Database Users

Process execution prevention

Hello,
I want to write a process execution blocker application that will
block the execution of a process that is not in a white list
of my application. I have got it to work with the toolhelper API
but this is not the 100% solution because I can only kill
processes that are already started.
Is it possible to write a filter component for the pocket pc
that is called before a process is started and where
I can allow that it can be started?
Thanks
Houser

Android viruses

Hi everyone,
I see there are plenty of antiviruses for the android. Is viruses for the android very common? (Ie. Like windows virus is much more rampant vs macintosh?) What kind of precaution should we take to prevent our gadgets from being affected? (Ie. Downloading apps from untrusted sources? Via sms/email?) Is it really necessary to install an antivirus? If so, what is recommended?
Thank you!
Sent from my HTC Liberty using XDA App

manojsuper said:
I wouldn't get a virus scanner if I were you...they are pointless because the android system is possibly the most secure system in completion with the RIM Blackberry! Just make sure that every time you download an application that you are aware of the "permissions" that you are giving it and you should not get a virus anytime soon
Click to expand...
Click to collapse
How is it the most secure system? There are apps out there that access things that they don't need to access, i'll give you a few examples:
Applications that I have installed that can track my location:
Alchemy
IMDb
Why would a GAME such as Alchemy NEED to track my location? Why would IMDb need to track my location?
Apps that can read my mobile number, serial number or other data:
Alchemy
Unblock Me Free
These apps listed are only apps that I don't see them needing to access what they have the ability to access. How many people do you think have alchemy and IMDb installed? It would be so so SO easy for someone to write a malicious app that looks legit..that's just my 2 cents...not saying it doesn't exist not saying it does...
Also, only reason I have an antivirus app is because I have lookout installed and the only reason I installed that is so if I lose my phone i can lock it remotely and wipe it if needed.

Take Microsoft Security Essentials Off

This virus scanner called Security Essentials is now known be the new Windows Defender, it is a memory hog, and really slows down the performance of the operating system.... They need a less of a memory hog virus scanner for the operating system and a system maintaines scan that is even more powerful then sfc scan, and on boot up it will prompt you to launch that and fix the function files that has been infected... And you can shut that off if you want, incase you mod your system. The best defense is not to get hit, and to launch a sub operating system that can repair it without using Linux
Sent from my SGH-i917 using XDA Windows Phone 7 App

i surprised to hear that window defender makes you computer slow down, it's a very light anti-virus software :|

I think you may be confused with the old defender, the new one is considered to be the old Microsoft Security Essentials, if there is anyway I could show you how much its taken, I would... But do you understand where I'm getting at?
Sent from my SGH-i917 using XDA Windows Phone 7 App

Disable it
You could disable it very easy...
From action center
Control Panel\ All Control Panel Items\ Action Center

AndrewH1993 said:
This virus scanner called Security Essentials is now known be the new Windows Defender, it is a memory hog, and really slows down the performance of the operating system.... They need a less of a memory hog virus scanner for the operating system and a system maintaines scan that is even more powerful then sfc scan, and on boot up it will prompt you to launch that and fix the function files that has been infected... And you can shut that off if you want, incase you mod your system. The best defense is not to get hit, and to launch a sub operating system that can repair it without using Linux
Sent from my SGH-i917 using XDA Windows Phone 7 App
Click to expand...
Click to collapse
MSE never be a system hog.
In fact, they are the most-loved Free Anti-Virus by Genuine Windows User by now, because they are freaking light dude.
You can go to Notebookreview forum and you will see most software designer/ notebook reviewer overthere loves MSE.
if you want to talk about System Hog, Kaspersky is your answer.
I am using Norton IS 2012.

How can I track what bytes are sent accross a line?

How can I track what bytes are sent accross a line?

Possibly hex editor can view all
Sent from my Vivid 4G using xda premium

If I understand you, try a tool like WireShark, to see the network communication.

Wireshark is indeed one option.
Another option would be a 'man in the middle attack'
For windows os you could use some fake proxy server like http://www.charlesproxy.com/
On android you would have to install a proxy like ProxyDroid

Depends what kind of line you're talking about. Also depends on the OS you're using.
-SLS-

Warning: Android File-Encrypting, TOR-enabled Ransomware

For the community's information, I feel I need to create this thread to warn others:
Global IT security leader, ESET today announced that its engineers have spotted the first instance of a file-encrypting ransomware for Android. Once it has successfully infected a devices, this Android trojan scans the SD card for certain file types, encrypts them, and demands a ransom in order to decrypt the files.
After launch, the trojan displays a ransom message and encrypt files in a separate thread in the background. The ransom message is written in Russian and the payment is demanded in Ukrainian hryvnias. The message roughly translates to:
WARNING your phone is locked!
The device is locked for viewing and distribution child pornography, zoophilia and other perversions.
To unlock you need to pay 260 UAH.
1. Locate the nearest payment kiosk.
2. Select MoneXy
3. Enter {REDACTED}.
4. Make deposit of 260 Hryvnia, and then press pay.
Do not forget to take a receipt!
After payment your device will be unlocked within 24 hours.
In case of no PAYMENT YOU WILL LOSE ALL DATA ON your device!"
The malware directs the victim to pay using the MoneXy service as it is not as easily traceable as using a regular credit card.
Android/Simplocker.A will scan the SD card for files with any of the following image, document or video extensions: jpeg, jpg, png, bmp, gif, pdf, doc, docx, txt, avi, mkv, 3gp, mp4 and encrypt them using AES. It will also contact its Command & Control server and send identifiable information from the device like its IMEI.
The sample analyzed by ESET is in the form of an application called ‘Sex xionix’. It was not found on the official Google Play store and the company estimates that its prevalence is low at this time but believes that this is most likely a proof-of-concept or a work in progress.
In light of such advanced malware, Pradeesh VS, General Manager at ESET Midlde East provided the following advice to Android Users, “We encourage users to protect themselves against these threats by prevention- by using mobile security solutions such as ESET Mobile Security for Android- and adhering to best security practices, such as keeping away from untrustworthy apps and app sources. If they are unfortunate to already be infected, they should recover the files from a backup. Because when you have a backup, then any Filecoder trojan- be it on Android, Windows, or any operating system- is nothing more than just a nuisance.”

Happy I don't keep anything on my phone seeing I'm always flashing,but this is good to know. Thanks for the info
Sent from my HTCONE using XDA Premium 4 mobile app

Jeez...These Trojan coders don't do anything good with their skills... Smh.. Thanks for the information!
Sent from my HTC One using XDA Premium 4 mobile app

Something similar has been effecting iPhones for a couple of weeks. Just be careful what apks you install.

Shouldn't the Verify Apps option in Android protect you from these things? That's basically the point of that option.

Perhaps good news.
http://www.usatoday.com/story/news/...ian-hacked-created-zeus-cryptolocker/9919985/

Prophet16 said:
Shouldn't the Verify Apps option in Android protect you from these things? That's basically the point of that option.
Click to expand...
Click to collapse
Doesnt Verify Apps just check apps on the Play Market? If so this would not work as article states its not found in the Market..
Also, ESET is reporting this and also suggesting users use there virus software lol.. Shamless plug to get the work of their own software out there, self promoting, maybe they have a vested interest..

twerg said:
Doesnt Verify Apps just check apps on the Play Market? If so this would not work as article states its not found in the Market..
Also, ESET is reporting this and also suggesting users use there virus software lol.. Shamless plug to get the work of their own software out there, self promoting, maybe they have a vested interest..
Click to expand...
Click to collapse
No I think Verify Apps was supposed to check only non play store apps. That's why the first time you install an app from a file manager or something it'll ask you to allow Verify Apps to check app security.