<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Hello System Admin &#124; Where system admins share technical article and tips &#124; Create free Blog &#124; Updates on domains, web hosting, servers and more &#187; Cracking</title>
	<atom:link href="http://hellosystemadmin.com/blog/category/hacking/feed/" rel="self" type="application/rss+xml" />
	<link>http://hellosystemadmin.com</link>
	<description></description>
	<lastBuildDate>Fri, 09 Jul 2010 04:29:53 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.6</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>skype automatically sends messages to all contacts</title>
		<link>http://hellosystemadmin.com/blog/skype-automatically-sends-messages-to-all-contacts-skype-virus/</link>
		<comments>http://hellosystemadmin.com/blog/skype-automatically-sends-messages-to-all-contacts-skype-virus/#comments</comments>
		<pubDate>Wed, 28 Apr 2010 11:18:57 +0000</pubDate>
		<dc:creator>Aneesh</dc:creator>
				<category><![CDATA[Cracking]]></category>
		<category><![CDATA[Windows]]></category>
		<category><![CDATA[skype virus attack]]></category>
		<category><![CDATA[Web Server Security]]></category>

		<guid isPermaLink="false">http://hellosystemadmin.com/?p=436</guid>
		<description><![CDATA[



Recently we have faced a Skye virus attack on a LAN. One of the users received a message
Do you think this is the definition of SEXY? I do.
http://www.xxxxxxxxxx.com/uploads/94603/NewPicture004.JPG.zip
Now the same message was started to send from this machine to all his skype contacts. Also sent email through email client.  In a couple of minutes all [...]]]></description>
			<content:encoded><![CDATA[<p><script type="text/javascript"><!--
google_ad_client = "pub-2585810307670535";
/* 468x60, created 11/28/09 */
google_ad_slot = "9594852426";
google_ad_width = 468;
google_ad_height = 60;
//-->
</script>
<script type="text/javascript"
src="http://pagead2.googlesyndication.com/pagead/show_ads.js">
</script></p>
<p>Recently we have faced a Skye virus attack on a LAN. One of the users received a message</p>
<blockquote><p><span style="color: #008000">Do you think this is the definition of SEXY? I do.<br />
http://www.xxxxxxxxxx.com/uploads/94603/NewPicture004.JPG.zip</span></p></blockquote>
<p>Now the same message was started to send from this machine to all his skype contacts. Also sent email through email client.  In a couple of minutes all systems were infected.  We have done the following steps to fix it</p>
<p><span style="text-decoration: underline"><strong>1. Cleaned the hosts file</strong></span><br />
We have noticed that the hosts file  located in c:\windows\sysetm32\drivers\etc\ was edited by the virus and it added many lines to the file at the very bottom.  We  scrolled down to the end and removed all unwanted entries.  Remember  this file is read only and you need to change the file attribute to save it.</p>
<p><span style="text-decoration: underline"><strong>2. Cleaned the System using <a href="http://download.bleepingcomputer.com/sUBs/ComboFix.exe">ComboFix</a></strong></span></p>
<p><a href="http://download.bleepingcomputer.com/sUBs/ComboFix.exe">Download </a>this and run the file.  Follow the instructions and complete the steps. In some cases you need to do with something on the Network Card. Go to Device manager and you will find two copies of the same network card. One with an Yellow color and other is normal. Now remove the Normal card and click on Scan for hardware changes and your card will be automatically installed. Note that you may also to set the IP address if you are using static IP address</p>
<p><span style="text-decoration: underline">3.  complete System scan using a good Anti Virus</span></p>
<p>Use any good anti virus program to do a full system scan. I recommend Avast Antivirus and do a boot time scan with that</p>
<p><script type="text/javascript"><!--
google_ad_client = "pub-2585810307670535";
/* 468x60, created 11/28/09 */
google_ad_slot = "9594852426";
google_ad_width = 468;
google_ad_height = 60;
//-->
</script>
<script type="text/javascript"
src="http://pagead2.googlesyndication.com/pagead/show_ads.js">
</script><script type="text/javascript"><!--
google_ad_client = "pub-2585810307670535";
/* 468x60, created 11/28/09 */
google_ad_slot = "9594852426";
google_ad_width = 468;
google_ad_height = 60;
//-->
</script>
<script type="text/javascript"
src="http://pagead2.googlesyndication.com/pagead/show_ads.js">
</script><script type="text/javascript"><!--
google_ad_client = "pub-2585810307670535";
/* 468x60, created 11/28/09 */
google_ad_slot = "9594852426";
google_ad_width = 468;
google_ad_height = 60;
//-->
</script>
<script type="text/javascript"
src="http://pagead2.googlesyndication.com/pagead/show_ads.js">
</script></p>
<div id="st0000000001" class="st-taf"><script src="http://taf.socialtwist.com:80/taf/js/shoppr.core.js?id=0000000001"></script><img style="border:0;margin:0;padding:0;" src="http://tellafriend.socialtwist.com:80/wizard/images/tafbutton_blue16.png" onmouseout="hideHoverMap(this)" onmouseover="showHoverMap(this, '0000000001', 'http%3A%2F%2Fhellosystemadmin.com%2Fblog%2Fskype-automatically-sends-messages-to-all-contacts-skype-virus%2F', 'skype+automatically+sends+messages+to+all+contacts')" onclick="cw(this, {id:'0000000001',link: 'http%3A%2F%2Fhellosystemadmin.com%2Fblog%2Fskype-automatically-sends-messages-to-all-contacts-skype-virus%2F', title: '+skype+automatically+sends+messages+to+all+contacts+' })"/></div>]]></content:encoded>
			<wfw:commentRss>http://hellosystemadmin.com/blog/skype-automatically-sends-messages-to-all-contacts-skype-virus/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>&#8220;HEY TO GET FREE CELLPHONE RECHARGE SEEE MY PROFILE&#8221;</title>
		<link>http://hellosystemadmin.com/blog/hey-to-get-free-cellphone-recharge-seee-my-profile/</link>
		<comments>http://hellosystemadmin.com/blog/hey-to-get-free-cellphone-recharge-seee-my-profile/#comments</comments>
		<pubDate>Fri, 26 Feb 2010 02:43:21 +0000</pubDate>
		<dc:creator>Aneesh</dc:creator>
				<category><![CDATA[Cracking]]></category>

		<guid isPermaLink="false">http://hellosystemadmin.com/?p=415</guid>
		<description><![CDATA[Orkut account being cracked again !! Beware of it. DO NOT COPY AND PASTE ANY JAVASCRIPT IN TO YOUR  ORKUT ADDRESS BAR
You may get message or scraps from your very close friend  which says  that &#8220;HEY TO GET FREE CELLPHONE RECHARGE SEEE MY PROFILE&#8221;. When you click on that link it will take you to [...]]]></description>
			<content:encoded><![CDATA[<p><strong><span style="color: #ff0000">Orkut account being cracked again !! Beware of it. DO NOT COPY AND PASTE ANY JAVASCRIPT IN TO YOUR  ORKUT ADDRESS BAR</span></strong></p>
<p>You may get message or scraps from your very close friend  which says  that &#8220;HEY TO GET FREE CELLPHONE RECHARGE SEEE MY PROFILE&#8221;. When you click on that link it will take you to the profile of your friend where you can find a java script  and you will be asked to copy and paste the java-script in to your orkut address bar. If you  do that Your account is cracked and your profile  will  be acted  as a marketing tool where  the cracker will get your friends list and they will scrap to all and repeat the same</p>
<p>So Beware of it&#8230;<strong><span style="color: #ff0000">Orkut account being cracked again !! Beware of it. DO NOT COPY AND PASTE ANY JAVASCRIPT IN TO YOUR  ORKUT ADDRESS BAR</span></strong></p>
<p><!--Session data--></p>
<div id="st0000000001" class="st-taf"><script src="http://taf.socialtwist.com:80/taf/js/shoppr.core.js?id=0000000001"></script><img style="border:0;margin:0;padding:0;" src="http://tellafriend.socialtwist.com:80/wizard/images/tafbutton_blue16.png" onmouseout="hideHoverMap(this)" onmouseover="showHoverMap(this, '0000000001', 'http%3A%2F%2Fhellosystemadmin.com%2Fblog%2Fhey-to-get-free-cellphone-recharge-seee-my-profile%2F', '%26%238220%3BHEY+TO+GET+FREE+CELLPHONE+RECHARGE+SEEE+MY+PROFILE%26%238221%3B')" onclick="cw(this, {id:'0000000001',link: 'http%3A%2F%2Fhellosystemadmin.com%2Fblog%2Fhey-to-get-free-cellphone-recharge-seee-my-profile%2F', title: '+%26%238220%3BHEY+TO+GET+FREE+CELLPHONE+RECHARGE+SEEE+MY+PROFILE%26%238221%3B+' })"/></div>]]></content:encoded>
			<wfw:commentRss>http://hellosystemadmin.com/blog/hey-to-get-free-cellphone-recharge-seee-my-profile/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
	</channel>
</rss>
