Now use Google Chrome to Drag Images into e-mails

Google now lets you add images directly to emails and Buzz in Gmail by a simple drag-and-drop function. This new feature makes it easy for you to add images to an email instead of adding them as attachments. This way you get to see the image pasted and also check if it was the correct image. Unfortunately, this feature works only in Google Chrome browser.

Gmail had introduced the new drag-and-drop attachments last month. Now extending that feature a bit more, users can add images directly into their messages. The best part is that you don't have to enable any setting. Just use Google Chrome's latest build, which can be downloaded from

www.google.com/chrome


But there's one problem with this feature. People may start sending chain emails with those funny, bizarre, and terrifying images.

Folks, please make the best of this feature but don't abuse it.

Yahoo IM and Skype infected with a worm

This screenshot shows the different types of messages the worm distributes via Skype and Yahoo Instant Messenger.

(Credit: Bkis)
Security researchers warn that a new worm is targeting instant messaging users. Spotted on Yahoo! Messenger (YM) and Skype, the attacks use sophisticated social engineering techniques to trick users into infecting themselves.

It certainly looks like IM worms are making a comeback on the threat landscape, as this is the second malware of this kind to emerge in under a week. Just this Monday, the online community was abuzz with news of a worm rapidly spreading through Yahoo! Messenger. The threat was so serious that BitDefender saw fit to release a standalone removal tool.

Security researchers from Vietnamese antivirus vendor Bkis are again amongst the first to report on the new attacks, which, this time, have extended beyond YM and affect Skype too. "Still using the method of inserting malicious URLs into chat windows like [their alias for the worm discovered earlier this week], however, social engineering skill of the Worm, this time, is much more sophisticated than the previous one," they warn.

The messages used to lure potential victims are more enticing and variate with each attack. "Does my new hair style look good? bad? Perfect? ;)" or "My printer is about to be thrown through a window if this pic won't come our right. You see anything wrong with it?" are just two examples. Also, the spammed image URLs end in actual .JPG and point to a RapidShare lookalike website called tinyfilehost.com.

Hitting the download button on the page prompts the download of an archive file called NewPhoto024.JPG.zip. Inside the archive, there is a .COM MS-DOS executable file deceptively called NewPhoto024.JPG_www.tinyfilehost.com, which installs a variant of a backdoor named Tofsee, Flot or Skyhoo, depending on antivirus vendor.

Bkis points out that while Skyhoo installs an IRC botnet client, just as Ymfocard, the new worm is much more complex. For one, it is able to block antivirus software from functioning properly and uses a rootkit component to hide itself. Moreover, it also adds malicious links to any Word and Excel document opened on the computer or any email composed in Outlook. It also infects removable USB drives and creates an autorun.inf file to execute itself.

YM and Skype users are advised to exercise increased caution when choosing to open links received from their friends and, as always, connect to the Internet with a capable and up-to-date antivirus product installed. At the time of writing this article, only 13 out of 41 AV engines on VirusTotal detect the .COM file as being infected.

I suggest you to use Malwarebytes Anti-Malware to remove this worm

Fighting fraud online: taking "Google Money" scammers to court

Google on Tuesday revealed that it had filed a trademark infringement lawsuit to prevent Pacific WebWorks, based in Nevada, and other unidentified defendants from using Google's name to promote its money-making scheme.

The scheme goes by a variety of names, including Google Adwork, Google ATM, Google Biz Kit, Google Cash, Earn Google Cash Kit, Google Fortune, Google Marketing Kit, Google Profits, The Home Business Kit for Google, Google StartUp Kit, and Google Works.

Google acknowledges that such schemes can be difficult to stamp out and asks users to exercise caution online, a decision that would make such schemes less profitable. The company believes that thousands of people have paid for these money-making kits.

Fighting fraud online: taking "Google Money" scammers to court

Google on Tuesday revealed that it had filed a trademark infringement lawsuit to prevent Pacific WebWorks, based in Nevada, and other unidentified defendants from using Google's name to promote its money-making scheme.

The scheme goes by a variety of names, including Google Adwork, Google ATM, Google Biz Kit, Google Cash, Earn Google Cash Kit, Google Fortune, Google Marketing Kit, Google Profits, The Home Business Kit for Google, Google StartUp Kit, and Google Works.

Google acknowledges that such schemes can be difficult to stamp out and asks users to exercise caution online, a decision that would make such schemes less profitable. The company believes that thousands of people have paid for these money-making kits.

Google Introducing the new version of orkut - In Pictures

In an effort that Google says would make the Orkut experience a more 'worthful' one for its users, the company has changed its look on Friday.


With the new version of orkut you'll find:

• Fewer pages, faster browsing: We've concentrated orkut's principal actions onto your homepage, making it a one-stop-shop for nearly everything that you'd like to do. Now you can chat, watch videos, and browse and search within your full friends and communities lists without ever having to open a new page. See a photo, video, or status message in your activity stream that you'd like to comment on? Just start typing away. After all, fewer pages and a GWT interface mean less time waiting for things to load and more time doing what really matters– hanging out with your friends!

Hope to see you on the new version of orkut soon!

Fake Facebook e-mail contains Trojan

A new variant of the Bredolab Trojan horse is attached to a fake "Facebook Password Reset Confirmation" e-mail, security firm MX Labs is reporting.

MX Lab detected a new Bredolab variant masking itself as the “Facebook Password Reset Confirmation”. The From address in the email is shown as “The Facebook Team ” but the real SMTP from address is spoofed.

The attachment has the name Facebook_Password_4cf91.zip and includes the file Facebook_Password_4cf91.exe. the part between _ and .zip at the end is choosen randomly and contains letters and numbers.

The trojan is known as Trojan.Downloader.Bredolab.AZ (BitDefender), Bredolab.gen.a (McAfee) or W32/Obfuscated.D2!genr (Norman) and is only detected by 14 of the 41 AV engines at Virus Total.

The body of the email:

Hey vguysville ,

Because of the measures taken to provide safety to our clients, your password has been changed.
You can find your new password in attached document.

Thanks,
The Facebook Team

Bredolab is a trojan horse that downloads and executes files from the Internet, such as rogue anti-spyware. To bypass firewalls, it injects its own code into legitimate processes svchost.exe and explorer.exe. Bredolab contains anti-sandbox code (the trojan might quit itself when an external program investigates its actions).

However, Facebook has said that such types of mails were not coming from the social network. The users have been advised to use the anti-malware software to heal the virus infection.

A Facebook spokesperson said, "This virus is being distributed through email, not on Facebook."

Source : MX Lab

Be careful what emails you open on your computer. Some emails that you get may contain virus', worms, adware, spyware or other malicious files. As soon as you open the email you will be infected. Infections by virus', worms, adware and spyware may go unnoticed, you may not even know you are infected.

What Can You Do To Protect Yourself?

lways have yourantivirus software running. There are several different antivirus softwares on the market that you can use. These are a must. You will get hit by a virus if you get email. Never browse the Internet or check your email without it.

Use an adware program to check your system at least once a month, more is possible. Most of them are free unless you want to monitor your system constantly like the antivirus software does, that costs a little more. I personally use Malwarebytes.It is a good free software.I Plannining to start Virus removal tools blog. Is It good?

Microsoft to release free security software soon

Microsoft plans to release the final version of its free antivirus software soon, according to a note sent to testers late Sunday.

"The final version of Microsoft Security Essentials will be released to the public in the coming weeks," Microsoft said in the note.

Microsoft first announced its plans for the product, then code-named Morro, last November, at the same time the company said it was scrapping its paid Windows Live OneCare product.

Public beta testing of Security Essentials started in June, with Microsoft reaching its goal of 75,000 testers just one day after it issued a call for them.

On a personal note, I've been using the product on several machines since June, and I like the way--unlike other antivirus programs--it doesn't make a spectacle of itself, just quietly doing its thing. I often forget it is running on a machine, yet it did save my bacon a couple weeks back when I almost caught Koobface from a friend on Facebook.