsoft is back in court, trying to work out the final elements of the anti-trust case.

Valerio Meliga was the first reader to send along a link to a wonderful satire entitled

"SURPRISE SETTLEMENT EVENLY SPLITS MICROSOFT;
ONE FIRM TO MAKE SOFTWARE, OTHER TO MAKE PATCHES."

It goes on to say:

In a surprise settlement today with nine U.S. states, Microsoft agreed to be split into two independent companies — one that will continue to make Microsoft operating systems, browsers, and server software, and another, potentially larger company that will make patches for Microsoft operating systems, browsers, and server software.

...J.P. Morgan analyst Sherill Walk suspects another motive. "Considering the sheer number of patches we're talking about, I think the new company will become another monopoly...

See the whole delicious piece at http://www.satirewire.com/news/jan02/patchsoft.shtml .

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

--- ( Your Clicks On Ad Links Help Keep The LangaList Free! ) ---

--------------( the above is an advertisement )--------------

11) Plus! Edition Highlights

  • Excellent, independent Support Site
  • Another Free Process Viewer/Killer
  • LangaList Archive Update En Route

Today's LangaList Plus! Edition contains all ten items above, plus about 30% more content including: A free and excellent resource for help, downloads, patches, and other info; a free process viewer/killer that lets you drill down below the level of running tasks; and info on a coming update to the LangaList help file & archives that's available to all Plus! subscribers. This one will include all the LangaLists ever published from1997 through last week, all in one compact file you can place on your hard drive for fast, local searches.

Plus! Edition info: http://www.langa.com/plus.htm 

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

See you next issue!

Best,

Fred
(fred@langa.com)

Please recommend the LangaList to a friend! (And maybe win $10,000!I)

An easier-to read formatted HTML version is available in the "Current Issue" section of http://www.langa.com.  (The HTML version of each issue normally is available by 9AM EST [UT-5] of the issue date.) All past LangaList issues are also available at the Langa.Com site.

return to top of page


Administrivia:

UNSUBSCRIBE: From the same email account you used to sign up with), send an email to
unsubscribe-langalist@lyris.dundee.net

SUBSCRIBE (it's free!): Create and send a new email to
subscribe-langalist@lyris.dundee.net

CHANGE ADDRESS? LIST TROUBLE? HAVE QUESTIONS? OTHER PROBLEM? NEED HELP? See http://www.langa.com/help.htm

This is a 100% OPT-IN newsletter: See http://www.langa.com/info.htm

About the advertisers: http://www.langa.com/privacy.htm#ads

Disclaimer: http://www.langa.com/legal.htm  In brief: All information herein is offered as-is and without warranty of any kind. Neither Langa Consulting LLC, nor its employees nor contributors are responsible for any loss, injury, or damage, direct or consequential, resulting from your choosing to use of any information presented here.

This newsletter is a service of Langa Consulting LLC and is Copyright © 1997-2005 Fred Langa/ Langa Consulting LLC. All worldwide rights reserved. LangaList: ISSN 1533-1156

return to top of page


Please visit the LangaList Home Page