Notice

Join This Channel To Get Latest Phone Tips,Tricks,News,Network Security Course,Hacks etc. For Free on Your Mobile!! ... Join our Facebook Discussion Group -Regards Ankit
Showing posts with label security. Show all posts
Showing posts with label security. Show all posts

20 March 2012

How to Recover Hacked Email Accounts?




Email Hacked? It can be a real nightmare if someone hacks and takes control of your email account as it may contain confidential information like bank logins, credit card details and other sensitive data. If you are one such Internet user whose email account has been compromised, then this post will surely help you out. In this post you will find the possible ways and procedures to get back your hacked email account.


 

For Gmail:

 
It can be a big disaster if your Gmail account has been compromised as it may be associated with several services like Blogger, Analytics, Adwords, Adsense, Orkut etc. Losing access to your Gmail account means losing access to all the services associated it with too. Here is a list of possible recovery actions that you can try.
Step -1: Try resetting your password since it is the easiest way to get your account back in action. In this process Google may ask you to answer the secret question or may send the password reset details to the secondary email address associated with your compromised account. You can reset you password from the following link
 
If you cannot find success from the Step-1 then proceed to Step-2.
 
Step-2: Many times the hacker will change the secret question and secondary email address right after the account is compromised. This is the reason for the Password Reset process to fail. If this is the case then you need to contact the Gmail support team by filling out the account recovery form. This form will ask you to fill out several questions like
1. Email addresses of up to five frequently emailed contacts
2. Names of any 4 Labels that you may have created in your account
3. List of other services associated with your compromised account
4. Your last successful login date
5. Account created date
6. Last password that you remember and many more…
You need to fill out this form as much accurately as possible. It is obvious to forget the dates of last login, account creation and similar terms. However you need to figure out the closest possible date/answers and fill out this form. This is your last chance! The more accurate the information filled out in the recovery form, the more the chances of getting your account back. You may reach the account recovery page form the following link
 

For Yahoo and Hotmail:

 
Unfortunately for Yahoo/Hotmail there is no second option like filling out the form or contacting the support team. All you need to do is either answer the secret questions that you have setup or reset the password using the secondary email option. 
To initiate the password reset process just click on the Forgot password link in your login page and proceed as per the screen instructions.
I hope this post will help you recover the lost account.Enjoy...

04 March 2012

Protect Your System from Sticky Key attack



Hello Guys,
Today i am not telling you How to hack a computer.This Time I wanna tell you some more about the Sticky keys Attack  i.e totally about making a backdoor  in other system by replacing sethc.exe file with cmd.exe and after that u have to press Shift key 5 times on login screen and you get the cmd or command Prompt on login screen and run the ‘net user ’ command to change the password  of administrator or any account in the system. This is all about the attack, now how can I Secure my system by this attack for that you have to fallow few steps  as fallowing:
Windows XP:
  1. Check for sticky key backdoor “By pressing sticky key  5 times on login screen ”  whenever  you turn on the computer .
  2. Turn off the sticky Keys .
  3. Or you can use this step to disable the ‘net user’ command, so that if anybody make a backdoor  in your system but he can’t change your password .
    1. Open the folder c:\windows\system32
    2.  Search for ‘Net.exe’ over there and replace it with ‘cmd.exe’ or with any other ‘.exe’ file.
    3. Open the file by inserting this address c:\windows\system32\dllcache on file browser manually and change the ‘net.exe’ with ‘cmd.exe’ or any other ‘.exe’ file.
Windows 7:
  1. Check for sticky key backdoor “By pressing sticky key  5 times on login screen ”  whenever  you turn on the computer .
  2. Turn off the sticky Keys .
  3. Or you can use this step to disable the ‘net user’ command, so that if anybody make a backdoor  in your system but he can’t change your password .
    1. Open the folder c:\windows\system32
    2. Search for ‘Net.exe’ over there and replace it with ‘cmd.exe’ or with any other ‘.exe’ file.
    3. Open the file by inserting this C:\Windows\winsxs\x86_microsoft-windows-net-command-line-tool_31bf3856ad364e35_6.1.7600.16385_none_5208a7a3d3caa54c on file browser manually and change the ‘net.exe’ with ‘cmd.exe’ or any other ‘.exe’ file.
Enjoy...

25 February 2012

Google is a Malware Scanner



Some particular malwares infect the user computer and try to send traffic to  Google through a small number of intermediary servers called “proxies.”  Google found some unusual traffic while performing routine maintenance on one of their data centers.


After Google is collaborating with security engineers at several companies that were sending this modified traffic,  they determined that the computers exhibiting this behavior were infected with a particular strain of malicious software, or “malware.”

Today, if anyone has these type of malware , they will notify as your system is infected while searching in google.

Enjoy...

26 January 2012

Mobius Forensic Toolkit 0.5.10–Forensics Framework




Mobius Forensic Toolkit is a forensic framework written in Python/GTK that manages cases and case items, providing an abstract interface for developing extensions. Cases and item categories are defined using XML files for easy integration with other tools.
6726345983_2816144f15

Installation

As root, type:
python setup.py install

Usage
Run mobius_bin.py.
You can download Mobius 0.5.10 here:
mobiusft-0.5.10.tar.gz

mobiusft-0.5.10.zip

Enjoy...

27 August 2011

Session Hacking 101




Hi Guys,
we are here to discuss one more topic related to web application hacking, that is session hacking. Note that session hijacking and session hacking are closely related terms but are slightly different. In session hacking application level attacks are concerned where as in session hijacking application level attack as well as TCP/IP level attacks are covered. Session hacking in other terms can also be called as Session Management Attack. So here I must clear we are discussing session hacking not session hijacking. People with confusion in session hacking and session hijacking should read this post carefully I hope that would help them clear up their confusion.
So first of all what is session, session can be termed as an entity which is responsible for handling your state over internet like whether you are logged in or not or which item you have added to your cart while shopping etc. And most common and well known method known for managing sessions are cookies.

Web applications become vulnerable to session hacking due to improper generation and mishandling of cookies while undergoing process. The data that is passed as cookie is known as token so in fact we can say that weak token generation methods and weakness in handling them is main reason for session getting hacked.

What are common weak token generation methods ?
One of the most common mistake many new web developers make is they design tokens to be meaningful. That means most likely the token is created from user-name, password, email id, telephone or mobile number, country, region, time and similar information about logged user. And if token does not include password there is 100% chance that hacker can log in as any user he/she wants since all other information is readily available in user's profile to create a new legal tokens as cookie values.
Next weak token generation method may include generation of token value that is predictable. Predictable token can be generated in several ways for example creating a pattern to generate token, using only hexadecimal values, using known token generation methods, using hidden sequences while generating tokens.
Lastly creating a session token which is fully time independent or fully time dependent. One of the biggest mistake that can be done while creating tokens for handling session. In fact many experienced hackers might even crack token generated using this method in few minutes. It's never a good idea to use this method for generating tokens.

What are common token mishandling methods ?
The very first in list is coding for cookies in improper way to work in LAN network.
Next is appearance of tokens in session logs and URL.
And third is storing cookies in wrong way.
Lastly thinking that we have implemented SSL means we are secure to session related attacks.

A session token vulnerable to attack means complete session is vulnerable to attack. Underestimating session handling can prove to be serious. So here we end up with basics of session hacking in next post we will have our look on how to perform session hacking attack against weak cookie generation and then in next post to it how to perform attacks on token mishandling methods and lastly how to perform hacked session CSRF attack. Till then thanks for reading, have a nice time and keep visiting. 
Enjoy...

24 August 2011

Network Security Course 101



The area of Network security Course consists of the provisions and policies adopted by the network administrator to prevent and monitor unauthorized access, misuse, modification, or denial of the computer network and network-accessible resources. Network security involves the authorization of access to data in a network, which is controlled by the network administrator. Users choose or are assigned an ID and password or other authenticating information that allows them access to information and programs within their authority. Network security covers a variety of computer networks, both public and private, that are used in everyday jobs conducting transactions and communications among businesses, government agencies and individuals. Networks can be private, such as within a company, and others which might be open to public access. Network security course is required organizations, enterprises, and other types of institutions. It does as its title explains: It secures the network, as well as protecting and overseeing operations being done.

Network Security Course Deals with the ISO/OSI Reference Model


Network Security Course is designed to meet the needs of the IT professionals to grasp the software engineering principle within short time. The course syllabus is set in such a way to understand the practical problems of the industry and to guide the IT professionals to follow the software processes as they come across in their environment. Some of the special features are

:: Industry relevant curriculum
:: Extensive Course material
:: Online interactivity with Experts
:: Self pace Learning

On line assessment Communication tools like White Board and Chat provides online interactivity with Instructor and Student. E-mail and Bulletin board give offline communication to share the information between Instructor and Students.

Enjoy...

06 July 2011

Clipboard Hacking 101



This is one of the most popular things we do on the internet with our keyboard. "Ctrl+C". We copy data (i.e. email address, passwords, ssn, credit cards etc.) here and there and paste to wherever we want to reuse it. But do you realize that the data you copied are stored in what is called a clipboard temporarily and is accessible to anyone and can be stolen when you visit web sites using a combination of Javascripts and ASP (or PHP, or CGI) to write your data to a dabase on another server.

You might be wondering, how on earth is that possible. Its true and possible and we're going to explain how and how to prevent it from now happening. Just read on and i just hope you haven't copied a credit card number recently.

The Clipboard hack is done by the following Source Code:



Yes, with this simple script any website has the potential of stealing your sensitive information to their database.

Now the good news is this vulnerability can only be found on Internet Explorer and to avoid this clipboard hack problem IE users follow this simple steps.

Go to Internet Options -> Security
Press Custom Level
In the security settings, select disable under Allow paste operation via script.


Enjoy...

24 November 2010

Double Password



Strong passwords should have a significant length and cannot contain normal words. Only random digits and letters of different case. Such passwords are extremely hard to remember and it takes time to enter. But, even strong passwords have their weaknesses. When you type a password, it can be intercepted by a spy program that logs all your keystrokes. Others can see what you type (even if the password field on the screen is masked, the password can be read by buttons you hit on your keyboard.)

Until now, the only solution was to buy a secure token. A secure token is a hardware key that is used instead of or in addition to your normal password authentication. There are two main problems with the hardware solution, though. First, it is expensive. And second, you can use them only with software that has built-in support for this method of authentication.

But, from now on, you can turn any USB flash drive into a secure token! No need to purchase an additional expensive device. All you need is about 2 megabytes of free space on your flash drive or other USB gadget, such as an MP3 player, PDA or even a USB-pluggable mobile handset.

Strong Password


How does it work?
Our software, Double Password, installs onto your flash drive. When you type a password, the program intercepts it and converts it into a super-strong password string on-the-fly. You can use simple, easy-to-remember passwords without the risk of being cracked.

Another benefit of using Double Password is that nobody can steal your passwords. Spy programs are useless. Even if someone gets the "weak" password that you type on the keyboard, it means nothing. This password will only work when your USB flash is inserted.

While typical hardware locks will work only with software that supports secure tokens, Double Password works with any software. It simply substitutes your weak password with a strong one.

Double Password can be effectively used to securely lock your Windows account, to protect your laptop and to bring a new level of security to all software that uses password authentication.
Enjoy...

16 November 2010

Some Tips To Secure Your Twitter Account




Twitter much like Facebook is popular social networking site and these sites users are targeted with phishing scams luring them to reveal their username and passwords.Here are some security tips for twitter users for safe tweeting.
Tips to secure twitter account..
1.Use strong and Unique password : Use the password for your twitter account as a combination of characters, symbols and numbers. Never use same PASSWORD for different websites and email accounts, use unique PASSWORD for every  website.

2. Be aware of fake twitter websites, try to type twitter.com in your browser and enter your account credentials.
3. Always use extensions for browsers like Chrome and Firefox which shows preview for shortened links on twitter. Because you may be lured to click on a malicious link to steal your twitter username and password.
4.Keep your computer up to date with antivirus and anti-spyware. Looking for free anti-virus AVG offers antivirus and anti-spyware, and also protects from malicious links in social networks with it’s LinkScanner.
5.Twitter never asks you for password:Twitter will never asks you to download something and asks to sign into other twitter liked websites with your username and password.Twitter will never reply to you or email you asking for your password.
6.Want to update your account with third party applications make sure they connect to your account using Oauth protocol where you don’t need to share your password. Be careful of third party applications that lure you to give more followers by sharing your username and password.
7.Never use same password for any of your accounts including for twitter.
8. Twitter banned 370 weak passwords make sure you are not using any one of them for your account.
9.Hackers may lure users with malicious links to sign into twitter similar website to give your username and password. Once they take control of your account they post spam messages and other abusive stuff from your account.
10.Don’t retweet blindly without knowing whom tweets you are tweeting , also be aware of clicking DMs containing links from unknown users. A phishing scam may targeted at you through DMs.
11.Use encrypted twitter: Use https://twitter.com  instead of http://twitter.com and your twitter session with your tweets, retweets,DMs will be encrypted.

Enjoy...

03 October 2010

Removing AntiVIr Gear -Adware/Spyware/Virus Removal



AntiVIrGear or AntiVir Gear is a adware+spyware program which pretends to be an Anti Spyware Software but actually the program itself is a Spyware. It gets installed in your PC automatically via some trojan or virus.
There is one free and easy to use tool available to remove AntiVirGear from yourcomputer.It’s SmitFraudFix.exe. The download link for this tool is available at the end of this article. To use this tool first boot your PC in safe mode. Then run the SmitFraudFix.exe.When it comes to menu screen select the second option.

When the AntiVirGear is removed from your computer a disk cleanup process will start. It will clean all temp files and other unnecessary crap. Once the disk cleanup is finished it will ask you whether you want to clean registry or not. Press Y and hit enter. After that your computer will reboot. When rebooted your computer will be free from AntiVirGear.

Download SmitFraudFix.exe

Enjoy...

07 September 2010

Avoid IM Virus



As with most threats on the Net, you can help keep yourself safe by taking basic precautions. So here are some useful tips to keep away from instant message viruses

1). Be cautious with links & files in IM:
Never click a link or open, accept, or download a file in IM from somebody you don't know. If the link or file is in an IM from somebody you do know, don't click the link or open the file unless you know what the link or file is & you were expecting it. Contact the sender by e-mail, phone, or some other technique to confirm that what they sent was not a virus.

2). Update your Windows application:
 Visit Microsoft Update to scan your computer & install any high-priority updates that are offered to you. In case you use automatic updating, the updates are delivered to you when they are released, but you need to make sure you install them.

3). Make sure you are using an updated version of your IM application:
 Using the most up-to-date version of your IM application can better protect your computer against viruses & adware. It can block attachments that might contain malware & permit you to scan attachments for viruses.

4). Use antivirus application & keep it updated:
 Antivirus application can help to detect & remove IM viruses from your computer, but only in case you keep the antivirus application current. If you have bought a subscription from an antivirus application company, your antivirus application may update itself when you are connected to the Net.

5). Use antispyware application & keep it updated:
  Some IM viruses may install adware or other undesirable application on your computer. Antispyware application can help to protect your computer from adware & remove any adware you may already have. In case you don't have antispyware application, you can download Windows Defender. Windows Defender comes with Windows Vista. In case you use Windows XP SP2, you can download Windows Defender for no charge.
Enjoy...

02 June 2010

CEH bootcamp Outline



CEH bootcamp is best for Hacking.Here is The outline for CEH bootcamp:



CEH bootcamp Outline:

Unit 1: Introduction to Ethical Hacking

Unit 2: Hacking Laws

Unit 3: Footprinting

Unit 4: Google Hacking

Unit 5: Scanning


Unit 6: Enumeration

Unit 7: System Hacking

Unit 8: Trojans and Backdoors


Unit 9: Viruses and Worms

Unit 10: Sniffers

(contd....)

Enjoy...

20 May 2010

Protect your Orkut Account



The basic method which hackers are using is fake orkut pages:

Fake page hacking method is the most easiest method being performed by most of the users. This method requires no technical skill. All you need to know is how to use Internet and simple file upload.

In this trick people create a fake orkut login page similar to Orkut page and they redirect user to this fake login pages using various methods. The hacker use simple form-mailer to get the login information into his account and redirect the users to any orkut profile page or some orkut community.Read about Orkut hacked community fiasco.

If you get messages like :

Someone posted your pictures in his/her album click here to see the album

and once you will click on that link you will be redirected to orkut login page. Once you will enter the login details you will redirect to some orkut profile or community. Victim don’t even realize that he is hacked or his password is now into user database.
How to avoid getting hacked by orkut fake account hacking method?

It’s said by a great man precaution is better then cure and this is applicable here. First of all you should make it a habit of changing your password once in fortnight and don’t forget to use complex password. Also read : How safe is your password?

# Never click on link on your orkut scrapbook if it comes from unreliable sources .

# When you click on any link and if it ask you for login information immediately move away from the page without entering your login information.

# Do notice the website URL when you are redirected to orkut login page. Most of the hacker user free hosting websites like freeweb7, 110mb and the URL format is like

freeweb7/orkut.html

110mb/orkutprofile=1231232131.html

The link seems to be real that any normal user will never realize that it’s a fake page.

If you come across any of such pages do let us know we will inform the moderator of that hosting company to remove the link from there website.

There is a simple way which we can use to find the hackers email address if he is using the simple fake page hacking method.

If you are concern about your and yours friend security do spread this words before some one hack your account.Enjoy...

19 May 2010

McAfee VirusScan Enterprise 8.7i









McAfee VirusScan Enterprise is an innovative technology for PCs and servers. It proactively stops and removes malicious software, extends coverage against new security risks, and reduces the cost of responding to outbreaks. Enterprises cannot afford to wait for every threat to be identified and a signature file to be released. The time between attack and subsequent identification is critical, and the shorter, the better. It is better yet if your protection technology identifies new, unknown threats. By blending advanced anti-virus, firewall, and intrusion prevention technologies, VirusScan Enterprise covers a broad range of threats. With advanced heuristics and generic detection it finds even new, unknown viruses, even hidden in compressed files. McAfee VirusScan Enterprise looks for exploits known to target Microsoft applications and services and will identify and block threats that take advantage of javascript and VisualBasic coding.


Features:
# Cover all the bases
Block a broad range of viruses and malicious code—even those hidden in compressed files; find new, unknown viruses with advanced heuristics and generic detection
# Defend against threats that target Microsoft
Protect against exploits targeted at Microsoft applications and services—especially for Microsoft Windows OS services, Microsoft Word, Microsoft Excel, Internet Explorer, Microsoft Outlook, and SQL server
# Curb outbreak damage
Limit outbreak damage, even before DAT files are issued; close ports, monitor applications and email engines, block files and directories, and trace and block infection sources
# Scans memory for malicious code
Detect threats that write to memory rather than disk, such as CodeRed and SQLSlammer
# Protect email programs
Detect and scour viruses in Microsoft Outlook and Lotus Notes—including HTML text and attachments
# Keep script-type threats at bay
Prevent threats that exploit javascript or Visual Basic from executing
# Optimize updating for remote systems
Tailor field updates to physical locations and connection speeds: resume updating after a broken connection is re-established
# Lock down files
Keep VirusScan Enterprise files from being altered with enhanced access protection rules
# Advanced rootkit detection
Scan system memory for installed rootkits, hidden processes, and other concealed malicious code



http://hotfile.com/dl/44121127/1588fa5/McAfee.VirusScan.Enterprise.8.7i.rar.html

Enjoy...

Spyware Doctor with Anti-Virus 2010 7.0.55 FULL





Image


Spyware Doctor Key Features:

Comprehensive Malware Protection
Spyware Doctor provides protection against identity theft, stealthy spyware, aggressive adware, browser hijackers, malicious ActiveX objects, malware Trojans, tracking cookies, keyloggers, dialers, and other malware. The optional anti-virus module also protects your computer from viruses, worms, Trojan horse threats, and other malicious infections.



Constant Real-time Protection
Through its unique OnGuard feature Spyware Doctor provides constant protection against malware. OnGuard works by blocking both known and unknown malware threats before they can install and cause any harm to a computer. OnGuard constantly monitors for malicious behavior involving spyware processes, tracking cookies, malicious ActiveX objects, browser hijackers, keyloggers, Trojans and more.

Advanced Detection and Removal Technology
- By running an Intelli-Scan™, Full Scan or Custom Scan, Spyware Doctor will inspect the computer for all types of spyware and virus1 infections. Spyware Doctor is top rated by industry experts as being extremely effective in removing particularly nefarious threats such as rootkits and keyloggers2.
-
 The unique Intelli-Scan™ feature is specifically designed to hunt swiftly and kill active running spyware threats in as little as 3 minutes3, attributed to the intuitive and patent-pending spider scanning technology. This new technology works intelligently by using a combination of signature and behavioral scanning techniques to quickly and effectively identify internet threats.

Protection against zero-day threats - Behavioral Heuristic Detection
Spyware Doctor delivers effective zero day protection against rootkits and keyloggers (in both scanning and OnGuard real-time areas) by monitoring for suspicious behavior and blocking applications that exhibit signs of malicious activity.

Advanced Rootkit Detection
Spyware Doctor is capable of detecting and removing hidden processes and files associated with complex threats and rootkits. Using behavioral techniques, rootkits and other items that attempt to hide themselves deep in the computer operating system are effectively detected and removed.

Works silently in the background with low CPU usage
When in monitoring mode Spyware Doctor has been designed to work silently in the background, with little impact to the end user, threats are blocked and removed without any system impact, while only a small alert window is displayed to advise the user it has been protected against an attack. When running a scan, the CPU Priority settings allow users to lower the priority of the scanning in order to reduce CPU usage and impact to the computer while in use. Selecting this option may increase scan time but will ease CPU usage when other applications are running at the same time.

Automatic and silent Smart Updates
Frequent updates to detect and guard computers against new threats and viruses as well as provide enhancements to Spyware Doctor are automatically installed and downloaded through the Smart Update function. Threat signatures are updated every business day or within hours of a high risk malware outbreak to protect you from the latest online threats.

Most internationally awarded anti-spyware product
Spyware Doctor is consistently awarded editors choice and top rating by numerous internationally recognized and respected industry publications, making Spyware Doctor the most internationally awarded anti-spyware product. For a full listing of all our awards visit: www.pctools.com/company/awards/

Additional Add-ons:

Virus Protection
Available as an optional add-on to Spyware Doctor, the anti-virus component provides protection against all kinds of viruses, worms, Trojan horse threats, and other malicious infections to ensure complete protection against internet threats. It is recommended to install the anti-virus add-on if there is no other virus protection on the computer.

Email Protection
Email Guard provides protection against, and instantly removes, spyware and viruses being sent or received via e-mails. All popular e-mail applications (such as Outlook Express™ & Netscape® Mail and Thunderbird) that use POP, IMAP or SMTP are supported by Email Guard.

Internet Browsing Protection
Site Guard provides advanced protection against potential malicious websites and phishing attacks where dangerous site are masquerading as legitimate e-Commerce sites. Site Guard will detect malicious websites and block access to them, ensuring the computer cannot be infected.

Designed for Windows® Vista™ 32-bit, XP and 2000.

What's New in Spyware Doctor 6.0 :

Latest protection from unknown threats
- Spyware Doctor now has Behavior Guard, providing you with the latest pro-active behavioral-based technology against zero-day (never seen before) threats. Built on the award-winning ThreatFire technology, Behavior Guard has been seamlessly incorporated into Spyware Doctor to offer you leading protection. This new technology protects you when some anti-virus products give up! Read more about behavior-based protection.

Improved detection capabilities:
- Spyware Doctor has been enhanced to improve detection effectiveness. In particular, each individual signature created in the threat database is optimized so that it is capable of detecting multiple variations of malware threats (threat variants) while maintaining minimal system resource usage (memory footprint).

Swift clean-up for heavily infected computers:
- Spyware Doctor is able to detect and remove threats on heavily infected computers faster and easier than ever before. Sometimes your computer is so highly infected that you may find yourself unable to install or run security software except when in the ‘safe mode’ of Windows.
- In these cases, malware consumes computer resources so resulting in lengthy scanning and removal times. is now armed with the technology to scan in safe mode faster and more effectively by forcing your computer to take a higher priority over the scan than the malware and other software attempting to run on your system.

Improved Hacker Defense :
- Further improvements have been included to enhance our own defense against malware threats attempting to interfere with the effectiveness of Spyware Doctor . Our hacker defense system means you can rest assured that your computer system has the most comprehensive protection while ensuring that malware threats don’t impede on the functionality or effectiveness of Spyware Doctor.
- The new hacker defense utilizes a particular feature available in Windows Vista (known as ASLR) to make it difficult for hackers to exploit or gain control over Spyware Doctor .

Other enhancements:
o Support for Windows Security Centre in Windows Vista Service Pack 1
o The real-time protection module is now referred to as Intelli Guard®
o Enhanced error reporting to assist with diagnosis of program crashes (hackers!).





Enjoy...

17 May 2010

Online Scanners



As we all know ... the only  good (that don't submit files ) multiple scaners are novirusthanks.org and virus-trap.org ,but now virus-trap is not free anymore ,so only novirusthanks remains  (and the new AvHide.com scanner)
>>>> the traffic on novirusthanks is huge and the scanner is down most of the time
:(

People are looking for solutions ...
of course that HH multiscan would be a solution ....but there are many disadvantages : you have to do all those updates,then find serials,keys for AV ... + only available for download is the Lite version >>
is dosen't have AVG,Kaspersky,Nod32,Norton ,all the important ones
 :(

Scanere Online - Virus
AhnLab   http://global.ahnlab.com/global/products/myv3.html
AVG / Ewido   http://www.ewido.net/en/onlinescan/
Bit Defender   http://virusscanonline.org/scanner/online/free.html
CA Threat Scanner   http://cainternetsecurity.net/entscanner/
Comodo   http://personalfirewall.comodo.com/scan/avscanner.html
Eset   http://www.eset.com/onlinescan/
F-Secure   http://www.f-secure.com/en_EMEA/security/security-lab/tools-and-services/online-scanner/
Kaspersky   http://www.kaspersky.com/virusscanner
McAfee   http://home.mcafee.com/Downloads/FreeScan.aspx
Microsoft   http://onecare.live.com/site/en-us/default.htm
Panda   http://www.pandasecurity.com/homeusers/solutions/activescan/
PC Pitstop   http://www.pcpitstop.com/antivirus/AV.asp
Rising   http://online.rising.com.cn/order/KillVirus_EN_Rav.asp
Symantec   http://security.symantec.com/sscv6/WelcomePage.asp
Trend Micro   http://housecall.trendmicro.com/


Scanere Online - Spyware 
A-Squared   http://www.emsisoft.com/en/software/ax/
AhnLab   http://global.ahnlab.com/global/products/myspyzero.html
eTrust PestScan   http://www3.ca.com/securityadvisor/pestscan/
File Research Center   http://www.fileresearchcenter.com/whatsrunningpre.html?tag=INDEX
Panda   http://www.pandasoftware.com/virus_info/spyware/test/
Trend Micro   http://www.trendmicro.com/spyware-scan/
Zone Labs   http://www.zonelabs.com/store/content/promotions/spywarescanner/scanner.jsp


Scanere Online - All
Allthreats   http://www.allthreats.com/index.pl
Anubis   http://anubis.iseclab.org/
http://anubis.iseclab.org/?action=advanced_form
Avast!   http://onlinescan.avast.com/
Clam Antivirus   http://cgi.clamav.net/sendvirus.cgi
DrWeb   http://online.us.drweb.com/
F-Secure   https://analysis.f-secure.com/portal/login.html
Registration required to view the results
Jotti   http://virusscan.jotti.org/
Kaspersky   http://www.kaspersky.com/scanforvirus
NoVirusThanks   http://scanner.novirusthanks.org/
PC Pitstop   http://www.pcpitstop.com/antivirus/AV.asp
Threat Expert   http://www.threatexpert.com/filescan.aspx
VirSCAN   http://virscan.org/
Virus Chief   http://www.viruschief.com/
Virus.Org   http://scanner.virus.org/
VirusTotal   http://virustotal.com/
Virus-Trap   http://virus-trap.org/
Enjoy...

27 November 2009

Newfolder Virus The Solution



Problem::

Whenever I open a folder, another folder with the same name is created under it.

Solution::

Your system is infected by a variant of Indonesian virus called Brontok/Rontokbro. It creates a sub-folder in a folder with same name. Most of the times it comes from mobile memory cards. Scan with a good anti-virus and remove the virus. Also download HijackThis and scan your system with it in Safe Mode, then fix following entries:

C:\WINDOWS\system32\SSVICHOSST.exe

F2 - REG:system.ini: Shell=Explorer.exe SSVICHOSST.exe

O4 - HKCU\..\Run: [Yahoo Messengger] C:\WINDOWS\system32\SSVICHOSST.exe

O7 - HKCU\Software\Microsoft\Windows\Current Version\Policies\System, DisableRegedit=1
Enjoy...

"Open with" when Click On Any Drive...THe Solution



Problem ::

Whenever I double-click on any drive in My Computer, “Open with” dialog box opens OR I get following error message:

Cannot find copy.exe. Make sure you have typed the name correctly and then try again.

Solution::

Enable “Show hidden files” option in “Tools -> Folder Options” and then search for “Autorun.inf” file in all drivers and if you get them in root of any drive (e.g. in C:\, D:\ and so on), delete them.

Enjoy...

Problem:Search Box Open On Clicking Drives



Double click opens search option
Double-clicking any drive opens search option

Solution 1:
----------------------------------------------
That's a virus named as ravmon.exe and autorun.inf
Scan first with a good antivirus [Nod32 Recommanded]
then try this trick....

First show the hidden files and folders options then try this method

1. Go to Start-->run and type cmd then click ok

2. If u want to remove the infected file from c drive then type C: in command prompt and press enter

3. Type autorun.inf and press enter
autorun.inf file is opened

4. Now type "attrib autorun.inf -s -h -r" and press enter

5. Now delete the file by typing
"del autorun.inf" and press enter

6.Now type autorun.inf and press enter now, u will find no infected autorun.inf file.

7. same way do for all other drives then restart ur pc
Solution 2:
---------------------------------------------------------------

To resolve this problem, edit the registry to set the value data for the Default string value in the registry keys that are described in the "Cause" section of this article to none:
1. Start Registry Editor (Regedt32.exe).
2. Locate and then click the Default value under the following keys in the registry if this problem occurs with folders:
HKEY_CLASSES_ROOT\Directory\shell
If this problem occurs with drives:
HKEY_CLASSES_ROOT\Drive\shell
3. Click Modify on the Edit menu.
4. Type none in the Value data box, and then click OK.
5. Quit Registry Editor.

orkut, firefox, youtube virus --- heap41a
orkut, firefox, youtube virus
------------------------------------------------------------

removal procedure for orkut, firefox, youtube virus

when u r system effected, it show following messages when u open
firfox-I DNT HATE MOZILLA BUT USE IE OR ELSE...
orkut- Orkut is banned you fool, The administrators didnt write this program guess who did?? MUHAHAHA!!

to remove this do the following things
1.goto taskmanager-->processes find svchost.exe under your username (warning not a svchost.exe under system as username) end or kill these processes by pressing endprocess
2.now goto your "c" drive(where you installed your windows) then type "c:\heap41a" in address bar...(or delete through command prompt)
3. delete all the contents of the "c:\heap41a" folder
4.now open register editor by running "regedit" in run command menu( start-->run )
5.goto "edit" then "find" search for "heap41a" delete that key like "C:\heap41a\svchost.exe C:\heap(some number)\std.txt"
6.now close register editor...
-----------------------------------------

NOTE
Please apply these tricks only after a gud system scan (after removal of viruses).....otherwise the viruses/trojan processes will make these changes back...


Enjoy...

Get Your Old Pc Back After Attack Of Viruses



In today's world, most of the antiviruses are able to remove the viruses but what about tha changes caused by them to the system...

here im posting some changes which anti-viruses do not undo and we have to do them manually...

These are not discovered by me...but i collected them one-by-one and can be applied using diff methods possible...These r practically useful by most of the users and easily applicable...

PS: gpedit.msc is not available in windows xp home

Command Prompt Disabled
SOLUTION 1:
----------------------------

Start->Run=>gpedit.msc
OR
C:/windows/system32/
find gpedit.msc double click on that

goto user Configuration
select Administrative Templates
select System
on the right pane double click on "prevent access to the command prompt"
in the popup select "disabled" click on apply
then ok......

SOLUTION 2:
---------------------------------------------------


Open Registry Editor (Regedit.exe) and navigate to:

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System]

In the right-pane, double-click DisableCMD and set it's data to 0

SOLUTION 3:
--------------------------------------



Click on Start >> Run and in the Open box type:

REG add HKCU\Software\Policies\Microsoft\Windows\System /v DisableCMD /t REG_DWORD /d 0 /f

Type it in correctly. It is better to copy and paste. Then click OK.

Folder Options Disabled
go to run
type "control folders"
if it doesnt work, try:

-----------------------------------------------------
Solution 1:

->Run -> Type gpedit.msc
Then:
->User Configuration ->Administrative Templates --> Windows Components --> Windows Explorer-> Removes the Folder Options menu item from the Tools menu.
Right click:
-> Properties -> Disable ->Apply -> Again set it to not configured


Solution 2:
------------------------------------

Go to Startmenu->Run and enter regedit there and press ok to execute regedit (registry editor). There you’ll see a tree like structure of folders like stuff in left. There navigate to registry entry HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
and on right side you’ll see many values.

Out of these values in right see a value (key) named “NoFolderOptions” .Double click after highlighting it, if there under value box it’s written 1 then change it to 0 and press enter. Exit the registry editor and close any folder and open again to see the settings.If you want to disable Folder Options then set the value of “NoFolderOptions” to 1 (and to retrieve it back change it to 0).



Enjoy...

Views This Month

 

HaCk-O-PeDia - The Hacker's Encyclopedia. Copyright 2010 All Rights Reserved To Ankit