Sunday, June 22, 2008
Use system restore without loading windows
What if your system begin to malfunction at the middle of the road while you were playing with computer.. and what if you are not able to load windows.. then only alternative is to use system restore.. but.. how will you load system restore without loading windows..If you have enabled System Restore, you can use it when you fails to boot into Windows.How to do:Restart your computer.Press F8 before the Windows Logo displays. (Keep pressing F8 from the starting itself)Then the Windows Boot Menu displays.Select Safemode With Command Prompt and hit Enter.Windows loads to Command Prompt.Then type the following:%systemroot%\system32\restore\rstrui.exe and hit Enter.That loads the System Restore window. Continue as usual restoration.
How to remove the virus " Orkut is Banned
How to remove the virus " Orkut is Banned , You Fool. The administrators didnt write this program..guess who??Muhahahah .. "
Trying to open orkut on your PC ?? Is your PC giving you a popup message " Orkut is banned you fool , the administrators didn't write the program .. guess who ?? Muhahahah ... " . Irritiated by this ?? Some of my reader has got this problem and he sent me a message asking for help . Here is the solution :
About the virus :
The name of the virus is W32/AHKHeap , It basically creates a folder with the name heap41a in C drive that will be disguised as system folder with hidden attributes enabled and copies all its contents in that heap41a folder.The running process that is responsible for this is svchost.exe and it will be spawned under user name.The virus will even make a entry into your registry so that it can run every time the system is started . This spreads mostly through pen drives .
How to get Rid of this :
Most of the antivirus leave this virus unnoticed . I personally tried 3-4 antivirus on this . None of them detected it. So you have to remove it manually .
Go to your task manager by pressing ctrl + alt + del .In that go to processes tab .
In that look for svchost.exe . You might find more than one of them . In that look for those who have user name as your login name of computer and end those processes .
Now open My ComputerIn the address bar, type C:\heap41a and hit enter. It is a hidden folder, and is not visible by default.Delete all the files in this folder .
Now go to Start –> Run and type Regedit , Go to the menu Edit –> FindType “heap41a” here and press enter. You will get something like this “[winlogon] C:\heap41a\svchost.exe C:\heap(some number)\std.txt”Select that and Press DEL. It will ask “Are you sure you want to delete this value”, click Yes. Now close the registry editor and you are done .
Precaution :
Before inserting any kinda pen drive in your pc , just delte the autorun.inf file in it and delete any .exe files that exist in it
Trying to open orkut on your PC ?? Is your PC giving you a popup message " Orkut is banned you fool , the administrators didn't write the program .. guess who ?? Muhahahah ... " . Irritiated by this ?? Some of my reader has got this problem and he sent me a message asking for help . Here is the solution :
About the virus :
The name of the virus is W32/AHKHeap , It basically creates a folder with the name heap41a in C drive that will be disguised as system folder with hidden attributes enabled and copies all its contents in that heap41a folder.The running process that is responsible for this is svchost.exe and it will be spawned under user name.The virus will even make a entry into your registry so that it can run every time the system is started . This spreads mostly through pen drives .
How to get Rid of this :
Most of the antivirus leave this virus unnoticed . I personally tried 3-4 antivirus on this . None of them detected it. So you have to remove it manually .
Go to your task manager by pressing ctrl + alt + del .In that go to processes tab .
In that look for svchost.exe . You might find more than one of them . In that look for those who have user name as your login name of computer and end those processes .
Now open My ComputerIn the address bar, type C:\heap41a and hit enter. It is a hidden folder, and is not visible by default.Delete all the files in this folder .
Now go to Start –> Run and type Regedit , Go to the menu Edit –> FindType “heap41a” here and press enter. You will get something like this “[winlogon] C:\heap41a\svchost.exe C:\heap(some number)\std.txt”Select that and Press DEL. It will ask “Are you sure you want to delete this value”, click Yes. Now close the registry editor and you are done .
Precaution :
Before inserting any kinda pen drive in your pc , just delte the autorun.inf file in it and delete any .exe files that exist in it
How to test your firewall
The firewall is our gateway to the Internet. It is a piece of software or hardware that manages Internet connections to and from your computer. It monitors the applications that try to initiate connection with your computer from the Internet, and it controls which programs are allowed to use the Internet.
Nowadays, Internet users are exposed to several kinds of Internet threats, such as software vulnerabilities, automated worms, viruses and random Internet attackers. Properly configured personal firewalls are the first line of defense to answer these threats.But how do you test your personal firewall? Security researchers have developed small, non-destructive, leak testers, that deliberately attempt to test different firewall capabilities. The idea behind them is simple: if the test can bypass your computer’s security, then so can a hacker.
There are many leak-testing programs available. Each one designed to test a particular flaw and each using a particular technique to bypass a firewall’s standard protection mechanisms. We’ve compiled a list of tools we believe will be of value to both home users and advance users.
PCFlank Leaktest - PCFlank Leaktest is a small utility that tests any firewall’s ability to protect against unauthorized or illegal transmissions of data from a user’s computer that is connected to the Internet. It uses a special technique to impersonate another program, which your firewall has been set to trust.
Breakout - Breakout sends to the IE’s or Firefox’s address bar the URL to launch, via the ‘SendMessage’ Windows API. No code is injected. Usually very hard to detect by firewalls. If the test is a success, this means that your firewall does not check for the ‘messages’ sent to your applications windows.
DNSTester - Starting from Windows 2000, a Windows service DNS client is running and handles all DNS requests. Thus, all DNS requests coming from various applications will be transmitted to the DNS client which will, itself, do the DNS request. This feature can be used to transmit data to a remote computer by crafting a special DNS request without the firewalls notice it. DNStester uses this kind of DNS recursive request to bypass your firewall.
MBTest - MBtest send packets directly to the network interface to try to bypass firewall. To do this, it sends differents kind of packet of different size/protocoles/type. If the test is a success, this means that your firewall is stuck in high level network and doesn’t check low level.
Atelier Web Firewall Tester - AWFT probes the protection provided by your Personal Firewall software using six different tests. Each test uses a different technique for gaining access to the outside world. Techniques are differently rated, according to their sophistication, and your Personal Firewall is doing a great job if is able to score 10 points in total.
ZABypass - Originaly was developed to bypass old versions of ZoneAlarm, but it may work against many other firewalls today. It uses a special technique called Direct Data Exchange to transfer data between Internet Explorer and the Internet.
FireHole - FireHole attempts to launch the default web browser, inject its own DLL and try to establish a connection to the Internet.
Thermite - Thermite injects it’s code into the target process directly, by creating an additional malicious thread within that process. If the test is a success, this means that your firewall is vulnerable to process injection.
Leak tests are designed to help identify security flaws and provide the invaluable function of informing the user whether or not their firewall is providing adequate protection. Unfortunately, malware programs are evolving rapidly. Many of such programs (will) have very advanced techniques to conceal their malicious activities so that they easily bypass firewalls and other protection mechanisms.
Nowadays, Internet users are exposed to several kinds of Internet threats, such as software vulnerabilities, automated worms, viruses and random Internet attackers. Properly configured personal firewalls are the first line of defense to answer these threats.But how do you test your personal firewall? Security researchers have developed small, non-destructive, leak testers, that deliberately attempt to test different firewall capabilities. The idea behind them is simple: if the test can bypass your computer’s security, then so can a hacker.
There are many leak-testing programs available. Each one designed to test a particular flaw and each using a particular technique to bypass a firewall’s standard protection mechanisms. We’ve compiled a list of tools we believe will be of value to both home users and advance users.
PCFlank Leaktest - PCFlank Leaktest is a small utility that tests any firewall’s ability to protect against unauthorized or illegal transmissions of data from a user’s computer that is connected to the Internet. It uses a special technique to impersonate another program, which your firewall has been set to trust.
Breakout - Breakout sends to the IE’s or Firefox’s address bar the URL to launch, via the ‘SendMessage’ Windows API. No code is injected. Usually very hard to detect by firewalls. If the test is a success, this means that your firewall does not check for the ‘messages’ sent to your applications windows.
DNSTester - Starting from Windows 2000, a Windows service DNS client is running and handles all DNS requests. Thus, all DNS requests coming from various applications will be transmitted to the DNS client which will, itself, do the DNS request. This feature can be used to transmit data to a remote computer by crafting a special DNS request without the firewalls notice it. DNStester uses this kind of DNS recursive request to bypass your firewall.
MBTest - MBtest send packets directly to the network interface to try to bypass firewall. To do this, it sends differents kind of packet of different size/protocoles/type. If the test is a success, this means that your firewall is stuck in high level network and doesn’t check low level.
Atelier Web Firewall Tester - AWFT probes the protection provided by your Personal Firewall software using six different tests. Each test uses a different technique for gaining access to the outside world. Techniques are differently rated, according to their sophistication, and your Personal Firewall is doing a great job if is able to score 10 points in total.
ZABypass - Originaly was developed to bypass old versions of ZoneAlarm, but it may work against many other firewalls today. It uses a special technique called Direct Data Exchange to transfer data between Internet Explorer and the Internet.
FireHole - FireHole attempts to launch the default web browser, inject its own DLL and try to establish a connection to the Internet.
Thermite - Thermite injects it’s code into the target process directly, by creating an additional malicious thread within that process. If the test is a success, this means that your firewall is vulnerable to process injection.
Leak tests are designed to help identify security flaws and provide the invaluable function of informing the user whether or not their firewall is providing adequate protection. Unfortunately, malware programs are evolving rapidly. Many of such programs (will) have very advanced techniques to conceal their malicious activities so that they easily bypass firewalls and other protection mechanisms.
Batch file to exe converter (windows inbuilt software)
Do you no that u already hav a batch/vbs to exe converter on ur comp?thats if u hav windows lolololFollow these stepsStep 1Navigate to C:\Windows\System32 and locate the file named IEXPRESS.EXEStep 2Double Click to launch IEXPRESS.EXEStep 3You will be presented with the initial welcome screen and be given two choices. Select “Create new Self Extraction Directive file.” Click Next.Step 4 Next you will be presented with the Package Purpose screen. For our purposes select “Extract Files and run an installation command” and click the Next button.Step 5 You will be presented with the Package Title screen, which will give you the opportunity to give your project a name. If you are so inclined give it a meaningful name. If like me you are never going to come back to this, name it whatever you want.Step 6You will next be presented with the Confirmation Prompt Screen. We would like the batch file to just be extracted and run so just choose “No Prompt” and click the Next Button.Step 7 You are presented with the License Agreement window. If you don’t want your users to have to answer a prompt select “Do not display a license.”Step 8 The Packaged Files window is where you will select your batch file (or .vbs). Click the Add button and browse to your desired file. Then click next.Step 9 Here you are presented with a window titled Install Program to Launch. Use the drop down control next to “Install Program and choose the only option that will be present, the .bat or .vbs file that you chose in the previous window.Step 10The Show Window screen is next. I didn’t want my users to be prompted in any way so I chose Hidden. Click Next.Step 11No Finished Message for my users. Select “No message” and choose Next.Step 12The Package Name and Options window is where the new .exe specified. Type in a path or browse to the folder you would like your .exe in, type a name in the file name box and click save. Also check the box that says “Hide File Extraction Progress Animation from User.” If you’re worried about long file names go ahead and click the other box as well.Step 13Since we really aren’t installing anything we probably want to tell the Configure Restart window to not restart. So choose the option that says “No restart” and hit Next.Step 14This window is where you have a chance to save all of the options you have chosen into a project file so that if necessary you may later return and make modifications. I have no need to retain the file, but if you would like to be able to come back to it, by all means choose “Save Self Extraction Directive (SED) file” and tell it where to put it. As always, click Next.Step 15Here’s where you’re new .exe is born, on the Create Package screen. Explore to the directory you told it to put the file in, click Next and then watch your little .exe’s first moments as it pops into the big digital world.Step 16You’re done! Click finish and go try it out. Pin it directly to the start menu. Point a shortcut to it and pin that to the start menu. Most importantly, script it and see how slick it is.
How to Detect a Hacker Attack
Most computer vulnerabilities can be exploited in a variety of ways. Hacker attacks may use a single specific exploit, several exploits at the same time, a misconfiguration in one of the system components or even a backdoor from an earlier attack.
Due to this, detecting hacker attacks is not an easy task, especially for an inexperienced user. This article gives a few basic guidelines to help you figure out either if your machine is under attack or if the security of your system has been compromised. Keep in mind just like with viruses, there is no 100% guarantee you will detect a hacker attack this way. However, there's a good chance that if your system has been hacked, it will display one or more of the following behaviours.
Windows machines:
Suspiciously high outgoing network traffic. If you are on a dial-up account or using ADSL and notice an unusually high volume of outgoing network (traffic especially when you computer is idle or not necessarily uploading data), then it is possible that your computer has been compromised. Your computer may be being used either to send spam or by a network worm which is replicating and sending copies of itself. For cable connections, this is less relevant - it is quite common to have the same amount of outgoing traffic as incoming traffic even if you are doing nothing more than browsing sites or downloading data from the Internet.
Increased disk activity or suspicious looking files in the root directories of any drives. After hacking into a system, many hackers run a massive scan for any interesting documents or files containing passwords or logins for bank or epayment accounts such as PayPal. Similarly, some worms search the disk for files containing email addresses to use for propagation. If you notice major disk activity even when the system is idle in conjunction with suspiciously named files in common folders, this may be an indication of a system hack or malware infection.
Large number of packets which come from a single address being stopped by a personal firewall. After locating a target (eg. a company's IP range or a pool of home cable users) hackers usually run automated probing tools which try to use various exploits to break into the system. If you run a personal firewall (a fundamental element in protecting against hacker attacks) and notice an unusually high number of stopped packets coming from the same address then this is a good indication that your machine is under attack. The good news is that if your personal firewall is reporting these attacks, you are probably safe. However, depending on how many services you expose to the Internet, the personal firewall may fail to protect you against an attack directed at a specific FTP service running on your system which has been made accessible to all. In this case, the solution is to block the offending IP temporarily until the connection attempts stop. Many personal firewalls and IDSs have such a feature built in.
Your resident antivirus suddenly starts reporting that backdoors or trojans have been detected, even if you have not done anything out of the ordinary. Although hacker attacks can be complex and innovative, many rely on known trojans or backdoors to gain full access to a compromised system. If the resident component of your antivirus is detecting and reporting such malware, this may be an indication that your system can be accessed from outside.
Unix machines:
Suspiciously named files in the /tmp folder. Many exploits in the Unix world rely on creating temporary files in the /tmp standard folder which are not always deleted after the system hack. The same is true for some worms known to infect Unix systems; they recompile themselves in the /tmp folder and use it as 'home'.
Modified system binaries such as 'login', 'telnet', 'ftp', 'finger' or more complex daemons, 'sshd', 'ftpd' and the like. After breaking into a system, a hacker usually attempts to secure access by planting a backdoor in one of the daemons with direct access from the Internet, or by modifying standard system utilities which are used to connect to other systems. The modified binaries are usually part of a rootkit and generally, are 'stealthed' against direct simple inspection. In all cases, it is a good idea to maintain a database of checksums for every system utility and periodically verify them with the system offline, in single user mode.
Modified /etc/passwd, /etc/shadow, or other system files in the /etc folder. Sometimes hacker attacks may add a new user in /etc/passwd which can be remotely logged in a later date. Look for any suspicious usernames in the password file and monitor all additions, especially on a multi-user system.
Suspicious services added to /etc/services. Opening a backdoor in a Unix system is sometimes a matter of adding two text lines. This is accomplished by modifying /etc/services as well as /etc/ined.conf. Closely monitor these two files for any additions which may indicate a backdoor bound to an unused or suspicious port.
Due to this, detecting hacker attacks is not an easy task, especially for an inexperienced user. This article gives a few basic guidelines to help you figure out either if your machine is under attack or if the security of your system has been compromised. Keep in mind just like with viruses, there is no 100% guarantee you will detect a hacker attack this way. However, there's a good chance that if your system has been hacked, it will display one or more of the following behaviours.
Windows machines:
Suspiciously high outgoing network traffic. If you are on a dial-up account or using ADSL and notice an unusually high volume of outgoing network (traffic especially when you computer is idle or not necessarily uploading data), then it is possible that your computer has been compromised. Your computer may be being used either to send spam or by a network worm which is replicating and sending copies of itself. For cable connections, this is less relevant - it is quite common to have the same amount of outgoing traffic as incoming traffic even if you are doing nothing more than browsing sites or downloading data from the Internet.
Increased disk activity or suspicious looking files in the root directories of any drives. After hacking into a system, many hackers run a massive scan for any interesting documents or files containing passwords or logins for bank or epayment accounts such as PayPal. Similarly, some worms search the disk for files containing email addresses to use for propagation. If you notice major disk activity even when the system is idle in conjunction with suspiciously named files in common folders, this may be an indication of a system hack or malware infection.
Large number of packets which come from a single address being stopped by a personal firewall. After locating a target (eg. a company's IP range or a pool of home cable users) hackers usually run automated probing tools which try to use various exploits to break into the system. If you run a personal firewall (a fundamental element in protecting against hacker attacks) and notice an unusually high number of stopped packets coming from the same address then this is a good indication that your machine is under attack. The good news is that if your personal firewall is reporting these attacks, you are probably safe. However, depending on how many services you expose to the Internet, the personal firewall may fail to protect you against an attack directed at a specific FTP service running on your system which has been made accessible to all. In this case, the solution is to block the offending IP temporarily until the connection attempts stop. Many personal firewalls and IDSs have such a feature built in.
Your resident antivirus suddenly starts reporting that backdoors or trojans have been detected, even if you have not done anything out of the ordinary. Although hacker attacks can be complex and innovative, many rely on known trojans or backdoors to gain full access to a compromised system. If the resident component of your antivirus is detecting and reporting such malware, this may be an indication that your system can be accessed from outside.
Unix machines:
Suspiciously named files in the /tmp folder. Many exploits in the Unix world rely on creating temporary files in the /tmp standard folder which are not always deleted after the system hack. The same is true for some worms known to infect Unix systems; they recompile themselves in the /tmp folder and use it as 'home'.
Modified system binaries such as 'login', 'telnet', 'ftp', 'finger' or more complex daemons, 'sshd', 'ftpd' and the like. After breaking into a system, a hacker usually attempts to secure access by planting a backdoor in one of the daemons with direct access from the Internet, or by modifying standard system utilities which are used to connect to other systems. The modified binaries are usually part of a rootkit and generally, are 'stealthed' against direct simple inspection. In all cases, it is a good idea to maintain a database of checksums for every system utility and periodically verify them with the system offline, in single user mode.
Modified /etc/passwd, /etc/shadow, or other system files in the /etc folder. Sometimes hacker attacks may add a new user in /etc/passwd which can be remotely logged in a later date. Look for any suspicious usernames in the password file and monitor all additions, especially on a multi-user system.
Suspicious services added to /etc/services. Opening a backdoor in a Unix system is sometimes a matter of adding two text lines. This is accomplished by modifying /etc/services as well as /etc/ined.conf. Closely monitor these two files for any additions which may indicate a backdoor bound to an unused or suspicious port.
Change the Password of the administrator from user mode
Hey I discovered a new idea. It was actually mistakenly discoverted when I was doing Netstat on DOS.You can change the password of any user from your account. Below is process to do this:
Open Run command from Start-->Run
Type Net user [username] *
DOS like window will pop up type your password there and you are done...
Note: remember that there is the star symbol after the username.. and avoid the brackets too... You will not see the input information while changing passwordIt works try it But do u have all the privileges of the computer. I mean not limited mode
Open Run command from Start-->Run
Type Net user [username] *
DOS like window will pop up type your password there and you are done...
Note: remember that there is the star symbol after the username.. and avoid the brackets too... You will not see the input information while changing passwordIt works try it But do u have all the privileges of the computer. I mean not limited mode
Security Features to Help Keep Your PCs Safer
1. Windows DefenderYou or your employees may get tricked into downloading spyware to your business’s PCs through e-mail messages or from “spoof” Web sites. (Spyware refers to an array of software that can be installed on a PC inadvertently, or without the user’s consent.) Windows Defender, shown below, helps protect your PCs against security threats caused by spyware.
Windows Defender does three key things to protect your PCs from spyware:
• It scans for spyware on your PC and presents you with options for ignoring, allowing, or deleting any potential threats it has quarantined.• It monitors the common entry points for spyware on your PC in real time.• It stays current on what the latest spyware threats are so it can scan for them.
Because Windows Defender takes advantage of many of the Windows Vista platform enhancements, including improved caching technology, scans run quickly. And most of the work is done in the background without requiring your intervention or attention. Windows Defender will only alert you to serious issues that require immediate action. You will stay busy and productive with the confidence that your PCs have enhanced protection while you work.
Note: Windows Vista does not include real-time virus protection. The features discussed in this article complement antivirus software but are not a substitute for third-party antivirus software.
2. User Account Control
In Microsoft Windows XP, a user must be an “administrator” to accomplish certain day-to-day tasks like changing power settings on a portable computer or installing and updating software. One of the purposes of requiring administrator privileges is to help protect PCs from harmful downloads of malicious software - or malware. Malware refers to unwanted software including worms, viruses, adware, and spyware that could delete or steal files and information from the PC.
While this scenario keeps your PCs safer, it also limits productivity because each time a standard user needs to change a basic setting or install software, the user has to locate someone with administrator privileges to help.
Windows Vista Ultimate changes all this by offering User Account Control (UAC), a feature that makes it easier to use a PC with standard user privileges. You can create separate accounts for yourself and your employees and easily set up security parameters on each account to control which Web sites and programs each user can access and install-all without additional IT support. In addition, even when you use an administrator account, you will still benefit from increased security. Most programs run with standard user permissions by default, even when you are logged in as an administrator, which limits potential damage from malware.
3. Internet Explorer 7
To help protect against cyber attacks, businesses need a higher level of protection when employees use the Web. That is why the Internet Explorer 7 browser, included with Windows Vista Ultimate, features a number of security enhancements such as stronger safeguarding of personal data and protection against malware.
A key feature of Internet Explorer 7 is the Microsoft Phishing Filter designed to keep confidential data safer. Shown below, the Phishing Filter helps protect you from attacks that occur when you enter sensitive data, such as credit card numbers, into a Web site form that looks legitimate, but is actually designed to steal confidential information.
The Phishing Filter helps protect your business by:
• Comparing the sites you visit to addresses of reported legitimate sites• Analysing the sites you visit for phishing characteristics• Sending the addresses of the sites you visit to an online service that keeps a database of known phishing sites
If a site you visit has been confirmed as a phishing site, you will be warned of its threat level and automatically redirected to a safer page. The online database of known phishing sites is an opt-in service. If desired (though not recommended), the Phishing Filter can be deactivated with a single click. Used in combination with Windows Defender, Internet Explorer 7 helps keep your PCs and data safe.
Maintain PC security
PC Security must be your first priority. Your personal computer is a common target for intruders and other malicious users because they want to access personal data such as bank account information, credit card numbers or any important data they could find.
Intruders not only steal your financial information, they could also use your computer resources – such as hard disk, processor and internet connection to attack other users. This way, law enforcement will find it difficult to solve where the attacks are coming from.
To prevent possible identity theft or computer hijack, follow these eight steps in maintaining PC security:
1. Anti-Virus Programs – These programs search and assess the contents of each computer file then removes or destroys “virus signatures”, which are known to be harmful to your computer.
2. Patch up your System – This process involves fixing the operating system and restoring different functions of your computer. Most computer vendors offer patches that are designed to fix bugs in their products. This process is repeated until the patch fixes the problem completely.
3. Email Attachment Precautions – Most unsolicited items, such as exploding packages or letter bombs, can be sent through your e-mail. Take extra precaution in opening emails to prevent any harm your computer may receive.
4. Firewall Programs – Install and use a firewall program. These programs act as a guard to your computer when looking at network traffic received from or destined for other computers. The firewall program determines if certain traffic should be allowed to continue to its destination or stopped. These programs keep the unwanted out and permit only “healthy” traffic to enter and leave your computer.
5. Data Backups – It is important that back up your data in your computer’s hard disk, external hard disk drives or any removable media. This ensures each important data will not be harmed when computer problems arise.
6. Strong Passwords – It is important to mix up several numbers, symbols and letters to strengthen password safety. An ideal length of password is around eight or more letters, numbers or symbols.
7. Download and Installation – Be careful in accepting or downloading any material online to prevent virus attacks and computer hijacks.
8. Hardware Firewall – Hardware firewall, which works similarly to firewall programs, stands between your personal computer and the Internet.
Although these steps may seem simple, remember that maintaining computer safety is a continuous process. You cannot perform these tasks once and let your computer be. Get back to each of these steps regularly and check if you need program updates.
Keeping your computer secure is in your hands. Outsmart computer hijackers by reinforcing computer safety precautions.
Windows Defender does three key things to protect your PCs from spyware:
• It scans for spyware on your PC and presents you with options for ignoring, allowing, or deleting any potential threats it has quarantined.• It monitors the common entry points for spyware on your PC in real time.• It stays current on what the latest spyware threats are so it can scan for them.
Because Windows Defender takes advantage of many of the Windows Vista platform enhancements, including improved caching technology, scans run quickly. And most of the work is done in the background without requiring your intervention or attention. Windows Defender will only alert you to serious issues that require immediate action. You will stay busy and productive with the confidence that your PCs have enhanced protection while you work.
Note: Windows Vista does not include real-time virus protection. The features discussed in this article complement antivirus software but are not a substitute for third-party antivirus software.
2. User Account Control
In Microsoft Windows XP, a user must be an “administrator” to accomplish certain day-to-day tasks like changing power settings on a portable computer or installing and updating software. One of the purposes of requiring administrator privileges is to help protect PCs from harmful downloads of malicious software - or malware. Malware refers to unwanted software including worms, viruses, adware, and spyware that could delete or steal files and information from the PC.
While this scenario keeps your PCs safer, it also limits productivity because each time a standard user needs to change a basic setting or install software, the user has to locate someone with administrator privileges to help.
Windows Vista Ultimate changes all this by offering User Account Control (UAC), a feature that makes it easier to use a PC with standard user privileges. You can create separate accounts for yourself and your employees and easily set up security parameters on each account to control which Web sites and programs each user can access and install-all without additional IT support. In addition, even when you use an administrator account, you will still benefit from increased security. Most programs run with standard user permissions by default, even when you are logged in as an administrator, which limits potential damage from malware.
3. Internet Explorer 7
To help protect against cyber attacks, businesses need a higher level of protection when employees use the Web. That is why the Internet Explorer 7 browser, included with Windows Vista Ultimate, features a number of security enhancements such as stronger safeguarding of personal data and protection against malware.
A key feature of Internet Explorer 7 is the Microsoft Phishing Filter designed to keep confidential data safer. Shown below, the Phishing Filter helps protect you from attacks that occur when you enter sensitive data, such as credit card numbers, into a Web site form that looks legitimate, but is actually designed to steal confidential information.
The Phishing Filter helps protect your business by:
• Comparing the sites you visit to addresses of reported legitimate sites• Analysing the sites you visit for phishing characteristics• Sending the addresses of the sites you visit to an online service that keeps a database of known phishing sites
If a site you visit has been confirmed as a phishing site, you will be warned of its threat level and automatically redirected to a safer page. The online database of known phishing sites is an opt-in service. If desired (though not recommended), the Phishing Filter can be deactivated with a single click. Used in combination with Windows Defender, Internet Explorer 7 helps keep your PCs and data safe.
Maintain PC security
PC Security must be your first priority. Your personal computer is a common target for intruders and other malicious users because they want to access personal data such as bank account information, credit card numbers or any important data they could find.
Intruders not only steal your financial information, they could also use your computer resources – such as hard disk, processor and internet connection to attack other users. This way, law enforcement will find it difficult to solve where the attacks are coming from.
To prevent possible identity theft or computer hijack, follow these eight steps in maintaining PC security:
1. Anti-Virus Programs – These programs search and assess the contents of each computer file then removes or destroys “virus signatures”, which are known to be harmful to your computer.
2. Patch up your System – This process involves fixing the operating system and restoring different functions of your computer. Most computer vendors offer patches that are designed to fix bugs in their products. This process is repeated until the patch fixes the problem completely.
3. Email Attachment Precautions – Most unsolicited items, such as exploding packages or letter bombs, can be sent through your e-mail. Take extra precaution in opening emails to prevent any harm your computer may receive.
4. Firewall Programs – Install and use a firewall program. These programs act as a guard to your computer when looking at network traffic received from or destined for other computers. The firewall program determines if certain traffic should be allowed to continue to its destination or stopped. These programs keep the unwanted out and permit only “healthy” traffic to enter and leave your computer.
5. Data Backups – It is important that back up your data in your computer’s hard disk, external hard disk drives or any removable media. This ensures each important data will not be harmed when computer problems arise.
6. Strong Passwords – It is important to mix up several numbers, symbols and letters to strengthen password safety. An ideal length of password is around eight or more letters, numbers or symbols.
7. Download and Installation – Be careful in accepting or downloading any material online to prevent virus attacks and computer hijacks.
8. Hardware Firewall – Hardware firewall, which works similarly to firewall programs, stands between your personal computer and the Internet.
Although these steps may seem simple, remember that maintaining computer safety is a continuous process. You cannot perform these tasks once and let your computer be. Get back to each of these steps regularly and check if you need program updates.
Keeping your computer secure is in your hands. Outsmart computer hijackers by reinforcing computer safety precautions.
Subscribe to:
Posts (Atom)