Skip to main content

Cyber Security


Information Security & Ethical Hacking

All tutorials and articles on this site are for Educational purpose only.
Do not misuse it. Articles are just for your knowledge and protect your self from 
Black-Hat Hackers and Internet threats. Enjoy n feel free to ask questions...


Are you unknowingly letting hackers steal your data?

1) Security feature to disable any virus or malware running in hidden mode inside ur pc
you should perform the following action daily after u start your pc

Steps:
Start > Run > msconfig ENTER
click on start up > click on enable all > then click on disable all >
click apply > after that click on services >
at bottom click on hide all microsoft services > then click on disable all
> apply > ok > click exit without restart



2) If your task manager or registry is disabled by any virus infection,
then follow the steps below : (for Vista,Windows 7,8)

1st you have to run the following vbs script. For that u have to copy
and paste the script in notepad :
Option Explicit
Dim WshShell, strUserName, strDomain, strSID
Dim objWMIService, colItems, objItem, arrName, objAccount
Set WshShell = WScript.CreateObject("WScript.Shell")
Set objWMIService = GetObject("winmgmts:\\.\root\cimv2")
Set colItems = objWMIService.ExecQuery("Select * From Win32_ComputerSystem")
For Each objItem in colItems
arrName = Split(objItem.UserName, "\")
strDomain = arrName(0)
strUserName = arrName(1)
Next
Set objAccount = objWMIService.Get _
("Win32_UserAccount.Name='" & strUserName & "',Domain='" & strDomain & "'")
strSID=objAccount.SID
If trim(strSID) <> "" then
WshShell.RegDelete ("HKEY_USERS\" & strSID & "\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools")
Msgbox "Completed!"
End if
and then go to file > save as > type file name
e.g. Enable-Registry.vbs (the extention must be .vbs) > save as type
(there change text documents to all file by clickin the drop down box at right)
> then click on save > then check for the file u have just saved
> u can save it in desktop > after that double click Enable-Registry.vbs
> u will get a message "Completed!"
Now u can check if ur registry is enabled again?
Start > Run > regedit.exe ENTER :-)
After your registry is open u have to check for the following link in registry :
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\system
inside registry goto > click HKEY_CURRENT_USER > click Software > click Microsoft
> click Windows > click CurrentVersion > click Policies > click system
> there at the right side search for "DisableTaskMgr" or "TaskMgr" there right click
and delete it n u are done. :-)
check ur task manager by clicking Ctrl+Alt+Del together :-)



Comments

Popular posts from this blog

IMAP and POP

IMAP and POP are mail protocols that enable users to remotely access e-mail. Since these protocols are designed and used for remotely accessing mail, holes are frequently open in the firewall allowing IMAP and POP traffic to pass into and out of the internal network. Because this access is open to the Internet, hackers frequently target these protocols for attack. Many exploits are available that enable hackers to gain root access to systems running IMAP and POP protocols. To defend against these exploits, system administrators should first remove IMAP and POP from the systems that do not need these services. Additionally, system administrators should ensure they are running the latest versions of the software and should monitor for and obtain all system patches.