Message Board

What's your say ??? Send Message Here.
--------------------------------------------------------------
Showing posts with label Security. Show all posts
Showing posts with label Security. Show all posts

Friday, March 11, 2011

Download Windows 7 SP1 and Server 2008 R2 SP1 RTM

Bookmark and Share

Windows 7 SP1 and Server 2008 R2 SP1 RTM

Microsoft has released Service Pack 1 (RTM) for Windows 7 and Windows Server 2008 R2 to the End user today. Below are the direct download links for a common man to download and install the service pack on their computer.

Windows 7 SP1 is having few security updates, stability updates, RemoteFX for improved 3-D graphical experience. It will also have the updates released for Windows 7 after the final release. Read this article: http://bit.ly/dQ2XfZ

Win7SP1

It contain all the hotfixes and updates  that were released for Windows 7 and Server 2008 R2 up to now.

Download links to Windows 7 / Server 2008 R2 SP1:

For 32-bit system:

Download SP1 RTM EXE (32-bit) (Approx. 540 MB)

For 64 bit system:

Download SP1 RTM EXE (64-bit) (Approx. 900 MB)

Download the full package with 32-bit and 64-bit (ISO):

Download SP1 RTM ISO (32-bit & 64-bit) (Approx. 1950 MB)

 

Deployment Guide for Windows Server 2008 R2 with SP1 and Windows 7 with SP1:

http://technet.microsoft.com/hi-in/library/ff817650(en-us,WS.10).aspx

Thursday, February 4, 2010

Windows 7 Resources for IT Professionals

Bookmark and Share

Windows 7 Resources for IT Professionals

Windows 7 Upgrade Advisor

Brief Description
Download and run the Windows 7 Upgrade Advisor to see if your PC is ready for Windows 7. It scans your hardware, devices, and installed programs for known compatibility issues, gives you guidance on how to resolve potential issues found, and recommends what to do before you upgrade.
Overview
Before you begin: Be sure to plug in and turn on any USB devices or other devices, such as printers,
external hard disks, and scanners, that you regularly use with the PC you're checking.
The Windows 7 Upgrade Advisor scans your PC for potential compatibility issues and lets you know about
your Windows 7 upgrade options. Within minutes, you'll get a report that tells you if your PC meets the
system requirements, if any known compatibility issues with your hardware, devices, and installed programs are found, and gives guidance on what to do to before installing Windows 7 on your PC.
Download:
-------------------------------------------------------------------------------

Windows Easy Transfer for transferring from Windows XP (32 bit) to Windows 7
Brief Description
Use Windows Easy Transfer to copy your files, photos, music, e-mail, settings, and more from a computer running Windows XP to a computer running Windows 7. You can transfer data using an Easy Transfer Cable, removable media, or across a network.
Overview
This software installs Windows Easy Transfer on a computer running the 32-bit version of Windows XP
so you can copy your files, photos, music, e-mail, settings, and more to a computer running Windows
7. If your computer is running another version of Windows, you can download other versions of Windows Easy Transfer by following this link. This software is already built into Windows 7, so it is not necessary to install it on a computer running Windows 7.
Download:
-------------------------------------------------------------------------------
BitLocker To Go Reader
Brief Description
The BitLocker To Go Reader is an application that provides users read-only access to BitLocker-protected FAT-formatted drives on computers running Windows XP or Windows Vista.
Overview
BitLocker protection on removable drives is known as BitLocker To Go. When a BitLocker-protected removable drive is unlocked on a computer running Windows 7, the drive is automatically recognized and the user is either prompted for credentials to unlock the drive or the drive is unlocked automatically if configured to do so. Computers running Windows XP or Windows Vista do not automatically recognize that the removable drive is BitLocker-protected. With the BitLocker To Go Reader users can unlock the BitLocker-protected drives by using a password or a recovery password (also known as a recovery key) and gain read-only access to their data.
System Requirements
Supported Operating Systems: Windows Vista; Windows Vista 64-bit Editions Service Pack 1; Windows Vista Business; Windows Vista Business 64-bit edition; Windows Vista Enterprise; Windows Vista Enterprise 64-bit edition; Windows Vista Home Basic; Windows Vista Home Basic 64-bit edition; Windows Vista Home Premium; Windows Vista Home Premium 64-bit edition; Windows Vista Service Pack 1; Windows Vista Service Pack 2; Windows Vista Starter; Windows Vista Ultimate; Windows Vista Ultimate 64-bit edition; Windows XP 64-bit; Windows XP Service Pack 2; Windows XP Service Pack 3.
Download:
-------------------------------------------------------------------------------
Microsoft Hardware-Assisted Virtualization Detection Tool
Brief Description
The Hardware-assisted virtualization (HAV) detection tool checks if the computer processor supports HAV and if this setting is enabled.
Overview
Windows Virtual PC requires processors capable of hardwareassisted virtualization with AMD-V™, Intel® VT or VIA® VT turned on in the BIOS. The HAV detection tool helps you check if the computer processor supports hardware virtualization. The tool also checks if this feature is enabled on the processor. For more information about Windows Virtual PC, please visit the Windows Virtual PC website.

To know whether your computer is compatible to run Windows XP Mode/Hyper-v/Windows Virtual PC or not use the following tool:
Download:
-------------------------------------------------------------------------------
Remote Server Administration Tools for Windows 7
Brief Description
Remote Server Administration Tools for Windows® 7 enables IT administrators to manage roles and features that are installed on computers that are running Windows Server® 2008 R2, Windows Server® 2008, or Windows Server® 2003, from a remote computer that is running Windows 7.
Overview
**Remote Server Administration Tools for Windows 7 can be installed ONLY on computers that are running the Enterprise, Professional, or Ultimate editions of Windows 7.**
Remote Server Administration Tools for Windows 7 enables IT administrators to manage roles and features that are installed on remote computers that are running Windows Server 2008 R2 (and, for some roles and features, Windows Server 2008 or Windows Server 2003) from a remote computer that is running Windows 7. It includes support for remote management of computers that are running either the Server Core or full installation options of Windows Server 2008 R2, and for some roles and features, Windows Server 2008. Some roles and features on Windows Server 2003 can be managed remotely by using Remote Server Administration Tools for Windows 7, although the Server Core installation option is not available with the Windows Server 2003 operating system. This feature is comparable in functionality to the Windows Server 2003 Administrative Tools Pack and Remote Server Administration Tools for Windows Vista with Service Pack 1 (SP1).
Download:
------------------------------------------------------------------------------

Microsoft Network Monitor 3.3
Brief Description
Tool to allow capturing and protocol analysis of network traffic.
Overview
Network Monitor 3.3 is a protocol analyzer. It allows you to capture network traffic, view and analyze it. Version 3.3 is an update and replaces Network Monitor 3.2. Network Monitor 3.x is a complete overhaul of the previous Network Monitor 2.x version.
System Requirements
Supported Operating Systems: Windows 7; Windows Server 2003 Service Pack 2; Windows Server 2003 Service Pack 2 x64 Edition; Windows Server 2008; Windows Server 2008 R2; Windows Server 2008 R2 for Itanium-based Systems; Windows Vista 64-bit Editions Service Pack 1; Windows Vista Service Pack 1; Windows XP 64-bit; Windows XP Service Pack 3
Download:
------------------------------------------------------------------------------

Update for Windows XP SP3 to enable RemoteApp
Brief Description
This package lets you to run many Windows XP productivity applications from a Windows 7-based PC using Windows Virtual PC
Overview
This package lets you to run many Windows XP productivity applications from a Windows 7-based PC using Windows Virtual PC. This patch needs to be installed in your Windows XP SP3 virtual machine.
For more information about Windows Virtual PC, please visit the Windows Virtual PC website.
Download:
------------------------------------------------------------------------------
Update for Windows Vista SP1 or above to enable RemoteApp
Brief Description
This package lets you to run many Windows Vista productivity applications from Windows 7-based PC using Windows Virtual PC.
Overview
This package lets you to run many Windows Vista productivity applications from Windows 7-based PC using Windows Virtual PC. This package needs to be installed in your Windows Vista virtual machine.
For more information about Windows Virtual PC, please visit the Windows Virtual PC website.
Download:
------------------------------------------------------------------------------
HYPER-V and RED HAT (Linux) support
Here are the details:
Red Hat Enterprise Linux 5.2, 5.3, 5.4 have passed cert tests when running on Windows Server 2008 Hyper-V, Microsoft Hyper-V Server 2008, Windows Server 2008 R2 Hyper-V, Microsoft Hyper-V Server 2008 R2. See more at RedHat's certified hardware site.

Windows Server 2003/ Windows Server 2008 / Windows Server 2008 R2 are validated to run on Red Hat Enterprise Linux 5.4, using their KVM-based hypervisor. See more at Microsoft Server Virtualization Validation Program site.

System Center Operations Manager 2007 R2 supports monitoring of the following operating systems:
HP-UX 11i v2 and v3 (PA-RISC and IA64)
Sun Solaris 8 and 9 (SPARC) and Solaris 10 (SPARC and x86)
Red Hat Enterprise Linux 4 (x86/x64) and 5 (x86/x64) Server
Novell SUSE Linux Enterprise Server 9 (x86) and 10 SP1 (x86/x64)
IBM AIX v5.3 and v6.1 (POWER)

Read:
------------------------------------------------------------------------------
Microsoft Press and TechNet Magazine have teamed up to create a free e-book:
Deploying Windows 7, Essential Guidance from the Windows 7 Resource Kit and TechNet Magazine. The e-book includes ten complete chapters from Microsoft Press’s Windows 7 Resource Kit (ISBN: 9780735627000; ISBN: 1760 pages), by Mitch
Tulloch, Tony Northrup, Jerry Honeycutt, Ed. Wilson, and the Windows 7 Team at Microsoft.
Download:
-------------------------------------------------------------------------------

Building a Standard Image of Windows 7 Step-by-Step Guide
Brief Description
Explains how to install a custom image by using an operating system image that includes your
customizations and applications.
Download:
-------------------------------------------------------------------------------
Configuring Windows 7 for a Limited User Account
Brief Description
Explains how to set up your Administrator accounts through User Account Control.
Download:
-------------------------------------------------------------------------------
Download your free e-book of Introducing Windows Server 2008 R2
Introducing Windows Server 2008 R2 e-book.
Download:
-------------------------------------------------------------------------------
77 Windows 7 Tips
Read:
-------------------------------------------------------------------------------

What’s New in Group Policy for Windows 7 and Windows Server
2008 R2
Read:
-------------------------------------------------------------------------------
UAC tweaks in Windows 7
Read:
Article from: Windows 7 blog:
-------------------------------------------------------------------------------
Your Windows 7 Deployment Guide
Read:
-------------------------------------------------------------------------------
Windows 7 Remote Desktop Connection 7.0 for XP SP3 and Vista SP1 and SP2
“The Remote Desktop Connection 7.0 client update enables you to use the new Remote Desktop Services features. These features are introduced in Windows 7 and in Windows Server 2008 R2 and are available for computers that are running Windows Vista Service Pack 1 or Windows Vista Service Pack 2. After you install this item, you may have to restart your computer”.
Download:
-------------------------------------------------------------------------------
Fully install Windows 7 from the upgrade disc
Read the full article here:
The pros and cons of switching to Windows 7:
Read:
Making the business case for Windows 7
Create a Windows XP and 7 dual-boot systemstaged for an easy migration
What Windows 7 means to Windows server administrators:
Windows Server 2008 R2 Foundation gives small networks more options
Windows 7 Professional feature-to-feature comparison chart
Delayed Start feature increases options for Windows services
Determine processes running on a remote server with PsList
-------------------------------------------------------------------------------

Engineering Windows 7
Read everything on Windows 7 on E7 blog
Visit:
-------------------------------------------------------------------------------
Windows 7 Upgrade Paths
Read:
-------------------------------------------------------------------------------
Cloud Infrastructure
Read this article for more about Cloud Computing infrastructures:

Challenges of Virtual Infrastructure Deployment and Management
Read this article:

10+ ways Windows 7 will affect IT pros
Read:

Installing Windows 7 on an existing Windows XP Computer
To install Windows 7 and migrate existing user files and settings. Read the complete article:
------------------------------------------------------------------------------
Yet another awesome tool from the Sysinternals team, Disk2vhd. As the name implies this tool can covert a physical disk into a virtual disk. Here is the quick summary of it’s capabilities. The converted VHD file can be used to boot from Virtual PC, Hyper-V and another physical machine as well Works on a machine that’s online VHD can be created on the same volume that is getting converted Preserves the partition information of the disk
Cool utility to create your physical dosk drive to a VHD file.
Download this tool from:
------------------------------------------------------------------------------
Windows Vista: Windows update went bad, now my PC is stuck in endless updating cycle
This is the place for all problem reports / Troubleshooting methods and more informations on Tech. Support. Read a recent post relating to a Windows Update issue on Windows Vista, from forum of CNET.com:
Read this and try to sort out the solutions here......
------------------------------------------------------------------------------
Fix Windows 7 Activation Status Not Available or SLMgr 0×80070422 Error
Windows 7 displays the system activation status in System Properties, which can be accessed via Control Panel -> System and Security -> System. However, sometimes, Windows activation may display error message which saying activation status not available, together with product ID which is also not available.

Read this page for detail:
And also read:
Related articles:


-----------------------------------

Posted by: bcdalai

Thursday, May 14, 2009

2007 Microsoft Office Suite SP2

Bookmark and Share
2007 Microsoft Office Suite Service Pack 2 (SP2)

Office SP2 logo

Microsoft has released Office 2007 Service Pack 2, consisting of many product fixes and updates. Microsoft highlights improvements to charting functionality in Excel. There are also a number of security and performance enhancements. In addition to general product fixes, this includes improvements in stability, performance, and security. You can find out more information in Knowledge Base Article 953195, where product-specific changes are described. Office 2007 finally delivers on Microsoft's promise to natively support Open Document Format used by other office products such as Openoffice.org and Star Office

According to Jane Liles, group program manager, Office Sustained Engineering, Microsoft, “Outlook 2007 SP2 is 26 percent faster than its predecessor on a set of common e-mail tasks and is even faster, 35 percent, with larger mailboxes.”

ODF Support

Feature highlights of the Office SP2 are:
ODF text documents and spreadsheets
Office Open XML
Support for saving to PDF
Support for saving to XML for Paper Specification (.xps format)
Faster startup and shutdown times
Export Access reports to Excel
Outlook Calendar functionality and reliability improvements
Fuller integration of Office Excel Chart Object Model into Word

Download the 2007 Microsoft Office Suite SP2 (size 290mb):

Click to download

Download Microsoft Office Language Pack 2007 SP2 (Size 50mb):

Click to download

Alternative Download links are:

Download the 2007 Microsoft Office Suite Service Pack 2 (SP2)http://www.microsoft.com/downloads/details.aspx?FamilyId=B444BF18-79EA-46C6-8A81-9DB49B4AB6E5
Download Microsoft Office Language Pack 2007 Service Pack 2 (SP2)http://www.microsoft.com/downloads/details.aspx?FamilyId=E1203DB2-1CC9-4809-9B6E-3F232CB8899F

Find out more info here:
http://support.microsoft.com/kb/953195
http://support.microsoft.com/kb/953334
And list of updates:
http://support.microsoft.com/kb/968170
A List of issues that the service pack fixes:
Download list

Article by: bcdalai

-------------------------------------------------------------

Wednesday, April 8, 2009

Windows 7 for IT Pro

Bookmark and Share

Windows 7 for IT Professional



Click this to enlarge
Microsoft Windows 7 logo
(Note: This article relating to Microsoft Windows 7. The information in this article is subject to change. The features quoted here may be partly same for Windows Server 2008 R2.)
With the release of Windows 7 now available, I encourage you to download a trial version to your lab machine and begin testing your applications and devices to get to know what’s in it for you. As you begin testing, I offer this article to the key features and capabilities in this new desktop operating system. Here are the top 10 things for IT professionals to know about Windows 7:
1 - Application compatibility
The Windows Vista operating system introduced architectural changes down to the kernel level that made the OS inherently more secure than Windows XP. However, this came at a cost; many applications needed modification to function properly in a Windows Vista environment. While at this point in the lifecycle of Windows Vista (post Service Pack 1) most applications are now compatible, deploying Windows Vista into the desktop environment early on required some “heavy lifting” and creative shimming—not to mention a few late nights.
Windows 7 is built on the same basic architecture as Windows Vista, so most applications will retain their compatibility between these operating systems. This alone will make adopting Windows 7 much less challenging than migrating from Windows XP to Windows Vista. If your organization is like many that are still standardized on Windows XP, you will need to transition to updated versions of your key applications, but the availability of Windows Vista–compatible versions and well-proven shims will make this task more manageable.
2 - Hardware compatibility and requirements
Much like the application compatibility issues, adopting Windows Vista early-on was a challenge because of the higher system requirements—such as RAM and graphics.  On the flip side, Windows Vista provides manageability and security that just isn’t available on Windows XP, and with more capable hardware, Windows Vista is able to perform a number of useful functions that improve productivity (such as Windows Search 4 and the Windows Aero desktop experience) and increase PC responsiveness (the ReadyBoost technology launches applications more quickly by maintaining a portion of frequently used applications in memory).
Windows 7 was designed to perform well on the same hardware that runs Windows Vista well, while delivering additional performance and reliability improvements. The design team for Windows 7 had a specific focus on the fundamentals—as well as maintaining compatibility with existing applications and hardware. In operation, you will find that Windows 7 boots faster and has a smaller memory footprint than Windows Vista.
3 - Better Together with Windows Server 2008
One of the key benefits of the modern operating system is that Windows 7 and the Windows Server 2008 operating system share a common code base, and are maintained with a single servicing model. This servicing model means updates and security updates are shared across both client PCs and servers, simplifying the process of maintaining an up-to-date infrastructure.
In addition, environments with both Windows Server 2008 and Windows 7 unlock capabilities that extend functionality and help ensure a more secure environment. One example is DirectAccess, which allows management and updating of remote mobile PCs that are connected to the Internet, even when they are not connected to the corporate network. This capability helps ensure that remote users receive security patches on a timely basis, and allows IT to update configuration setting via Group Policy. For the end user, DirectAccess allows access to locations on the corporate network without using a virtual private network (VPN) connection. (In addition to Windows Server 2008 R2, DirectAccess requires IPSec and IPv6 implementation.)
4 - Extend data encryption to removable media
News reports are rife with stories about companies losing control over sensitive information. In some industries, this is an issue with grave legal implications, while in other situations the issue is inconvenience. Regardless, smart compliance policy dictates that sensitive information be safeguarded in the event of a lost or stolen laptop. Further, preventing sensitive information from being removed from corporate resources is a pillar of effective compliance management.
Windows 7 includes BitLocker technology, first implemented in Windows Vista, which now provides full encryption of all boot volumes on a PC; along with introducing BitLocker To Go that offers data protection on portable storage, such as USB flash drives. In addition, BitLocker Drive Encryption and BitLocker To Go can be managed via Group Policy, placing more control over sensitive information in the hands of the professionals.
5 - Control the application portfolio available to end users
Windows 7 features AppLocker, a new capability that allows IT administrators to specify which applications are permitted to run on a laptop or desktop PC. This capability helps you manage license compliance and control access to sensitive programs, but also importantly, it helps reduce the opportunity for malware to run on client PCs. AppLocker provides a powerful rule-based structure for specifying which applications can run, and includes “publisher rules” that keeps the rules intact though version updates.
To see how AppLocker is set up and managed, click here for a screencast demonstration.
6 - Automate routine tasks with powerful scripting
To help IT administrators better maintain a consistent environment and improve personal productivity, Windows 7 includes an updated graphical scripting editor, Windows PowerShell 2.0—a powerful, complete scripting language that supports branching, looping, functions, debugging, exception handling, and internationalization.

  • PowerShell 2.0 has an intuitive, graphical user interface that helps make script generation easier, especially for administrators who are not comfortable in command-line environments.

  • PowerShell 2.0 supports two types of remoting—fan-out, which delivers management scripts on a one-to-many basis, and one-to-one interactive remoting to support troubleshooting of a specific machine. You can also use the PowerShell Restricted Shell to limit commands and command parameters to system administrators, and to restrict scripts to those who have been granted rights.

  • PowerShell 2.0, with the Group Policy Management Console (available as a separate download), allows IT professionals to use scripting to manage Group Policy Objects and to create or edit registry-based group policy settings in Windows 7. Similarly, you can use PowerShell to configure PCs more efficiently, using richer logon, logoff, startup, and shutdown scripts that are executed through Group Policy.
Click here to take a quick tour of PowerShell 2.0.
7 - Troubleshoot faster and more effectively
Windows 7 provides rich tools to identify and resolve technical issues, often by the end users themselves. If a help desk call is unavoidable, Windows 7 includes several features and troubleshooting tools to help speed resolution.

  • The Problem Steps Recorder allows end users to reproduce and record their experience with an application failure, with each step recorded as a screen shot along with accompanying logs and software configuration data. A compressed file is then created that can be forwarded to support staff to help troubleshoot the problem.

  • Windows 7 includes a suite of troubleshooting packs, collections of PowerShell scripts, and related information that can be executed remotely by IT professionals from the command line, and controlled on the enterprise basis through Group Policy Settings.

  • Windows 7 also includes Unified Tracing to help identify and resolve network connectivity issues in a single tool. Unified Tracing collects event logs and captures packets across all layers of the networking stack, providing an integrated view into what’s happening in the Windows 7 networking stack and aiding analysis and problem resolution.
8 - Create, deploy, and manage images more efficiently
Windows 7 includes several tools to streamline the creation and servicing of the deployment image, and to get users up and running as quickly as possible.
The Deployment Image Servicing and Management (DISM) tool in Windows 7 provides a central place to build and service Windows images offline. With DISM, you can perform many functions with one tool: mount and unmount system images; add, remove, and enumerate packages and drivers; enable or disable Windows features; configure international settings, and maintain an inventory of offline images that contain drivers, packages features, and software updates. Windows 7 also enables the same processes and tools to be used when managing virtual machine (VHD) and native file-based (WIM) image files.
Windows 7 also includes Dynamic Driver Provisioning, where device drivers are stored independent of the deployed image and can be injected dynamically based on the Plug and Play ID of the hardware, or as predetermined sets based on information contained in the basic input/output system (BIOS). Reducing the number of drivers on individual machines reduces the number of potential conflicts, ultimately minimizing setup time and improving the reliability of the PC.
When you are ready to deploy Windows 7, Multicast Multiple Stream Transfer enables servers to “broadcast” image data to multiple clients simultaneously, and to group clients with similar bandwidth capabilities into network streams to permit the fastest possible overall transfer rate while optimizing bandwidth utilization.
Watch a screen cast demonstration of the deployment tools for Windows 7 here.
9 - Easier migration of user data and profiles
Windows 7 includes enhancements to the User State Migration Tool (USMT), a command-line tool that you use to migrate operating system settings, files, and other user profile data from one PC to another. In Windows 7, USMT adds a hardlink migration feature for computer refresh scenarios, a capability that stores user data and settings in a common place on a drive, eliminating the need to “physically” move the files during a clean install.
10 - Improve user productivity in branch offices
Windows 7 introduces BranchCache, a technology that caches frequently accessed content from remote file and Web servers in the branch location, so users can access this information more quickly. The cache can be hosted centrally on a server in the branch location, or can be distributed across user PCs. One caveat: to take advantage of BranchCache, you will need to deploy Windows Server 2008 R2 on the related servers.
And, also this technology:
Better support for client virtualization
Windows 7 delivers a richer experience when users are connected to a virtual desktop—much closer to the experience provides by a native Windows desktop. For example, Windows 7 provides multi-monitor support, bi-directional audio to enable Voice over Internet Protocol (VoIP) and speech recognition applications, and access to local devices, such as printers.
So there you have it—the top 10 things you need to know about Windows 7 (okay, we couldn’t stop until we hit “11”), and our contribution to the annual onslaught of New Year’s lists. We hope you enjoyed learning a bit more about the newest desktop operating system from Microsoft, or at least found it more useful than hearing about Lindsay Lohan’s latest misadventure!

-----------------------------------------------------------------
Article by bcdalai Source: Microsoft TechNet
-----------------------------------------------------------------

Tuesday, November 20, 2007

Restore your PC Settings

Bookmark and Share
Restore your PC settings after cleaning viruses, spywares

Updated on: 28th August 2008

Warning: This article is for informational purposes and contains no warranty whether express or implied.

Note: This document may change and updated from time to time depending upon the latest and new information available.

Introduction:
Security is the most important concept in computing. So everyone needs to be secure to make the data and application to avoid loss. The object of this article is to give some awareness to the computer users to protect the data, time and money. If you have any more information relating to this topic, please send to me or add those in a comment.

These are the security setting generally affected by some Viruses/malicious scripts/spywares. Following settings/components are affected:

>> Autorun Settings
>> Command Prompt (cmd)
>> Folder Options (control folders)
>> Registry Editor (regedit)
>> Startup Settings
>> Task manager (taskmgr)
>> Website blocking (e.g. Orkut, Gmail and may be other sites.)
>> Windows Automatic Update
>> Windows Installer

Step-1 (Recommended)
Methods to secure your system

First of all you have to clean the Viruses/malicious programs from your system by using a good AntiVirus/Antispyware/Rootkit cleaner.

Security Risks:
Adware
Backdoor
Botnet
Crimeware
Dialers
Downloader
Hack tools (keygens/cracks/patches)
Joke programs
Keylogger / Keystroke Recorder
Macrovirus
Malbot
Mass Mailer
Pop-ups
Pornware
Remote Access
Riskware
Rootkit
Spyware
Trackware
Trojan horse
Virus
Worm
Note: See the detailed glossary here.

Recommended programs to secure your Computer (recommended by bcdalai).
AntiVirus programs:
Norton Antivirus 2008 or Norton Internet Security 2008
F-Secure Client Security 2008

Note: If you are using any other program then check that the program is up-to-date means, Product license/subscription is valid, the definition and program is up-to-date, it is running with the Windows startup programs and if that program has Firewall then is it ON/OFF, always turns it ON. If that program has no firewall then turns ON the windows firewall from “Control Panel”. It is recommended to use the firewall that comes with that Antivirus software. You must update that program through internet.

Anti-spyware/anti-malware/anti-adware/anti-Rootkit programs:
Spybot Search & Destroy
Spyware Doctor
Webroot Spy Sweeper 5.5
Lavasoft Ad-Aware 2007
Sophos Anti-Rootkit
Microsoft Malicious Software Removal Tool
Windows Defender

Now major antivirus software are comes with some additional protection feature, such as spyware/adware protection, Rootkit detector, Anti-spam etc. There are some products providing all-round protection like Norton 360.
When you are buying any of the security products, check all these feature to sure that these are present in that software.

Step-1
Restore your settings to default system settings

After cleaning the viruses, spywares and other security problem you should check the system settings whether they are affected or not. If the system settings are not restored by the antivirus or the software used to clean the security risks, then you have to do those manually.

1- Autorun Settings: This setting is affected and the symptoms are, when you click a drive (whether fixed/removable) it will not open. It will run a script from a file running “Microsoft Windows Based Script Host” (wscript.exe/wwscript.exe) and Microsoft Console Based Script Host (cscript.exe) and you can’t end these processes from “Task Manager”. If you will right-click that device/drive, then you will see “Autoplay” as the default action instead of “open”.

Step-1: First show hidden and system files and folders from “Folder Options” from control panel. Go to each drive and manual delete the “Autorun.inf” hidden file. Now log off and log on. If the problem is not solved then update the antivirus and scan the system (run complete scan).

Step-2: After scanning the system if the problem is not solved then use group policy to disable the auto run settings.
Go to Start > Run type "gpedit.msc" press Enter.
Expand "Computer Configuration" and navigate to "Administrative Templates\System"
Then open “Turns off Autoplay" option and click the enabled option to disable autoplay on all drives.

2- Command Prompt: Some times Command Prompt is disabled and you cannot open from Start > All Programs > Accessories or by typing cmd from Run box.
You may see this message when trying to open command prompt.

Photo Sharing and Video Hosting at Photobucket

Step-1: Now re-enable the command prompt.
Go to Start > Run type "gpedit.msc" press Enter.
Expand "User Configuration" and navigate to "Administrative Templates\System"
Then open “Prevents access to command prompt" option and click the disabled option to enable access to command prompts.

3- Folder Options: Many viruses and spywares disable folder options and even if the option is not disabled then also you cannot see the hidden files and system files. If the folder option is disabled then you will not see the folder option from the tools menu and from the control panel.

Photo Sharing and Video Hosting at Photobucket

Step-1: Enable “Folder Option- using Group Policy Editor.
1. Go to Start > Run type "gpedit.msc" press Enter.
2. Expand "User Configuration" and navigate to "Administrative Templates\Windows Components\Windows Explorer"Then open “Removes the Folder Options menu item from the Tools menu” option and click the disabled option to enable folder options.

Photo Sharing and Video Hosting at Photobucket

Step-2: To view hidden files and folders: Often you can not see the hidden files even the two options “Show hidden files and folders” turned ON and “Hide protected operating system files (Recommended)” turn OFF. To see all the files even if these options are OK then use the following scripts: Download the files “SecuritySettings.rar”, extract and run the file ”ShowHiddenFiles.bat” & “showhiddenfiles.vbs”. Download the RAR file here.

4- Registry Editor: Registry editor is also disabled by many viruses and spywares. You will saw the message like “Registry editing has been disabled by your administrator”.

Photo Sharing and Video Hosting at Photobucket

Step-1: Enable registry editor using Group Policy Editor.
1. Go to Start > Run type "gpedit.msc" press Enter.
2. Expand "User Configuration" and navigate to "Administrative Templates\System"
3. Then open “Prevent access to registry editing tools” option and click the disabled option to enable this option.

5- Startup Setting: After cleaning viruses and spywares, you have to clean the startup entries. If you don’t know how to delete the startup program then use the tool Ccleaner or use “System Configuration Editor (msconfig)” to delete the unnecessary program at startup. You have to know which program to delete and which not to delete.

6- Task Manager: If the task manager is disabled by any virus and spyware the follow the following steps to enable it.

Photo Sharing and Video Hosting at Photobucket

Step-1: Enable registry editor using Group Policy Editor.
1. Go to Start > Run type "gpedit.msc" press Enter.
2. Expand "User Configuration" and navigate to "Administrative Templates\System\ Ctrl+Alt+Del Options"
3. Then open “Remove Task Manager” option and click the disabled option to enable this option.

7- Website blocking: When a web site is blocked then you have to scan with a good antispyware/antispyware and then reset your internet options to default. To do this go to “Control Panel” then open “Internet Option” go to “Advanced” tab, in the “Reset Internet Explorer Settings” click “Reset” button to reset all settings to default.

Photo Sharing and Video Hosting at Photobucket

8- Windows Automatic Update: If “Windows Automatic Update” setting is disabled then follow these steps.

Photo Sharing and Video Hosting at Photobucket

Step-1: Enable “Windows Automatic Update” using Group Policy Editor.
1. Go to Start > Run type "gpedit.msc" press Enter.
2. Expand "User Configuration" and navigate to "Administrative Templates\Windows Components\Windows Update"
3. Then open “remove access to use all Windows Update features” option and click the disabled option to enable this option.

9- Windows Installer: If you find that Windows explorer is not starting or problems while running installer based programs then do these to restore the default settings for windows installer.

Photo Sharing and Video Hosting at Photobucket

Step-1: Enable “Windows Installer” using Group Policy Editor.
1. Go to Start > Run type "gpedit.msc" press Enter.
2. Expand "Computer Configuration" and navigate to "Administrative Templates\Windows Components\Windows Installer"
3. Then open “Disable Windows Installer” option and click the disabled option to enable this option.
If the “windows installer” service is not running then start the windows installer service. Go to “Control Panel > Administrative Tools > Services” then open “Windows Installer” in the service status area click “Start” button.

When every thing is restore you can use your system safely.

Appendix:
Meaning of Group Policy Editor options:
"Not Configured" means the option is OFF by default.
"Enabled" means the option is ON.
"Disabled" means the option is Off manually.

Download PDF version of this article from the link below:

http://www.box.net/shared/lrz474e58f

Additional References:
http://bcdalai.blogspot.com/2007/11/security-glossary.html
http://bcdalai.blogspot.com/2007/10/005-windows-command-guide-2007.html
http://bcdalai.blogspot.com/2007/10/007-administrative-power-tricks.html
http://bcdalai.blogspot.com/2007/11/010-controlling-ie7-temp-files-and.html

Article By: bcdalai

-----------------------------------------------------------------------------------

Security Glossary

Bookmark and Share
Security Glossary

Last Updated on: 8th July 2008.

Adware:
Adware is ad-supported computer software, software that may be installed for free but includes advertisements promoting various good and services.
It is the stand-alone or appended program that can secretly gather personal information through the Internet and relay it back to another computer. Adware may track browsing habits for advertising purposes. Adware can also deliver advertising content.

Address munging:
Address munging is the practice of disguising, or munging, an e-mail address to prevent it being automatically collected and used as a target for people and organizations that send unsolicited bulk e-mail. Address munging is intended to disguise an e-mail address in a way that prevents computer software seeing the real address, or even any address at all, but still allows a human reader to reconstruct the original and contact the author: an email address such as, "no-one@example.com", becomes "no-one at example dot com", for instance. Any e-mail address posted in public is likely to be automatically collected by computer software used by bulk e-mailers — a process known as e-mail address harvesting — and addresses posted on webpages, Usenet or chat rooms are particularly vulnerable to this. Private e-mail sent between individuals is highly unlikely to be collected, but e-mail sent to a mailing list that is archived and made available via the web or passed onto a Usenet news server and made public, may eventually be scanned and collected.

Antivirus:
Designed to protect against infection with and/or damage caused by computer viruses.

Blended threat:
A blended threat combines the characteristics of viruses, worms, Trojan horses, and malicious code with server and Internet vulnerabilities to initiate, transmit, and spread an attack. Blended threats use multiple methods and techniques to propagate and attack, and cause widespread damage throughout a network.

Backdoor:
A backdoor in a computer system (or cryptosystem or algorithm) is a method of bypassing normal authentication, securing remote access to a computer, obtaining access to plaintext, and so on, while attempting to remain undetected. The backdoor may take the form of an installed program or could be a modification to an existing program or hardware device.

Botnet:
Botnet is a jargon term for a collection of software robots, or bots, which run autonomously and automatically. They run on groups of "zombie" computers controlled remotely by crackers. This can also refer to the network of computers using distributed computing software.

Caller ID spoofing:
Caller ID spoofing is the practice of causing the telephone network to display a number on the recipient's caller ID display which is not that of the actual originating station; the term is commonly used to describe situations in which the motivation is considered nefarious by the speaker. Just as e-mail spoofing can make it appear that a message came from any e-mail address the sender chooses, caller ID spoofing can make a call appear to have come from any phone number the caller wishes. Because people are prone to assume a call is coming from the number (and hence, the associated person, or persons), this can call the service's value into question.

Click Fraud:
Click fraud is a type of internet crime that occurs in pay per click online advertising when a person, automated script, or computer program imitates a legitimate user of a web browser clicking on an ad, for the purpose of generating a charge per click without having actual interest in the target of the ad's link. Click fraud is the subject of some controversy and increasing litigation due to the advertising networks being a key beneficiary of the fraud.

Crimeware:
Crimeware is a class of computer program designed specifically to automate financial crime. The term was coined by Peter Cassidy, Secretary General of the Anti-Phishing Working Group to distinguish it from other kinds of malevolent programs.
Crimeware (as distinct from spyware, adware, and malware) is designed (through social engineering or technical stealth) to perpetrate identity theft in order to access a computer user's online accounts at financial services companies and online retailers for the purpose of taking funds from those accounts or completing unauthorized transactions that enrich the thief controlling the crimeware. Crimeware also often has the intent to export confidential or sensitive information from a network for financial exploitation. Crimeware represents a growing problem in network security as many malicious code threats seek to pilfer confidential information.

Dialers:
Dialer is a computer program which creates a connection to the Internet or another computer network over the analog telephone or Integrated Services Digital Network (ISDN) network. Many operating systems already contain such a program for connections through the Point-to-Point Protocol (PPP).
Many internet service providers offer installation-CDs to simplify the process of setting up a proper Internet connection. They either create an entry in the OS's dialer or install a separate dialer (as the AOL software does).
Nowadays, the term "dialer" often refers specifically to dialers which connect without the user's full knowledge as to cost, with the creator of the dialer intending to commit fraud.

Directory Traversal:
A directory traversal is to exploit insufficient security validation / sanitization of user-supplied input file names, so that characters representing “traverse to parent directory” are passed through to the file APIs.
The goal of this attack is to order an application to access a computer file that is not intended to be accessible. This attack exploits a lack of security (the software is acting exactly as it is supposed to) as opposed to exploiting a bug in the code.
Directory traversal is also known as the ../ (dot dot slash) attack, directory climbing, and backtracking. Some forms of this attack are also canonicalization attacks.

Dosnet:
Dosnet (Denial of Service Network) is a type of botnet/malware and mostly used as a term for malicious botnets while benevolent botnets often simply are referred to as botnets. Dosnets are used for Distributed Denial of Service (DDoS) attacks which can be very devastating.

Downloader:
It is small program that downloads some malicious codes/programs automatically without the users’ knowledge. This program downloads some risky contents from the remote computer (hackers’ site) and install in the local computer containing security risks.

Hack tools:
Programs that are used by a hacker to gain unauthorized access to your computer. For example, one hack tool is a keystroke logger, which tracks and records individual keystrokes and can send this information back to the hacker. The hacker can then perform port scans or vulnerability scans. Hack tools may also be used to create tools for virus creation.

Identity theft:
Identity theft is a catch-all term for crimes involving illegal usage of another individual's identity. The most common form of identity theft is credit card fraud. While the term is relatively new, the practice of stealing money or getting other benefits by pretending to be a different person is thousands of years old.

Joke programs:
Programs that can alter or interrupt the operation of a computer in a way that is intended to be humorous or frightening. For example, a program can be downloaded from Web sites (typically in shareware or freeware), email messages, or instant messenger software. It can then move the trash can away from the mouse when you attempt to delete or cause the mouse to click in reverse.

Macro:
Macros are the special action/function scripts or documents used to enhance the functionality of office documents i.e. word, excel etc. Macro is itself not a virus but it is often prone to virus and other security risks.

Macro-virus:
Macro viruses do not infect program files; they infect documents. Common targets for many macro viruses are word processors such as Microsoft Word and Lotus AmiPro and spreadsheets like Microsoft Excel. A macro virus, in computing, is a computer virus that exploits programs' associated documents (such as MS Word Documents) to contain harmful embedded code.

Malbot:
A malbot is a robot or Internet bot designed or used for malicious intentions such as gaining unauthorised access to a computer system, or participation in a Botnet. It is a blend of the terms "malicious" and “bot”. The term is currently generally used in relation to malware in the form of Internet bots.

Make Money Fast:
"Make Money Fast" is a title of an electronically forwarded chain letter which became so infamous that the term is now used to describe all sorts of chain letters forwarded over the Internet, by e-mail spam or Usenet newsgroups. In anti-spammer slang, the name is often abbreviated "MMF".

Malware:
Malware is software designed to infiltrate or damage a computer system without the owner's informed consent. It is a portmanteau of the words "malicious" and "software". The expression is a general term used by computer professionals to mean a variety of forms of hostile, intrusive, or annoying software or program code.
Many normal computer users are however still unfamiliar with the term, and most never use it. Instead, "computer virus" is used in common parlance and often in the general media to describe all kinds of malware, though not all malware is a virus.

Mass mailer:
The term mass mailer can refer to those computer worms that spread themselves via e-mail.

Pop-up:
A pop-up is a small web browser window that appears on top of the website you're viewing. Pop-up windows often open as soon as you visit a website and are usually created by advertisers. It is a medium of spreading viruses/spyware/adware etc.

Pharming:
Pharming (pronounced farming) is a cracker's attack aiming to redirect a website's traffic to another, bogus website. Pharming can be conducted either by changing the hosts file on a victim’s computer or by exploitation of a vulnerability in DNS server software. DNS servers are computers responsible for resolving Internet names into their real addresses — they are the "signposts" of the Internet. Compromised DNS servers are sometimes referred to as "poisoned". The term pharming is a word play on farming and phishing. The term phishing refers to social engineering attacks to obtain access credentials such as user names and passwords. In recent years both pharming and phishing have been used to steal identity information. Pharming has become of major concern to businesses hosting ecommerce and online banking websites. Sophisticated measures known as anti-pharming are required to protect against this serious threat. Antivirus software and spyware removal software cannot protect against pharming.

Phishing:
In computing, phishing is an attempt to criminally and fraudulently acquire sensitive information, such as usernames, passwords and credit card details, by masquerading as a trustworthy entity in an electronic communication. Phishing is typically carried out by email or instant messaging, and often directs users to enter details at a website, although phone contact has also been used. Phishing is an example of social engineering techniques used to fool users. Attempts to deal with the growing number of reported phishing incidents include legislation, user training, public awareness, and technical measures.

Pornware:
Programs that enters into the computer when visiting pornographic/illegal websites. This program create link and connect to pornographic websites and spread malicious codes into your computer.

Remote access:
Programs that allow access over the Internet from another computer to gain information or to attack or alter your computer. For example, you may install a program, or it may be installed as part of some other process without your knowledge. The program can be used for malicious purposes with or without modification of the original remote access program.

Riskware:
Riskware is computer software, which actually was not programmed and intended as malware, but has security critical functions. These functions can be used to start or stop computer processes or computer services. Riskware can also be defined as potentially dangerous softwares. Riskware can be executed and misused by malware and will be noticed in certain cases by antivirus software.

Rootkit:
A Rootkit is a set of software tools intended to conceal running processes, files or system data from the operating system. Rootkits have their origin in relatively benign applications, but in recent years have been used increasingly by malware, helping an intruder to maintain access to a system whilst avoiding detection. Rootkits are known to exist for a variety of operating systems such as Linux, Solaris and versions of Microsoft Windows. Rootkits often modify parts of the operating system or install themselves as drivers or kernel modules.

Social engineering:
Social engineering is a collection of techniques used to manipulate people into performing actions or divulging confidential information. While similar to a confidence trick or simple fraud, the term typically applies to trickery for information gathering or computer system access and in most cases the attacker never comes face-to-face with the victim.

Spam:
Spam, unsolicited or undesired bulk electronic messages. There are many types of electronic spam, including
E-mail spam: unsolicited e-mail.
Mobile phone spam: unsolicited text messages.
Forum spam: posting advertisements or useless posts on a forum.
Spamdexing: manipulating a search engine to create the illusion of popularity for webpages.
Spam in blogs: posting random comments or promoting commercial services to blogs, wikis and guestbooks.
Newsgroup spam: advertisement and forgery on newsgroups.
Messaging spam: use of instant messenger services for advertisement or even extortion.

Spambot:
A spambot is a program designed to collect e-mail addresses from the Internet in order to build mailing lists for sending unsolicited e-mail, also known as spam. A spambot is a type of web crawler that can gather e-mail addresses from Web sites, newsgroups, special-interest group (SIG) postings, and chat-room conversations. Because e-mail addresses have a distinctive format, spambots are easy to write.

Sping:
Sping is short for "spam ping", and is related to fraudulent pings from blogs using trackbacks, called trackback spam. Pings are messages sent from blog and publishing tools to a centralized network service (a ping server) providing notification of newly published posts or content. Spings, or ping spam, are pings that are sent from spam blogs, or are sometimes multiple pings in a short interval from a legitimate source, often tens or hundreds per minute, due to misconfigured software, or a wish to make the content coming from the source appear fresh. Spings, like spam blogs, are increasingly problematic for the blogging community.

Spyware:
Spyware is a computer technology that is designed to secretly gather information about a user (e.g. for an Internet advertising company).
It is a stand-alone program that can secretly monitor system activity and detect information like passwords and other confidential information and relay the information back to another computer.
Spyware can be unknowingly downloaded from Web sites (typically in shareware or freeware), email messages, and instant messenger software. You may unknowingly download spyware by accepting an End User License Agreement from a software program.

SQL Injection:
SQL injection is a technique that exploits a security vulnerability occurring in the database layer of an application. The vulnerability is present when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typed and thereby unexpectedly executed. It is in fact an instance of a more general class of vulnerabilities that can occur whenever one programming or scripting language is embedded inside another.

Trackware:
Stand-alone or appended applications that trace a user's path on the Internet and send information to a target system. For example, the application can be downloaded from Web sites, email messages, or instant messenger software. It can then obtain confidential information regarding user behavior.

Trojan horse:
Computer program which looks useful but contains harmful codes that affect your computer program and data.

Virus:
Computer program which is intended to be spread surreptitiously between computers and usually causes damage. A virus is a computer program that attaches a copy of itself to another computer program or document when it runs. Whenever the infected program runs or a user opens a document containing a macro virus, the attached virus program activates and attaches itself to other programs and documents. Viruses generally deliver a payload, such as displaying a message on a particular date. Some viruses specifically damage data by corrupting programs, deleting files, or reformatting disks.

Vishing:
Vishing is the criminal practice of using social engineering and Voice over IP (VoIP) to gain access to private personal and financial information from the public for the purpose of financial reward. The term is a combination of "voice" and phishing. Vishing exploits the public's trust in landline telephone services, which have traditionally terminated in physical locations which are known to the telephone company, and associated with a bill-payer. The victim is often unaware that VoIP allows for caller ID spoofing, inexpensive, complex automated systems and anonymity for the bill-payer. Vishing is typically used to steal credit card numbers or other information used in identity theft schemes from individuals.
Vishing is very hard for legal authorities to monitor or trace. To protect themselves, consumers are advised to be highly suspicious when receiving messages directing them to call and provide credit card or bank numbers. Rather than provide any information, the consumer is advised to contact their bank or credit card company directly to verify the validity of the message.

VOIP Spam:
VoIP spam is an as-yet non-existent problem which has nonetheless received a great deal of attention from marketers and the trade press. Sometimes referred as SPIT (Spam over Internet Telephony).

Website spoofing:
Website spoofing is the act of creating a website, as a hoax, with the intention of misleading readers that the website has been created by a different person or organisation. Normally, the website will adopt the design of the target website and sometimes has a similar URL.
Another technique is to use a 'cloaked' URL. By using domain forwarding, or inserting control characters, the URL can appear to be genuine while concealing the address of the actual website.
The objective may be fraudulent, often associated with phishing or e-mail spoofing, or to criticize or make fun of the person or body whose website the spoofed site purports to represent.

Worm:
Computer virus which usually copies itself through a network and wastes resources or causes damage.
A worm is a special type of virus that replicates itself from one computer to another and can use memory. Worms generally exist inside other files, such as Microsoft Word or Excel documents. A worm may release a document that already has the worm macro inside of it.

Zombie computer:
A zombie computer (often abbreviated zombie) is a computer attached to the Internet that has been compromised by a hacker, a computer virus, or a trojan horse. Generally, a compromised machine is only one of many in a "botnet", and will be used to perform malicious tasks of one sort or another under remote direction. Most owners of zombie computers are unaware that their system is being used in this way. Because the vector tends to be unconscious, these computers are metaphorically compared to a zombie.

Article By: bcdalai

Download PDF version of this article from the link below:
http://www.box.net/shared/on40n3dj5i

Reference:
http://dictionary.reference.com/
http://en.wikipedia.org/
http://www.google.com/
-------------------------------------------------------------------------