Posts

Showing posts with the label Security

Dealing with Ransomware

Image
Ransomware is embarrassing when pops up with asking money There are some solutions for this kind:  1. To break the encryption of the ransomware, it is almost impossible because normally they build it one way, so after money submitted, they would not give you the key, because the key might not exist from the beginning. If they built the ransomeware upon opensource then there might be solution in public as well. If you have lots of resources and computing power, you could try bruteforce for cracking the encryption, but not recommended 2. The most easy solution is to make a backup such as windows backup may help you to restore files and folders encrypted by ransomware, so a nice backup tool and plan should be considered.  (Make a backup upon that a user account does not have a right to edit such as password lock) Such as googledrive leaves a change history, so right before the recent change made in the change history you can use to restore when ransomeware encryp...

Remove Unwanted program TUCTLSystem.exe

sc config tuctlsystem start= demand Taskkill /IM TDepend.exe /F Taskkill /IM TDepend64.exe /F Taskkill /IM TUCTLSystem.exe /F del C:\Windows\SysWow64\TDepend.exe del C:\Windows\SysWow64\TDepend64.exe del C:\Windows\SysWow64\TUCTLSystem.exe  //when  ndv file is executed, it will start running until you will find out it consumes system resources. 

Reverse Engineering Malware Analysis

On-line Malware Analysis Articles You can learn a lot about malware analysis on-line. I wrote a number of articles on the topic, so allow me to walk you through them: Get started with my article  5 Steps to Building a Malware Analysis Toolkit Using Free Tools . If using virtualization software to set up your lab, take a look at  Using VMware for Malware Analysis . Read about the  3 Phases of Malware Analysis Process  to get an overview of the key aspects of the malware-reversing effort and a related article  Mastering 4 Stages of Malware Analysis . Got get a good sense for what typical output of the reversing process looks like, take a look at my post What to Include in a Malware Analysis Report  and at Anuj Soni's article  How to Track Your Malware Analysis Findings . As you continue to experiment with malware analysis, take a look at the cheat sheets I put together for  reverse-engineering malware  and  analyzing malicious docu...

how to break into win 7 from local

Image
Step 1: YOUR TOOLS If the computer you're hacking has an AMP (webserver with apache and php) you need one thing An usb drive with a special PHP file I made. I'll give it to you during this instructable else, you need two things: A bootable linux distro (I use knoppix, but feel free to use everything else) A usb drive with the programs "Saminside" (check  insidepro.com ) and "Fgdump" (on  foofus.net/fizzgig ) and of course you need enough time and nothing to lose. pwd.zip 380 KB Step 2: GETTING THE LOCAL ADMIN part 1 version 1 Skip this if the target doesn't have a webserver Boot the computer and insert your usb drive. Copy the file called pwd.php in the htdocs folder on your webserver surf with your browser to  http://localhost/pwd.php Don't type anything in the fields and click the submit button. If the virus scanner gives you a warning try version 2 (you will need the program saminside ...