Jon Jeffels

A very humorous article by Amz on the Aegisub blog: If programming languages were religionsl

Sophos have reported on a UAC bypass. The Proof of concept requires little bit of a complex setup, but this certainly helps to explain why we’ve been seeing so many win32k.sys-based exploitations of late. See: http://nakedsecurity.sophos.com/2010/11/25/new-windows-zero-day-flaw-bypasses-uac

The TDL series of rootkits has certainly been prevalent amongst Windows machine recently, and the recent release of the TDL4 variant certainly has presented itself as a thorn in the side of many a technician. Assuming that you have removed all other threats from the machine, the newest version of MBR by GMER has successfully removed the virus from it’s current hiding place in the MBR.

I would also heartily recommend combofix by sUBs. Whilst this virus removal automatic swiss army knife does contain mbr.exe, I would recommend running MBR.exe on it’s own first before using combofix just in case your variant of the virus blocks parts of combofix and makes the machine unbootable.

Did you know that ping can take non base-10 numbers?

ping 0xC0.0xA8.0×1.010
Pinging 192.168.1.8 with 32 bytes of data:

This is just amazing – a mechanical calculator:

http://www.darkroastedblend.com/2008/09/stunningly-intricate-curta-mechanical.html

And the wikipedia page, here:

http://en.wikipedia.org/wiki/Curta

We had a client who reported that their Outlook would be incredibly slow and her machine would freeze up from time to time. The client mentioned that it took a while to load her Outlook.

In looking at the email client, it was obvious that something was amiss. After waiting an eternity for Outlook to load, I immediately checked her mailbox size, and this is what I found…
Read more…

We came across an issue whereby a user could not ping from his Windows Vista PC whereas other devices on the network could. This was an easy fix:

In an administrative command prompt:

netsh firewall set icmpsetting 8 enable

This resolved the issue.

Received this little popup while running the Adobe Acrobat Reader setup/updater.

What's wrong with this image?

Congratulations Adobe.

I am impressed.

:rolls eyes:

Ran across a nice little utility site which can help to ensure that your blog is visible to the internet:

http://ismyblogworking.com/blog.jeffels.net

You can substitute any blog URL, and you’ll not only get information about whether your blog is up, but you’ll also find some nice load-time and indexing stats.

Today I start with my new employer.  I certainly hope to be more “inspired” in this position and to have more opportunities in my spare time to update this blog.

I’ve certainly appreciated all the positive [and critical] feedback given both on-line and off-line, and will attempt to produce something that is more worth reading.

Thanks for your patience, guys and gals!