<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Fencepost Software &#38; Consulting &#187; Security</title>
	<atom:link href="http://www.fencepost.net/category/fixes_troubleshooting/security/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.fencepost.net</link>
	<description>Thoughts &#38; Resources on IT Consulting for Small Medical Practices</description>
	<lastBuildDate>Fri, 27 Aug 2010 16:54:49 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.1</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>SETPWRCG.EXE &#8211; Dell Power Management component</title>
		<link>http://www.fencepost.net/2009/06/setpwrcg-exe-dell-power-management/</link>
		<comments>http://www.fencepost.net/2009/06/setpwrcg-exe-dell-power-management/#comments</comments>
		<pubDate>Sun, 28 Jun 2009 14:59:18 +0000</pubDate>
		<dc:creator>Alan</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Maintenance]]></category>
		<category><![CDATA[Repair]]></category>
		<category><![CDATA[Virus]]></category>

		<guid isPermaLink="false">http://www.fencepost.net/?p=219</guid>
		<description><![CDATA[<p>My antivirus reported an infected file (setpwrcg.exe) this morning, with a file date of 7/19/2004.</p> <p>There were a few things that struck me as odd about this:</p> It didn&#8217;t seem like a randomly-generated name, Most viruses/worms don&#8217;t seem to bother to set their file dates, particularly not to 5 years ago, I haven&#8217;t been [...]


No related posts.

Related posts brought to you by <a href='http://mitcho.com/code/yarpp/'>Yet Another Related Posts Plugin</a>.]]></description>
			<content:encoded><![CDATA[<p>My antivirus reported an infected file (setpwrcg.exe) this morning, with a file date of 7/19/2004.</p>
<p>There were a few things that struck me as odd about this:</p>
<ul>
<li> It didn&#8217;t seem like a randomly-generated name,</li>
<li>Most viruses/worms don&#8217;t seem to bother to set their file dates, particularly not to 5 years ago,</li>
<li>I haven&#8217;t been doing anything likely to get my system infected, and</li>
<li>I use a firewall that should&#8217;ve warned me if anything unusual was trying to make outbound connections from my computer (e.g. to try to spread an infection).</li>
</ul>
<p>Searches via Google &amp; Yahoo turned up nothing significant (mostly this file in lists of files and one warning that it had been found on infected systems), so I did a little more investigating at a very brute-force level.</p>
<p>The file in question doesn&#8217;t have any vendor information, version strings, etc. which is a bit suspicious, but looking at the actual content of the file, I found multiple strings tied to Dell power management configuration &#8211; hibernation, etc. Since this fits with the name &#8220;set pwr cg&#8221; I&#8217;m going to assume that the cg is short for something like &#8220;configuration&#8221; and that they were trying to stick with a DOS-style 8.3 name for this file. The reason it turns up on infected systems is that Dell computers get viruses too.</p>
<p>Almost certainly a harmless file, at least this version of it.</p>
[contact-form]


<p>No related posts.</p>
<p>Related posts brought to you by <a href='http://mitcho.com/code/yarpp/'>Yet Another Related Posts Plugin</a>.</p><hr />
<p><small>© Alan Miller/<a href="http://www.fencepost.net">Fencepost Software &amp; Consulting</a>, 2009. All Rights Reserved. |
<a href="http://www.fencepost.net/2009/06/setpwrcg-exe-dell-power-management/">Permalink & Comments</a> <br/>
Post tags: <a href="http://www.fencepost.net/tag/maintenance/" rel="tag">Maintenance</a>, <a href="http://www.fencepost.net/tag/repair/" rel="tag">Repair</a>, <a href="http://www.fencepost.net/tag/security/" rel="tag">Security</a>, <a href="http://www.fencepost.net/tag/virus/" rel="tag">Virus</a><br/>
</small></p>]]></content:encoded>
			<wfw:commentRss>http://www.fencepost.net/2009/06/setpwrcg-exe-dell-power-management/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>NEVER Give Out Your Password</title>
		<link>http://www.fencepost.net/2009/06/never-give-out-your-password/</link>
		<comments>http://www.fencepost.net/2009/06/never-give-out-your-password/#comments</comments>
		<pubDate>Wed, 24 Jun 2009 15:31:34 +0000</pubDate>
		<dc:creator>Alan</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Email]]></category>
		<category><![CDATA[Free Services]]></category>
		<category><![CDATA[Passwords]]></category>
		<category><![CDATA[Phishing]]></category>
		<category><![CDATA[Scams]]></category>

		<guid isPermaLink="false">http://www.fencepost.net/?p=215</guid>
		<description><![CDATA[<p style="text-align: center;">IF support staff for a service you are using need access to your account or information within it, they can get that access without needing your password. Nobody should be asking for your password.</p> <p style="text-align: left;">This applies to email (e.g. Hotmail/Windows Live, Yahoo, Google and many others), social networking (Facebook, LinkedIn, [...]


No related posts.

Related posts brought to you by <a href='http://mitcho.com/code/yarpp/'>Yet Another Related Posts Plugin</a>.]]></description>
			<content:encoded><![CDATA[<p style="text-align: center;"><strong>IF support staff for a service you are using need access to your account or information within it, they can get that access without needing your password. Nobody should be asking for your password.</strong></p>
<p style="text-align: left;">This applies to email (e.g. Hotmail/Windows Live, Yahoo, Google and many others), social networking (Facebook, LinkedIn, MySpace, etc.), online photos (Flickr, etc.), and <strong>especially</strong> applies to your banking and finances. <strong>NO </strong>bank or financial services employee should ever ask for your password &#8211; bank policies generally prohibit them from doing so as a firing offense.</p>
<p style="text-align: left;">Think of someone asking for your password the same way you&#8217;d think about a stranger walking up to you on the street and saying &#8220;Hi, I&#8217;m with the village. I need your home address and your house keys.&#8221; No matter how friendly and professional looking, would you just give your keys to a stranger like that?</p>
<p style="text-align: left;">(...)<br/>Read the rest of <a href="http://www.fencepost.net/2009/06/never-give-out-your-password/">NEVER Give Out Your Password</a> (293 words)</p>
<hr />
<p><small>© Alan Miller/<a href="http://www.fencepost.net">Fencepost Software &amp; Consulting</a>, 2009. All Rights Reserved. |
<a href="http://www.fencepost.net/2009/06/never-give-out-your-password/">Permalink & Comments</a> <br/>
Post tags: <a href="http://www.fencepost.net/tag/email/" rel="tag">Email</a>, <a href="http://www.fencepost.net/tag/free-services/" rel="tag">Free Services</a>, <a href="http://www.fencepost.net/tag/passwords/" rel="tag">Passwords</a>, <a href="http://www.fencepost.net/tag/phishing/" rel="tag">Phishing</a>, <a href="http://www.fencepost.net/tag/scams/" rel="tag">Scams</a>, <a href="http://www.fencepost.net/tag/security/" rel="tag">Security</a><br/>
</small></p>]]></content:encoded>
			<wfw:commentRss>http://www.fencepost.net/2009/06/never-give-out-your-password/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
