Wednesday, 15 April 2015

Kaspersky releases decryption tool that unlocks ransomware

You never should have clicked on the email attachment. You'er infected ransomware's got you locked out of your own computer and is demanding money before you can use it again. Before you reach for your wallet, take a look at this decryption key generator that Kaspersky has built. The Netherland's National High Tech Crime Unit (NHTCU) recently got its hands on a CoinVault command-and-control server (a type of ransomware that has been infecting Windows systems since last November) and, upon examining it, discovered a large database of decryption keys. The NHTCU shared this information with Kaspersky which used it to build the Noransomware decryption tool. Granted, the program isn't 100 percent effective yet -- it's not like the NHTCU got all of the potential keys off of that one server or anything -- but as police forces around the world continue to investigate the CoinVault ransom campaign, Kaspersky expects to grow the key database and further improve the tool's functionality. Plus, it's still better than paying some schmuck hacker to give you back your digital dominion.
Also have a look at this.
This article was taken from endgadget 

Friday, 26 September 2014


Saturday, 26 January 2013

Ubuntu Quantal sound not working dummy driver

Sound fix in 12.10

Sometimes after booting up Ubuntu 12.10 or Quantal sound system dies when you you access the sound in System Setting -> Sound the driver shows as Dummy no Output driver. The fix is simple you can either open a terminal and type:
--( >:-))-#-> sudo alsa force-reload
or
su as root then type:
--( >:-))-#-> alsa force-reload
That's the fix.

Key:
my prompt or P1 value = --( >:-))-#->
what you should type = sudo alsa force-reload


Monday, 15 August 2011

Enlightenment Window Manager Alt F2 key assignment

I really loved Enlightenment WM in the old days sort of pre 13.x if I remember correctly in the days of Mandrake, not that anything is wrong with the current maintainer, I thought I'd give it a try since we seem to be caught in barbed-wire (sorry should be a quagmire) with Gnome3, Unity and the like. I sort of like e17 but soon found it wanting in that no Alt F2 to run commands without accessing the menu.
Here's a fix if you have that problem;
We are going to install gexec and bind the Alt F2 keystroke to that command so here
goes:(Actually this seems to give you g3 + uni T functionality) nah g3 does more.
If you don't already have gexec installed just type agi gexec (agi stands for apt-get install a short cut/alias you should add to your .bashrc see my previous posts with loads of other apt-get short cuts/aliases you can add to your /root/.bashrc unless you want to mod them and add a sudo in front of all the aliases in your $HOME/.bashrc Once gexec is installed, from your terminal run gexec notice the other options funky huh? or was that fun key, ok ok that wasn't funny. I was only trying to get you to notice the 'run in terminal' and 'run as root' options, back to the prg.
Key
-> = goto

From your menu -> Settings -> Settings Panel That should start your Settings (App)lication
In the Scrollable menu options at the top of the Settings App select Key Bindings
In the left pane (Key Bindings) Scroll Down to Alt + F2
In the right pane (Action) scroll down to Launch then Select Command
(just below Launch)
then at the bottom of the right hand pane you will see Action Params
delete whatever is in that field and type in the location of your freshly installed gexec which in my case was /usr/bin/gexec. To find yours at the terminal type which gexec return, that will give you the location.
This seems simple enough in one of the very early Linux Window Managers hopefully this procedure is not limited to Enlightenment might be slightly different in the other Window Managers.
Hope this helps or keeps you happy whilst they make their minds up about Gnome3/Unity/?!?.
Remember send me mail to let me know your $views help required etc. etc. etc.

Tuesday, 10 May 2011

Using Linux to clean a virus from Windows

Yeah this is a bit of a headache so here's some aspirin pre-requisites
Infected Windows drive:
A bootable linux system either fully installed or from USB
If not already installed install clamav and any dependences.
Install a debian type distro for easy package management

apt-get update && apt-get upgrade -y && apt-get install clamav-freshclam clamav-dbg clamav-base clamav

you may have to set up the proxy
export http_proxy='<ip-address>:3128/'
or authenticate
export http_proxy=http://username:password@proxy.thing.com:8080/

#!/bin/sh
And a sample command is:
sudo clamscan -r /COSA_CAZZO_SCANSIONARE
Well, Once the scanning, Remove infected files with this command:
sudo clamscan -r --remove /COSA_CAZZO_SCANSIONARE
To start the GUI, type:
sudo clamtk
Hello and good scan :)

cd /tmp
1st attempt to run clamavscan -r --repair /dev/sda1
complained cannot find clamav "No supported database files"
clamav stores virus signatures in dBs in /var/lib/clamav
results
----------- SCAN SUMMARY -----------
05 Known viruses: 0
06 Engine version: 0.95.1
07 Scanned directories: 0
08 Scanned files: 0
09 Infected files: 0
10 Data scanned: 0.00 MB
11 Data read: 0.00 MB (ratio 0.00:1)
12 Time: 0.001 sec (0 m 0 s)
It means that you have no virus signatures stored in database files.

so let's get some dB scan files
wget http://database.clamav.net/daily.cvd
wget http://database.clamav.net/main.cvd
mv main.cvd /var/lib/clamav/
mv daily.cvd /var/lib/clamav/
I mounted the drive before running the scan not sure if that is necessary so
mount the drive
first make the destination
mkdir /media/sda1
mount
mount /dev/sda1 /media/sda1
run av
after mounting I run clamavscan -r --repair /media/sda1
4 hrs later results

----------- SCAN SUMMARY -----------
Known viruses: 953056
Engine version: 0.97
Scanned directories: 25256
Scanned files: 197630
Infected files: 22583
Data scanned: 55633.72 MB
Data read: 41429.39 MB (ratio 1.34:1)
Time: 10775.542 sec (179 m 35 s)
root@ubuntu:/var/lib/clamav#

clamscan -r --remove /media/sda1/
:)