Note: this content originally from http://mygreenpaste.blogspot.com. If you are reading it from some other site, please take the time to visit My Green Paste, Inc. Thank you.

Congratulations to AD for the public release of the beta of RootRepeal, a new rootkit detector!

See the tool's site on GooglePages for more info or to download:

http://rootrepeal.googlepages.com

The other day I posted the first half of this video with the server side setup of NAP.  This video will cover the client side setup and testing on both Windows Vista and Windows XP SP3.

Note: Double-click on the video to go full screen.

If you want to give these demos a try yourself be sure to grab the lab build guide and demo scripts here!

Server 2008 is out and one of the very cool features is NAP or Network Access Protection.  This feature allow you to protect the internal network from threats.  There is a nice entry on Wikipedia explaining NAP but the TLA way is to show you the quick steps to get it done.  While I could write it out I figured video would be cool as well and since I had the videos from the Canadian Heroes Happen {Here} events I got real lazy and am posting those :)  Over the next while I'll get up the rest of the videos as well so check back soon.

If you want to give these demos a try yourself be sure to grab the lab build guide and demo scripts here!

Free and Full Feature Pay Versions

• Avira Premium Security Suite (32 and 64 Bit)
  
• BitDefender family (32 and 64 Bit)
• Comodo (32 and 64 Bit) Not Recommended (Warning: Includes Ask Toolbar disguised as Surfsafe Toolbar!)
  
• EQSecure (32 Bit)
• Jetico Personal Firewall (32 and 64 Bit)
• PC Tools family (32 Bit)
  
• Privacyware solutions (32 and 64 Bit)
  
• ProSecurity (32 Bit)
• System Safety Monitor (32 Bit)
• Webroot Desktop Firewall (32 Bit) (Requires Registration)
• Zone Alarm (32 Bit) (Warning: Ask Toolbar Pre-checked for installation on Free Version, identified as ZoneAlarm Spy Blocker)
  

Pay Versions

• AhnLan family (32 and 64 Bit)
• Avanquest System Suite (32 Bit)
  
• BullGuard family (32 and 64 Bit)
• CA Family (32 and 64 Bit)
• DefenseWall HIPS (32 Bit)
  
• ESET Smart Security (32 and 64 Bit)
• F-Secure

...

We've seen hacks like this before, no doubt about it - but it's a really nice trick which you gotta love (and hate) - check it out here!

So, basically this hack requires PHYSICAL ACCESS to the harddrive, using BackTrack (or some other boot utility capable of reading/writing NTFS) the file Utilman.Exe in \Windows\System32 is replaced with Cmd.exe - after a reboot, at the logon screen, if Utilman is called (by hitting Win-key + U) you'll get a nice command prompt running under SYSTEM credentials - pretty powerfull... From there the only limit is your imagination!

Yes, Bitlocker protects us from attacks like these - so somebody please call Mr. Bitlocker!

.

Your Windows Live ID is essentially your online identity for all of the Windows Live services, Xbox Live, Zune and other third party websites (such as Expedia.com) that utilize Windows Live ID. If you're using Windows Live Hotmail and Windows Live Messenger, your Windows Live ID stores all your contacts and email messages. Your Windows Live ID is definitely something you don't want to have compromised and I've got several pointers - or best practices - in keeping your Windows Live ID safe.

Do not hand out your password! Don't give anyone your password to your Windows Live ID. Handing out your password to anyone is simply asking for trouble. Don't even give out your password to friends or family. I can't imagine a reason why they would need it. Just don't give out your Windows Live ID credentials at all.

Be careful giving your Windows Live credentials on non-Microsoft websites. There are some websites out there that will claim they "require" your Windows Live ID credentials for their service. Some sites use this tactic to gain access to your Windows Live ID.

Fact: Microsoft will only ask for your Windows Live ID credentials on login.live.com and nowhere

...