Internet security

1. Use a firewall
We strongly recommend the use of some type of firewall product for Internet security, such as a network appliance or a personal firewall software package. Intruders are constantly scanning home user systems for known vulnerabilities. Network firewalls (whether software or hardware-based) can provide some degree of protection against these attacks.
2. Don't open unknown email attachments[ Internet security]
Before opening any email attachments, be sure you know the source of the attachment. It is not enough that the mail originated from an address you recognize. The Melissa virus spread precisely because it originated from a familiar address. Malicious code might be distributed in amusing or enticing programs. [ Internet security]
If you must open an attachment before you can verify the source, we suggest the following procedure:

a. save the file to your hard disk
b. scan the file using your antivirus software
c. open the file
For additional protection, you can disconnect or lock your computer's network connection before opening the file.
Following these steps will reduce, but not wholly eliminate, the chance that any malicious code contained in the attachment might spread from your computer to others.
3. Don't run programs of unknown origin
Never run a program unless you know it to be authored by a person or company that you trust. Also, don't send programs of unknown origin to your friends or coworkers simply because they are amusing -- they might contain a Trojan horse program. These programs seriously hurt Internet Security.

4. Disable hidden filename extensions
Windows operating systems contain an option to "Hide file extensions for known file types". The option is enabled by default, but you can disable this option in order to have file extensions displayed by Windows. After disabling this option, there are still some file extensions that, by default, will continue to remain hidden.
There is a registry value which, if set, will cause Windows to hide certain file extensions regardless of user configuration choices elsewhere in the operating system. The "NeverShowExt" registry value is used to hide the extensions for basic Windows file types. For example, the ".LNK" extension associated with Windows shortcuts remains hidden even after a user has turned off the option to hide extensions.[ Internet security]

5. Keep all applications, including your operating system, patched
Vendors will usually release patches for their software when a vulnerability has been discovered. Most product documentation offers a method to get updates and patches. You should be able to obtain updates from the vendor's web site. Read the manuals or browse the vendor's web site for more information.
Some applications will automatically check for available updates, and many vendors offer automatic notification of updates via a mailing list. Look on your vendor's web site for information about automatic notification. If no mailing list or other automated notification mechanism is offered you may need to check periodically for updates.[ Internet security]

6. Turn off your computer or disconnect from the network when not in use
Turn off your computer or disconnect its Ethernet interface when you are not using it. An intruder cannot attack your computer if it is powered off or otherwise completely disconnected from the network.[ Internet security]

7. Disable Java, JavaScript, and ActiveX if possible
Be aware of the risks involved in the use of "mobile code" such as ActiveX, Java, and JavaScript. A malicious web developer may attach a script to something sent to a web site, such as a URL, an element in a form, or a database inquiry. Later, when the web site responds to you, the malicious script is transferred to your browser.[ Internet security]
The most significant impact of this vulnerability can be avoided by disabling all scripting languages. Turning off these options will keep you from being vulnerable to malicious scripts. However, it will limit the interaction you can have with some web sites.
Many legitimate sites use scripts running within the browser to add useful features. Disabling scripting may degrade the functionality of these sites.[ Internet security]

8. Disable scripting features in email programs
Because many email programs use the same code as web browsers to display HTML, vulnerabilities that affect ActiveX, Java, and JavaScript are often applicable to email as well as web pages. Therefore, in addition to disabling scripting features in web browsers, we recommend that users also disable these features in their email programs. It is important to Internet security.[ Internet security]

9. Make regular backups of critical data
Keep a copy of important files on removable media such as ZIP disks or recordable CD-ROM disks (CD-R or CD-RW disks). Use software backup tools if available, and store the backup disks somewhere away from the computer.[ Internet security]

10. Make a boot disk in case your computer is damaged or compromised
To aid in recovering from a security breach or hard disk failure, create a boot disk on a floppy disk which will help when recovering a computer after such an event has occurred. Remember, however, you must create this disk before you have a security event.[ Internet security]

11. Consult your system support personnel if you work from home
If you use your broadband access to connect to your employer's network via a Virtual Private Network (VPN) or other means, your employer may have policies or procedures relating to the security of your home network. Be sure to consult with your employer's support personnel, as appropriate, before following any of the steps outlined in this document.[ Internet security]
Taken from armor2net.com

Read More

How to remove a computer virus and spyware.

Symptoms that may be the result of ordinary Windows functions
A computer virus infection may cause the following problems:

    * Windows does not start even though you have not made any system changes or even though you have not installed or removed any programs.
    * Windows does not start because certain important system files are missing. Additionally, you receive an error message that lists the missing files.
    * The computer sometimes starts as expected. However, at other times, the computer stops responding before the desktop icons and the taskbar appear.
    * The computer runs very slowly. Additionally, the computer takes longer than expected to start.
    * You receive out-of-memory error messages even though the computer has sufficient RAM.
    * New programs are installed incorrectly.
    * Windows spontaneously restarts unexpectedly.
    * Programs that used to run stop responding frequently. Even if you remove and reinstall the programs, the issue continues to occur.
    * A disk utility such as Scandisk reports multiple serious disk errors.
    * A partition disappears.
    * The computer always stops responding when you try to use Microsoft Office products.
    * You cannot start Windows Task Manager.
    * Antivirus software indicates that a computer virus is present.

Symptoms of a computer virus

If you suspect or confirm that your computer is infected with a computer virus, obtain the current antivirus software. The following are some primary indicators that a computer may be infected:

    * The computer runs slower than usual.
    * The computer stops responding, or it locks up frequently.
    * The computer crashes, and then it restarts every few minutes.
    * The computer restarts on its own. Additionally, the computer does not run as usual.
    * Applications on the computer do not work correctly.
    * Disks or disk drives are inaccessible.
    * You cannot print items correctly.
    * You see unusual error messages.
    * You see distorted menus and dialog boxes.
    * There is a double extension on an attachment that you recently opened, such as a .jpg, .vbs, .gif, or .exe. extension.
    * An antivirus program is disabled for no reason. Additionally, the antivirus program cannot be restarted.
    * An antivirus program cannot be installed on the computer, or the antivirus program will not run.
    * New icons appear on the desktop that you did not put there, or the icons are not associated with any recently installed programs.
    * Strange sounds or music plays from the speakers unexpectedly.
    * A program disappears from the computer even though you did not intentionally remove the program.

Note These are common signs of infection. However, these signs may also be caused by hardware or software problems that have nothing to do with a computer virus. Unless you run the Microsoft Malicious Software Removal Tool, and then you install industry-standard, up-to-date antivirus software on your computer, you cannot be certain whether a computer is infected with a computer virus or not.

Symptoms of worms and trojan horse viruses in e-mail messages
When a computer virus infects e-mail messages or infects other files on a computer, you may notice the following symptoms:

    * The infected file may make copies of itself. This behavior may use up all the free space on the hard disk.
    * A copy of the infected file may be sent to all the addresses in an e-mail address list.
    * The computer virus may reformat the hard disk. This behavior will delete files and programs.
    * The computer virus may install hidden programs, such as pirated software. This pirated software may then be distributed and sold from the computer.
    * The computer virus may reduce security. This could enable intruders to remotely access the computer or the network.
    * You receive an e-mail message that has a strange attachment. When you open the attachment, dialog boxes appear, or a sudden degradation in system performance occurs.
    * Someone tells you that they have recently received e-mail messages from you that contained attached files that you did not send. The files that are attached to the e-mail messages have extensions such as .exe, .bat, .scr, and .vbs extensions.

What is Spyware?
Spyware can install on your computer without your knowledge. These programs can change your computer’s configuration or collect advertising data and personal information. Spyware can track internet searching habits and possibly redirect web site activity. 
Symptoms of Spyware
When a computer becomes affected by Spyware, the following may result:

    * Slow internet connection.
    * Changing your web browser’s home page.
    * Loss of internet connectivity.
    * Failure to open some programs, including security software.
    * Unable to visit specific websites, which may include redirecting you to another one.
How to remove a computer virus and spyware.
Even for an expert, removing a computer virus or spyware can be a difficult task without the help of computer malicious software removal tools. Some computer viruses and other unwanted softwarereinstall themselves after the viruses and spyware have been detected and removed. Fortunately, by updating the computer and by using malicious software removal tools, you can help permanently remove unwanted software.

To remove a computer virus and other malicious software, follow these steps:

Install the latest updates from Microsoft Update:

   1. For Windows Vista and Windows 7:
         1. Click the Pearl (Start) button, then type Windows Update in the search box.
         2. In the results area, click Windows Update.
         3. Click Check for Updates.
         4. Follow the instructions to download and install the latest Windows Updates.
   2. For Windows XP:
         1. Click Start, then click Run.
         2. Click the Automatic Updates tab and hoose the Automatic (recommended) option.
         3. Click OK.

Read More

Bluesnarfing:Mobile Security Breach

Bluesnarfing refers to a the method in which one has gained access to data, which is stored on a Bluetooth enabled phone of other people. Literally Bluesnarfing can be described as unauthorized access of information from a wireless device through a Bluetooth connection. The level of access depends from case to case, but, in general, it involves pretty much anything that's stored on the user's mobile device. Bluesnarfing allows the using person to make phone calls, send and receive text messages, read and write phonebook contacts, eavesdrop on phone conversations, and connect to the Internet. he can also download the material in his mobile from the victim mobile. The good news is, bluesnarfing requires advanced equipment and much advanace expertise In this field. As bluejacking can be done at the range of 10 meters, in bluesnarfing the intruder must be present within a 30 ft. range. If the phone is in non-discoverable mode, then its not true that you cant be a victim of this. Its adds only some problem and makes it little bit more difficult for intruders to bluesnarf your phone. It can be possible from phone and laptop both to bluesnarf a mobile. By just using some bluesnarfing tools (Bluesnarfer, Blooover) on mobile phone or laptop, anyone can detect and access those vulnerable mobile phones to view and download entire phonebook, calendar, real time clock, business card and other important private data without alerting the phone owner(you).

There's little info on whether Bluesnarfing is possible without the targeted phone being paired with the computer running the aforementioned software application, but anyone cannot completely rule out this possibility, either.

So that’s all about bluesnarfing. Wait till next post to know about other mobile security breach methods………….

Read More

MOBILE HACKING:BLUTOOTH HACKING

Bluetooth is a very common thing for mobile technology and used frequntly by user to tranfer data. But as frequent they transfer the data , less they put attention on security . Even most of them donot think about  that their mobile can be hacked via blutooth.
So now from today i am going to describe about blutooth hackings and security and it will continue in upcoming post.

Bluejacking, Bluesnarfing, Bluebugging and Bluetoothing are the main type of bluetooth hacks.


Bluejacking is the simplest of the four.  It is an attempt to send a phone contact or business card to another nearby phone. The ‘name' field of the contact can be misused by replacing it with a suggestive text so that the target device reads it as a part of intimation query displayed on its screen. Tis is somewhat equivalent to spam e-mail because both are unsolicited messages displayed on recipients' end without consent, and by exploiting the inherent nature of communication.
These are the softwares available in the market which help in bluetooth hacking.


BlueScanner - It hunts out for Bluetooth devices and dig out much amount of information of the newly discovered device.

BlueSniff - Utility for discovering hidden Bluetooth devices.

BlueBugger -It simply exploits the BlueBug vulnerability of the bluetooth enabled devices. By exploiting these vulnerabilities and leakes, you can gain access to the phone-book, calls lists and other information of the bluetooth device.

BTBrowser - Is a Bluetooth Browser is a J2ME app. which can browse and explore all the surrounding Bluetooth devices.

BTCrawler -It is a Bluetooth scanner for Windows Mobile based devices. It can implement BlueJacking and BlueSnarfing attacks.


In the next post i will describe how hackers actually  use these softwares for the hacking..........

Read More

How to Enable the Windows Task Manager?

Windows Task Manager is used to view the status of running applications, active processes, CPU and Page file usage history and active user in windows environment. As a system administrator you can mange the all features of Windows Task Manager, you can end task any running application and set the priority of any running process according to application importance.


By default Windows Task Manager Status is enabled, but a user can also disable or enable it manually. But some time a registry hack applies on windows task manager to disable it and your system give you a message” Task Manager has been disabled by your administrator.” then you should enable it with editing the system registry or using Group Policy Editor.

Before proceeding further, first scan your system with up-to-date antivirus, and then follow the given steps to enable it using group policy editor.




To enable this feature, you will need to be logged into your computer with administrative rights.


Now click on Start button and type “Gpedit.msc” in Run option then press OK.


In Group Policy Editor, expand the “Administrative Templates” > “System” then “Ctrl+Alt+Del Options”, under the User Configuration option.


Now in right side of panel “Ctrl+Alt+Del Options” double click on “Remove Task Manager” to change it setting. Here set the option “Disable” to “Enable” or “Not configured” and your task manager is available once again.

Read More

how to run your computer faster

A stitch in time saves nine! Believe it or not, but this adage works brilliantly for your computer too. Not only will keeping your computer clean help you save on maintenance cost, but it will also keep you stress free so that you can focus on your work and nothing else! So, why is cleaning your computer so important? Well, basically because dust and debris collect in your system, causing your computer to heat up, which can eventually lead to hardware failure.

Here are a few simple tips that will keep you in the clear. Read on!

1.) To clean your computer case, first unplug your system power from the electrical outlet. Remove all the cables and connectors from the back side of your computer. The computer will require the fans to be blown out as well. Some PCs have multiple fans: one on the processor and one or two on the power supply. Make sure you clean them all. The best thing to use is probably compressed air. Just blow that air all around the hardware components, while keeping the nozzle at least four to five inches away from the main board components.

2.) Another good alternative to compressed air is to use a portable battery powered vacuum that can effectively remove the dust, dirt and hair from the motherboard and prevent it from getting trapped within the case. However, do not use a standard electricity powered vacuum, as it can cause a lot of static electricity that can damage your computer. When using the vacuum, it is vital that you stay a couple inches away from the motherboard and all the other components to help prevent contact, as well as, to help prevent anything from being sucked into the vacuum. Ensure that you do not remove any small components with the vacuum, such as jumpers.

3.) To clean your keyboard, pick up a can of compressed air at your local office supply store. In case you're not sure, compressed air is a handy invention that forces air from a can out through a long thin straw. You can use it to clean out dust and debris on your keyboard, without having to take the whole thing apart. Be careful not to blow dust into your hard drive though, as that may cause damage to your machine. It's a good idea to turn the keyboard upside down and give it a few good shakes before you use it again. If you're brave, you can pop off the keys and soak them in a solution of ammonia and water, but be careful, because not all the keys come off easily. If you feel resistance, stop!

4.) If you feel the need to test fate, you can pull out the memory and other cards from your computer and gently rub a pencil eraser on the contacts before putting them back in. However, don't pull any cards out unless you're having problems reaching certain areas.

5.) Remember, never open a CRT monitor. Even when it's unplugged, they retain enough current to seriously harm you.

6.) When cleaning the inside of your computer (motherboard, etc.), make sure your computer is off. Also, never place your computer on the ground. You should always use a computer table or shelf while you're cleaning.

7.) Only use an air duster/canned air to remove dust from your computer's components. It's best to do it outside as well so that it doesn’t end up all over your house!

8.) When cleaning your monitor, make sure you do so with a clean rag and only use cleaning agents designed for electronics.

9.) When you're finished with the inside, use a lightly dampened cloth or paper towel to wipe off the outside of your computer case. Gently wipe down the casing using Q-Tips to clean small places like vent holes and disk drive openings.

10.) Never clean the inside computer components or other circuit boards with a damp or wet cloth.

11.) Wipe down the outside of your mouse with a slightly damp cloth. Next, unscrew the ring from the bottom of your mouse and remove the ball. Dust off the ball with a soft cloth and look inside the cavity of your mouse. There will probably be some dust clinging to the rollers that move the ball and you can just scrape that out with a Q-Tip. When you're finished, replace the ball and ring. Optical mice will require little maintenance, but ball mice can be disassembled. Clean the ball itself, as well as, the X and Y axis rollers.

12.) To keep your computer looking clean longer, purchase an inexpensive plastic covering for your equipment!

If you follow all of these guidelines, your computer and all of its equipment will shine like new!

Read More

10 tips for safer electronic banking and protecting yourself under the EFT Code

The Electronic Funds Transfer Code (EFT Code) protects consumers who use electronic banking such as ATMs and EFTPOS, or telephone and internet banking, to transfer funds.
Here are some important tips to remember about your rights and obligations under the code.

1. There are a number of situations where, under the EFT Code, you will get all of your money back if there was an unauthorised transaction on your account. For example:

* If a forged, expired or cancelled PIN or card was used;
* If there was fraudulent conduct by employees of your account institution or merchant;
* If the transaction took place before you received your card, PIN or code;
* If a merchant incorrectly debited your account more than once;
* If the transaction took place after you told your account institution that your card had been lost or stolen or that someone else may know your PIN or password; or
* If it’s clear that you haven’t contributed to the loss.

2. You won't get your money back from unauthorised transactions however if:

* You acted fraudulently or didn't keep your PIN or password secret:
* You unreasonably delayed telling your account institution that your card had been lost or stolen or that someone else may know your PIN or code.

Even in these circumstances though the amount you are liable for is subject to certain caps.
3. Liability will be split between you and your financial institution where a PIN or code was needed to perform the unauthorised transaction and none of the circumstances in 6 or 7 apply. In these circumstances your liability will be capped at $150 or any lower figure set by your account institution.
4. Under the code, your account institution is normally liable for any failure of their equipment or system. Also, your account institution can’t avoid their liability just because another party involved in the transaction, such as the merchant, caused the problem. You don’t have to make the complaint to one of these other parties, you can simply take your complaint to your account institution and require them to follow it up.
5. If you have a complaint about an electronic funds transfer you should start by raising the matter with your account institution. The EFT code sets our rules for dealing with these complaints.


6. Read your terms and conditions document. It will tell you your rights and obligations and things such as which accounts can be accessed with your card and/or PIN or code; any restrictions that apply, such as limits on how much money you can withdraw in a day and how to report the loss, theft or unauthorised use of the card or PIN.
7. Always check your statements to ensure there are no unauthorised transactions. Some transactions that look unfamiliar may appear that way because the merchant’s banking is done under another name.
8. Tell your account institution immediately if your card is lost or stolen or someone else may know your PIN or password. Also tell them immediately if you find an unauthorised transaction on your statement.
9. Never tell your PIN or code to anyone, including a friend or family member. Don’t record it on your card or with something you keep with your card.
Most unauthorised transactions happen because a person gave someone else their PIN or code. Safeguarding the secrecy of your PIN is the best way to protect yourself from unauthorised transactions.
10. You should avoid using your birth date or a recognisable part of your name as your PIN or code as this is easy for others to guess.

Read More

The first cyber Crime

The first recorded cyber crime took place in the year 1820! That is not surprising considering the fact that the abacus, which is thought to be the earliest form of a computer, has been around since 3500 B.C. in India, Japan and China. The era of modern computers, however, began with the analytical engine of Charles Babbage.

In 1820, Joseph-Marie Jacquard, a textile manufacturer in France, produced the loom. This device allowed the repetition of a series of steps in the weaving of special fabrics. This resulted in a fear amongst Jacquard's employees that their traditional employment and livelihood were being threatened. They committed acts of sabotage to discourage Jacquard from further use of the new technology. This is the first recorded cyber crime!

Read More