What is the Registry?

<div dir="ltr" style="text-align: left;" trbidi="on"><h2 style="text-align: center;"> <span style="color: red; font-size: x-large;">What is the Registry?</span></h2><h2 style="text-align: center;"><span style="color: red; font-size: x-large;"><span style="color: black;">Today i will share with you what is registry here we go </span></span></h2><div style="text-align: left;"><br /></div>The Registry is a database used to store settings and options for the 32 bit versions of Microsoft Windows including Windows 95, 98, ME and NT/2000. It contains information and settings for all the hardware, software, users, and preferences of the PC. Whenever a user makes changes to a Control Panel settings, or File Associations, System Policies, or installed software, the changes are reflected and stored in the Registry.<br /><br />The physical files that make up the registry are stored differently depending on your version of Windows; under Windows 95 & 98 it is contained in two hidden files in your Windows directory, called USER.DAT and SYSTEM.DAT, for Windows Me there is an additional CLASSES.DAT file, while under Windows NT/2000 the files are contained seperately in the %SystemRoot%\System32\Config directory. You can not edit these files directly, you must use a tool commonly known as a "Registry Editor" to make any changes (using registry editors will be discussed later in the article).<br /><br />The Structure of The Registry<br />The Registry has a hierarchal structure, although it looks complicated the structure is similar to the directory structure on your hard disk, with Regedit being similar to Windows Explorer.<br /><br />Each main branch (denoted by a folder icon in the Registry Editor, see left) is called a Hive, and Hives contains Keys. Each key can contain other keys (sometimes referred to as sub-keys), as well as Values. The values contain the actual information stored in the Registry. There are three types of values; String, Binary, and DWORD - the use of these depends upon the context.<br /><br />There are six main branches, each containing a specific portion of the information stored in the Registry. They are as follows:<br /><br /><br />* HKEY_CLASSES_ROOT - This branch contains all of your file association mappings to support the drag-and-drop feature, OLE information, Windows shortcuts, and core aspects of the Windows user interface.<br />* HKEY_CURRENT_USER - This branch links to the section of HKEY_USERS appropriate for the user currently logged onto the PC and contains information such as logon names, desktop settings, and Start menu settings.<br />* HKEY_LOCAL_MACHINE - This branch contains computer specific information about the type of hardware, software, and other preferences on a given PC, this information is used for all users who log onto this computer.<br />* HKEY_USERS - This branch contains individual preferences for each user of the computer, each user is represented by a SID sub-key located under the main branch.<br />* HKEY_CURRENT_CONFIG - This branch links to the section of HKEY_LOCAL_MACHINE appropriate for the current hardware configuration.<br />* HKEY_DYN_DATA - This branch points to the part of HKEY_LOCAL_MACHINE, for use with the Plug-&-Play features of Windows, this section is dymanic and will change as devices are added and removed from the system.<br /><br /><br /><br />Each registry value is stored as one of five main data types:<br /><br /><br />* REG_BINARY - This type stores the value as raw binary data. Most hardware component information is stored as binary data, and can be displayed in an editor in hexadecimal format.<br />* REG_DWORD - This type represents the data by a four byte number and is commonly used for boolean values, such as "0" is disabled and "1" is enabled. Additionally many parameters for device driver and services are this type, and can be displayed in REGEDT32 in binary, hexadecimal and decimal format, or in REGEDIT in hexadecimal and decimal format.<br />* REG_EXPAND_SZ - This type is an expandable data string that is string containing a variable to be replaced when called by an application. For example, for the following value, the string "%SystemRoot%" will replaced by the actual location of the directory containing the Windows NT system files. (This type is only available using an advanced registry editor such as REGEDT32)<br />* REG_MULTI_SZ - This type is a multiple string used to represent values that contain lists or multiple values, each entry is separated by a NULL character. (This type is only available using an advanced registry editor such as REGEDT32)<br />* REG_SZ - This type is a standard string, used to represent human readable text values.<br /><br /><br /><br />Other data types not available through the standard registry editors include:<br /><br /><br />* REG_DWORD_LITTLE_ENDIAN - A 32-bit number in little-endian format.<br />* REG_DWORD_BIG_ENDIAN - A 32-bit number in big-endian format.<br />* REG_LINK - A Unicode symbolic link. Used internally; applications should not use this type.<br />* REG_NONE - No defined value type.<br />* REG_QWORD - A 64-bit number.<br />* REG_QWORD_LITTLE_ENDIAN - A 64-bit number in little-endian format.<br />* REG_RESOURCE_LIST - A device-driver resource list.<br /><br /><br /><br />Editing The Registry<br /><br />The Registry Editor (REGEDIT.EXE) is included with most version of Windows (although you won't find it on the Start Menu) it enables you to view, search and edit the data within the Registry. There are several methods for starting the Registry Editor, the simplest is to click on the Start button, then select Run, and in the Open box type "regedit", and if the Registry Editor is installed it should now open and look like the image below.<br /><br />An alternative Registry Editor (REGEDT32.EXE) is available for use with Windows NT/2000, it includes some additional features not found in the standard version, including; the ability to view and modify security permissions, and being able to create and modify the extended string values REG_EXPAND_SZ & REG_MULTI_SZ.<br /><br />Create a Shortcut to Regedit<br />This can be done by simply right-clicking on a blank area of your desktop, selecting New, then Shortcut, then in the Command line box enter "regedit.exe" and click Next, enter a friendly name (e.g. 'Registry Editor') then click Finish and now you can double click on the new icon to launch the Registry Editor.<br /><br />Using Regedit to modify your Registry<br />Once you have started the Regedit you will notice that on the left side there is a tree with folders, and on the right the contents (values) of the currently selected folder.<br /><br />Like Windows explorer, to expand a certain branch (see the structure of the registry section), click on the plus sign [+] to the left of any folder, or just double-click on the folder. To display the contents of a key (folder), just click the desired key, and look at the values listed on the right side. You can add a new key or value by selecting New from the Edit menu, or by right-clicking your mouse. And you can rename any value and almost any key with the same method used to rename files; right-click on an object and click rename, or click on it twice (slowly), or just press F2 on the keyboard. Lastly, you can delete a key or value by clicking on it, and pressing Delete on the keyboard, or by right-clicking on it, and choosing Delete.<br /><br />Note: it is always a good idea to backup your registry before making any changes to it. It can be intimidating to a new user, and there is always the possibility of changing or deleting a critical setting causing you to have to reinstall the whole operating system. It's much better to be safe than sorry!<br /><br />Importing and Exporting Registry Settings<br /><br />A great feature of the Registry Editor is it's ability to import and export registry settings to a text file, this text file, identified by the .REG extension, can then be saved or shared with other people to easily modify local registry settings. You can see the layout of these text files by simply exporting a key to a file and opening it in Notepad, to do this using the Registry Editor select a key, then from the "Registry" menu choose "Export Registry File...", choose a filename and save. If you open this file in notepad you will see a file similar to the example below:<br /><br />Quote:<br /><br />REGEDIT4<br /><br />[HKEY_LOCAL_MACHINE\SYSTEM\Setup]<br />"SetupType"=dword:00000000<br />"CmdLine"="setup -newsetup"<br />"SystemPrefix"=hex:c5,0b,00,00,00,40,36,02<br /><br /><br />The layout is quite simple, REGEDIT4 indicated the file type and version, [HKEY_LOCAL_MACHINE\SYSTEM\Setup] indicated the key the values are from, "SetupType"=dword:00000000 are the values themselves the portion after the "=" will vary depending on the type of value they are; DWORD, String or Binary.<br /><br />So by simply editing this file to make the changes you want, it can then be easily distributed and all that need to be done is to double-click, or choose "Import" from the Registry menu, for the settings to be added to the system Registry.<br /><br />Deleting keys or values using a REG file<br />It is also possible to delete keys and values using REG files. To delete a key start by using the same format as the the REG file above, but place a "-" symbol in front of the key name you want to delete. For example to delete the [HKEY_LOCAL_MACHINE\SYSTEM\Setup] key the reg file would look like this:<br /><br />Quote:<br /><br />REGEDIT4<br /><br />[-HKEY_LOCAL_MACHINE\SYSTEM\Setup]<br /><br /><br />The format used to delete individual values is similar, but instead of a minus sign in front of the whole key, place it after the equal sign of the value. For example, to delete the value "SetupType" the file would look like:<br /><br />Quote:<br /><br />REGEDIT4<br /><br />[HKEY_LOCAL_MACHINE\SYSTEM\Setup]<br />"SetupType"=-<br /><br /><br />Use this feature with care, as deleting the wrong key or value could cause major problems within the registry, so remember to always make a backup first.<br /><br />Regedit Command Line Options<br />Regedit has a number of command line options to help automate it's use in either batch files or from the command prompt. Listed below are some of the options, please note the some of the functions are operating system specific.<br /><br /><br />* regedit.exe [options] [filename] [regpath]<br />* [filename] Import .reg file into the registry<br />* /s [filename] Silent import, i.e. hide confirmation box when importing files<br />* /e [filename] [regpath] Export the registry to [filename] starting at [regpath]<br />e.g. regedit /e file.reg HKEY_USERS\.DEFAULT<br />* /L:system Specify the location of the system.dat to use<br />* /R:user Specify the location of the user.dat to use<br />* /C [filename] Compress (Windows 98)<br />* /D [regpath] Delete the specified key (Windows 98)<br /><br />Maintaining the Registry<br /><br />How can you backup and restore the Registry?<br /><br />Windows 95<br />Microsoft included a utility on the Windows 95 CD-ROM that lets you create backups of the Registry on your computer. The Microsoft Configuration Backup program, CFGBACK.EXE, can be found in the \Other\Misc\Cfgback directory on the Windows 95 CD-ROM. This utility lets you create up to nine different backup copies of the Registry, which it stores, with the extension RBK, in your \Windows directory. If your system is set up for multiple users, CFGBACK.EXE won't back up the USER.DAT file.<br /><br />After you have backed up your Registry, you can copy the RBK file onto a floppy disk for safekeeping. However, to restore from a backup, the RBK file must reside in the \Windows directory. Windows 95 stores the backups in compressed form, which you can then restore only by using the CFGBACK.EXE utility.<br /><br />Windows 98<br />Microsoft Windows 98 automatically creates a backup copy of the registry every time Windows starts, in addition to this you can manually create a backup using the Registry Checker utility by running SCANREGW.EXE from Start | Run menu.<br /><br />What to do if you get a Corrupted Registry<br />Windows 95, 98 and NT all have a simple registry backup mechanism that is quite reliable, although you should never simply rely on it, remember to always make a backup first!<br /><br />Windows 95<br />In the Windows directory there are several hidden files, four of these will be SYSTEM.DAT & USER.DAT, your current registry, and SYSTEM.DA0 & USER.DA0, a backup of your registry. Windows 9x has a nice reature in that every time it appears to start successfully it will copy the registry over these backup files, so just in case something goes wrong can can restore it to a known good state. To restore the registry follow these instruction:<br />[list=1]<br />* Click the Start button, and then click Shut Down.<br /><br />* Click Restart The Computer In MS-DOS Mode, then click Yes.<br /><br />* Change to your Windows directory. For example, if your Windows directory is c:\windows, you would type the following:<br /><br />cd c:\windows<br /><br />* Type the following commands, pressing ENTER after each one. (Note that SYSTEM.DA0 and USER.DA0 contain the number zero.)<br /><br />attrib -h -r -s system.dat<br />attrib -h -r -s system.da0<br />copy system.da0 system.dat<br />attrib -h -r -s user.dat<br />attrib -h -r -s user.da0<br />copy user.da0 user.dat<br /><br />* Restart your computer.<br /><br /><br /><br />Following this procedure will restore your registry to its state when you last successfully started your computer.<br /><br />If all else fails, there is a file on your hard disk named SYSTEM.1ST that was created when Windows 95 was first successfully installed. If necessary you could also change the file attributes of this file from read-only and hidden to archive to copy the file to C:\WINDOWS\SYSTEM.DAT.<br /><br />Windows NT<br />On Windows NT you can use either the "Last Known Good" option or RDISK to restore to registry to a stable working configuration.<br /><br />How can I clean out old data from the Registry?<br />Although it's possible to manually go through the Registry and delete unwanted entries, Microsoft provides a tool to automate the process, the program is called RegClean. RegClean analyzes Windows Registry keys stored in a common location in the Windows Registry. It finds keys that contain erroneous values, it removes them from the Windows Registry after having recording those entries in the Undo.Reg file.</div>

What is the Registry?

  What is the Registry? Today i will share with you what is registry here we go The Registry is a database used to store settings and option...

Read more »

How to Disable picture and Fax viewer

<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: left;"><span style="font-size: large;">Hi Friend today i again cameback to provide you best tricks of computer you ever seen.</span></div><div style="text-align: left;"><span style="font-size: large;"> today i will tell you to disable picture and Fax viewer, </span></div><div style="text-align: left;"><br /></div><div style="text-align: left;"><span style="font-size: large;">We all know that WinXP likes to keep itself held together, and how it doesnt like you uninstalling certain components. Well The Picture and Fax Viewer, is one of these programs which can cause problems if removed incorrectly. It can be disabled safely as follows:<br /><br />[Start] [Run] type regedit and click [OK]<br /><br />Navigate to :<br /><br />HKEY_CLASSES_ROOT/ SystemFileAssociations/ image/ ShellEx/ ContextMenuHandlers<br /><br />then delete the Folder ShellImagePreview under ContextMenuHandlers<br /><br />Note: If you want to restore the Picture and Fax Viewer :<br /><br />Create the ShellImagePreview folder and create the String Value (Default)<br />Assign it the value {e84fda7c-1d6a-45f6-b725-cb260c236066}<br /><br />NOTE: This tweak doesnt uninstall the program. It removes the association and therefore it cannot be run.</span></div></div>

How to Disable picture and Fax viewer

Hi Friend today i again cameback to provide you best tricks of computer you ever seen.  today i will tell you to disable picture and Fax vie...

Read more »

Romote Shutdown

<div dir="ltr" style="text-align: left;" trbidi="on">XP PRO has a lot of fun utilities. One of the most useful ones I have found to date is the ability to remotely reboot a PC. There are 2 ways of doing this. You will need to have admin access to the PC to preform these actions. That being said, here is the first way to do it:<br /><br />Right click my computer, choose manage.<br />Highlight the Computer Management (Local) then click on Action, choose connect to another computer.<br />In the window that opens fill in the machine name of the PC you want to connect to and click ok.<br />Once connected right click on Computer Management (Remote machine name) and choose properties.<br />Go to the "Advanced" tab and click the Settings button under Start up and recovery.<br />Click on the Shutdown button.<br />Under action choose what you want to do (you can log off current user, shut down, restart, or power down. you can also choose if you want to force all applications to close, close hung apps, or wait for all apps to close by themselves).<br /><br />The second way... Remember dos... that good old thing. Open up a command prompt and enter in the following:<br /><br />%windir%\System32\shutdown.exe -r -m \\Machinename. The command prompt has more switches and options. I highly suggest using shutdown.exe /? to see all the posibilities.</div>

Romote Shutdown

XP PRO has a lot of fun utilities. One of the most useful ones I have found to date is the ability to remotely reboot a PC. There are 2 ways...

Read more »

Yourikan Pro-Israeli Hacker Claims 91 Iranian Websites Hacked

<div dir="ltr" style="text-align: left;" trbidi="on"><div dir="ltr" style="text-align: left;" trbidi="on">Pro-Israeli hacker Yourikan (you-r!-k@n) is claiming to have hacked and defaced as many as ninety-one Iranian websites.<br /><br />In a message sent to Infosec Island editor Anthony M. Freed, Youri<br /><div class="text_exposed_show">kan indicated the attacks were leveled against Iranian government, education and business targets in protest of Iran's continued pursuit of nuclear weapons and support for terrorist activities targeting Israel.</div><div class="text_exposed_show"><br /></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjxILS9q0ABWZ0Lu-RnQayEcYTq6WpaFZneIzDB8vpqHqEkZ4ii-6Z5eJ_WpsRVzq8t4vbcB7t3MvqRM9x4JzXfn64-whVZ8VM4984F0YMqkIugmZDUkJQ4tyJ6_45uzr44wXeMYB8ZSH-c/s1600/530078_437627016289370_1860627475_n.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="293" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjxILS9q0ABWZ0Lu-RnQayEcYTq6WpaFZneIzDB8vpqHqEkZ4ii-6Z5eJ_WpsRVzq8t4vbcB7t3MvqRM9x4JzXfn64-whVZ8VM4984F0YMqkIugmZDUkJQ4tyJ6_45uzr44wXeMYB8ZSH-c/s320/530078_437627016289370_1860627475_n.jpg" width="320" /></a></div><div class="text_exposed_show"><br /><br />"91 Iranian sites were hacked and they own by me. Which several government sites eg <a ga9ea671e55="true" href="http://ashayer.gov.ir/" rel="nofollow nofollow" target="_blank">http://ashayer.gov.ir/</a><br /><div f11abe582f8b="ashayer.gov.ir" style="cursor: pointer; display: inline-block; height: 16px; width: 16px;"></div>this is the Tehran's urban development and other gov.ir, A large number of sites faculties and institutions, for example Iranian university <a ga9ea671e55="true" href="http://sama-saveh.ac.ir/info1-28.htm" rel="nofollow nofollow" target="_blank">http://sama-saveh.ac.ir/info1-28.htm</a><br /><div f11abe582f8b="sama-saveh.ac.ir" style="cursor: pointer; display: inline-block; height: 16px; width: 16px;"></div>one of the largest universitie in Iran Large electronics companies sites <a ga9ea671e55="true" href="http://gaamelectric.ir/info1-28.htm" rel="nofollow nofollow" target="_blank">http://gaamelectric.ir/info1-28.htm</a><br /><div f11abe582f8b="gaamelectric.ir" style="cursor: pointer; display: inline-block; height: 16px; width: 16px;"></div>gaz and oil company <a ga9ea671e55="true" href="http://www.facebook.com/l.php?u=http%3A%2F%2Fsatrap.ir%2Finfo1-28.htm&h=RAQG3MaAa&s=1" rel="nofollow nofollow" target="_blank">http://satrap.ir/info1-28.htm</a><br /><div f11abe582f8b="satrap.ir" style="cursor: pointer; display: inline-block; height: 16px; width: 16px;"></div>and this one <a ga9ea671e55="true" href="http://www.facebook.com/l.php?u=http%3A%2F%2Fwww.tw.org.ir%2Finfo%2Fmainpage.asp&h=2AQHTuQyy&s=1" rel="nofollow nofollow" target="_blank">http://www.tw.org.ir/info/mainpage.asp</a><br /><div f11abe582f8b="tw.org.ir" style="cursor: pointer; display: inline-block; height: 16px; width: 16px;"></div>...This is an attack against Iran than support terrorism and developing nuclear weapons to destroy Israel." <br /><br />At the time of the writing of this article, the websites provided in Yourikan's statement above were showing signs of defacement similar to the following screenshot provided by Yourikan:<br /><br />Previously, Yourikan is known to have similarly hacked and defaced the websites for Iran's state radio station (radio.irib.ir), the site operated by an Iranian water utility (tw.org.ir), and a site belonging to the Iranian Meteorological Organization (irimo.ir).<br /><br />The websites targeted in the attack now appear to have been taken off line. Yourikan stated via email the following:<br /><br />"btw all the sites were deleted today (del *.* :-) i had a console backdoors on the server )this is the end of the attack. the dns + the webservers doesn't exist anymore... you can see it by the response of:"<br /><br /><a ga9ea671e55="true" href="http://www.facebook.com/l.php?u=http%3A%2F%2Fwww.tw.org.ir&h=aAQEAt3n-&s=1" rel="nofollow nofollow" target="_blank">www.tw.org.ir</a><br /><a ga9ea671e55="true" href="http://www.facebook.com/l.php?u=http%3A%2F%2Fashayer.gov.ir%2F&h=VAQHflrzD&s=1" rel="nofollow nofollow" target="_blank">http://ashayer.gov.ir/</a><br /><a ga9ea671e55="true" href="http://www.facebook.com/l.php?u=http%3A%2F%2Fsama-saveh.ac.ir%2Finfo1-28.htm&h=xAQHOuZ53&s=1" rel="nofollow nofollow" target="_blank">http://sama-saveh.ac.ir/info1-28.htm</a><br /><div f11abe582f8b="sama-saveh.ac.ir" style="cursor: pointer; display: inline-block; height: 16px; width: 16px;"></div>"as well all of the sites... this is the end of my attack... i guess now they will rebuild it from scratch..."</div><div class="text_exposed_show"><br /></div></div><a class="twitter-follow-button" data-show-count="false" href="https://twitter.com/thehackersmedia">Follow @thehackersmedia</a><script>!function(d,s,id){var js,fjs=d.getElementsByTagName(s)[0];if(!d.getElementById(id)){js=d.createElement(s);js.id=id;js.src="//platform.twitter.com/widgets.js";fjs.parentNode.insertBefore(js,fjs);}}(document,"script","twitter-wjs");</script></div>

Yourikan Pro-Israeli Hacker Claims 91 Iranian Websites Hacked

Pro-Israeli hacker Yourikan (you-r!-k@n) is claiming to have hacked and defaced as many as ninety-one Iranian websites. In a message sent to...

Read more »

Naughty Nurse Sakura Shiratori tries to Infect Defence Firm with Malware

<div dir="ltr" style="text-align: left;" trbidi="on"><div dir="ltr" style="text-align: left;" trbidi="on">We’ve seen a large number of files spammed out to various organisations, exploiting the CVE-2012-0158 vulnerability.<br /><br />Victims have not be<br /><div class="text_exposed_show">en limited to defence companies, but have also included government departments, charities and recruitment agencies.<br /><br />One of the latest attacks we have seen was sent to a defence contractor, using the subject line “if you want sex pictrue!”.</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipXMuf7czsJ2twwzyUmzSwrOFzTOFljFmo2HD_wU14rqkyiSw1mcgPbpDcF3ux7qSPmsL0zq9Y2YH2E26aNdHp3g9XCRm-yHmNMReyooV1ZhqjR3epihbzkneQh4cSlXIfdv_9oTzkU3T-/s1600/578774_437463539639051_351013623_n.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipXMuf7czsJ2twwzyUmzSwrOFzTOFljFmo2HD_wU14rqkyiSw1mcgPbpDcF3ux7qSPmsL0zq9Y2YH2E26aNdHp3g9XCRm-yHmNMReyooV1ZhqjR3epihbzkneQh4cSlXIfdv_9oTzkU3T-/s320/578774_437463539639051_351013623_n.jpg" width="320" /></a></div><div class="text_exposed_show">Attached to the email is a file called sexpicture.rar that contains a number of naked pictures of Japanese model Sakura Shiratori.<br /><br />Harmless enough you might think. However, alongside the seedy snapshots are two files.<br /><br />An apparent screensaver, short-SEXGPJ_1.SCR, is malicious – and detected by Sophos products as Mal/Behav-043.<br /><br />Another file, short-SEX_ST_1.DOC, is detected by Sophos products as Troj/DocDrop-AF, and attempts to install further malicious code onto victims’ computers by exploiting the CVE-2012-0158 vulnerability.<br /><br />Although the email appears to have come from the Taiwanese branch of Yahoo, the “from:” address has been forged by whoever sent out the attack. I’m also going to make the fairly safe assumption that Miss Shiratori is not aware of how her images are being abused.<br /><br />Make sure that the staff at your firm are wary of opening unsolicited email attachments, and that computers are defended with up-to-date anti-virus software and the latest security patches.<br /><br />Microsoft released its patch for the vulnerability back in April – if you haven’t already rolled it out across your Windows PCs, do so now.</div><div class="text_exposed_show"><br /></div></div><a class="twitter-follow-button" data-show-count="false" href="https://twitter.com/thehackersmedia">Follow @thehackersmedia</a><script>!function(d,s,id){var js,fjs=d.getElementsByTagName(s)[0];if(!d.getElementById(id)){js=d.createElement(s);js.id=id;js.src="//platform.twitter.com/widgets.js";fjs.parentNode.insertBefore(js,fjs);}}(document,"script","twitter-wjs");</script></div>

Naughty Nurse Sakura Shiratori tries to Infect Defence Firm with Malware

We’ve seen a large number of files spammed out to various organisations, exploiting the CVE-2012-0158 vulnerability. Victims have not be en ...

Read more »

Haines City's Government Site Hacked by Ay Yıldız Hack Team

<div dir="ltr" style="text-align: left;" trbidi="on"><div dir="ltr" style="text-align: left;" trbidi="on">The Turkish Hacker group called as Ay Yıldız have hacked into the official website of Haines City, Polk County, Florida. On Sunday, the site’s visitors were redirected to a Turki<br /><div class="text_exposed_show">sh gaming site.<br /><br />According to NewsChief, the site was hacked about 10:30 p.m. -- and taken down as soon as the city's Information Technology staff was notified later Sunday night.</div><div class="text_exposed_show"><br /></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjd3lfRMr7towAb4C6fElz4uotm1F-DpqDA-S6TsycpdAmjTDffimscFpKOg-m-lztRJa0xVBrWnIkLZaJSaeMK36g-AyrsTuB2MFxL2WdRITZDPnBNSnzKYleCPE94XgXKue2Lyx5ueDtK/s1600/557366_437625532956185_1519444658_n.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjd3lfRMr7towAb4C6fElz4uotm1F-DpqDA-S6TsycpdAmjTDffimscFpKOg-m-lztRJa0xVBrWnIkLZaJSaeMK36g-AyrsTuB2MFxL2WdRITZDPnBNSnzKYleCPE94XgXKue2Lyx5ueDtK/s320/557366_437625532956185_1519444658_n.jpg" width="320" /></a></div><div class="text_exposed_show"><br />Haines City representatives said because the website is not hosted on city servers, IT staff could not determine how it was hacked. But he said no information on city servers were compromised.<br /><br />"We took the website down," Evans said. "We know it's an important communication tool and we have been working on a reorganized website but this glitch set the plans in motion sooner."<br /><br />The incident determined officials to ensure that the new site, about to be launched these days, would benefit from proper security measures.<br /><br />“In the event that something happens in the future, we'll be prepared for it,” said Assistant City Manager, Jonathan Evans.</div><div class="text_exposed_show"><br /></div></div><a class="twitter-follow-button" data-show-count="false" href="https://twitter.com/thehackersmedia">Follow @thehackersmedia</a><script>!function(d,s,id){var js,fjs=d.getElementsByTagName(s)[0];if(!d.getElementById(id)){js=d.createElement(s);js.id=id;js.src="//platform.twitter.com/widgets.js";fjs.parentNode.insertBefore(js,fjs);}}(document,"script","twitter-wjs");</script></div>

Haines City's Government Site Hacked by Ay Yıldız Hack Team

The Turkish Hacker group called as Ay Yıldız have hacked into the official website of Haines City, Polk County, Florida. On Sunday, the si...

Read more »

Wikileaks is Under massive DDoS attack for 5 Days

<div dir="ltr" style="text-align: left;" trbidi="on"><div dir="ltr" style="text-align: left;" trbidi="on">The Wikileaks is down after hit by massive Distributed Denial of Service (DDoS) attack for last five days.The DDoS attack was started on August 3rd.<br />This is not the first time the <br /><div class="text_exposed_show">wikileaks is being DDoSed, the website was down for four days in May 2012.<br /><br />The attack is a very broad one. Most WikiLeaks mirrors have been brought offline as well, with some coming back today. Even sites simply related to WikiLeaks have been targeted.</div><div class="text_exposed_show"><br /></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh1ymoYaMizOlkt36U_qCQiLtggSVAABS4WOFR7YpVcd7WYdeGNZh4X-bLz7yjqKBiNOj8IixiDlL4DlwVM4yEQ2hk8kwUq5GxTpqbJartHQEUmRJVNzOjyF70ogkV-bwVLMVRpU4-JjgJq/s1600/wiki.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh1ymoYaMizOlkt36U_qCQiLtggSVAABS4WOFR7YpVcd7WYdeGNZh4X-bLz7yjqKBiNOj8IixiDlL4DlwVM4yEQ2hk8kwUq5GxTpqbJartHQEUmRJVNzOjyF70ogkV-bwVLMVRpU4-JjgJq/s320/wiki.jpg" width="249" /></a></div><div class="text_exposed_show"><br />These include the WikiLeaks-endorsed website Cabledrum, including its mirror of the WikiLeaks website, and French non-profit FDNN, which hosts a WikiLeaks' donation portal. The latter was attacked shortly after WikiLeaks linked to it as an alternative to donate while the WikiLeaks website is down. WL Central and Justice for Assange were also attacked for a short period of time.<br /><br />A Hacker group called AntiLeaks claimed that they are responsible for the attack and has issued the following statement:<br /><br />"You can call me DietPepsi. I am the leader of AntiLeaks. We are not doing this to call attention to ourselves. We are young adults, citizens of the United States of America and are deeply concerned about the recent developments with Julian Assange and his attempt at aslyum in Ecuador.<br />Assange is the head of a new breed of terrorist. We are doing this as a protest against his attempt to escape justice into Ecuador. This would be a catalyst for many more like him to rise up in his place. We will not stop and they will not stop us."</div><div class="text_exposed_show"><br /></div></div><a class="twitter-follow-button" data-show-count="false" href="https://twitter.com/thehackersmedia">Follow @thehackersmedia</a><script>!function(d,s,id){var js,fjs=d.getElementsByTagName(s)[0];if(!d.getElementById(id)){js=d.createElement(s);js.id=id;js.src="//platform.twitter.com/widgets.js";fjs.parentNode.insertBefore(js,fjs);}}(document,"script","twitter-wjs");</script></div>

Wikileaks is Under massive DDoS attack for 5 Days

The Wikileaks is down after hit by massive Distributed Denial of Service (DDoS) attack for last five days.The DDoS attack was started on Au...

Read more »

Keyboard Shortcuts, must read

<div dir="ltr" style="text-align: left;" trbidi="on"><span style="font-size: small;">Getting used to using your keyboard exclusively and leaving your mouse behind will make you much more efficient at performing any task on any Windows system. I use the following keyboard shortcuts every day:<br /><br />Windows key + R = Run menu<br /><br />This is usually followed by:<br />cmd = Command Prompt<br />iexplore + "web address" = Internet Explorer<br />compmgmt.msc = Computer Management<br />dhcpmgmt.msc = DHCP Management<br />dnsmgmt.msc = DNS Management<br />services.msc = Services<br />eventvwr = Event Viewer<br />dsa.msc = Active Directory Users and Computers<br />dssite.msc = Active Directory Sites and Services<br />Windows key + E = Explorer<br /><br />ALT + Tab = Switch between windows<br /><br />ALT, Space, X = Maximize window<br /><br />CTRL + Shift + Esc = Task Manager<br /><br />Windows key + Break = System properties<br /><br />Windows key + F = Search<br /><br />Windows key + D = Hide/Display all windows<br /><br />CTRL + C = copy<br /><br />CTRL + X = cut<br /><br />CTRL + V = paste<br /><br />Also don't forget about the "Right-click" key next to the right Windows key on your keyboard. Using the arrows and that key can get just about anything done once you've opened up any program.<br /><br /><br />Keyboard Shortcuts<br /><br />[Alt] and [Esc] Switch between running applications<br /><br />[Alt] and letter Select menu item by underlined letter<br /><br />[Ctrl] and [Esc] Open Program Menu<br /><br />[Ctrl] and [F4] Close active document or group windows (does not work with some applications)<br /><br />[Alt] and [F4] Quit active application or close current window<br /><br />[Alt] and [-] Open Control menu for active document<br /><br />Ctrl] Lft., Rt. arrow Move cursor forward or back one word<br /><br />Ctrl] Up, Down arrow Move cursor forward or back one paragraph<br /><br />[F1] Open Help for active application<br /><br />Windows+M Minimize all open windows<br /><br />Shift+Windows+M Undo minimize all open windows<br /><br />Windows+F1 Open Windows Help<br /><br />Windows+Tab Cycle through the Taskbar buttons<br /><br />Windows+Break Open the System Properties dialog box<br /><br /><br /><br />acessability shortcuts<br /><br />Right SHIFT for eight seconds........ Switch FilterKeys on and off.<br /><br />Left ALT +left SHIFT +PRINT SCREEN....... Switch High Contrast on and off.<br /><br />Left ALT +left SHIFT +NUM LOCK....... Switch MouseKeys on and off.<br /><br />SHIFT....... five times Switch StickyKeys on and off.<br /><br />NUM LOCK...... for five seconds Switch ToggleKeys on and off.<br /><br />explorer shortcuts<br /><br />END....... Display the bottom of the active window.<br /><br />HOME....... Display the top of the active window.<br /><br />NUM LOCK+ASTERISK....... on numeric keypad (*) Display all subfolders under the selected folder.<br /><br />NUM LOCK+PLUS SIGN....... on numeric keypad (+) Display the contents of the selected folder.<br /><br />NUM LOCK+MINUS SIGN....... on numeric keypad (-) Collapse the selected folder.<br /><br />LEFT ARROW...... Collapse current selection if it's expanded, or select parent folder.<br /><br />RIGHT ARROW....... Display current selection if it's collapsed, or select first subfolder.<br /><br /><br /><br /><br />Type the following commands in your Run Box (Windows Key + R) or Start Run<br /><br />devmgmt.msc = Device Manager<br />msinfo32 = System Information<br />cleanmgr = Disk Cleanup<br />ntbackup = Backup or Restore Wizard (Windows Backup Utility)<br />mmc = Microsoft Management Console<br />excel = Microsoft Excel (If Installed)<br />msaccess = Microsoft Access (If Installed)<br />powerpnt = Microsoft PowerPoint (If Installed)<br />winword = Microsoft Word (If Installed)<br />frontpg = Microsoft FrontPage (If Installed)<br />notepad = Notepad<br />wordpad = WordPad<br />calc = Calculator<br />msmsgs = Windows Messenger<br />mspaint = Microsoft Paint<br />wmplayer = Windows Media Player<br />rstrui = System Restore<br />netscp6 = Netscape 6.x<br />netscp = Netscape 7.x<br />netscape = Netscape 4.x<br />waol = America Online<br />control = Opens the Control Panel<br />control printers = Opens the Printers Dialog</span></div>

Keyboard Shortcuts, must read

Getting used to using your keyboard exclusively and leaving your mouse behind will make you much more efficient at performing any task on an...

Read more »

Hide Drives and Partitions

<div dir="ltr" style="text-align: left;" trbidi="on"><h2 style="text-align: center;"><span style="color: red;"><span style="font-size: x-large;"><b>Hide Drives and Partitions</b></span></span></h2><br />Do you have data on a partition or hard drive that you don't want tampered with or easily accessible to other users? Well, you can hide any drive/partition in Windows XP, NT, and 2000. That means that they won't show up in Explorer or My Computer.<br /><br />If you want access to that drive from your user account you should create a desktop shortcut before proceeding. Once hidden, you can still access by typing the drive letter and a colon in Start/Run—for example, "D:" will bring up a folder of the contents on your D drive.<br /><br />The easiest way with Win XP is to use the TweakUI power toy from Mcft. Go to Start/Run and type in "tweakui" (without the quotes).<br /><br />Go to My Computer/Drives and uncheck the drive/partition(s) you want hidden. Click "Apply" or "OK" when finished.<br /><br />If you have XP but not Tweak UI you can download it here...<br />http://www.Mcft.com/windowsxp/downloads/powertoys/xppowertoys.mspx<br /><br />For Win NT, 2000, and XP you can use the following Registry edit:<br /><br />*Be sure to back up the Registry before proceeding<br />http://www.worldstart.com/tips/tips.php/401<br /><br />Open the Registry Editor by going to Start/Run and typing in "regedit" (without the quotes). Find your way to...<br /><br />HKEY_CURRENT_USER\Software\Mcft\Windows\CurrentVersion\Policies<br /><br />Click on "Explorer".<br /><br />Double-click the "NoDrives" key in the right column. If you don't find a "NoDrives" registry key, just right-click in the right pane and choose "New/DWORD Value" then name the key "NoDrives".<br /><br />You'll see a value like "0000 00 00 00 00". This is where the fun starts. The four sets of double zeros (after the "0000") are where you'll enter the values for the drive/partitions. Now, stay with me on this—it's not as complicated as it sounds:<br /><br />The first column is for drives A-H, the second for I-P, the third for Q-X, and the fourth for Y-Z.<br /><br />The values for each drive are as follows:<br /><br />1 - A I Q Y<br />2 - B J R Z<br />4 - C K S<br />8 - D L T<br />16 - E M U<br />32 - F N V<br />64 - G O W<br />80 - H P X<br /><br />So, let's say you want to hide drive D. In the first column you would put "08". For drive K you would put "04" in the second column.<br /><br />But what if you want to hide more than one drive in a column? Simply add the values together: D+E = 8+16 = 24. So in the first column you would put "24".<br /><br />Still baffled? If you have XP then go get TweakUI and save yourself the math.<br /><br />Whichever method you use, you can rest easy knowing that the files on that drive or partition are less accessible to other users.</div>

Hide Drives and Partitions

Hide Drives and Partitions Do you have data on a partition or hard drive that you don't want tampered with or easily accessible to other...

Read more »