Archive for the ‘ HOWTO’s ’ Category
The system cannot find the path specified: Demystified
Have you ever tried running some cryptographic hash calculator on some of the existing system files? Or even tried reading them programmatically and it failed with below error? Error msg : The system cannot find the path specified. Guess what, I had a similar issue last weekend. I knew file existed at the location [...]
Layman’s guide to remove FakeAV malware
In my previous blog post, I talked about FakeAV malware and its new techniques to spread by disguising legitimate software download. In this post I will talk about a very simple technique to clean the FakeAV infection. Before I talk about the infection removal, let me list out all the measures taken by malware to prevent [...]
Live Memory Analysis of Astros IRC Bot
One might think IRC bots have gone but a recent incident made me believe that they have not. Here’s how the story goes… As a part of my job, I was looking for malicious traffic on the network and a binary name msconfig.exe caught my eye. I saw msconfig.exe was getting downloaded through one of [...]
Code injection using managed code.
Ahem…not sure why would anyone want to use .Net framework for DLL injection when it’s a pretty simple job using Win32 APIs. But I am sure there are plenty like me who wish to use managed code for system programming. Just for the fun and practice; I ported my win32 code injection tool in .Net [...]
Windows “Shortcuts to Pawnage”
On 16th July, 2010 a researchers found out a new shortcut to Pawn Remote System in an unusual way. They crafted a way to exploit windows shortcut files, commonly referred as .lnk file in order to gain unauthorized access to remote computer. Users need not even click the shortcut file, if s/he views it in [...]
URL shortening: Social engineering attack vector
URL shortening is a technique in the World Wide Web wherein a provider makes a web page available under a very short URL in addition to the original address. For example, the page http://blog.chackraview.net/2010/01/19/operation-aurora/ can be shortened to http://bit.ly/5RJICq As web clients tends to pass more and more data in the URL to communicate with [...]
OCS 2007 R2 Installation
In the increasing race of deploying VoIP solutions, Microsoft announced new release of its Office Communication Server 2007 at voicecon. In spite of having all the deployment and installation guides for OCS server, many people are clueless about its installation. The main reason behind it is its complexity. Looking at wide range of service portfolios [...]
Decode: eval_gzinflate_base64_decode
If you follow my posts….sometime back i wrote about the my encounter with web attacks which was amazing experience. I am lazy kinda person and with all this IPL fever these days, I don’t even think of blogging or doing personal research. So what made me sit and write today? The answer is, my same [...]
Free iPhone Ringtones
As Apple has started charging $2 for a Ringtone, I started googling for sites giving free iPhone ringtones. However, after looking at the results i thought of doing bit work myself on creating ringtones for iPhone using regular MP3 files. This blog is dedicated for the people, who wants to play cool ringtones every now [...]
My Encounter with Live Web Attack
It will not be an average day, I knew from the dawn, as EOD I will be on my way to Pune. You might think whats so special about visiting pune? Let me tell you, people who have spent at least a year or two in city like Pune or Bangalore will hate to stay [...]
