The M&W Mayhem News Wire EXTRA EDITION BACK TO RACING NEWS

**BULLETIN 04.27.06** EBAY WARNING

Systems Affected The eBay web site may contain pages that affect various web browsers. Overview A vulnerability in the eBay web site may allow an attacker to steal personal information from eBay customers. Solution Verify the legitimacy of eBay web pages Attackers may use the vulnerability to perform a phishing attack. Make sure that the URL is accurate, and check the web site certificate to make sure that you are visiting an authentic eBay web page. Description eBay allows users to incorporate a type of code, also known as scripting, into the auction descriptions on its web site. An attacker can use this code to modify pages on eBay's web site or redirect you to a malicious web page. These may appear to be legitimate eBay web pages that request personal information. Using these techniques, an attacker may be able to collect your passwords, credit card numbers, or other personal information.

**UPDATED** PROTECT YOUR COMPUTER

REMEMBER      PLEASE KEEP YOUR COMPUTER SAFE...FOLLOW THE STEPS BELOW AND DO NOT LET UP WITH THE UPDATES BECAUSE IT IS A SURE BET THE HACKERS WON'T BE SLOWING DOWN ANYTIME SOON! I have written the following to help others, through my own experience, avoid getting some of the damaging files set to attack our computers every time we use the internet. If, after reading this , you have any questions please feel free to drop me a note. To keep your computer protected use the following FREE programs on a regular schedule (FREE) BEST ANTI VIRUS.....CLICK TO DOWNLOAD (FREE) AdAware (NEW VERSION)......CLICK TO DOWNLOAD (FREE) SPYBOT SEARCH AND DESTROY......CLICK TO DOWNLOAD (FREE) STINGER VIRUS REMOVER......CLICK TO DOWNLOAD I believe it is necessary to keep your computer up to date with the lastest releases from microsoft to help slow down the hackers. If only the hackers would send out files that fixed our computers instead of disabling them. Remember to keep your computer as protected as possible: 1) INSTALL ALL OF THE MICROSOFT UPDATES AS SOON AS THEY COME OUT 2) INSTALL, THEN UPDATE AND RUN AVG ANTIVIRUS DAILY NOTE!! (TESTING HAS SHOWN NORTON AND McAFEE ARE NOT AS EFFECTIVE AS AVG) 3) INSTALL, THEN UPDATE AND RUN SPYBOT 2-3 TIMES A WEEK (MORE WILL NOT HURT) 4) INSTALL, THEN UPDATE AND RUN AdAWARE 2-3 TIMES A WEEK (MORE WILL NOT HURT) 5) DOWNLOAD AND RUN STINGER JUST TO MAKE SURE ( I RUN IT EVERY FEW DAYS) CREATE A DESKTOP LINK FOR STINGER AND KEEP FILE UPDATED BY DOWNLOADING NEW VERSIONS TO SAME LOCATION AS THE FIRST, WHEN ASKED IF YOU WANT TO REPLACE THE EXISTING FILE SAY YES 6) TURN ON YOUR FIREWALL IF YOU HAVE ONE, (XP HAS ONE BUILT IN, MAKE SURE IT IS "ON") 7) DO NOT OPEN ATTACHMENTS TO YOUR EMAIL, EVEN FROM KNOWN SOURCES UNLESS YOUR KNOW IT IS COMING. YOU CAN HAVE THOSE WHO SEND ATTACHMENTS SEND A CODE IN THE SUBJECT LINE SO THAT YOU CAN IDENTIFY LEGITIMATE MAIL. I HAVE RECEIVED BOGUS MAIL THAT LOOKED LIKE IT WAS FROM SOMEONE IN MY ADDRESS BOOK BUT WAS NOT...JUST BEWARE! REMEMBER: STINGER MUST BE DOWNLOADED EACH TIME YOU USE IT, ADAWARE, SPYBOT AND AVG SHOULD BE UPDATED EACH TIME YOU RUN THEM!! IF THEY HAVE AN AUTO UPDATE FEATURE, USE IT! CURRENT TOP THREATS: I-Worm/Sober.Q · I-Worm/Sober.P · I-Worm/Sober.O · I-Worm/Bagle.BK - BQ

11.21.04

One of the other newsletters I get reported last week that a nasty new virus, originally thought to be a variant of the MyDoom virus, has hit computers. Called Bofra, there are at least two variants -- one has what looks like a link to one of "those" sites, but it's the second that should worry people. The Bofra-B version looks like an email confirming payment from you to someone using PayPal. Sophos also announced that it has discovered the Banker-AJ trojan residing on computers used by a number of banks in Britain. eBay and Amazon have also been recent targets. The first significant Internet worm made its debut sixteen years ago last week. The Morris worm -- a research project that was designed to be self-replicating -- overloaded thousands of Unix-based VAX and Sun Microsystems systems. At the time, the Internet was mostly universities and the military, but once the door had been opened, it's never been closed. Lavasoft, the company that makes the popular Ad-Aware software, has announced that it isn't going to support version 6 any longer, and has urged users to upgrade to the SE version. It's still free for personal users. Here is the list of the current most active threats as February 21, 2005: BackDoor-AQJ BackDoor-ALI BackDoor-CEB BackDoor-JZ Bat/Mumu.worm Exploit-DcomRpc Exploit-LSASS IPCScan IRC/Flood.ap IRC/Flood.bi IRC/Flood.cd NTServiceLoader PWS-Narod PWS-Sincom.dll W32/Anig.worm W32/Bagle@MM W32/Blaster.worm (Lovsan) W32/Bropia.worm W32/Bugbear@MM W32/Deborm.worm.gen W32/Doomjuice.worm W32/Dumaru W32/Elkern.cav W32/Fizzer.gen@MM W32/FunLove W32/Klez W32/Korgo.worm W32/Lirva W32/Lovgate W32/Mimail W32/MoFei.worm W32/Mumu.b.worm W32/MyDoom W32/Nachi.worm W32/Netsky W32/Nimda W32/Pate W32/Polybot W32/Sasser.worm W32/SirCam@MM W32/Sober W32/Sobig W32/SQLSlammer.worm W32/Swen@MM W32/Yaha@MM W32/Zafi W32/Zindos.worm      REMEMBER PRACTICE AND RACING IS ALWAYS FREE AT MAYHEM RC RACEWAY!! Go Fast, Turn Left! Melissa & Wade created 08.23.04