SysAdminGear

File: vschosts.exe
-------------------------------------------------------------------------------------------------
vschost.exe should not be running at startup. If yes, it can be a virus, spyware, trojan, or some other sort of malicious program. You should use a security program / antivirus to make sure that your system is clear.

Setting up DNS servers on cPanel / other servers.

You should edit file /etc/resolv.conf
# nano /etc/resolv.conf

nameserver IP2
nameserver IP1

RL Injection attacks typically mean the server for which the IP address of the attacker is bound is a compromised server.

What can we do?
Check the server for suspicious files in /tmp, /var/tmp, /dev/shm, /var/spool/samba, /var/spool/vbox, /var/spool/squid, and /var/spool/cron
You should use "ls -lab" for checking directories as sometimes compromised servers will have hidden files that a regular "ls" will not show.

Use:
# ps -efl or # ps -auwx
to find suspicious processes. Verify Apache processes.

Clam Anti-virus can also be used to find commonly used PHP and Perl-based hacks, including various php shells, on a server using the “--infected” and “--recursive” options.
Use clamscan command
Also check root kit detection tools:
http://www.chkrootkit.org/
http://www.rootkit.nl/
http:// http://www.ossec.net/en/rootcheck.html

Read our security articles.

You can find at this post all Exploits of March / 2008 are now available. Keep your server protected against exploits :)

All 203 exploits added to Packet Storm in March of 2008 are available here:

Download March 2008 Exploits

Source: PacketStorm

This is a List of Top Open Source Encryption Tools you can use.

1. AxCrypt
AxCrypt Description:
- Simply right-click on a file in Windows Explorer and you can encrypt it, and a double-click decrypts the data. It supports self-decrypting files .You can protect files in transit while still allowing e-mail recipients to view the information easily. You can use it on Windows.
How to use AxCrypt
How to Install AxCrypt
Download AxCrypt

2. Mac GNU Privacy Guard
Mac GNU Privacy Guard Description:
- Mac GnuPG ports GnuPG so that it can be used on a Mac and provides better privacy than PGP. Mac GnuPG supports multiple encryption standards and languages. You can use it on Mac OS X.
Download Mac GNU Privacy Guard

3.WinPT
WinPT Description:
- WinPT collects a number of different encryption tools into a single application. It's compatible with PGP and based on GnuPG. It can be used on Windows.
Download WinPT


PeaZip
PeaZip Description:
PeaZip creates, opens, and encrypts zip files and dozens of other compression formats. Additional features include split/join files (file span), wipe files (secure deletion), compare, checksum and hash files, system benchmark, and more. It is available for Windows and Linux
Download Peazip

MCrypt
MCrypt Description:
MCrypt lets developers add a wide range of encryption functions to their code without needing to be expert cryptographers. This is a developer tool not an encryption app for end-users. It can be used on: Windows, Linux, Unix.
Download MCrypt

Keyring for PalmOS
Keyring description:
With Keyring for PalmOS you can store secret data securely on your Palm-based handheld. Keyring provides secure triple-DES encryption and is available in a number of different languages. Keyring for PalmOS can be used only on PalmOS.
Keyring Download
Keyring Guide

You can utilize a GNU/Linux server s a Domain Controller for Windows Clients.
Is a good way ideea to save money on your network.

This article will help you to configure a Samba Server
Read full article

It contains the next topics:
- Introduction and Samba Configuration
- Samba Server Roles and Backends
- Users Groups and Computer Accounts
- Samba Shares
- Sharing Printers through Samba
- Additional Domain Controller Functions
- Relevant Samba Parameter Reference

At windows startup programs you can find tkbellexe..

tkbellexe is a process from RealOne Player that works as a Scheduler for RealOne Player. This is a non-essential process. You can disable it for more performance.

It should not be and virus / Trojan.

Setup netboot on RHEL5.1

Note: system-config-netboot is not included in RHEL 5
A possible solution is download the Fedora rpm or other and use that.

The Fedora rpm is easily available and can be installed.

Canonical Ltd, anunnouced Ubuntu 8.04 LTS Desktop Edition download for free.
Release of Ubuntu 8.04 LTS server ediction was also announced.

Download Ubunti Linux 8.04 CD / ISO Images:

- Direct download for i386 32 bit:
Mirror1
Mirror2
Mirror3
Mirror4
Mirror5

- 64 bit server and desktop edicitions:
Check here

Installing Ubuntu 8.04 Within Windows video tutorial:


Ubuntu Linux 8.04 video:

After kernel security patching or upgrade, Linux should be rebooted.

Ksplice is a GPL 2 Linux patch that provides Linux kernel security update and upgrades without reboot.

Tested on: kernel from 2.6.8 to actual version 2.6.25 and on Debain, Ubuntu, RHEl, Gentoo and other Linux distros.

Ksplice Download, Usage Examples and Documentation

Inf you are running cPanel and Webalizer stoped tou can use a cPanel script to fix it.

# cd /scripts
# ./fixwebalizer

This command will help you ti repair a Webalizer that has stopped updating.
Please note that old data will be deleted.

Linux can be used as a real time operating system ( RTOS ) for the most situations like:
- mobile telephones
- household appliance controllers
- industrial robots
- spacecraft
- industrial control and scientific research equipment
- etc.

You can find on Linux real time in the standard off-the-shelf 2.6 kernel. Reading this you will know some of the Linux architectures that support real-time characteristics and what it really means to be a real-time architecture.

This videos shows how to start and configure compiz fusion with all effects on mandriva 2008:
- cube
- windows
- transparency

Configure compiz fusion on Mandriva 2008 video:

This Video Tutorial shows how to add and update all the required urpmi packages on your mandriva 2008 .

Mandriva 2008 - urpmi update video:

This video is a very good Tutorial of how to backup users and system configuration on Linux Mandriva 2008.

Mandirva 2008 How to backup users and system configuration video:

Read more about Mandriva on Wikipedia

This video shows you how to setup your firewall on Mandriva 2008
Mandriva 2008 - Firewall Setup Video

This video shows Oracle VM installation

This video shows how to install Oracle on Linux.



Read more about Oracle on Wikipedia

Read more about Oracle in Wikipedia

DenyHosts Description:
DenyHosts is asecurity tool to prevent brute force attacks on SSH monitoring invalid login attempts in the authentication log and blocking the originating IP addresses.

How to Install DenyHosts 2.0 on CENTOS video:


Read more about DenyHosts in Wikipedia