May 31, 2010

May 25, 2010

Google Vs PacMan

Google has a permanent page for PacMan now.

If you still recall that when Google was celebrating 30’th anniversary (May 21, 2010) of the most successful game, Pac-Man, it caused a waste of 4.82 million hours.












References:

Apr 5, 2010

Building Your Own Malware Lab

There are 2 nice articles that show you how to build your own malware lab. See if any of the tools below in your own check list. Here's the summary:


  1. Upload the suspicious file to VirusTotal.
  2. Detect and monitor the changes made by isolating execution using Sandboxie.
  3. Analyzing malware and tracing of all system calls with CWSandbox.
  4. Obtain an automated threat analysis design with ThreatExpert.
  5. Analyzing suspicious network traffic with Anubis.
  6. Analyzing PDF, flash, and JavaScript with Wepawet.
  7. Examine multiple aspects of a PE using MANDIANT Red Curtain.
Reference:

Mar 8, 2010

Create Wireless Hosted Networks in Windows 7

This new feature, wireless Hosted Network, is introduced by Microsoft in Windows 7 and Windows Server 2008 R2.

The wireless Hosted Network feature uses the VirtualWiFi technology along with a software-based virtual access point (Virtual AP) feature. It allows the creation of wireless AP with a supported Wi-Fi adapter and driver, while also having the ability to connect to another wireless network. It also includes a DHCP server, so users automatically receive an IP address.

Pre-requisites:
  • Supported WiFi adapter
  • Using certified WiFi drivers for Windows 7. 
You can check this by looing at the network connection (detail mode). You should see an adapter called Wireless Network Connection that using Microsoft Virtual WiFi Miniport Adapter.

Follow the steps below:
  • Start "cmd" in "Administrator mode".
  • To create the hosted network:
netsh wlan set hostednetwork mode=allow ssid=[Your-AP-Network]  key=[Your-WPA2-PSK-AES-Password]
  • Replace the SSID and key placeholders with your desired network name and WPA2-PSK encryption key. Note that Microsoft requires all wireless Hosted Networks to use WPA2-PSK (AES) encryption. 
  • Optional. If you want to allow Internet access for other users, enable ICS. See how to enable ICS here if it is disabled.
  • To start/enable the Hosted Network:
netsh wlan start hostednetwork
  • Optional. To manually turn the Hosted Network off, enter the following:
netsh wlan stop hostednetwork
  • Optional. To see the Hosted Network details (see Figure 3), including the MAC addresses of connected users, enter the following:
netsh wlan show hostednetwork
  • Optional. To change the WPA2-PSK key, you can enter the following:
netsh wlan refresh hostednetwork [New-WPA2-PSK-AES-Password]
Now others should see the Hosted Network appear in their list of available wireless networks. They can connect like normal and enter the encryption key when prompted.

Keep in mind that wireless Hosted Networks do not automatically restart after the computer resumes from sleep, hibernate, or restarts. However, if used, a third-party, such as Connectify, utility might initiate a reconnection.

Mar 3, 2010

Install Loopback Adapter in Windows 7

The Microsoft Loopback adapter is a testing tool for a virtual network environment where network access is not available. You can bind network clients, protocols, and other network configuration items to the Loopback adapter, and you can install the network adapter driver or network adapter later while retaining the network configuration information.

To install a Microsoft Loopback adapter in WIndows 7:

  • Start "cmd" in "Administrator mode”
  • From the command prompt, run “hdwwiz.exe“. This should launch the “Add Hardware Wizard“. Click Next.
  • Select “Install the hardware that I manually select from a list (Advanced)” and click Next.
  • Now from the list select Network Adapters and click Next.
  • Under Manufacturers, select Microsoft and select “Microsoft Loopback Adapter” under Network Adapter and click Next. This should start the installation. 
  • Click Finish when the installation completes.


To confirm the loopback adapter installed, right-click Computer, select properties. Click Device Manager and expand Network Adapters and you can see the Loopback adapter installed there.