CHEFFZ NOTES

Search Engine Profile

2009-07-27T04:10:00.000-07:00

Ada sedikit penemuan saat saya lagi kangen me teman-teman nich di Bandung. Emang waktu itu agak kesusahan karena saya selalu online di facebook sedangkan teman saya ternyata tempat nongkrongnya beda-beda terus saya kepikaran apa ada yach website yang mempunyai fasilitas untuk mencari orang?
Truz karena penasaran saya pergi ke Abah Google untuk mencari hal yang kayaknya gak mungkin terjadi bagi saya. Lama saya tunggu akhirnya muncul juga hasilnya. Mata saya langsung tertuju ke http:\\wink.com.
Saya coba klik link tersebut dan nanti ada beberapa textbox, yaitu name, location dan other. Disitu saya cuma mengisikan namanya saja, lalu tekan enter. Hasil dari pencarian mesin itu lumayan ampuh karena yang ditampilkan bukan hanya tempat nongkrongnya tapi juga website dan blognya juga muncul. Memang mesin cari yang betul-betul ampuh.
Thanx banget nich akhirnya saya bisa berkumpul dengan teman lagi.
Bagi teman-teman yang mau coba silahkan klik link ini : http://wink.com

Hacker are Here. Where are You?

2009-06-04T04:22:00.001-07:00

If you want to stop hackers from invading your network, first you've got to invade their minds.

Computers around the world are systematically being victimized by rampant hacking. This hacking is not only widespread, but is being executed so flawlessly that the attackers compromise a system, steal everything of value and completely erase their tracks within 20 minutes.

The goal of the ethical hacker is to help the organization take preemptive measures against malicious attacks by attacking the system himself; all the while staying within legal limits. This philosophy stems from the proven practice of trying to catch a thief, by thinking like a thief. As technology advances and organization depend on technology increasingly, information assets have evolved into critical components of survival.

If hacking involves creativity and thinking 'out-of-the-box', then vulnerability testing and security audits will not ensure the security proofing of an organization. To ensure that organizations have adequately protected their information assets, they must adopt the approach of 'defense in depth'. In other words, they must penetrate their networks and assess the security posture for vulnerabilities and exposure.

The definition of an Ethical Hacker is very similar to a Penetration Tester. The Ethical Hacker is an individual who is usually employed with the organization and who can be trusted to undertake an attempt to penetrate networks and/or computer systems using the same methods as a Hacker. Hacking is a felony in the United States and most other countries. When it is done by request and under a contract between an Ethical Hacker and an organization, it is legal. The most important point is that an Ethical Hacker has authorization to probe the target.

The CEH Program certifies individuals in the specific network security discipline of Ethical Hacking from a vendor-neutral perspective. The Certified Ethical Hacker certification will fortify the application knowledge of security officers, auditors, security professionals, site administrators, and anyone who is concerned about the integrity of the network infrastructure. A Certified Ethical Hacker is a skilled professional who understands and knows how to look for the weaknesses and vulnerabilities in target systems and uses the same knowledge and tools as a malicious hacker.

To achieve the Certified Ethical Hacker Certification, you must pass the CEH exam 312-50

Read it more at www.eccouncil.org

Microsoft Hardware Launches Exclusive Features for Windows 7

2009-06-04T04:14:00.001-07:00

Source: www.cnbc.com

By: PR Newswire 03 Jun 2009 01:30 AM ET

REDMOND, Wash., June 3, 2009 /PRNewswire-FirstCall via COMTEX/ -- Microsoft Hardware today announced that its current line of award-winning mice, keyboards, LifeCams, gaming devices and notebook accessories will be fully compatible with Windows 7 once the operating system is launched to retail customers on Oct. 22, 2009.(1) Making everyday tasks faster and easier, Microsoft Hardware created new, timesaving features for Windows 7 to ensure that anyone using the new operating system gets a better experience.

(Logo: http://www.newscom.com/cgi-bin/prnh/20000822/MSFTLOGO) Microsoft Hardware will launch several new features for Windows 7 in the coming months for its peripherals; the first of which is a timesaving feature called Taskbar Favorites that gives Microsoft keyboard users a smart new way to access their most frequently used programs and documents. Taskbar Favorites will map to the location of applications on the improved Windows taskbar. The applications in the taskbar can be easily rearranged just by clicking and dragging, and Taskbar Favorites will automatically adapt to the applications' new locations.

Additional new benefits of the Microsoft Hardware and Windows 7 connection include the following: -- Device Stage. Microsoft Hardware mouse and keyboard products will support Device Stage, a Windows 7 feature that gives customers quick and easy access to common tasks, including product information, registration, settings and more for popular device categories such as cell phones, cameras, printers, portable media players and input devices.

-- Windows Flip. Microsoft mouse and keyboard users can easily see a thumbnail preview of all open windows with the press of a button. A full-screen preview of the application will automatically display, enabling the user to better identify and select the desired application.

-- Windows Live Movie Maker and Windows Live Photo Gallery. LifeCam users will be able to do more with photos and movies. With Movie Maker they can start a movie project with one click, and then upload video to social networking sites. Photo Gallery access will enable them to easily upload a photo that they can edit, tag and share with friends and family.

"These new benefits continue a longstanding tradition of Microsoft integration," said Brett Ostrum, general manager of Microsoft Hardware. "Microsoft Hardware devices have been enhancing life on the PC for more than 25 years -- from a mouse designed for the first version of Microsoft Word and LifeCam exclusive features for Windows Live to keyboard design inspiration taken from Windows Vista. Our collaborative effort among all Microsoft teams ensures that the Microsoft Hardware lineup is an excellent choice for Windows 7 users." Availability When choosing peripherals for their Windows 7-based PCs, consumers can feel confident that all current Microsoft Hardware products are compatible with the new operating system.(1) Hardware products tested under Microsoft specifications for compatibility with the new operating system will display a Windows 7 logo on the product.

Beta versions of Microsoft mouse, keyboard, controller and webcam software are available now for Windows 7. Final versions of product software, which include Taskbar Favorites, Device Stage, Windows Flip, Windows Live Movie Maker and Windows Live Photo Gallery, will be available June 26 for mice and keyboards and July 31 for LifeCam products. For people currently using the Windows 7 release candidate, beta versions of software can be downloaded at http://www.microsoft.com/hardware/windows7/support.mspx.

About Microsoft Hardware For more than 25 years, the Hardware Group has employed innovative engineering, cutting-edge industrial design and extensive usability testing to create products of exceptional quality and durability that enhance the software experience and strengthen the connection between consumers and their PC.

Microsoft Hardware leads the industry in ergonomic engineering, industrial design and hardware/software compatibility, offering consumers an easier, more convenient and more enjoyable computing experience. In 2008, the Hardware Group debuted the world's most advanced tracking technology -- Microsoft BlueTrack Technology -- allowing consumers to track on more surfaces than optical and laser mice. More information about the Hardware Group is available at http://www.mshardwareguide.com.

About Microsoft Founded in 1975, Microsoft (Nasdaq: MSFT) is the worldwide leader in software, services and solutions that help people and businesses realize their full potential.

(1) Fingerprint Reader will not be compatible with Windows 7.

SOURCE Microsoft Corp.

Computer Security FAQ

2009-05-29T04:21:00.000-07:00

Source : http://www.kaspersky.com/threats_faq#virus/worm

In the past, PCs were mainly under threat from viruses and worms. The main purpose of these programs was to spread; however, some programs were also designed to cause damage to files and PCs. Such malicious software, or “malware”, could be described as ‘cyber vandalism’.

What is the difference between a virus and a worm?

A virus is a program that replicates, i.e. it spreads from file to file on your system and from PC to PC. In addition, it may be programmed to erase or damage data.

Worms are generally considered to be a subset of viruses, but with certain key differences. A worm is a computer program that replicates, but does not infect other files. Instead, it installs itself once on a computer and then looks for a way to spread to other computers.

In the case of a virus, the longer it goes undetected, the more infected files there will be on the computer. Worms, however, create a single instance of their code. Moreover, unlike a virus, a worm code is stand-alone. In other words, a worm is a separate file while a virus is a set of code which adds itself to existing files.

What is PHISHING?

Phishing is a very specific type of cybercrime designed to trick you into disclosing personal financial details. Cybercriminals create a fake website that looks just like a bank’s website (or any other web site where online financial transactions are conducted e.g. eBay). They then try to trick you into visiting this site and typing in your confidential data, such as your login, password or PIN. Typically, cybercriminals send out a large numbers of e-mails containing a hyperlink to the fake site.

What is a TROJAN and where did the name come from?

The term Trojan refers to the wooden horse used by the Greeks to sneak inside the city of Troy and capture it. The classic definition of a Trojan is a program that poses as legitimate software but when launched will do something harmful. Trojans can't spread by themselves, which is what distinguishes them from viruses and worms.

Today, Trojans are typically installed secretly and deliver their malicious payload without your knowledge. Much of today’s crimeware is comprised of different types of Trojans, all of which are purpose-built to carry out a specific malicious function. The most common are Backdoor Trojans (often they include a keylogger), Trojan Spies, password stealing Trojans and Trojan Proxies that convert your computer into a spam distribution machine.

What is a “DRIVE-BY DOWNLOAD”?

In a drive-by download, your computer becomes infected just by visiting a website which contains malicious code. Cybercriminals search the Internet looking for vulnerable web servers that can be hacked. On such servers, cybercriminals can inject their malicious code (often in the form of malicious script) onto the web pages. If your operating system or one of your applications is un-patched, a malicious program is downloaded to your computer automatically when you access the infected web page.

What is a KEYLOGGER?

These are programs which record key presses (i.e. what a user types on the keyboard) and can be used by a hacker to obtain confidential data (login details, passwords, credit card numbers, PINs, etc.). Backdoor Trojans typically come with an integrated keylogger.

What is ADWARE?

Adware is the general term applied to programs that either launch advertisements (often pop-up banners) or re-direct search results to promotional web sites. Adware is often built into freeware or shareware programs: if you download a freeware program, the adware is installed on your system without your knowledge or consent. Sometimes a Trojan will secretly download an adware program from a web site and install it on your computer.

Web browsers that aren’t up-to-date often contain vulnerabilities. Such browsers are vulnerable to hackers tools (often referred to as Browser Hijackers) that can download adware to your computer. Browser Hijackers may change browser settings, redirect incorrectly typed or incomplete URLs to a specific site, or change the default homepage. They may also redirect searches to pay-to-view (often pornographic) web sites.

Typically, adware programs do not show themselves in the system in any way: there will be no listing under Start Programs, no icons in the system tray and nothing in the task list. They seldom come with a de-installation procedure and attempts to remove them manually may cause the original carrier program to malfunction.

What is a BOTNET?

The term used for a network of computers controlled by cybercriminals using a Trojan or other malicious program.

What is SPYWARE?

As the name suggests, this is software that is designed to harvest your data and forward it to a third party without your consent or knowledge. Such programs may monitor key presses ('keyloggers'), collect confidential information (passwords, credit card numbers, PIN numbers, etc.), harvest e-mail addresses or track browsing habits. In addition to all of this, spyware inevitably affects your computer’s performance.

SPYWARECEASE+REMOVAL

2009-05-29T04:00:00.000-07:00

Updated: May 29, 2009 9:08:00 AM

Type: Misleading Application

Name: SpywareCease

Version: 3.4

Publisher: SpywareCease.com

Risk Impact: Medium

Systems Affected: Windows 98, Windows 95, Windows XP, Windows Me, Windows Vista, Windows NT, Windows Server 2003, Windows 2000

Behavior
The program must be manually installed.

The program reports false or exaggerated system security threats on the computer.
The user is then prompted to pay for a full license of the application in order to remove the threats.

Installation
When the program is executed, it creates the following folders:

· %UserProfile%\Desktop\SpywareCease

· %ProgramFiles%\Spyware Cease\update
It also creates the following files:

· %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Spyware Cease.lnk

· %UserProfile%\Desktop\Spyware Cease.lnk

· C:\Documents and Settings\All Users\Start Menu\Programs\Spyware Cease\Spyware Cease on the Web.lnk

· C:\Documents and Settings\All Users\Start Menu\Programs\Spyware Cease\Spyware Cease.lnk

· C:\Documents and Settings\All Users\Start Menu\Programs\Spyware Cease\Uninstall Spyware Cease.lnk

· %ProgramFiles%\Spyware Cease\AutoUpdate.exe

· %ProgramFiles%\Spyware Cease\DefendLog.txt

· %ProgramFiles%\Spyware Cease\LSR.lsr

· %ProgramFiles%\Spyware Cease\md5.dll

· %ProgramFiles%\Spyware Cease\networkdll.dll

· %ProgramFiles%\Spyware Cease\opfile.dll

· %ProgramFiles%\Spyware Cease\RegDefend.ini

· %ProgramFiles%\Spyware Cease\RkHitApi.dll

· %ProgramFiles%\Spyware Cease\spkdll.dll

· %ProgramFiles%\Spyware Cease\SpywareCease.chm

· %ProgramFiles%\Spyware Cease\SpywareCease.exe

· %ProgramFiles%\Spyware Cease\SpywareCease.url

· %ProgramFiles%\Spyware Cease\swdb.ssk

· %ProgramFiles%\Spyware Cease\unins000.dat

· %ProgramFiles%\Spyware Cease\unins000.exe

· %ProgramFiles%\Spyware Cease\zlib1.dll

· %System%\drivers\RKHit.sys

Next, the program creates the following registry entry so that it executes whenever Windows starts:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"SpywareCease.exe" = "C:\Program Files\Spyware Cease\SpywareCease.exe"

It also creates the following registry subkeys:

· HKEY_CURRENT_USER\Software\Spyware Cease

· HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Spyware Cease_is1

· HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RkHit

Updated: May 29, 2009 9:08:00 AM

Type: Misleading Application

Name: SpywareCease

Version: 3.4

Publisher: SpywareCease.com

Risk Impact: Medium

Systems Affected: Windows 98, Windows 95, Windows XP, Windows Me, Windows Vista, Windows NT, Windows Server 2003, Windows 2000

The following instructions pertain to all current and recent Symantec antivirus products, including the Symantec AntiVirus and Norton AntiVirus product lines.

1. Disable System Restore (Windows Me/XP).

2. Update the virus definitions.

3. Run a full system scan.

4. Delete any values added to the registry.

For specific details on each of these steps, read the following instructions.

1. To disable System Restore (Windows Me/XP)
If you are running Windows Me or Windows XP, we recommend that you temporarily turn off System Restore. Windows Me/XP uses this feature, which is enabled by default, to restore the files on your computer in case they become damaged. If a virus, worm, or Trojan infects a computer, System Restore may back up the virus, worm, or Trojan on the computer.

Windows prevents outside programs, including antivirus programs, from modifying System Restore. Therefore, antivirus programs or tools cannot remove threats in the System Restore folder. As a result, System Restore has the potential of restoring an infected file on your computer, even after you have cleaned the infected files from all the other locations.

Also, a virus scan may detect a threat in the System Restore folder even though you have removed the threat.

For instructions on how to turn off System Restore, read your Windows documentation, or one of the following articles:

· How to disable or enable Windows Me System Restore

· How to turn off or turn on Windows XP System Restore

Note: When you are completely finished with the removal procedure and are satisfied that the threat has been removed, reenable System Restore by following the instructions in the aforementioned documents.

For additional information, and an alternative to disabling Windows Me System Restore, see the Microsoft Knowledge Base article: Antivirus Tools Cannot Clean Infected Files in the _Restore Folder (Article ID: Q263455).

2. To update the virus definitions
Symantec Security Response fully tests all the virus definitions for quality assurance before they are posted to our servers. There are two ways to obtain the most recent virus definitions:

· Running LiveUpdate, which is the easiest way to obtain virus definitions.

If you use Norton AntiVirus 2006, Symantec AntiVirus Corporate Edition 10.0, or newer products, LiveUpdate definitions are updated daily. These products include newer technology.

If you use Norton AntiVirus 2005, Symantec AntiVirus Corporate Edition 9.0, or earlier products, LiveUpdate definitions are updated weekly. The exception is major outbreaks, when definitions are updated more often.

· Downloading the definitions using the Intelligent Updater: The Intelligent Updater virus definitions are posted daily. You should download the definitions from the Symantec Security Response Web site and manually install them.

The latest Intelligent Updater virus definitions can be obtained here: Intelligent Updater virus definitions. For detailed instructions read the document: How to update virus definition files using the Intelligent Updater.

3. To run a full system scan

1. Start your Symantec antivirus program and make sure that it is configured to scan all the files.

For Norton AntiVirus consumer products: Read the document: How to configure Norton AntiVirus to scan all files.

For Symantec AntiVirus Enterprise products: Read the document: How to verify that a Symantec Corporate antivirus product is set to scan all files.

2. Run a full system scan.

3. If any files are detected, follow the instructions displayed by your antivirus program.

Important: If you are unable to start your Symantec antivirus product or the product reports that it cannot delete a detected file, you may need to stop the risk from running in order to remove it. To do this, run the scan in Safe mode. For instructions, read the document, How to start the computer in Safe Mode. Once you have restarted in Safe mode, run the scan again.
After the files are deleted, restart the computer in Normal mode and proceed with the next section.

Warning messages may be displayed when the computer is restarted, since the threat may not be fully removed at this point. You can ignore these messages and click OK. These messages will not appear when the computer is restarted after the removal instructions have been fully completed. The messages displayed may be similar to the following:

Title: [FILE PATH]
Message body: Windows cannot find [FILE NAME]. Make sure you typed the name correctly, and then try again. To search for a file, click the Start button, and then click Search.

4. To delete the value from the registry
Important: Symantec strongly recommends that you back up the registry before making any changes to it. Incorrect changes to the registry can result in permanent data loss or corrupted files. Modify the specified subkeys only. For instructions refer to the document: How to make a backup of the Windows registry.

1. Click Start > Run.

2. Type regedit

3. Click OK.

Note: If the registry editor fails to open the threat may have modified the registry to prevent access to the registry editor. Security Response has developed a tool to resolve this problem. Download and run this tool, and then continue with the removal.

4. Navigate to and delete the following registry entry:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"SpywareCease.exe" = "C:\Program Files\Spyware Cease\SpywareCease.exe"

5. Navigate to and delete the following registry subkeys:

o HKEY_CURRENT_USER\Software\Spyware Cease

o HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Spyware Cease_is1

o HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RkHit

6. Exit the Registry Editor.