Hashtab, verify your file integrity and authenticity

Hashtab extension helps to calculate file hash with different algorithms like crc32, md5, sha-1..,in terms of security u can use hashtab to check if a an application is modified(infected or cracked) or not downloaded correctly, by comparing between the hash code we found in our local file and the hash mentioned in the application's official website.

1-download hashtab and install it:
2-"the hashes" are in the file proprieties.

Read More

12 ways to increase your website security.

Security of a website can't reach 100%, hackers always find new vulnerabilities and they exploit it to attack systems and applications. But you can improve your website security and decrease the chances of getting hacked by following these advices.

For the webserver:

1- choose a web server in mac, mac have more security than Linux, Linux have more security than Windows.

2-if you have a personal server in your computer like big companies have more security than a host servers,

3-a website hosted in a virtual machine (VPS) have more security than a website hosted in a simple machine.

4-the operating system and the applications where the webserver is running, should always get last security updates.

5-the webserver should have antivirus and Anti-DDOS attack protection.

6-the webserver should have a firewall against malicious requests.

For the web application (script):

1- if u use a downloaded script, use the one that have good support and updates, and don't use a lot of (Add-ons, plugins, modules ,gadgets), less add-ons means less vulnerabilities.

2- if the web script is developed by you from zero, you need to know that bad programming means more vulnerabilities

3- your web script should be programmed to crypt passwords(md5,sha-1,DES...), and u have to use a hard password for your admin account.

4-the password of your admin account should be different than the (cpannel, ftp, phpmyadmin, mysql...) passwords.

5- change the path and the name of the website administration's folder, and if u have Cpannel you can give a password for this folder.
ex: www.yoursite.com/admin/index.php
www.yoursite.com/folder/folder/../adminwebfolder/index.php

this needs also to modify some codes in your script

6-use a website vulnerability scanner, like Acunetix wvs or nikto... to know if your website is vulnerable to attacks like (sql injection, local file include, remote file include, authentication bypass, buffer overflow, XSS, CSRF...).

Read More

malicious browsers plugins that take control of user accounts on social networks

trend micro the Japanese security software entreprise, has found malicious firefox and chrome plugins that take control of user accounts on social networks.

trend micro explained that those plugins share contents and like pages and posts in facebook, twitter, google+ Without the user's approval.

the names of those malwares in google chrome are(Chrome Service Pack 5.0.0,F-Secure Security pack 6.1.0), and in mozilla firefox (Mozilla Service Pack 5.0,F-Secure Security pack 6.1). the malicious istalled files have these names TROJ_FEBUSER.AA and JS_FEBUSER.AA.

tren micro confirmed that the hackers have added a trusted electronic signature to the browser extensions in order to facililate its mission in control uses accounts on the three social networks easily without being discovered by antivirus softwares.

this malware attacks only chrome and firefox users.

Trend micro advised the users to make sure of any browser extension source before downloading it to not give opportunity for malicious files to infect their computers.

Read More

prevent the cybercafe's owner who use handycafe from spying on you

this is important for cybercafe goers to prevent cybercafe's owner from spying on them.

1-start
2-control pannel
3-firewall
4-allow programms throught windows firewall
5-choose handycafe client

6-delete
7-confirm (OK)

Read More

folders and files are invisibles, external hard drive

this problem due to a virus that change file attributes "autorun.inf". so we need to change back this attributes to make these files visible again. but before doing that we have to remove autorun.inf virus.

1-run a scan using auto-run eater to delete autorun virus: http://oldmcdonald.wordpress.com/

2- Open the command Prompt Cmd and type this command bellow to make your data visible(x= external hdd letter):
attrib -H -S x:\*.* /S /D

Read More

free online virus scan, know who hacked you!!

first, we need to know that a new encrypted virus can be undetectable to all or some of antiviruses,its just a question of time for the virus to be detectable,that's why antiviruses need always an update.
scanning with more than 40 antivirus will just increase the chances to detect virus, and of course never it will be 100%.

use these websites to scan your files online for viruses.
https://www.virustotal.com/
http://virusscan.jotti.org/

threatexpert scan your files and give you good additional information about who hacked you, ex his(email, no-ip, domaine name,irc channel...), specially the viruses that takes control  of computer or steal informations.
http://www.threatexpert.com/filescan.aspx

Read More

Keyscrambler, Encrypt your keystrokes against keyloggers

KeyScrambler Personal is a totally free application for your web browser that insures what you type from keyloggers . It defeats keyloggers by encrypting the keystrokes at the keyboards driver level , profound within the computer system . Once the encrypted keystrokes get to your browser , KeyScrambler after that decrypts all of them which means you see exactly the keys you've just typed . Keyloggers can simply record the encrypted keys , which are totally indecipherable . Contrary to anti-virus and anti-spyware products that rely on identification to remove keyloggers which they have knowledge of , KeyScrambler can protect you from both well-known and unknown keyloggers . What's more , KeyScrambler offers security without getting in your way . You don't have anything at all to find out about the program and you don't need to do anything in a different way , however with KeyScrambler your valuable personal data is going to be a whole lot secured . KeyScrambler Personal supports 33 widely used browsers , such as Firefox , Chrome , Ms internet explorer , Opera , Safari , etc .

Download link: http://www.qfxsoftware.com/download.htm

Read More