Staying safe while trying new bots/apps

sniff from hackforums

Hi everyone today im going to be explaining how you can be more secure when running unknown programs from a 3rd party.


Have you ever seen someone promoting a file maybe a ".exe" or ".bat" and think thats probably a virus ?, obviously.


That file can only be 1 of three things. . .


FAKE & INFECTED:

The file is a fake there is no cool app nothing will open and more than likely there will be some 'nasty' things going off in the back ground keyloggers,trojans etc.

BINDED:

The file is a cool app which loads up correctly however just because everything seems ok doesnt mean it will be. when a file is 'binded' to another it is then run when its parent program is run the binded file could be keyloggers,trojans etc.

REAL:

Well spank my ass and call me king charles the third, there is actually someone who doesn't want your RS pixels

There are many ways and methods of testing and running the programs whilst staying safe even if the program is infected.



I have had to use infected programs in the past not for RS but nearly everything thats 'warez' is generally infected and sometimes i cant afford £3000 for a license. moving on . . .


Common sense:

To me i can see a dodgy file a mile off how do i know ? heres a quick checklist

1. Who is this guy
2. Why is he giving away this file/s
3. Has he released any other file/s (quicksearch)
4. Where am i downloading it from
5. The name of the file/s
6. The description in the post + post count (post count doesnt always count)

ok so we are eager all checks passed download the file. . . .


Keep in mind this file is either FAKE & INFECTED,BINDED or REAL




A Executable file ".exe" cannot execute until you run it so DONT firstly extract the file from its archive possibly a ".rar" or ".zip" then send the executable/s to an online virus scanner such as:

www.kaspersky.com/virusscanner

http://www.f-secure.com/en_EMEA/security/security-lab/tools-and-services/online-scanner/

http://www.bitdefender.com/scanner/online/free.html

www.virusscan.jotti.org - :love:

www.virustotal.com/


DONT FORGET TO SHARE YOUR RESULTS WITH THE COMMUNITY FOR EXTRA BROWNIE POINTS !!

Results:

Depending on what you are downloading this should come back as all clear, not a problem, some programs are falsely ID'd as 'Hacktools' because of the nature of there functions take CAIN & ABLE for instance the best password recovery tool IMO and its picked up by most AV's. For an RS bot its highly unlikely to be flagged up.



So we have a file that seems clean but why should we risk it i mean come on its not just our RS items its our PC/LAPTOPS/NETWORKS so we need to be more secure there are a few methods i use

DeepFreeze:

Heres what they say:

Faronics Deep Freeze helps eliminate workstation damage and downtime by making computer configurations indestructible. Once Deep Freeze is installed on a workstation, any changes made to the computer—regardless of whether they are accidental or malicious—are never permanent. Deep Freeze provides immediate immunity from many of the problems that plague computers today—inevitable configuration drift, accidental system misconfiguration, malicious software activity, and incidental system degradation.

Deep Freeze ensures computers are absolutely bulletproof, even when users have full access to system software and settings. Users get to enjoy a pristine and unrestricted computing experience, while IT personnel are freed from tedious helpdesk requests, constant system maintenance, and continuous configuration drift.


In a Nut Shell:

you turn it on you fuck around with the file when your done you turn it off everything goes back to normal. sweet

Download evaluation copys here

www.faronics.com


Another similer method is sandboxes:

Sandboxes:

Heres what they say:

In computer security, a sandbox is a security mechanism for separating running programs. It is often used to execute untested code, or untrusted programs from unverified third-parties, suppliers and untrusted users.

The sandbox typically provides a tightly-controlled set of resources for guest programs to run in, such as scratch space on disk and memory. Network access, the ability to inspect the host system or read from input devices are usually disallowed or heavily restricted. In this sense, sandboxes are a specific example of virtualization.

In a Nut Shell:

Sandboxes are always ready to go on your pc just right click the program open in 'sandbox' done, the program can do malicious things to a computer but its just a virtual computer we used to open the file so fuck it.


sandboxie
http://www.pcauthority.com.au/Download/128586,sandboxie-334.aspx

ICORE
http://icoresoftware.com/


Packet Tracers:

Packet tracing is the process by which you can verify the path of a packet through the layers to its destination.

Simple

you can see where all the data is going to a suspicious server ? do a whois check the domain who registerd it does it look legit ?


http://www.certbible.org/packet-tracer-50-full-version/

http://www.topshareware.com/free-packet-tracer-4.1/downloads/1.htm




Most of these programs are trail or evaluation periods and id recommend downloading them from your favorite 'backup host' i have some spare demonoid invites pm me for details


I hope this keeps some people safe i know this is breif but all the installations are straight forward

post any questions in here about any of the programs and ill be happy to help

peace in the middle east, OCR

sniff from hackforums

 

Thanks This Shall Help A Lot Of The Hopeless Population At Sythe.Org If This Is Your Own Guide It's Marvellous

Psycho Runescape

 

Thanks alot Psycho Runescape

it is my own guide except fro the 'heres what they say' bits

quite funny seeing someone posting "so do i have the virus" but then it gets boring after a 100 times

if anybody uses a good sandbox/PS or other method pm me and i will add it too the list

 

thanks it really helped me, but then again i have a mac so i dont really need this stuff... lol

 

finally someone writes a guide about this, i coulda done that but am too lazy and i got a lot of shit on my plate right now, but if i could rep, i'd give rep to you sir.

 

thanks, it really helped.