(InfoWorld) - Developers have high hopes for Adobe's newly named AIR (Adobe Integrated Runtime) software, but reservations remain about the technology's cross-platform capability and learning curve.

Formerly called Apollo, AIR is described by the company as a cross-OS runtime enabling developers to use existing Web development skills to build Internet applications that can run on the desktop. Currently available in a beta release, it is due to ship by the end of the year.

"I would say that [AIR] creates kind of a new breed of applications that are somewhere between traditional desktop applications and Web applications," said Lee Brimelow, senior design technologist at early AIR user Frog Design.

"It kind of opens up a new world to Web developers. It enables Web developers to enter the desktop space," Brimelow said. "It allows you, for example, to take an online e-mail account like Yahoo Mail [and] you could have an offline app that allows you to read your mail and compose mails," he added. "One of the major [benefits] of AIR is that it is cross-platform so we don’t have to worry about 'Is it a Mac thing, is it a PC thing?' "

AIR is more or less a wrapper for Flash, said Gabor Vida, president of Teknision, a rich media application developer. But it is not tied to the operating system, he said. "We just deploy an AIR file, and it's the exact same file whether on a PC or on a Mac," with Linux support due soon, Vida said.

AIR, however, is not as powerful as Microsoft's Windows Presentation Foundation or Apple's Cocoa development technologies, Brimelow said. With those, developers have fuller access to the user's hard drive and OS capabilities, he said. But WPF is only for Windows, Brimelow noted.

One developer who said he has not tried AIR nonetheless was interested in it. AIR could be an improvement compared with third-party solutions for running the Flash projector offline, such as FlashJester, said Kurt Suchomel, founder of the Vermont Flash User Group and a developer at Draftfcb, an ad agency that also develops Web sites.

"It’s exciting to me to hear that there's a possible product that's something similar to that," but could offer more versatility, Suchomel said. But he expressed concerns about how effective AIR will be on different operating systems, wondering if there will be "possible gotchas on each platform." AIR is supposed to be identical on the Mac and on the PC, Suchomel said. "I would just hope that it is truly that way," he said. "It will "be interesting to see what the bugs are.

"My natural concern is the learning curve for developing with Apollo, even though it does support all the major Web technologies [HTML, JavaScript, CSS, XHTML, and Flash]," Suchomel said. "I am looking forward to developing in Apollo since it gives me a way to create one rich Internet application and run [it] on multiple operating systems."

Another developer who also had not experimented with AIR expressed similar curiosity.

"It just seems like it's going to be really cool," said Steve Farwell, marketing director at Traveland USA, which sells recreational vehicles. He also is host of the Orange County Flash User Group in Southern California, or OCFlash.

Farwell said he liked the idea of combining Web applications with desktop applications that can work with the local file system.  AIR could have benefits in applications such as hospital systems, where a physician has intermittent connectivity to the network, he said.

Self-employed developer and AIR beta user Robert Hall, manager of the Philadelphia Flash Platform Adobe User Group, reiterated what Adobe said about the project. "It makes it really easy to take your existing Web apps and all the skills you have … and repurpose them for desktop apps," he said.

"For me, the big benefit is I'm able to leverage my existing skills that I've been working on for years," Hall said. As the product still in a beta form, the feature set is not complete, Hall cautioned.

AIR "fills a major, major niche," said Gordon Clarke, manager of FlexUserGroup.org.  Developers can move to the desktop and create client-server applications without having to learn a new language, he said.

Sometimes-connected applications offer advantages, Clarke said. "If you want to have rich media, it's better to have a lot of it coming from your desktop than having to download it off the Web," he said.

Clarke likened AIR to the iPod, where music can be downloaded or heard on the Web, and Microsoft Outlook, which lets users browse e-mail offline.

At effectiveUI, which developed the eBay Desktop shopping application using AIR, the president of the company said AIR could supplement or displace Java in different instances. AIR could be used to help build GUIs (a weakness for Java), while Java could reside on the back-end server, said effectiveUI President Anthony Franco.

"One of the things that Java developers struggle with is developing interfaces," Franco said. "[AIR] could replace Java in the GUI development of an application."

Adobe's Flex and Flash are part of the Apollo, or AIR, framework, Franco said. But AIR differs from Microsoft's new Silverlight technology, in that Silverlight is more of a competitor to the Flash Player, he said.

AIR has enabled effectiveUI to develop the type of application sought by clients and to do so within budget, Franco said.

The advent of AIR also will mean development of office suites running on AIR, said Chris Charlton, group manager of the Los Angeles Flash Users Group and a Web architect at Adobe solution provider Almer/Blank. Packaged software, chat applications, and business tools will result, he said.

AIR applications are going to pull some market share from existing applications that have been on a single platform only, Charlton said.

Adobe's new technology represents perhaps the next evolution of how people engage with the Internet,  providing functions of the  browser without all the overhead, said Michael Lebowitz,  CEO of Web design firm Big Spaceship. The firm is using AIR to build a media center application for energy drink company Red Bull.

"The browser right now is sort of monolithic. It's a one-stop shop for anything you might do on the Web," Lebowitz said. "The problem with that is that's not always effective."

ADVERTISEMENT

IBM Information On Demand 2006
Industrial Industry Leaders, please join us at IBM's premier information management global event, IBM Information On Demand 2006, October 15-20, Anaheim, CA. More IBM business and technical solutions content in one place than ever before! Select from over 800 sessions. Register today!

I recently upgraded my dedicated racing simulation PC, so I was forced to re-install Windows XP SP2, along with all the games. As I was downloading the no-cd patches for the various racing sims I own, I was suddenly and inexplicably deluged with popups, icons, and unwanted software installations. I got that sinking feeling: I had become the unfortunate victim of a spyware infestation.

Of course, this is completely my own fault for browsing the web using the 2004-era web browser included with a default install of Windows XP Service Pack 2. If I was thinking rationally, I would have downloaded Firefox first, or at least connected to Windows Update to get the latest patches, before venturing on to the open internet. But I figured I'd save myself that work, and just pop into a few specific web sites for a few quick downloads. Couldn't hurt, right? Let my mistake be a lesson to everyone reading this: never browse the web without the very latest version of your preferred web browser. Intentionally choosing to browse the web with a three year old browser, as I did, is an incredibly dangerous thing to do.

The consequences in this case are fairly minimal since this isn't even my secondary machine-- it's a special-purpose PC dedicated to gaming. Reinstalling the operating system is no big deal. But it's still an inconvenient timesink, and in any case, the spyware infestation has to be dealt with because it causes serious performance problems and will even interrupt gameplay with incessant popups.

The two most common sites for no-cd patches are MegaGames and GameCopyWorld. In case you're wondering, yes, I do own all my games. I download no-cd patches for convenience's sake; I consider them a privilege of ownership for knowledgeable, ethical PC gamers. I figured the infection came from one of these sites. So I set up a honeypot virtual machine under Virtual PC 2007, using the ancient, original 2001 release of Windows XP and the classic Devil's Own key, and began testing.

Here's a shot of Task Manager at the desktop, after installing the necessary virtual machine additions. This is a completely plain vanilla, clean Windows XP installation: no service packs, no updates, no nothing. This system is connected to the internet, but it's not as dangerous as it sounds. Because it's behind a NAT router that blocks all incoming connections, there's no way it can get passively infected. I let it connect to the internet and quiesce at the desktop for about an hour, just to prove my point. No passive infections occurred behind a NAT router, even for this woefully out of date September 2001 era install of Windows XP.

Now we're leaving passivity behind, and unwisely browsing the open internet with the unpatched, six year old original version of Internet Explorer 6.0. Danger, Will Robinson! I left Task Manager running as I browsed to MegaGames, downloaded a no-cd patch, and... nothing. I then visited GameCopyWorld, downloaded a no-cd patch, and... all of a sudden, it's crystal clear who the culprit is. Check out Task Manager now:

This comes as a shock to me, because GameCopyWorld is recommended often in gaming forums. I consider(ed) it a reputable web site. I've never had a problem with the site before, because I usually surf with the latest updates. But the unpatched browser spyware infestation from visiting GCW-- just from visiting the web pages, even if you don't download a single thing-- is nearly immediate and completely devastating. The virtual machine desktop, after a few scant minutes, tells the story:

It isn't pretty, and let me tell you, I have a new degree of sympathy for the poor users who become the unfortunate victims of spyware infestations. The machine becomes borderline unusable, between...

• new icons that magically appear on your desktop
• full-screen popups that occur every two minutes
• dialog boxes that offer to "install antivirus software" with only an OK button
• system performance degradation from all those spyware background processes

... it's a wonder people don't just give up on computing altogether. Once the door is open, it seems the entire neighborhood of malware, spyware, and adware vendors take up residence in your machine. There should be a special circle of hell reserved for companies who make money doing this to people.

At first, I was mad at myself for letting this happen. I should know better, and I do know better. Then I channeled that anger into action: this is my machine, and I'll be damned if I will stand for any slimy, unwanted malware, adware, or spyware that takes up residence on it. I resolved to clean up my own machine and fix the mess I made. It's easier than you might think, and I'll show you exactly how I did it.

Our first order of business is to stop any spyware that's currently running. You'll need something a bit more heavy-duty than mere Task Manager-- get Sysinternals' Process Explorer. Download it, run it, and sort the process list by Company Name.

Kill any processes that don't have a Company Name (with the exception of DPCs, Interrupts, System, and System Idle Process). Right-click the processes and select Kill, or select them and press the Delete key. You can use my initial screenshot of Task Manager, at the top of this post, as a reference for what should be running in a clean Windows XP installation. But there's usually no need to be that specific; unless it has a Company Name you recognize, it's highly likely to be a rogue application and should be terminated.

Stopping the running spyware is only half the battle. Now we need to stop the spyware from restarting the next time we boot the system. Msconfig is a partial solution, but again we need something more powerful than what is provided out of the box. Namely, SysInternals' AutoRuns utility. Download it, run it, and start browsing through the list that appears:

As you can see, there's a bunch of spyware, malware, adware, and god knows what else gunking up the works-- all from visiting a single website! Scroll through the list, all the way to the bottom, scanning for blank Publishers, or any Publisher you don't recognize. If you see anything that's suspect, delete it! In a default Windows install, 99.5% of the entries will have "Microsoft Corporation" as the Publisher. Any reputable vendor will have no problem attaching their name to their work, so it's generally only the blank entries you need to worry about.

Now reboot the system. We've removed most of the spyware infestation, but there's a certain much more virulent class of spyware that can survive this treatment. We'll deal with them next.

After rebooting, check Process Explorer and Autoruns for anything suspicious, exactly as we did before. The first thing I noticed that "came back" in Autoruns was a suspicious driver, core.sys, that didn't have a Publisher. I used the powerful Find | Find Handle or DLL menu in Process Explorer to locate any active references to this file.

Unfortunately I didn't capture the right screenshot at the time, so I'm showing a generic search result above. Anyway, there was exactly one open handle to the core.sys file. I selected the result, which highlights the corresponding handle in the lower pane of the Process Explorer view. Right-click the handle entry in the lower pane and click "Close Handle".

After I closed the handle, I could physically delete the rogue core.sys file from the filesystem, along with the Autoruns entry for it. Problem solved!

The other item that reappeared in Autoruns after the reboot was an oddly named DLL file with hooks into Winlogon and Explorer. In addition to the suspicious name, each entry carries the tell-tale sign of the missing Publisher value:

Delete the entries in Autoruns all you want; they'll keep coming back when you press F5 to refresh. This rogue, randomly named DLL continually monitors to make sure its ugly little hooks are in place. The nasty thing about processes attached to Winlogon is that they're very difficult to kill or remove. We can kill Explorer, but killing Winlogon is not an option; it's the root process of Windows, so shutting it down causes the OS to restart. It's a difficult catch-22.

But we're smarter than the malware vendors. Fire up Process Explorer and use the Find | Find Handle or DLL menu to locate all the instances of this DLL by name. (See, I told you this option was powerful.) Kill any open handles to this file that you find, exactly as we did before. But you'll need to go one step further. We know from the Autoruns that this DLL is likely to be attached to the Explorer and Winlogon processes, but let the find results be your guide. Double-click on any processes you found that reference this DLL. In the process properties dialog, select the Threads tab. Scroll through the threads and kill every one that has the rogue DLL loaded.

Once you've killed all the threads, you can finally delete the entries in Autoruns without them coming back. Reboot, and your machine is now completely free of spyware. I count 17 entries in Task Manager, exactly the same number as when I originally started.

Of course, the smartest thing to do is not to get infected with spyware, malware, or adware in the first place. I can't emphasize this enough: always browse with the latest patches for your preferred web browser. But if you do happen to get infected, at least now you have the tools and knowledge to banish these evildoers from your machine forever.

Reuters - Microsoft Corp. launched a redesigned MSN portal optimized for mobile phones on Sunday, stepping up its offering at a time when more powerful devices increase the demand for richer content on handsets.

(InfoWorld) - Microsoft Corp. will invest in Chinese electronics maker Sichuan Changhong Electric Co. Ltd. as part of a project to link televisions and consumer entertainment devices with the Internet.

Microsoft China agreed to buy 15 million newly issued Changhong shares at a price of 6.27 renminbi per share, according to a Changhong filing (in Chinese) with the Shanghai Stock Exchange. Microsoft's planned stake in the company is worth 94.1 million renminbi (US$12.3 million).

Changhong's announcement follows an agreement between the two companies, signed Friday, to cooperate on a project called Media Galaxy. The goal is to develop, manufacture, and sell televisions, computers and digital entertainment products that connect to the Internet, Changhong said. It did not offer further details.

Terms of the investment deal require Microsoft to hold on to its Changhong shares for at least three years.

Filed under: Internet, Video, Web services