Subscribe:

Ads 468x60px

Saturday, 8 March 2014

5 of the most common mistake made by beginners in hacking


5 most common mistake made by beginners in hacking



I decided to create tutorial for Novice Hack in, we all have gone through, we have committed mistake
without knowledge so I decided to share with you,


5 of the most common mistake made by beginners in hacking :

1) Never trust sites that ask you for money in exchange for Software piracy or claim Hack Email
Id in exchange for money . All these things are Scam . Fake software named : Fake :

2) There is no software DIRECT Hack Facebook , Google , Yahoo or any other important site .
All software that claim to do is scam . They are simply designed to take your money and
 in the worst cases , these software are : Trojans and keyloggers in them.
Therefore your account is hacked.

3 ) NEVER NEVER use keyloggers or Trojans that you find freeware on the Internet. The pirates are not
stupid . they compile keyloggers and trojans with almost all software and when you install them , you
are already hacked before trying to hack others.

4) You will never be a good hacker without knowledge of programming languages and scripting .
When you plan to use only the software ready and do not depend on them for all this piracy then your
functionality is limited to the functionality of the software. When you are not going to use your
brain , just do the right thing copy and paste , then?  how can you think you are a good hacker?


5) If you are a good hacker , you have to become a good programmer, writer good script , a
good web developer and an expert in excellent security . Well all good Hacker / must have a
good knowledge of the various aspects and programming languages . To XSS (Cross Site Scripting ) , PHP,
SQL injection , phishing attacks , etc. footprint ... , Must be good at programming and scripting . And
when you know the loop holes are different vulnerabilities and safety tips you have become an expert in
computer security . So Never Ever Under believes that the term Hacker.Not a hacker is a person who
just hacks email id or servers , but a real Hacker is a computer genius whose knowledge of computers

more than anyone.
Posted by at 21:34 2 comments

Friday, 7 March 2014

How can you format your removable media or pen drive in NTFS file system.

How can you format your removable media or pen drive in NTFS file system.
Hi, I'm going to tell you that "how can you format your removable media or pen drive in NTFS file system instead of FAT or FAT32 ".
you can do it in just few steps.

 step 1:-  plug in your removable media or pen drive in your pc or laptop.

 step 2:-  after detecting it, open my computer and right click on your removable disk and select properties.

 step 3:-  a dialog box will be open and go to the tab   and select your disk listed bellow.

 step 4:-  after selecting  your disk, click on properties .

 step 4:- a dialog box will appear again and go to the tab   and click on "optimize for performance".
             then click on ok and close the tab.

 step 5:- now if you want to format your pen drive, simple right click on your disk in my computer and select format.

 step 6:- now there you can choose your file system  NTFS.
Posted by at 23:58 2 comments

Thursday, 6 March 2014

Software Collection



Software Collection





1 - PLAYSTATION EMULATOR 

You can play ps2 games on your pc with this utility,a very handy tool for gamers,its better than bleem in compatibility.


 2 - Windows Admin Password Reset (Small Linux disk) 

Its a small linux image which can resets the admin password.


 3 - RAPIDSHARE ACCOUNT CHECKER(New Mask Added) 

Title says it all.


 4 - SQL FUZZER WITH VIDEO TUTORIAL(Only 1.5mb) 

Powerfull tool for sql injection.


 5 - Ca0s SQL Perl Inj3ct0r v1

Good SQL injection tools source code.


 6 - Milw0rm_Search_Utility_v1.0 

Small utility which can search exploits for you.


 7 - Vaqxine Keylogger 

A very good tool by reputed member,it might not be FUD now but its a good tool.


 8 - Hackers Tool Box

Many handy tools.


 9 - Nathans Image Worm 

It replaces every image on victim's pc with your defined image


 10 - HTTP Recon 7.3

Use it know weather an exe is backdoored or not.Basically its for Fingerprinting and vulnerability analysis.


 11 - JKymmel's Crypter

For crypting you viruses.


 12 - Icon changer

Change the icon of any file


 ANONIMITY TOOLS


 13 - Proximitron

It proxifies every program you use even the command prompt.


 14 - RAT proxy

A tool to proxify yourself.Full info. attached.


 15 - Multi Proxy 

Changes Your proxy on just one click or every few seconds.


 16 - Jasager_Firmware_1.0 

Its a Wifi MitM Tool for faking Your Access Point,it has lots of deadly features.


 17 - Hide my windows installer 

Hides your running programs instantly


 SECURITY TOOLS


 18 - TrueCrypt Setup 6.2a 

It uses a powerfull encryption system used by government and agencies to encrypt your data.


 19 - NortOn GoBack

This tools has saved me lots of time from serious error,this is a must have tools,it can restore your pc to exact date and time.Its 1000 times better than system restore.


 20 - Anti_keylogger_sheild_v3.0

Now you don't have to worry about keyloggers and stealers,very usefull to have.


 21 - Process Explorer 

A utility for listing all the processes running.


 REVERSE ENGINEERING TOOLS


 22 - Resource Hacker

A good tool for reverse engg.


 23 - xvi32

A easy to use hexing tools.Very handy tool.


 24 - PE.Explorer for Reverse engg.

More advanced tool for hexing.


 DDOS TOOLS


 25 - ProDoS v1.0

Powerfull tool to ddos websites.Just like site hog


 26 - Ddos any site in this WWW

Title says it all.


 27 - Site_Hog_v1

One of the most powerfull ddos tool.


 28 - BFF DoS (Ping) v1.0
A good ddoser by BFF Productions


 29 - zDoS
Again a powerfull ddoser.


 30 - Secret Downloader 

Makes your victim download a trojan and run it hidden.


 NEWLY ADDED TOOLS


 31 - MD5 CRACKER BY XDEMO 

A good md5 Cracker.


 32 - PHISH GRABBER 

This tool will try to brute directories and files for the password log.In short it will hijack someone elses phishing log and their "hard work".
OCX and premade work list is included 


 33 - MASSIVE XXX PASSWORDS DUMP

TITLE SAYS IT ALL


 35 - KeyScrambler 
It encrypts all the keys you presses on the keyboard thereby protecting you from keyloggers,its a very usefull tool and it works great for me.


 36 - FUD GMAIL HACKER 
Awesome tool to hack gmail passwords,just needed little social engg.It makes victim feel that he/she is hacking a gmail id.


 37 - VNC CLIENT FOR YOUR MOBILE 

A VNC Client for J2ME (Java 2 Mobile Edition)
Posted by at 08:18 1 comments

Acunetix Web Vulnerability



Acunetix Web Vulnerability 




Keeping personal and important business information private is just as important as having a strong defense against the many threats that may impact onto the functioning of a simple home computer. When the security needs involve protecting a web server, there are several possibilities to add supplemental safety measures.

 First of all, the administrator should assess the current state of the network security and to do so, a utility like Acunetix Web Vulnerability Scanner may prove a gem. Mainly aimed at web applications and related content, the software is able to scan for and detect a wide range of exposures, many of which are common to several environments.

 For instance, with Acunetix Web Vulnerability Scanner it is possible to find out if a system is exposed to various types of code injection and execution, as well as to the widespread cross-site scripting (XSS) attacks.

 The program is also able to inspect folder permissions and discover potentially unsafe HTTP methods that may be active on the target web server. Port scanning is another activity you can try with this application because if it discovers open ports, Acunetix Web Vulnerability Scanner will immediately start testing in-depth the network security starting from that possible point of intrusion.

 You can also check out the data that is being sent by your web apps. For this purpose you have at your disposal a HTTP Sniffer and a HTTP Fuzzer to intercept, capture and modify the traffic, as well as check for dangerous flaws that would allow for a buffer overflow attack.

 Since it is packed with features and is accompanied by powerful technologies, Acunetix Web Vulnerability Scanner is a solid contender insofar as web server testing and network security examination are concerned. Quite user-friendly and not at all difficult to use, this software is indeed one that deserves a closer look if you have certain doubts that your environment is fool proof.


Posted by at 08:00 2 comments

Backtrack 5


Backtrack



 

Backtrack is Linux Based Penetration Testing Operating system which provides many inbuilt tools which are used for vulnerability assessment, exploitation and penetration testing. Apart from using metasploit framework on backtrack there is a complete series of "Exploitation Tools". The tools in Backtrack are divided into following broad categories.

Information Gathering
Vulnerability Assessment
Exploitation Tools
Privilege Escalation
Maintaining Access
Reverse Engineering
RFID Tools
Stress testing
Forensics
Reporting Tools
Services
Miscellaneous


Download Now
BackTrack 5 R3 Gnome 32bit
BackTrack 5 R3 KDE 64bit
BackTrack 5 R3 KDE 32bit
BackTrack 5 R3 Gnome 64bit
Posted by at 07:53 1 comments

Wednesday, 5 March 2014

Anonymous-Os !!


Anonymous-Os !! 






Anonymous Hackers released their own Operating System with name "Anonymous-OS", is Live is an ubuntu-based distribution and created under Ubuntu 11.10 and uses Mate desktop. You can create the LiveUSB with Unetbootin.

Pre-installed apps on Anonymous-OS

ParolaPass Password Generator - Find Host IP - Anonymous HOIC - Ddosim - Pyloris - Slowloris - TorsHammer - Sqlmap - Havij - Sql Poison - Admin Finder - John the Ripper - Hash Identifier - Tor - XChat IRC - Pidgin - Vidalia - Polipo - JonDo - i2p - Wireshark - Zenmap …and more 

Warning : It is not developed by any Genuine Source, can be backdoored OS by any Law enforcement Company or Hacker. Use at your own Risk.

Another Live OS for anonymity available called "Tails". Which is a live CD or live USB that aims at preserving your privacy and anonymity.It helps you to use the Internet anonymously almost anywhere you go and on any computer:all connections to the Internet are forced to go through the Tor network or to leave no trace on the computer you're using unless you ask it explicitly, or use state-of-the-art cryptographic tools to encrypt your files, email and instant messaging. 


The password to log in is : anon
Posted by at 09:44 1 comments

Kali Linux !!


Kali Linux !! 








Kali Linux is a Debian-derived Linux distribution designed for digital forensics and penetration testing. It is maintained and funded by Offensive Security Ltd. Mati Aharoni and Devon Kearns of Offensive Security developed it by rewriting BackTrack, their previous forensics Linux distribution.

 Kali Linux is preinstalled with numerous penetration-testing programs, including nmap (a port scanner), Wireshark (a packet analyzer), John the Ripper (a password cracker), and Aircrack-ng (a software suite for penetration-testing wireless LANs).Users may run Kali Linux from a hard disk, live CD, or live USB. It is a supported platform of the Metasploit Project's Metasploit Framework, a tool for developing and executing security exploits.

 Kali Linux is distributed in 32- and 64-bit images for use on hosts based on the x86 instruction set, as well as an image for the ARM architecture for use on the Raspberry Pi computer and on Samsung's ARM Chromebook.








Posted by at 09:41 1 comments

How To Choose The Best Linux Distribution For You

How To Choose The Best Linux Distribution For You







I saw that many people have problems choosing an linux distro that will suit them. 
So i found an exelent Linux quiz that tells you what linux distro will suit you the best Here are somescreen shots i took. The test is much more longer 









For the End Results You will get something like this





Posted by at 08:28 2 comments

Dump Password Using Pwdump And Fgdump

Dump Password Using Pwdump And Fgdump



One of the crucial stage in hacking is dumping passwords. As we know passwords are stored in encrypted form in system, these encrypted passwords needs to be dumped to be cracked before using some good password cracking tool like Lopht Crack, John The Ripper etc. But before we crack passwords lets make our-self aware of two cool password hash dumping tools
.

Pwdump6:
It is modern version of pwdump3 program that was written to crack Windows 2k and Windows NT passwords few years back. It is able to extract passwords in-spite of syskey feature is enabled or not on system. At present pwdump can dump passwords for Windows 2k/XP/2003/Vista/2008. No matter how many OS it supports the tool comes handy when you want to dump password hashes from server OS. Pwdump works on remote system by running hash extraction as service because Windows NT systems allows services to be installed remotely.

Fgdump:
It is utility to dump passwords on Windows NT/2000/XP/2003/Vista systems. Fgdump was once started as wrapper to pwdump and now stands out as independent password dumping program.

Note: Both programs will get detected as virus or Trojans by any anti-virus so before using them you have to disable your anti-virus as well as firewall. Don't forget to read details about how to use them properly since sometimes improper use may lead to system reboot and that's why I am not personally providing any tutorial on how to use it. Be careful while using these programs.
Posted by at 01:17 2 comments

Monday, 16 December 2013

Types Of Password Attack-2

Types Of Password Attack-2


In last section we covered basic types of password attacks. Here in this section we will cover them in little detail. But before you read this post if you haven't read the previous post on types of password attacks I urge you to read it. So now lets move on to the second part of types of password hacking.

Passive Online Attack Types:

Wire Sniffing:

Most of the time when we talk of passive online attack we consider it as sniffing the password on wired or wireless networks. The password is captured during authentication phase and then compared to dictionary file or word list. The majority of Sniffer tools are ideally suited to sniff data in hub environment. These tools are also known as passive sniffers as they passively wait for data to be sent before capturing the information. User account passwords are commonly hashed or encrypted when sent on the network to prevent unauthorized access and use. In such cases hacker uses his special tools to crack password.

Man In The Middle Attack:

In man in the middle attack an attacker intercepts the authentication server and then captures traffic and forwards it to server. To perform this attack a hacker inserts a sniffer between client and server, like this he is able to sniff from both sides and can also capture password.

Replay Attack:

It occurs when the hacker intercepts the password and en routes to the authentication server and then captures and resend the authentication packets for later authentication. In this manner, the hacker doesn’t have to break the password or learn the password through MITM but rather captures the password and reuses the password-authentication packets later to authenticate as the client.

Active Online Attack:

Password Guessing:

Password guessing is an active online attack. It relies on human factor involved in creating passwords and only works on weak passwords. In this method an attacker tries to build a dictionary of words and names to make all possible combination that can be used as password. The attacker performs this attack with help of program that gives hundreds and thousands of words per second. A good password is hard to guess and easy to remember, so you must have good password to protect yourself from this kind of attack.

Offline Attack:

Dictionary Attack:

A dictionary attack is the simplest and quickest of type of attack. It’s used to identify a password that is an actual word, which can be found in a dictionary. Most commonly, the attack uses a dictionary file of possible words, which is hashed using the same algorithm used by the authentication process. Then, the hashed dictionary words are compared with hashed passwords as the user logs on, or with passwords stored in a file on the server. The dictionary attack works only if the password is an actual dictionary word, therefore this type of attack has some limitations. It can’t be used against strong passwords containing numbers or other symbols.

Hybrid Attacks:

A hybrid attack is the next level of attack a hacker attempts if the password can’t be found using a dictionary attack. The hybrid attack starts with a dictionary file and substitutes numbers and symbols for characters in the password. For example, many users add the number 1 to the end of their password to meet strong password requirements. A hybrid attack is designed to find those types of anomalies in passwords.

Brute Force:

The most time-consuming type of attack is a brute-force attack, which tries every possible combination of uppercase and lowercase letters, numbers, and symbols. A brute-force attack is the slowest of the three types of attacks because of the many possible combination of characters in the password. However, brute force is effective; given enough time and processing power, all passwords can eventually be identified.

Pre-Computed Hash:

Encrypted password that are stored can prove useless against dictionary attacks. If the file contains the encrypted password in readable format, the attacker can easily detect the hash function. He/she can then decrypt each and every word in the dictionary using hash function an then compare with the encrypted password. Storage of hashes requires large memory space and hence time-space trade-off is used to reduce memory space required to store hashes.

Syllable Attack:

Syllable attack is combination of both brute force and dictionary attack. This cracking technique is used when the password is not an existing word. Attackers use the dictionary and other methods to crack it. It also uses the possible combination of every word present in the dictionary.

Rule Based Attack:

This type of attack is used when attacker gets some information about the password. This is the most powerful attack because the cracker knows about the type of password. This technique involves use of brute force, dictionary and syllable attacks.

Rainbow Attack:

Rainbow attack is nothing but a little advanced from of precomputed hash. It uses already calculated information stored in memory to crack the cryptography. In rainbow attack the same technique is used, the password hash table is created in advance and stored into the memory. Such a plain table is known as rainbow table. A rainbow table is a look-up table specially used in recovering the plain text password from a cipher-text.

Non-Technical Attack:

Social Engineering:

Social engineering is the art of interacting with people either face to face or over the telephone and getting them to give out valuable information such as passwords. Social engineering relies on people’s good nature and desire to help others. Many times, a help desk is the target of a social-engineering attack because their job is to help people—and recovering or resetting passwords is a common function of the help desk. The best defense against social engineering attacks is security awareness training for all employees and security procedures for resetting passwords.

Shoulder Surfing:

Shoulder surfing involves looking over someone’s shoulder as they type a password. This can be effective when the hacker is in close proximity to the user and the system. Special screens that make it difficult to see the computer screen from an angle can cut down on shoulder surfing. In addition, employee awareness and training can virtually eliminate this type of attack.

Dumpster Diving:

Dumpster diving hackers look through the trash for information such as passwords, which may be written down on a piece of paper. Again, security awareness training on shredding important documents can prevent a hacker from gathering passwords by dumpster diving.

Posted by at 07:42 1 comments

Hack Using Default Password

Hack Using Default Password


Password hacking is complicated stage in hacking cycle since it is not only the step which allows you access in victim’s PC but it marks origin of real hacking. But before trying anything else an attacker will always try to exploit victim using default password of device used by victim. A unchanged default password is always held as misconfiguration as per hacking is concerned. An attacker at very first stage may try to crack BIOS passwords,

router passwords, switch passwords, dial-up passwords, modem passwords and passwords of other networking and communication devices by using their default password. There are several sites available which store huge database of default passwords. Following list shows some of them the list of password they store are more than sufficient, if you have this list you can breach any device with default password.

http://www.defaultpassword.com/:

So far as I know http://www.defaultpassword.com/ is biggest database of default passwords available online. You can browse through list of thousands of manufactures and their product. You can also search for specific manufacturer and its device and can also contribute list for newer default passwords.

http://cirt.net/passwords:

It is second biggest and much accurately sorted default password database as per my view is concerned. It has listed all vendors in their alphabetical order. When you click on vendors name it shows you device name, its default password and few word description about how to use it for attack.

http://www.virus.org/default-password:

Whenever you want to find out default password I will recommended try this site first. You can easily search for passwords using their navigation. Searching for password in their database is so easy you will hardly need any effort to search, since you can search by vendor name, product name and even by model number. Their database includes default password for equipments and software from many vendors including 3Com, Cisco, Nortel, IBM, HP, Compaq, Digital, D-link, Linksys, Oracle, Microsoft and many more.

http://www.routerpasswords.com/:

It is special database to search passwords for routers, select router manufacturer and press find password it will list all models along with their numbers, user-names and password.

Some other sites that store default password.

http://dopeman.org/default_passwords.html

http://www.default-password.info/ 

http://www.defaultpassword.us/ 

http://www.passwordsdatabase.com/ 

http://www.phenoelit-us.org/dpl/dpl.html

http://www.cyxla.com/passwords/passwords.html

http://defaultpasswords.in/

Posted by at 07:40 1 comments

Types Of Password Attack

Types Of Password Attack


The next stage to Enumeration is system hacking and password hacking is one of the crucial part of hacking a system. Depending on how an attacker tries to attack password for hacking password attacks can be classified as follows,

Passive Online Attack

Active Online Attack

Offline Attack

Non-Technical Attack

Passive Online Attack:

In passive online attacks an attacker don’t contact with authorizing party for stealing password, in other words he attempts password hacking but without communicating with victim or victim account. Types of passive online attacks includes wire sniffing, Man in the middle attack and reply attack.

Active Online Attack:

This type of attack can be directly termed as password guessing. An attacker tries number of passwords one by one against victim to crack his/her password.

Offline Attack:

Offline password attacks are performed from a location other than the actual computer where the password reside or were used. Offline attacks requires physical access to the computer which stores password file, the attacker copies the password file and then tries to break passwords in his own system. Offline attacks include, dictionary attacks, hybrid attacks, brute force attack, precomputed hash attacks, syllable attacks, rule based attacks and rainbow attacks.

Non Technical Attacks:

This type of attacks does not require any technical knowledge hence termed as non-technical attacks. This kind of attacks may include, social engineering, shoulder surfing, keyboard sniffing and dumpster diving.

Posted by at 07:34 1 comments

Password Hacking

Password Hacking


Password Hacking is a process of retrieving or stealing password from data in system or data that is transmitted via system. The most common way of password hacking is guessing password. In this tutorial we will try to cover most commonly used methods used by hackers to hack your passwords

.

Password Guessing:

If a hacker wants to hack your password, he may first of all take out all information about you like which is your favorite team, your girlfriend’s/boyfriend’s name, child name etc. whichever matters you most and you can remember easily. Then he creates dictionary of all those words and then tries it one by one against your account. If you want to prevent yourself from password guessing better never keep any guess-able password.

Default Password:

The most common mistake many people do is they never change default password of their accounts/devices. Even before guessing password a hacker may try default passwords only. He can get complete list of default password from www.defaultpassword.com .

Using Brute Force:

In this type of password hacking a hacker attempts to log-in with all possible combination of keys available on keyboard. This is very tedious task and a hacker may give up if he fails to crack that password for several days. Better keep long passwords with all type of characters mixed up in it.



Social Engineering:

An attacker can call as a person of importance or technical support asking for password. Social Engineering works because of human tendency to help and be kind. Whenever someone calls you for or as a technical help and as a person of importance better ask questions before you reveal sensitive information, remember world is not as good as you think. Your tendency to be kind and helpful to someone for no reason for your privacy may put you in serious trouble.

Rainbow Tables:

Rainbow table is dictionary of precompiled hashes of password. An attacker may try to compare hashes recovered from your system to the dictionary of precompiled hashes. If a match is found then that password will work against your account. A good password with characters, special symbols, letters and numbers can not be easily found in any dictionary and hence they will work defensively against hashes dictionary.

Phishing:

In this kind of password hacking an attacker creates a replica of site on which you have an account. Then anyhow he tries to make you click on link to that site and if you get fooled as it is the regular site that you visit and when you enter password he/she logs your password and even gets access to your original account. This is used for hacking email accounts, social networking accounts and even for stealing credit card numbers.

Sniffing Around Network:

Sniffing means capturing data that flows through network. Even if the attacker gets access to password hashes through network he/she can easily crack your password and if proper protection is not provided this password travel as plain text finally revealing your password to attacker without any effort.


Using Spy Software:

A spy software can not be only used to get key logs by can also be used by attacker to eye your networking habits, get complete access to your computer, download, move or delete files from your system and much more.

Posted by at 07:32 1 comments

Computer Virus

Computer Virus

Computer VIRUS i.e Vital Information Resource Under Seize are considered as very first form of computer threats. Computer VIRUS usually replicate themselves, damage your files and are also able to distribute themselves on network. Virus is usually a executable file. It may be different or same for different Operating system.

Most of the times virus disguise themselves as system files so that they can avoid detection. Their detection prevention mechanism is so strong that a common user can never figure out, whether a file is virus or just another system file or data file.

Viruses can be classified as follows:

Boot Sector Virus:- Boot sector viruses or MBR Viruses are responsible for damaging boot records of a system. When executed they copy themselves in boot sector and load themselves every time the system starts.(MBR i.e Master Boot Record is the record stored on hard disk or bootable CD which stores information about startup of system. In other words files stored in MBR are the very first thing that is loaded in memory for execution.). Examples of boot sector virus are Form, Michelangelo, Stone, Disk Killer etc.

File Virus:- File virus, as its name suggests are made to damage your files. They can also damage your program files and hence also known as Program Virus. They usually infect executable files, system files and driver files. Example of file virus are Sunday, Cascade etc.

Multipartite Virus:- Multipartite virus are hybrid viruses. They have properties of both boot sector and file virus. So they are more dangerous than first two mentioned above because they not only infect boot sector but also system files. Common examples are Invader, Flip and Tequila.



Stealth Viruses:-Stealth viruses are able to hide themselves to avoid detection They can store themselves in memory during scanning by Anti-Virus Programs and get restored when scanning is over. Due to their this type of stealthy nature they are named as Stealth Virus. They are so well programmed that they can even hide themselves inside other files without increasing size of file. This is also one of the mechanism they use to survive from Anti-Virus Programs. These viruses are one of the most difficult viruses to detect. Common examples are Frodo, Joshi, Whale etc.

Polymorphic Viruses:- A virus that can encrypt its code in different ways so that it appears differently in each infection. These viruses are more difficult to detect. Common examples are Involuntary, Simulate, Cascade, Pheonix etc.

Macro Viruses: Virus that infects the macros within a document or template. When you open a word processing or spreadsheet document, the macro virus is activated and it infects the Normal template (Normal.dot)-a general purpose file that stores default document formatting settings. Every document you open refers to the Normal template, and hence gets infected with the macro virus. Since this virus attaches itself to documents, the infection can spread if such documents are opened on other computers. The very dangerous thing about these viruses is they are not platform specific that means a code once written can infect any OS. Common examples are DMV, Word Concept etc.

Active-X Virus: Active-X viruses are under emerging stage. They are usually executed on victims PC via web browser. The JAVA scripts, Perl scripts, Flash scripts enabled on victim's PC without any Firewall, Anti-Virus, Internet Security Suite can easily obtain access to PC. Keeping Video and Audio plug ins ready without protection can bring Active-X Virus to your party.



How you can keep your computer virus free:

Following are some simple tips that will help you keep your computer safe from viruses,

1.Never open any pen-drive by double clicking on it open it by address pane from my computer.

2.Always keep your auto play option off.

This is how you can do it, for windows xp from start menu, click on run command write "gpeit.msc" and press enter “group policy editor” will open in front of you, now navigate

user configuration-->administrative templates-->system, find out "turn off autoplay" and make it enabled. For vista and 7 you can directly turn it off by control panel.

3.If you are buying a computer make sure you buy only original OS for it, a legal system gets updated and also gets support from vendors. A pirated copy of OS may itself contain any malicious code that may even help viruses to stay hidden from anti-virus.

4.Always keep your system and anti-virus updated and use firewall while on Internet.

5.Always keep hidden folders option and hide file types disabled, to do this open any instance of "explorer.exe" goto

tools-->folder options-->view

now disable options "do not show hidden files and folders" and "hide extensions of known files". This will help you keep eye on suspicious files and folders.

Posted by at 07:27 1 comments

Malware

Malware


Malware, the word itself is derived from two words malicious software. Thus a malware actually represents a malicious code. A malware can be defined as a software or firmware that is intended to perform unauthorized and unwanted process that will result in confidentiality, integrity and availability of information. A malware code can be written in any language and for any device including computers, PDA’s, mobile phones etc.

Though it is defined that a malware affects on confidentiality, integrity and availability of information, its adverse results are not only limited to information security. It may also result in loss of any digital/electronic property, stealing of information, penalizing dependability, usability, performance and privacy. Privacy is biggest factor that comes in play today due to malware . You may have noticed that malware is most of the times interchangeably used with virus, its just because virus was the very first type of malware, malware is also known as badware or harmware.

Classification Of Malwares:

VIRUS:

Better known as Vital Information Resource Under Seize(VIRUS) is very first form of computer threat. They can replicate themselves and can also cause severe damage to data and information. They can hide themselves in other files and can also go in stealthy mode to avoid detection. Most of the times a VIRUS is a executable code.

Worms:

Worms are just capable of everything that a virus is capable of but its main feature is it can easily replicate itself on network and hence worm is also known as network worm. A worm is able to creep easily among systems as hence known as worm. A worm always needs a vector for creeping like email attachments, IM chat clients or IRC.

Trojan:

Trojan is a malicious program/code which is used for remote access to target computer and then attack using unauthorized access to target or victim's computer and causes damage to the system. Trojan is a small hidden code inside another program that's why it easily enters system without knowledge of computer user.

Spyware:

A spy ware is a piece of malicious code installed in system to monitor activities of person using the system. Basically idea of spyware also came from system monitoring tools.A spyware is capable of logging key strokes, also it can take screen shots and if you have Internet connection then it can even mail logs to specified email-address or transfer logs via ftp to designated location. Beyond just monitoring it can record your computing habits including which site you browse more, at what time you prefer to be on system or amount of time you spend on computer. A spyware can be used to track all information about your social-networking and IRC(Internet Relay Chat) Clients including all major and minor chat clients example: Google Talk, Rediff Messenger, Yahoo Messenger, Microsoft Live Chat absolutely every thing related to IRC client is exposed to spyware.

Backdoor:

Backdoors can be termed as a malicious code which gives access to an intruder to your system. A backdoor can provide partial or complete access to an attacker to your system. A backdoor can provide an attacker almost unlimited rights as an administrator and allow him/her to install applications and malicious code in your system. A backdoor is generally used to access system remotely and steal personal information including e-mail id' s, members information and credit card numbers.

Rootkit:

Root-Kit grants almost unlimited rights to attacker and attacker has full access to all hardware, software and services running on victim's system. An attacker can use Root-Kit to install backdoor or key logger on remote system. Root-Kit hides itself as system program and some times may not even appear in process lists.

Embedded Malicious Code:

As stated earlier a malware can be software or firmware, it must be clear a system hardware or a software might be already embedded with malicious code.

Crimeware:

They are malicious codes used for performing crimes related to computers. It may include use of one or more malware already available in list.

Posted by at 07:20 1 comments
Subscribe to: Posts (Atom)