The list of the most-commonly installed web file viewers and their current patch levels and links to version tests and installers has been updated, it’s here: http://www.startupware.com/patches

Other companies are using the Second Tuesday release date as well. This time Sun has an update for Java; your installations of Java should be 6, release 21.

The list of the most-commonly installed web file viewers and their current patch levels and links to version tests and installers has been updated, it’s here: http://www.startupware.com/patches

The patch alone is NOT adequate. ALSO, go to Edit, Preferences, and UNCHECK these two items:
In JavaScript, the top item ‘Enable Acrobat JavaScript’ should be unchecked.
In Trust Manager, the top item, ‘Allow opening of non-PDF file attachments with external applications’ should be unchecked.

The list of the most-commonly installed web file viewers and their current patch levels and links to version tests and installers has been updated, it’s here: http://www.startupware.com/patches

by Jerry Stern
Webmaster, Startupware.com

OK, I look like this now.

Well, maybe only kinda.

This project started out with a web ad. It told me that I could look like a character from the movie ‘Avatar.’ I’ve seen the ads before, clicked through to see what it was, and then shut down the page fast when I saw that there was a Flash plug-in and a membership form to agree to. This time, I said, well, let’s check it out. On my test machine, not the production box. With extreme caution.

OK, off to the XP test box. At the moment, it’s running XP Pro, Service Pack 3, fully-patched, and Microsoft Security Essentials Anti-Virus, and has no other security in place, no data, and no significant software other than patched versions of Adobe Flash and Sun Java.

The link from the ad was to mycartoon(dot)info, which immediately redirected to imakemoolah(dot)com, which then immediately redirected to home(dot)zwinky(dot)com. Note the past tense; as I write this, a week later, the link has changed, and the final step now goes to home(dot)mywebface(dot)com.

Neither of these sites contains the promised ‘Avatar’ look. The ad also implies that I can convert a photo. That’s not there, either. What was there is Zwinky, apparently an online ‘community’ using cartoon avatars. It invited me to create my Zwinky character. OK, so I did. There is a required sign-up for a membership in the online Zwinky site, and an email address is required (I used one of my temporary emails, and it has not been spammed, so far). Here’s what I found along the way, in case you find this on a computer during a cleanup.

First off, Internet Explorer 8 warned me of an Active X control installation. There is a basic warning that I’m installing the MyWebSearch toolbar. Note that the page is from Zwinky, but the download is from imgfarm(dot)com, while the source of the download is from their SmileyCentral project. It’s all very spread out over multiple sites.

Next, there is a clue that multiple products are included. The Internet Explorer Security Warning identifies the download as being from Fun Web Products, and includes “Zwinky, My Web Search, Search Assistant, and Easy…” The line is cut off; could go on for a ways yet.

Finally, my screen begins to show something that’s closer to what I clicked on:

And done:

OK, I UNCHECK both boxes, and click finish. The mywebsearch toolbar appears anyway, and I’m taken to the Zwinky page to create a character.

OK, now let’s look at what else is happening in the background.
I ran HijackThis, and checked the log; and it’s immediately apparent that this product is startupware–all these items are new:

R3 – URLSearchHook: (no name) – {00A6FAF6-072E-44cf-8957-5838F569A31D} – C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL
O2 – BHO: MyWebSearch Search Assistant BHO – {00A6FAF1-072E-44cf-8957-5838F569A31D} – C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL
O2 – BHO: mwsBar BHO – {07B18EA1-A523-4961-B6BB-170DE4475CCA} – C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O3 – Toolbar: My Web Search – {07B18EA9-A523-4961-B6BB-170DE4475CCA} – C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
-runkey
O4 – HKLM\..\Run: [My Web Search Bar Search Scope Monitor] “C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe” /m=2 /w /h
O4 – HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 – HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O8 – Extra context menu item: &Search – http://tbedits.mywebsearch.com/one-toolbaredits/menusearch.jhtml?s=100000338&p=ZJxdm3802MUS&si=40699&a=..bh6qJGzk7dFMyFxzxTDA&n=2010061710
O16 – DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} – http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei-4/ZwinkyInitialSetup1.0.1.1.cab
O23 – Service: My Web Search Service (MyWebSearchService) – MyWebSearch.com – C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe

In order, note the URL search hook in group R3, the two toolbars (group O2, Browser Helper Objects), and the installed service in group 23. Big product, by any measure.

Next, I took a look at the C: drive. Under Program Files, there’s 6Mb of files under ‘MyWebSearch’ and ‘0.6 Mb’ under ‘FunWebProducts’ that contains 4 folders and only 1 file. Over in Control Panel, there is one new entry, for “My Web Search (Zwinky)”, listed as 6.29 Mb. I’ll run that later.

Next, I go back into Internet Explorer. It opens to my usual home page of ‘about:blank’, so that’s OK–remember, I did decline the home page change earlier. I tried to turn off the toolbar, and here’s the result–I chose to disable :

OK, back to Control Panel. Ran the uninstaller. There’s one confirmation screen, and I chose to remove all features. A reboot is needed, OK. There’s a file left behind in c:\Program Files, so I delete ‘Uninstall Fun Web Products.dll’. A second pass through HijackThis shows one straggler autostart item–I removed it manually:

O16 – DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} – http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei-4/ZwinkyInitialSetup1.0.1.1.cab

Now, as invasive as this product is, their online drawing program does work easily. In case my readers are tempted to go there, and create an avatar, like I did–be warned. The avatar can’t be saved or exported, it’s only usable on Zwinky, and you can create only one, so it’s pretty limited overall. The images I’ve created were done using creative and major browser zooming on the page, then screen captures, imports of the captures into Corel Draw! X4 for a bitmap-to-vector conversion, more tweaking and editing, isolation of the head for some versions, and so on. I invested 90 minutes, and someone with less familiarity with drawing software would not end up with a usable avatar.

So what is all this? It looks like a URL search grabber, with a major content delivery system of cute drawing programs that can’t save files. Zwinky.com does, at least, have a visible means of financial support in the ads on their site, but they also have a link on the footer to their affiliate program, where they claim no spyware (right, just a search hook), no adware, high industry payouts, and association with webfetti, CursorMania, and “in partnership with neverblue”.

Let’s make this clear–these items are misleading, invasive, and possibly not quite fraudulent (in the legal sense), but they are clearly not drive-by downloads, except in one sense: The names are all mismatched. I click on mycartoon(dot)info, and pass through imakemoolah, to zwinky, download from imgfarm, and end up with FunWebProducts and MyWebSearch. Many end users aren’t watching that closely.

As far as cleanups go, when I have an infected PC on my desk, the usual situation is that there is some malware that was of unknown origin (didn’t see any on these sites, as of June 2010), so I go looking, and I find there are 10 autostart entries for one web application that my customer doesn’t remember installing, plus a variety of other items of similar unknown origin, so they all come out. For me to leave them alone would require that the install did not include a search hook, a toolbar, or an installed Windows service, and this combination of mismatched web sites delivers all three, and there is no need for a web page to run 10 autoplays. Delete that.

And that’s a shame, too. If these programs ran without the toolbars and autostarts, with no associated search hook baggage, and could save images easily, they would be worth paying for. Oh, well.

OK, I’m ready for Spring now. I’ve notified the resident groundhogs that they’re responsible for all this mess, and had better get things moving. They dig holes in my lawn, they eat my plants, they had better earn their keep this time. Done. Spring. Now.

In the brave new world of always-online software, help files have changed. We used to write HLP files. Now, it’s compiled hypertext, or CHM files, or sometimes, it’s a web page, and not much else. Format shouldn’t affect function, but it does–the industry is getting horribly sloppy, and have forgotten that help files are about teaching, and are not about searching.
What has to be in Help?

A help file, regardless of the format, needs some basic structure. Certain questions have to be answered; they’re the same questions that applied in writing class. When writing Exposition, or writing that explains, or Reporting, writing about events, include as many of these as possible: Who, What, When, Where, Why, and How. Mostly, help files won’t include a lot of ‘why’, but try for all of them. When writing a help document, start with this outline, and expect to change the headings when it’s almost finished:

• What does the software do? Include a short description of what the software does. This isn’t a sales pitch–it’s an introduction to the software, what the workflow of the program is like, and what kind of projects are possible in the software.

• How do I get started? Include the simplest possible project, how to start creating a task, how to learn about the program, and how to save, export, publish, or display the finished task–not all of these apply to every program–choose the simplest case, and explain it.

• Where are the commands and functionality? Tell the user where you’ve hidden all that wonderful functionality, in toolbars, in the menus, in keyboard shortcuts.

• When do I use these menu choices? Include the basic sequence of steps in an introductory project.

• Why do I choose to do things this way? This is why your software matches the workflow for a specific task, best to follow a specific sequence, or it can be a description of several sequences of tasks that will work, using your software product.

• Who published it, and who are they? Include contact information, links to additional help, tutorials, and updates.

First things First

When writing step-by-step instructions, sequence is your top priority. Here’s a horrible example:

You can change the settings for communications. Check off “use alternate port” in options.

What’s wrong with that? Well, it’s vague–it doesn’t say why or when you would use these instructions. It’s out of sequence–the steps are not in the order that they become visible to a user; first list where to go, then what to do. Not what to do first and then where to go–that encourages reading backwards while the user skips forward for navigation, and back again for the option to click. Finally, it looks like the option doesn’t match the software menus, and it’s not totally clear what the menu names are labeled.

Try again:

When the software won’t connect to the remote server, an alternate port may be used. Go to the Tools menu, choose Options, and at “Use Alternate Port”, add a checkmark in the option box. Click OK to close the dialog.

What changed? First, there’s a short explanation of ‘what’ at the beginning–in real software documentation, it should be more specific. Second, the steps are strictly in the same order as a user would see them on-screen, and no steps are left out. Third, the name of the option is precisely the same as in the menu, including capitalization and underlined menu shortcut keys.

Advanced Topics

Here’s a far more complex example, taken from a WordPerfect Magazine article I wrote, way back in 1992, about creating greeting cards in WordPerfect:

Begin at the WordPerfect document screen. Press Format (Shift F8),
(2) Page, (7) Paper Size/Type, (2) Add, and (9) Other. Type ‘Card’ and press(Enter), then (8) Labels, (Y) Yes.
A new menu will appear for the label definition.

The format for magazine writing of this kind is extremely precise. Every menu label appears, with the shortcut key, and every keystroke is included, with enough information at the end to let the reader see that they’ve arrived at the right place.
This level of precision can add confusion when the program is translated. The number selections work in every language, but the letter options may not be consistent. Be careful when translating sequences of menu choices, or plan ahead during menu design to keep steps and shortcuts consistent in all languages.
Should you use this type of magazine style for help topics? On some topics, yes. Think of a short article, maybe a few paragraphs, for an extended example of how to do a task or create a project in your software. It’s a great introductory lesson, but include every step, and choose a very basic first project for the example.

Describe what Menu Options Do

I frequently wonder what a menu entry does in a program I’m trying out. I look for the matching entry in the help file. For example, under File, Export Stuff, I’ll find this:

Exports stuff in a file.

Wrong, on so many levels. First, it tells me nothing that isn’t already in the name of the menu entry. Second, it doesn’t tell me what or when or any of the other basic answers. Try again:

File, Export Stuff: Saves the current project in a special format that provides __fill-in benefit here__. The Stuff format is used for ___. This function is also known in other programs as ‘Save As’, ‘Publish To’, or ‘Send to a Service Company’.

Huh? What’s all that stuff in the last line for? Well, that fixes the next problem, of searching a help file for a function you know exists in a program, when you don’t know the name. It’s the elementary school complaint about dictionaries and spelling–“how can I look up the spelling if I can’t spell it?”

Well, when you search help for what you think an option or function is called, and don’t find it because the author has been very consistent in always calling an export an export, what happens? Not a whole lot, beyond thinking nasty thoughts. Telepathy doesn’t help; keywords do. Those alternate names are there for searching the help file by keyword.

In the Deep End without a Paddle

Many programs now have only hypertext help with search, and no table of contents. It’s very Wiki, and worthless for learning a new program. In these monsters, you can press F1 for help, and if anything happens at all, there’s a pop-up of search titles related to a topic. It should be a topic related to the screen that was displayed when F1 was pressed. That’s ideal, and that was the standard form of help, 10 years ago.

But now, too many programs display nothing but pages and pages of unfiltered word matches for every attempt to search. Make sure that the novice-level information doesn’t get buried; the users that need advanced help know how to search, and are already sold on using your program. Novice users don’t know your program, may not have bought it yet, and are easily discouraged. Keep it simple for them–quick help searches should lead to intro-level topics, and then to advanced, and not just dive into the greatest possible depths of trouble-shooting chit-chat.

No matter what the format of the help documents, include a table of contents or a good index, include an introductory lesson, and remember that help isn’t a list of dialog box names–it’s a directory of how to use your software product.

Jerry Stern is the editor of ASPects, the ASP’s Coordinator of Anti-SpywareOperations, runs Startupware.com and WordPerfect.org, and is online at www.PC410.com.

Here’s their press item:
http://www.softwarekb.com/news/2008/12/11/court-halts-bogus-computer-scans/

This group of rogue programs has made this past year interesting for me. I clean up these programs more than any other type of malware, and yes, I get paid. But all in all, I’d rather be upgrading hard drives and building new systems.

At scan time, here’s what was found (Scan by AVG antivirus 8.0):
Virus:
C:\Program Files\WinDefender 2008\Uninstall.exe
Classified as ‘Trojan horse SHeur.BZLW’

Adware:
C:\Downloads\SetupGamevance.exe
Classified as ‘Potentially harmful program Downloader.QN’
(2 copies found)

I see no proof that Gamevance is pushing WinDefender 2008. Or not. But here’s the scenario: The machine passed all scans the day before the rogue appeared. So either they showed up on the same day, arrived in each other’s company, or were both hidden by active malware. Assuming simultaneous infections is a big assumption. Caution is indicated with any site paid for by installing software, as usual.

His talk was all about Open Source; it would have worked just as well at a developer’s event as at government talk. His main point: Sun makes money giving away all their intellectual property, and then selling services and contracts. There are five public reasons he pushes open source. A sixth, unmentioned, is surely that expanding markets for open source expands markets for Sun Microsystems–they’re clearly a large enough player to benefit from that type of marketing.

1. There is no barrier to entry for users of open source products. Selling a prototype project to a corporate purchasing department shouldn’t start with requests for funding for software, just to see if what’s needed is possible. Just download it, and get started.

2. Increased interoperability. The source is out there, so there are no proprietary formats; every competitor is free to copy how you’ve done processes, and link into them, or add functionality.

3. More Research & Development. A closed source development project might have 5 programmers, or 30, working on it, he says. In open source, testing and bug fixing is open to a world of interested parties. It’s all extra help for the R&D staff.

4. More Secure. For the same reasons, open source is tested and hacked by the world before being declared as ‘done.’ There are no hidden secrets, it’s all out there to see, before deployment.

5. No barrier to Exit. There are no service-level agreements forcing years of product upgrades to future versions, site-unseen, and no site licenses in open source; there are no contracts to tie down a corporation or a government to continue using a product that’s last year’s bad news.

Sun is making money, lots of it. McNealy’ opening joke was that he stopped by Washington DC to pickup his $600 tax rebate check, and to deposit a few million $ for his 2007 tax bill. Open Source is clearly working for Sun–they claim to be the world’s largest provider of it, and they’re profitable even after spending huge amounts to defend themselves and their clients against software patent claims. They don’t start law suites over intellectual property, but they do defend, vigorously, and half their winnings go back to an open source legal defense fund.

Sun competes on the basis of providing service to clients. Their model sounds closer to that of a service company than to a software publisher. Scaling their model down to the level of a microISP is clearly challenging; some software developers are already working on the basis of custom installations and ‘whatever-you-need for a fee’ service. More will clearly have to work that way in the future.

McNealy closed by giving away a large stack of software CDs to every attendee, but remember that this is to a US Government audience that can’t accept gifts valued above $20. “It’s worth $8 for all the plastic. The content is available for free at developers.sun.com. I’m just saving you download time.” He doesn’t stop selling. Ever.

Those of you who attended the Shareware Industry Conference during the years it was in Florida around ten years ago will remember that SAAS, or Software as a Service, was really big back then, but it resulted in very little. Now, bandwidth and connectivity for business users is good enough and fast enough that SAAS may be practical for specific applications.

Putting documents into the cloud is already what Google is living on. All their documents, spreadsheets, slide shows, etc, are hosted live on the Google Apps site (www.google.com/a). Nothing is stored on workstations, and their technology now includes sharing of documents between collaborators, with tracking of edits and changes.

Girouard reports that lots of business notebooks are lost worldwide, usually with business data. He had one stolen from a parked car the day before a big meeting. The next morning, he stopped by the Google IT department, picked up a new notebook, switching to a Mac while he as there, logged in to Apps, and was up and running immediately, with less than half an hour lost.

This isn’t just Google eating their own brand of dog food. Girouard showed an impressive list of Fortune 500 companies that are using Google’s GMail with Postini spam filtering for 100% of their email storage. It’s all online, manageable and controllable by corporate management.