When the total eclipse throws the planet into darkness...

No, no - I love "Heroes" TV series too, but today we talk about another eclipse. I can't say why Eclipse Foundation chose exactly this name. But it doesn't matter. It is tmportant that in November 2001, Borland, IBM, MERANT, QNX Software Systems, Rational Software, Red Hat, and SuSE founded a corporate consortium named Eclipse, and later, in early 2004, they reorganized it into a nonprofit organization - Eclipse Foundation.

On July 22, 2010 in the magazine «NewScientist» was published Note , which reported that, according to published on the Dell Forum Trojan Worm.Win32.Spybot was found in a flash memory of a motherboard. This board is included in PowerEdge R310, PowerEdge R410, PowerEdge R510 and PowerEdge T410 Dell servers. The worm payload was in spreading through peer-to-peer networks and instant messaging clients. Given the fact that the worm is run under Windows, it can be neutralized by anti-virus software, but removing the worm's code from the flash memory of the motherboard is unlikely to force by a normal virus scanner. The company has already announced that it will urgently replaces all infected boards of servers.

It is a calm quiet evening. You are reviewing your favorite film at the computer. And small icons of network activity in the tray attract your attention:


It is strange... May be a browser? It is closed. A favorite messenger? It is off. Maybe the operating system have been updating? But it is not — Update Service icon is located in the same taskbar notification area.

What is the cause of network activity? Network protocol analyzer Wireshark will help us to solve this riddle...

Today we will discuss the using of console tool chntpw.
I have already written about Ubuntu OS in my previous articles, so I decided use this Linux distributive in my example as one of the most widespread.

So, let’s begin. At first we should run a package manager and enable the additional software repositories...

Today we continue the story of malicious software running under Linux. At this time we will discuss the heavy artillery - IDA Pro. This indispensable tool has the ability to debug programs running under Windows, Linux and Mac OS. We will mention Mac OS next time, but now we use familiar Virtual Machine VirtualBox running Ubuntu 10.04 on board as an experimental platform.