Smart security: network scanners

Christopher Klaus, founder and CTO of ISS (which Rasmussen identifies as the market leader) likened the task of the scanner to "twisting the door knobs to find out what vulnerabilities exist." He preferred to use the term "expert rules" instead of AI. He said his software will scan ports on a network and use information it has picked up at one port, such as insecure passwords, to attempt penetrations elsewhere. (He says ISS can penetrate most corporate networks because in-house programmers often use Web ports for other applications, such as instant messaging.) At Symantec, NetRecon product manager Harold Toomey also preferred the term "expert system." He boasted that his product also uses progressive scanning, but added that it emphasises safety -- it won't crash a trading floor, he said. At eEye, Retina uses an AI feature called Common Hacking and Attack Methods (CHAM), explained Day. CHAM includes intelligent algorithms that look for buffer overflow and Web server protocol weaknesses. Plus, it can be set to perform network-wide or selective sweeps, at pre-set times and intervals, Day said. At Foundstone, Cole indicated that the details of how the scanning is done are secondary. "The challenge is to communicate the risk in business terms," he said. To that end, he said FoundScan emphasises accurate but "gentle" scans, combined with guidance on fixing whatever problems it uncovers. At Cyc Corp., they freely admit to using AI. The company, it turns out, is the last traditional AI firm, having spent the last 18 years developing a database with second-order predicate calculus intended to endow software with common sense. Cyndy Matuszek, CycSecure's project manager, said the product (still in beta) not only generates a list of vulnerabilities, it uses AI to generate an "impact statement" so that the users can judge which vulnerabilities are worth their attention. "Of five hundred problems on a network, only 20 may play into problems that you care about," she noted. It also uses AI to find vulnerabilities that would be more obvious to a human than to a machine, like pet names used as passwords, and knowing that it is suspicious if anyone but the system administrator installs a packet sniffer. All the products scan TCP/IP networks. Pricing for Foundstone's FoundScan starts at $35,000 for up to 256 IP addresses; maintenance costs extra. The software runs on a Widows host. Retina from eEye also runs on Windows, and costs $6,520 for one scanner, and up to 256 IP addresses. Each scanner license, or "activation key," handles up to 512 IP addresses. The annual price of maintenance is around 30 percent of initial purchase price. The single-machine version of ISS's Internet Scanner, which also runs on Windows, is a free download; but a license for 250 devices will cost you $6,095; a perpetual license for 250 devices costs $11,400. Both prices include maintenance. Pricing for NetRecon 3.5 starts at $3,995 for up to 256 IP addresses, or $19,995 for an unlimited number. It runs on a Windows host. The annual cost of maintenance is 18 percent or 25 percent of the original price, depending on how much support you want. CycSecure runs on a secure (Linux-based) server. The cost is reportedly "several thousand dollars" for the server, and then $10 to $100 per IP address, depending on the scale. The Nessus Security Scanner is a free download that runs on Unix-like systems, such as Solaris, FreeBSD, and Linux. So, while they may call the process various names, what's important is that these systems will probe your network like a hacker would, poking and prodding it with patience and expertise you hope no hacker will ever possess. Putting an AI scanner in your corner should keep your network from being knocked out by the human variety.

Have your say instantly in the Tech Update forum. Find out what's where in the new Tech Update with our Guided Tour. Let the editors know what you think in the Mailroom.

Talkback

my computer has been invaded by smart security on a advert basis, it does tell me how to remove it, but not being proficient in computer technology I am finding this difficult, this has destroyed my happiness with my computer, how can we even start to deal with people like this, instead of looking at the wallpaper of my dog I now have to look at a warning sign in black, I am a 60 year old woman who does not receive porn, or download mp3 music so why has this advert which I cannot remove attack my computer loads of help needed please

via Facebook 11 June, 2004 08:45

Thank you for your information. Can you tell me how I can delete your Smart Security Ad from my computer. It is locked in Internet Explorer. Your system error is #384.
Please deal with this ASAP as it's preventing me from using Explorer.

via Facebook 14 June, 2004 23:17

ok, this is how you remove it. right click at the very top of the screen. click properties. go to desktop. click where it says customze desktop. find the web tab. now it should have something checked that says security. press delete and remove it. now press ok and apply out of the windows. it shouldb e gone =D

via Facebook 15 June, 2004 10:43

Removing it from the desktop is addresses just one of the wounds this causes.

This one is definitely a f***er.

I found that it installed 4 .exe files (I have win2k, so windows dir is winnt, yours may be just windows).

winnt\seksdialer.exe
winnt\desktop.exe
winnt\system.exe
winnt\downloaded program files\load.exe

It also seemed to install winnt\system32\system32.dll, at least it had a create date as the time this f***er took over. (I was trying to help someone else debug over the phone, went to the website & it's been downhill ever since.) I checked 2 other Win2k systems and they didn't have this file, so I moved it to a floppy. Still not sure if I need it, though windows seems to run without, just without sound at the moment.

I then ran through the registry and replaced or deleted:
secure.html (on another infected pc, it was an ip, so whatever your home page is getting set to - look for that)
load.exe (this is installed into IE, like the google or yahoo toolbars, so everytime you start up IE, it loads itself again) I deleted the branch that held this file.

I didn't find the other .exe's in the registry.

Then I went to control panel -> internet options and changed the home page and deleted all files.

Then to the cookies location (varies per platform) and deleted them all.

Then I ran through Windows Updates (choose from Tools menu in IE) until there were no more CRITICAL updates. I chose to skip the rest.

Then I made sure I had the latest virus defs & scanned (nothing found).

Then I went to webroot.com & installed the trial version of Spy Sweeper & ran that.

For the most part, it seems ok, but now my sound is hosed, and the pc seems much slower.

I saw a mstask.exe as "Guest" mentioned, but I don't seem to have access to get rid of that. So off to find out where that's hiding.

I sent them a nasty message on their site. I also looked them up via whois, but of course the phone # for the contact is disconnected.

Good luck all.

via Facebook 17 June, 2004 01:07

Like Gillian Mary Holland in the UK my PC was invaded by the very annoying Smart-Security warning advert. For 2 days I tried to remove the annoying advert by many methods without success until I accidentally got into ZD Net talkback on network scanners. I followed removal instructions posted by Anonymous Student from Cali and removed the sh** from my desktop immediately- Thank you Anonymous Student. I hope Ms Holland has also followed these simple instructions and is now enjoying looking at her pet dog instead of the annoying advert.

via Facebook 26 June, 2004 18:47

I has been invaded by smart-security wallpaper, and here I found how to recover my lovelled idillic beach wallpaper.

Thanks to all who make it possible webs like this.
Albert from Barcelona

via Facebook 29 June, 2004 20:43

I too, have just been hijacked by these morons. (July 16/04)

I'm glad I found your tip. Will make sure it is passed on to others who will get this problem in the future.

Thanx for your help !!!

G.P. : )

via Facebook 17 July, 2004 00:23

can i just say a HUGE thanks to the student from cali, u showed how to remove that annyoing c**t of a program of "smart-security" from your comp's background. I tried for a full afternoon trying to kill that thing, and it wasn't till I turned to the net for help that i found the answer.
Thanx heaps, Svend

via Facebook 3 August, 2004 05:29

Jessica, I tried to do what you said to get rid of the automatic loading homepage bullshit, but every time I try to delete secure.html it regenerates. Also, I can't find load.exe. I think that secure.html keeps regenerating because I haven't deleted load.exe. Anyways, if you know anything about how to get rid of it, please let me know. Thanks.

via Facebook 12 August, 2004 18:42

Hi all!
I followed the instructions and managed to get rid of the annoying pop up. But now when i restart my computer, i get a little bluw square in the center of the screen and the pc doesnt boot up any further (so i see no desktop icons, just the little blue square). Basically the PC is useless now! Any ideas?? Thanks in advance

via Facebook 14 August, 2004 10:53

ty so much........ that smart thingy has been there for like 1 week......thank you thank you

via Facebook 5 October, 2004 23:09

If you right click and select view source on the "smart security" wallpaper you can see the html source code for it

the file is in

Temporary Internet Files\Content.IE5\oH492USP\C_Windows-desktop [1]

I couldn't find it
the mouse pointer still switch from regular to busy every 2 seconds I can't change it
help

via Facebook 21 October, 2004 05:30

anyone can email me if you need the fix for this problem i will gladly send it to you....jvnwrmr@yahoo.com

via Facebook 26 October, 2004 06:17

Thank you for the help in removing this scurge from my desktop. Companies that use this "style" of advertising should be baned from ever doing business again. As I am a realist I know it will never happen but now I have an alternative other than sending flame mail to a co. who dosen't care what I have to say and will continue doing whatever they want.

via Facebook 3 November, 2004 21:14

Thank you! Thank you! Thank you! Something my brother did on my computer last night left this smart crap on my computer. I found it this morning and have been trying all day to get rid of it. I gave up and typed "how to get rid of smart security" in the desktop and this site came up. I followed the instructions from cali student and got rid of it immediately. Thanks again.

via Facebook 5 November, 2004 23:01

The Grammar! The Horror!
without this program my life could get broke...
broke??? the bad spelling and grammar is like, the worst part of this spyware. Thanks for the help getting rid of it

via Facebook 6 November, 2004 04:23

Thanx to student from cali !! These cretins should be drawn and quartered.

via Facebook 10 November, 2004 06:58

If the Cali-tip doesn't work,try this...

I couldn't access the five tabs in 'properties -Desktop. So I went to Configuration in the start menu. There you select the first icon. In Dutch it's beeldscherm which roughly translates to screen (it is the icon that displays your pc-screen) From there you follow Cali-student's instructions. Works like a charm..thanks Cali...you are the best.
Arvid, the Netherlands

via Facebook 13 November, 2004 00:14

I too have been attacked by smart-security, If anyone has any info on them send it too me. I am a Detective in Texas and this is a crime here. I want some payback. I might not be able to get them where they live, out of the US, but I will put the word out that they are criminals. I can't imagine that this is a real business. No contact numbers or refund policy. I bet if you send them money, you will never see it again. Or they will suck your account dry. My e-mail is jjewetts5@aol.com

via Facebook 15 November, 2004 22:08

Man! Thank you!! I was really getting.....well, really angry. Nice easy fix and I didn't need to panic! Stinkin' morons and that's mild language compared to what I wanted to say. How do we stop these idiots anyway?!

via Facebook 22 November, 2004 02:53

hi! how can i remove smart security ad on my desktop! it wont go away! could you help me?

via Facebook 22 November, 2004 16:55

Many thanks to the student from Cali for helping me get rid of the dreaded ":black screen"! This was my second battle with Smart Security. I thought I found a file to delete (aoldesktop.html) that would do the trick, but instead of the black warning screen, I ended up with a plain white screen over my desktop image of a natural wood Strat nestled among some fall foliage. Cali's instructions did the trick. Many thanks!

via Facebook 27 November, 2004 01:06

Hey... I am a 17 year old from Mexico, and I am a victim of the stupid Smart Security thing. Thanks to the student, the problem is solved.

But... it makes me wonder. Is the thing they are doing legal? Is there a way to report them to any authority or something?

Or, at least, get their Email and send them all our death threats and all that?

Please, if you have comments on this, email me or add me to you MSN: dostrescon@gmail.com

via Facebook 29 November, 2004 01:28

Easy to fix. For clarication to anybody who gets this problem read this. In the 'anonymous'
solution above it says that you right click at the top of the screen on the desktop..(.on the screen that says 'warning..big brother is watching, etc.)...After a couple tries I realized anonymous wasn't saying click on the top of the screen for no reason...he really meant it...Go right to the top of the screen..as high as you can possibly go and then right click...in properties go to the web tab and highlight 'security'..then delete it...After this the problem definitely leaves!!! Simple and easy!!! Thank you so much Anonymous..it worked for me as well (after I followed your instructions properly)!!!!!!

-selfhelp
WWW.SACREDSELFHELP.COM

via Facebook 4 December, 2004 11:24

I just spent 3 days trying to rid this f***er. Many thanks to annonymous from cali. Without your help and knowledge I would be pulling my hair out by now. It proves these sites are a god send to newbies. Many thanks again.

via Facebook 12 December, 2004 23:09

wow! thank you student in cali, you are awesome!! thank youuuuuu

via Facebook 13 December, 2004 23:44

this is the only way i know of how to remove this...

i hate those fuckers at smart security..

at the very top of the screen, right click, it should appear as a standard option menu (compared to when right click the big black desktop..)

as you right click, select properties..

destop tab..

click the "customize destop" button at the bottom..

select the "web" tab..

an uncheck the "security" box..

if anyone has anymore ideas, or questions, email lovelguy18@hotmail.com

via Facebook 15 December, 2004 21:38

i got rid of the SMART SECURITY wallpaper by using the SMART SECURITY REMOVE TOOL from theri site. But the problem is that i can not access 'my computer' nor open anything else using the windows explorer!!!

PLZ HELP

via Facebook 24 December, 2004 23:10

go to link and take the freeclean.exe

That's cooll

http://www.smart-security.info/removal.html

Thak's

via Facebook 25 December, 2004 00:00

http://www.smart-security.info/removal.html

go to link and take this program freeclean.exe

Thanks

via Facebook 25 December, 2004 00:04

Still there! I deleted the "smart security" screen of my desktop BUT even if I don't see it anymore at the back of my screen, he is still there. I mean, there are still few problems on my computer related to "smart security". Ok, I have beautiful "dog screen" back and no more "smart security warning" but when I go on the internet, my "home page"(you know, when you open internet, the first page) is not Google anymore, it's a...(Idon't even know how to call it) page I don't want. But I'm not stupid, I clicked on " internet option" and changed this adress(http://213.159.117.134/index.php) for any other one like google.com but I doesn't work, when I close Internet and then open it, this page comes back!
This little problem appeared at the same time as "smart security", I'm 100% sure it's related.
But there's another thing, when I go chek my emails, it seems like there someone on my computer I mean there's a pop-up that comes and disapear and... I know there's still a problem...

I seams complicated but if you could help me find the source of this problem... please help me and thanks anymous Cali's student!!!

via Facebook 25 December, 2004 18:41

SMART SECURITY YOU GUYS SUCK
Can someone please help me ?? I have gotten rid of the ad and returned to my normal desk top but now my computer continues to lock up upon starting . Thank You

via Facebook 6 January, 2005 23:17

My Kudos to the anonymous student in Cal.
I've spent several hours trying to get rid of this crap with minimal luck. Even our IT group can't help.

I have some cemetary plots that have to be filled<:)

via Facebook 13 January, 2005 15:13

many thanx to the guy from california !
i was really close to reinstall my windows,although i wasn't sure that would solve the problem..Thanx Again :)

via Facebook 18 January, 2005 11:24

Smart-Security
Oh these people really suck!
Looks as if the only real way to fix this proplem is Format and Reload.
FYI
This is who they are thanks to Network Solutions.
Domain ID:D5928130-LRMS
Domain Name:SMART-SECURITY.INFO
Created On:18-May-2004 10:24:19 UTC
Last Updated On:14-Nov-2004 18:46:37 UTC
Expiration Date:18-May-2006 10:24:19 UTC
Sponsoring Registrar:R159-LRMS
Status:CLIENT LOCK
Status:OK
Registrant ID:C4844095-LRMS
Registrant Name:Aleksandr Romantsev
Registrant Organization:Smart Security GM
Registrant Street1:Lindaal 33
Registrant City:Overijse
Registrant Postal Code:3090
Registrant Country:BE
Registrant Phone:+1.3022617417
Registrant FAX:+1.3022617417
Registrant Email:info@smart-security.info
Admin ID:C4844095-LRMS
Admin Name:Aleksandr Romantsev
Admin Organization:Smart Security GM
Admin Street1:Lindaal 33
Admin City:Overijse
Admin Postal Code:3090
Admin Country:BE
Admin Phone:+1.3022617417
Admin Email:info@smart-security.info
Billing ID:C4844095-LRMS
Billing Name:Aleksandr Romantsev
Billing Organization:Smart Security GM
Billing Street1:Lindaal 33
Billing City:Overijse
Billing Postal Code:3090
Billing Country:BE
Billing Phone:+1.3022617417
Billing Email:info@smart-security.info
Tech ID:C4844095-LRMS
Tech Name:Aleksandr Romantsev
Tech Organization:Smart Security GM
Tech Street1:Lindaal 33
Tech City:Overijse
Tech Postal Code:3090
Tech Country:BE
Tech Phone:+1.3022617417
Tech Email:info@smart-security.info
Name Server:NS1.SMART-SECURITY.INFO
Name Server:NS2.SMART-SECURITY.INF

via Facebook 22 January, 2005 19:56

whoever did this smart security thing should burn in hell!!! They talk about getting rid of spywear, but what do you think they are. They are a virus. Everyone associated with it should jump from a cliff!!

via Facebook 22 January, 2005 22:57

Can anyone help me to remove this stupid security ? I did what you said by right click at the very top of the screen. click properties. go to desktop. click where it says customze desktop. find the web tab. now it should have something checked that says security. press delete and remove it. now press ok and apply out of the windows. it still in my computer every time i shut down my computer. Please help me!!!

via Facebook 9 February, 2005 05:08

Hi everyone, I must admit whoever did this is very good,very intelligent and can get a first class in whatever he desires in life. I am not angry cos I love solving puzzles. Thanks to the genius anonymous though. I had this trouble all day. And to whoevers idea this was, I beg you in in the name of the most high..........do something meaningful with your life. ok?
Jovi Otite

via Facebook 25 February, 2005 00:47

via Facebook 27 February, 2005 05:23

Thanks for the advice over here,
I looked up where the company is settled, and it seems to be not far from my home it is a village near Brussels...
I will try to get them through a consumer-helping organisation in the Netherlands, I hope they can kick their asses hard!!!

Grtz Sander

via Facebook 20 March, 2005 17:56

i followed everyones advise on here and i still have a black screen. when i right click and go to prop,desktop,customixe desktop i have nothing that says secrety,,, and i can not change wallpaper.... any help with this would be app, thanks in advance..

via Facebook 20 March, 2005 20:04

Both my brother's and mother's PCs got infected with this thing. I tried everything to get rid of it, but nothing worked.

Thanks to you guys I won't have to format and re-install everything all over again. I only wish that I found this solution earlier. It would have saved me from pulling my hair out haha.

Anyway those guys should be sued or at least warned for their malicious practices. Because the ad is surely unwanted on anyone's computer.

Sander, I really hope you follow through with your plan to undertake actions against them!

Good luck and thanks to everyone!

via Facebook 21 March, 2005 11:14

This smart security thing is turning me mad. I have tried everything, but nothing seems to work. I tried, clicking on the right of the screen but nothing happens.I tried downloading the removal software from the site but that also didn't work. It has also blocked my desktop settings.
SOMEBODY PLEASE HELP ME

via Facebook 22 March, 2005 14:24

thanx for your help.it took 3 times to get rid of it.they should be locked up.
only problem i have is i have double shortcut icons on the desktop.if i delete one ,the other doesn'topen,anyone know how i could correct this problem.
any help would be appreciated.
thanx,
den

via Facebook 29 March, 2005 05:31

how to i get rid off smart security from my destop..pls. help

via Facebook 30 March, 2005 06:08

go to smart secxurity sight ,use there removal tool and reboot right away.
i had to to do this 3 times .it removed it .
good luck

via Facebook 31 March, 2005 15:05

i saved there free clean removal tool from there sight to a floppy i had to run it 4 times ,it finally removed it.i got my desk top back to normal.

via Facebook 2 April, 2005 00:05

I have no security tab on my desktop/web window ... so I can't delete anything ... my system is Xp 2002, updates with sp1 ... if anybody knows how to do it , please email me at sergenpepere@hotmail.com
thanks

via Facebook 2 April, 2005 12:29

Hi all. I followed the instructions on how to delete the Smart Security wall paper, but it's not working. When I go to web tab of the custom desktop portion I don't see a Security item to delete. This wall paper is driving me crazy because it has completely frozen my desktop. Any other ideas how to delete it? I have Windows XP, so maybe it's hidden somewhere else

via Facebook 3 April, 2005 01:49

hi all,
go to their sight and run their removal tool.free clean .exe
you have to run it about four or five times to remove it all.
it worked for me . my desktop and wall paper is back to normal.
den

via Facebook 5 April, 2005 04:58

Daily Newsletters

Topics

Related stories

Watch for top Linux/Unix threats

Intel to put security on a chip

Seven simple ways to stop security scares

Data leaks cost Midlothian a record £140k fine

Google-backed DMARC system aims to block phishers

Talkback

Post your comment

ZDNet UK Live

Latest in Security Management

Data leaks cost Midlothian a record £140k fine

Google-backed DMARC system aims to block phishers

Ten ways to take the sting out of IT disasters

Featured white papers

Latest jobs

Solutions Architect - Oxford - publishing

Project/ImplementationManager - homebased - DataWarehouse/BI

Project/Implementation Manager-homebased-Data Warehouse/BI

Inside ZDNet UK

A tale of two distros: Ubuntu and Linux Mint

2012 Predictions: VCE FastPath, VI SAN Probe & Hadoop

BlackBerry Bold 9790

How to handle data replication

Ten factors that make Ubuntu 11.10 a hit

Toshiba Portégé Z830-10P Review

BT's archive: Pictures from the vault

News & Analysis

Reviews

Blogs

Resources

About Us

Member Services

Special Features

Advertising Features

ZDNet UK / News and Analysis / Security / Security Management

Smart security: network scanners

Daily Newsletters

Topics

Related stories

Talkback

Post your comment

Get ZDNet UK's daily newsletter

Enter your email address to sign up

ZDNet UK Live

Latest in Security Management

Featured white papers

Latest jobs

Inside ZDNet UK

Resources

About Us

Member Services

Special Features

Advertising Features