Computer Security Software ESET SysInspector

Martin — Sat, 08 Nov 2008 08:14:44 +0000

Scanning a computer system with a computer security software like ESET SysInspector can reveal security related problems in short time. Those security software programs are by far not the all-knowing and -seeing eye but they provide an in depth analysis of a computer system that can be used to find some of problematic files that could be a security risk.

ESET SysInspector does that by scanning the computer’s hard drive and Registry. It assigns a risk level to every item that has been analyzed which ranges from fine (1) to risky (9) with three always bundled together. Risk levels 1 to 3 are assigned to files that have passed the check, 4-6 for unknown files and 7-9 for files that have been identified as being risky. The different levels are also colored differently (from green to red) to make identification as quickly as possible.

The computer security software will build a report that provides access to eight different categories including Running Processes, Network Connections or Important Registry Files. Each category is displayed in the color of the item with the highest risk level that it contains. That’s excellent for identifying the highest risks with one glance without having to look at the actual items at that time.

Opening a category can reveal subcategories or items. Each item is (again) listed in a color that depicts its risk level. Some categories can contain dozens of items and the risk level slider at the top helps reducing the amount of items displayed by selecting a minimum risk level to be displayed. Every item with a lower risk level will be hidden from the display so that the system administrator can concentrate on the higher risk items.

A higher risk level does not necessarily mean that an item is dangerous. That would be subject to further analysis. ESET SysInspector is providing some tools and shortcuts for this. A right-click on an item will open a context menu with options to open the path in the Windows Registry or to open the file’s location on the computer’s hard drive. There is also the possibility to perform an online search using the default web browser and the Google search engine.

A set of reports can be created that contain various level of information. One interesting feature is the ability to compare logs which can give additional clues on system changes in a time period.

Tags: Computer Security Software, eset sysinspector, risk level, Security, security analysis, security-software, windows security, windows software

Identify And Analyze Malicious Webpages

Martin — Sun, 19 Oct 2008 13:58:29 +0000

Malicious webpages make often use of a series of redirects and code obfuscation to make it difficulty for somebody to identify and analyze the threat. Malzilla is an open source software program for Windows that steps in and aids the researcher in identifying and analyzing JavaScript code on webpages.

The name stems from the fact that Malzilla is based on the Firefox JavaScript engine SpiderMonkey. It basically provides opportunities to load a webpage in the program using custom referrers, User-Agents, cookies and proxies.

The application will display the source code and the http header of the webpage in the interface. The user can view the webpage in text mode, hex view, cookie mode and using a links parser. Single or multiple scripts can be send to a script decoder.

Some of the interesting features:

JavaScript decoder
Decode Hex, USC2 and Base64
Link Parser
Clipboard Monitor
Hex Viewer
Note taking
IP Converter

Malzilla is not a tool for just anyone but it can be very helpful for analyzing webpages. It definitely eases the process of analysing and identifying webpages.

Tags: javascript, malicious websites, malware, malware analysis, malzilla, Security, security analysis, webpages

gHacks technology news » security analysis

Computer Security Software ESET SysInspector

Related posts

Identify And Analyze Malicious Webpages

Related posts