Posts

Steps for how to resolve blocked ip message in symantec endpoint protection

Steps for how to resolve blocked ip in symantec endpoint protection :-


1.Go to Policies –> Intrusion
Prevention Policies

2.Right Click Edit –> On the Exceptions tab

3.Click Add –> Look for the ID 23179

4.click Next

5. On the Signature Action select “Allow” and click OK.

  If you want to disable the notification on
your system tray..
 

1.    Go to Clients, then the client group you want to remove this ability  from.

2. Click the Policies tab on the right, then expand ‘Location-specific
Settings’

3. Click on ‘Server Control’, then Customize.

4. In the Intrusion Prevention Notifications Uncheck the “Display
Intrusion Prevention notifications.”


Courtesy :- Symantec Corporation

Citibank on Phishing e-mails

Mcafee Technical Support :-

  

During any Troubling Shooting need to talk to mcafee 24/7 Support Centre Nos. is 

18004252656  

You may feel free to talk to them for product support.

 

Alternatively you may even involve in a web chat with mcafee technical/ support team on www.mcafee.com

 

For any assistance beyond this, feel free to know more from us.

 

At McAfee we are working hard to maintain the highest level of service to our customers.

For any technical issues, we have our technical support team who would help you to sort out your concern/technical issues.

Below are the procedures to access the support.

McAfee offers three mechanisms for submitting a case on technical issues which are as follows:

 

Phone Support

18004252656 (Toll free number)/ 080 – 66569908(STD Number)

Chat Support

https://mysupport.nai.com/chat/input_form.asp

Service Portal Submission

https://mysupport.mcafee.com

           

We request you to submit your case to McAfee Technical Support.

Prior to contacting McAfee Technical Support, ensure that the following information is available:

  •          Technical Support Grant Number
  •         Location of the Software
  •         Detailed description of the problems or errors
  •           Description of the hardware (must meet published McAfee specifications) that the software is installed on, including the serial number or service tag where applicable
  •          Name and versions of any operating system, network, and software running with the McAfee software, including patches and fixes

Courtesy :- Mcafee Corporation

What is Trojan Horse?

A Trojan horse, or Trojan, is software that appears to perform a desirable function for the user prior to run or install, but steals information or harms the system

Trojan horses may allow a hacker remote access to a target computer system. Once a Trojan horse has been installed on a target computer system, a hacker may have access to the computer remotely and perform various operations, limited by user privileges on the target computer system and the design of the Trojan horse.

Courtesy :- http://en.wikipedia.org/wiki/Trojan_horse_(computing)

What is a Phishing?

What is a Phishing?

Phishing is an Internet scam where the user is convinced to give valuable information. Phishing will redirect the user to a different website through emails,instant messages, spywares etc.Phishers offer illegitimate website to user to fill personal information.The main purpose of phishing is to get access to the customer’s bank accounts,passwords and other security information. Phishing attacks can target the audience through mass-mailing millions of emai address aroung the world.
Phishers can fool user by convincing them to get into a fake website with the domain name slightly different from the orignal website which is difficult to notice.
They use the images of the legitimate hyperlink,which itself helps as a hyperlink to an unathorized website. Phishers track the users by using the images in the content  of a web page that looks like a browser window. Keeping an unathorized browser window on top of, or next to a legitimate window having same looks,
will make the user believe that they are from the same source. Setting the tone of the languages same as the original website.

Courtesy :-  http://www.eccouncil.org/

What is a Spyware Symptoms?

If your computer starts to behave strangely, you might have spyware or other unwanted software installed on your computer.
  • I see pop-up advertisements all the time.Some unwanted software will bombard you with pop-up ads that aren’t related to a particular Web site you’re visiting.These ads are often for adult or other Web sites you may find objectionable. If you see pop-up ads as soon as you turn on your computer or when you’re not even browsing the Web, you might have spyware or other unwanted software on your computer.
  • My settings have changed and I can’t change them back to the way they were.Some unwanted software can change your home page or search page settings. Even if you adjust these settings, you might find that they revert back every time you restart your computer.
  • My Web browser contains additional components that I don’t remember downloading.Spyware and other unwanted software can add toolbars to your Web browser that you don’t want or need. Even if you remove these toolbars, they might return each time you restart your computer.
  • My computer seems sluggish. Spyware and other unwanted software are not designed to be efficient. The resources these programs use to track your activities and deliver advertisements can slow down your computer and errors in the software can make your computer crash. If you notice a sudden increase in the number of times a certain program crashes, or if your computer is slower than normal at performing routine tasks, you may have spyware or other unwanted software on your machine.

 

Courtesy :- Microsoft Corporation
http://www.microsoft.com/security/spyware/indicators.aspx

What is a Spyware?

What is a Spyware?

Spyware is software that aims to gather information about a person or organization without their knowledge and
that may send such information to another entity without the consumer’s consent, or that asserts control over a computer without the consumer’s knowledge.

“Spyware” is mostly classified into four types: system monitors, trojans, adware, and tracking cookies.
Spyware is mostly used for the purposes of tracking and storing Internet users’ movements on the Web and serving up pop-up ads to Internet users.

Whenever spyware is used for malicious purposes, its presence is typically hidden from the user and can be difficult to detect.
Some spyware, such as keyloggers, may be installed by the owner of a shared, corporate, or public computer intentionally in order to monitor users.

While the term spyware suggests software that monitors a user’s computing, the functions of spyware can extend beyond simple monitoring.
Spyware can collect almost any type of data, including personal information like internet surfing habits, user logins, and bank or credit account information.
Spyware can also interfere with user control of a computer by installing additional software or redirecting web browsers.
Some spyware can change computer settings, which can result in slow Internet connection speeds, un-authorized changes in browser settings, or changes to software settings.

Sometimes, spyware is included along with genuine software, and may come from a malicious website.
In response to the emergence of spyware, a small industry has sprung up dealing in anti-spyware software.
Running anti-spyware software has become a widely recognized element of computer security practices, especially for computers running Microsoft Windows.
A number of jurisdictions have passed anti-spyware laws, which usually target any software that is surreptitiously installed to control a user’s computer.

Spyware

Routes of infection:-

Spyware does not necessarily spread in the same way as a virus or worm because infected systems generally do not attempt to transmit or copy the software to other computers.
Instead, spyware installs itself on a system by deceiving the user or by exploiting software vulnerabilities.

Most spyware is installed without users’ knowledge, or by using deceptive tactics.
Spyware may try to deceive users by bundling itself with desirable software. Other common tactics are using a Trojan horse.
Some spyware authors infect a system through security holes in the Web browser or in other software.
When the user navigates to a Web page controlled by the spyware author, the page contains code which attacks the browser and forces the download and installation of spyware.

The installation of spyware frequently involves Internet Explorer. Its popularity and history of security issues have made it a frequent target.
Its deep integration with the Windows environment make it susceptible to attack into the Windows operating system.
Internet Explorer also serves as a point of attachment for spyware in the form of Browser Helper Objects, which modify the browser’s behavior to add toolbars or to redirect traffic

Effects and behaviors
A spyware program is rarely alone on a computer: an affected machine usually has multiple infections. Users frequently notice unwanted behavior and degradation of system performance.
A spyware infestation can create significant unwanted CPU activity, disk usage, and network traffic. Stability issues, such as applications freezing, failure to boot, and system-wide crashes are also common.
Spyware, which interferes with networking software, commonly causes difficulty connecting to the Internet.

In some infections, the spyware is not even evident. Users assume in those situations that the performance issues relate to faulty hardware, Windows installation problems, or another infection.
Some owners of badly infected systems resort to contacting technical support experts, or even buying a new computer because the existing system “has become too slow”.
Badly infected systems may require a clean reinstallation of all their software in order to return to full functionality.

Moreover, some types of spyware disable software firewalls and anti-virus software, and/or reduce browser security settings, which further open the system to further opportunistic infections.
Some spyware disables or even removes competing spyware programs, on the grounds that more spyware-related annoyances make it even more likely that users will take action to remove the programs.

Keyloggers are sometimes part of malware packages downloaded onto computers without the owners’ knowledge.
Some keyloggers software is freely available on the internet while others are commercial or private applications.
Most keyloggers allow not only keyboard keystrokes to be captured but also are often capable of collecting screen captures from the computer.

A typical Windows user has administrative privileges, mostly for convenience. Because of this, any program the user runs has unrestricted access to the system.
As with other operating systems, Windows users are able to follow the principle of least privilege and use non-administrator accounts.
Alternatively, they can also reduce the privileges of specific vulnerable Internet-facing processes such as Internet Explorer.

Courtesy :- wikipedia.org

What is a Computer Worm?

A computer worm is a software program that is designed to copy itself from one computer to another, without human interaction. Unlike a computer virus, a worm can copy itself automatically.

Worms can replicate in great volume. For example, a worm can send out copies of itself to every contact in your e-mail address book, and then it can send itself to all of the contacts your contact’s e-mail address books.

Some worms spread very quickly. They clog networks and can cause long waits for you (and everyone else) to view Web pages on the Internet.

Courtesy :- Microsoft Corporation
http://www.microsoft.com/security/worms/whatis.aspx

What is a Computer virus symptoms?

After you open and run an infected program or attachment on your computer, you might not realize that you’ve introduced a virus until you notice something isn’t quite right.

Here are a few primary indicators that your computer might be infected:

  • Your computer runs more slowly than normal
  • Your computer stops responding or locks up often
  • Your computer crashes and restarts every few minutes
  • Your computer restarts on its own and then fails to run normally
  • Applications on your computer don’t work correctly
  • Disks or disk drives are inaccessible
  • You can’t print correctly
  • You see unusual error messages
  • You see distorted menus and dialog boxes

Courtesy :- Microsoft Corporation
http://www.microsoft.com/security/antivirus/indicators.aspx

Portfolio Items