Using a code signing certificate (issued to what looks like a legitimate company 'Technical and Commercial Consulting Pvt. Ltd') to sign malicious binaries the chances of them being able to distribute the payload was greatly improved. The company concerned, ESET says, was based in New Delhi and the certificate itself was issued in 2011. Documents, mainly PDFs, attached to emails were infected with data stealing malware and signed off with the aforementioned certificate to add authenticity.

ESET malware researcher Jean-Ian Boutin reveals that during the investigation there were several leads that indicated the threat originates from India. "First, the code signing certificate was issued to an Indian company. In addition, all the signing timestamps are between 5:06 and 13:45 UTC, which is consistent with 8-hour work shifts falling between 10:36 and 19:15 in Indian Standard Time" he says, continuing, "we have identified several different documents that followed different themes likely to be enticing to the recipients. One of these is the Indian armed forces". Although Boutin admits that there is no precise information at this point as to which individuals or organisations were specifically targeted by the files. "Based on our investigations" he continues "it is our assumption that people and institutions in Pakistan were targeted".

One of the fake PDF files was delivered through a self-extracting archive called “pakistandefencetoindiantopmiltrysecreat.exe”, and ESET telemetry data shows that Pakistan is heavily affected by this campaign with 79% of detections being in that country. The first infection vector was utilising a widely used and abused vulnerability known as CVE-2012-0158. This vulnerability can be exploited by specially crafted Microsoft Office documents and allows arbitrary code execution. The documents were delivered by email, and the malicious code was executed as soon as the document was opened – without the attacked computer user even knowing. The other infection vector was via Windows executable files appearing to be Word or PDF documents – again distributed via email. In both cases, to evade suspicion by the victim, fake documents are shown to the user on execution.

"The malware was stealing sensitive data from infected PCs and sending them to the attackers’ servers" Boutin adds "It was using various types of data-stealing techniques, among them a key-logger, taking screenshots and uploading documents to attackers’ computer. Interestingly, the information stolen from an infected computer was uploaded to the attacker’s server unencrypted."

As you can see from the above screenshot, several strings in the binaries analysed by ESET are related to Indian culture, in particular a variable called ramukaka was used. Boutin explains that "Ramu Kaka is a typical Bollywood-style servant in a house. Considering that this variable is responsible for achieving persistence on the system, this definition is a good fit".

However, the most compelling argument to suggest that the attacks originate in India is to be found within the ESET research telemetry data. According to Boutin lots of malware variants tied to the attack appeared in the same location during a small time-frame. Each of these were very similar to each other, which strongly suggests an attempt to evade malware detection. "These files all appeared in the same region of India" Boutin concludes...

Lately I was doing a lot of research on AMD FX 8350. It says 4.0 GHz 8 cores. So does that mean that at most, I can get 8x4 = 32GHz, without any overclocking or turbo thing? That would seriously be superfast.

But in many forums I found out that it actually has 4 cores and it just has double the threads. So it is actually not an 8 core processor. So, what does that mean? It can execute double the instructions at one go?

I know that at one time all 8 cores will not be used. So can I make 2 cores process my graphics and the rest do their own job like a 6 core processor?

I was thinking of getting Gigabyte AMD/ATI Radeon 6670 2 GB graphics card. So, if I could combine the labour of those 2 cores with this graphics card, can I run Crysis 3 at ultra settings without any lag?

Is it good to go for AMD FX 8350? Is it future proof? If I have this configuration:

AMD FX 8350 4.0 GHz
Gigabyte ATI Radeon 6670 (2GB)
Corsair Vengeance 8GB RAM (1x8)
ASUS M5A78L-M LX V2 motherboard
Seagate Barracuda 1TB HDD
ASUS DRW-24D3ST DVD Burner internal Optical Drive
Cooler Master Elite 310 Cabinet
Cooler Master Thunder 500W PSU

IS THIS FUTURE PROOF FOR LIKE 6 YEARS?

Anyone else have similar problem?

   unsigned long pID;
   GetWindowThreadProcessId(hwndDC,&pID);
   HANDLE hProcess = OpenProcess(PROCESS_ALL_ACCESS, FALSE,pID);
   int x = 2207289488u;
   unsigned int x2;
   for(int i = 0; i<15000000;i++)
   {
    Sleep(1);
    DWORD LH = 0x001ed900+i;
    std::cout<<std::hex<<LH<<"\n";
    //MessageBox(0,"Found it","MB FINDER",0);
    ReadProcessMemory(hProcess, (LPVOID)LH, &x2, 4, NULL);
    if(x2 == 2198867081u)
    {
     Beep(1000,1000);
     Beep(1000,1000);Beep(1000,1000);Beep(1000,1000);Beep(1000,1000);
     WriteProcessMemory(hProcess, (LPVOID)LH, &x, 4, NULL);
     MessageBox(hwndDC,"FOUND IT","LIGHT HACK",0);
    break;
    };
   };

and i wrote these lines toorient the links between nodes..

 $ns duplex-link-op $n1 $n3 orient right-down
 $ns duplex-link-op $n2 $n3 orient right-up
 $ns duplex-link-op $n3 $n4 orient right
 $ns duplex-link-op $n4 $n5 orient right-down

but i am getting error message when i try to compile it..

 can't read "link_(0:2)": no such element in array
        while executing
"eval $link_([$n1 id]:[$n2 id]) $op $args"

    (Simulator duplex-link-op line 3)
    invoked from within
"$ns duplex-link-op $n1 $n3 orient right-down"
    (file "try2.tcl" line 34)

please help me...

thanks..

I have IPad 2, and currently im using Bluefire reader for DRM PDFs and GoodReader for standard PDF's, I was hoping GoodReader can support DRM but it is not. Now am trying to find some Adobe DRM support ebook readers that is faster than BlueFire and lots of features like GoodReader:

What I have tried are:
Txtr -
Tradebit - it cropped the page
Kobo - cant highlight text, define and note
Bluefire - slow interaction and slow in highlight text
Is it true of DRM supported readers has less functionalities? I'm looking for Adobe DRM Reader with faster response and lots of features like GoodReader or Txtr, free or paid will do.

Hoping to have good answers.

Thanks a lot.

Thanks in Advance.,

1. Could not reliably determine the server's fully qualified domain name using servername
2. Only one usage of each socket address (protocol/network address/protocol) is normally permitted: make_sock could not bind to 0.0.0.0:443
3. No listening sockets server shutting down.
   This is the error that I recieve in the apache_ssl_error log RSA server certificate COMMON NAME (CN) does not match server name.
   Can any one help.
   Thanks in advance.

How do the third parties get the code from the IMEI? If I have lots of phones could I unlock them al in one pop?

Like if third parties can do it, then it must not be impossible.

Last week my laptop sata dvd burner decided it had had enough so I got a replacement for the princely sum of £14.
I have decided to rip the old one apart and make a sata dvd to sata hard drive adapter out of it as a project and as something to keep me occupied for a while.

My problem is that no matter how much googling I do I can't find a wiring diagram for the laptop sata power connector (it's a standard 6 pin).
My googling has found many ready made adapters but I want to make one for myself.

Does anyone have any idea of the pin configuration of a laptop dvd sata power connector?

I could rip my laptop apart and test the pinouts with my trusty DVM but I'm a bit loathe to do that unless I have absolutely no choice.

Just so you know I have an HP Compaq 6720s which I have converted into an HP Compaq 6735s. (I put a dual core instead of single core AMD CPU in it and added the built in webcam to complete this upgrade)

So this is the problem. My little cousin picked up his brother's macbook and dropped it. The macbook turns on and works, except that the screen is very, very dim.

I am trying to find a way to rule out inverter, inverter cable or if it needs a full screen exchange.

Can somebody help me find out if the screen is doomed or I can try something to bring the brightness back?

Again, it is working, my cousin was able to pass a bunch of files to an external hard drive. However, it was a pain as the screen is very dim.

Brightness button does not have any effect. I pressed the brightness button a few times, then the dimming button as well. The laptop seemed unaffected. Didn't get brighter and apparently didn' get any dimmer.

Thank you in advance!

We have an E-Commerce site, that has a web based backend system for entire e-commerce execution used by 50+ people staff. For security reasons,

• I don't want to allow use of web browser. So our backend can not be accessed outside our office, from everywhere.
• I want a dedicated desktop application, installed by us only on office computers, to only browse and work with our website backend, no other website.

Any ideas, how do I make it possible? Are there any softwares already there? Is it also possible on ordinary browsers?

I hope I'll have some interesting discussion here;

Thanks :)

• scientific word processing with focus on content
• a super efficient equation editor (based on MathML content markup)
• a symbolic algebra system with automatic equation simplification
• a 2D graph module
• a simulation module
• management of documents in a relational database
• a bibliography repository
• multi user system for co-editing in a group
• LaTeX export for printing
• HTML export for WWW publishing

Get a first impression of what Cassiopeia does by checking out the following links:

http://www.advanced-science.com/Prod...icAlgebra.html
http://www.advanced-science.com/Prod...a2DGraphs.html
http://www.advanced-science.com/Prod...mulations.html

Cassiopeia can be downloaded from our website http://www.advanced-science.com. Trial keys enabling all features are available for free. You can one here:

https://www.advanced-science.com/cgi...eiaLicensePage

We would like to invite students, engineers and scientists to give Cassiopeia a try. Your feedback is greatly appreciated.

Detailed installation and setup instructions can be found here:

http://www.advanced-science.com/Prod...tallSetup.html

After installing the product begin with

http://www.advanced-science.com/Prod...ngStarted.html

and then work through the other guides reachable via the documentation link on our website.

If you encounter any problems or have questions regarding Cassiopeia do not hesitate to contact us at support@advanced-science.com. We will be happy to assist you.

Sincerely,

Acrux GmbH - Advanced Science Subdivision
http://www.advanced-science.com

I will try and be as clear as possible, and I hope someone here has the knowledge to really understand what I'm asking thoroughly, and have some answer that's good enough to make sense for me and future readers. Here I go...

Memory-mapped I/O and port I/O are two standard, and most used methods of accessing devices across a computer system, such as sound cards, video cards, disks, ROM, etc. I am a computer programmer, and I make it my best effort to understand this more clearly for low-level development, but here is my main basic question, and it is valid:

1.How can memory (i.e. RAM, main-memory) be "mapped" in an "address space" for the CPU? RAM stores bits, speaking bluntly, and these bits are used for machine instructions, data, paging, virtual memory, buffers, etc(although, to the best of my knowledge, every bit of RAM is used as some machine instruction for some purpose). I know the basics of how a computer starts, I know basic processor architecture, have even limited Assembly knowledge, but I don't understand how you map certain RAM when there's usually no distinction of a "map" in an encompass zone of bits sitting on an integrated circuit that get "processed" within registers, control units, and ALUs within a chip, and carried through buses across a motherboard. So how does this work in any particular, feasible, or logical sense?

How is "memory-mapping" accomplished?

If any one has had the above message upon startup it 's raid card driver related

Hi, I have just started to use the harddrive which had the problem, it's still there. The problem is with the raid card. (no problem on the other harddrives) In system config, startup there are two enteries: SATARAIDS and silcfg. I unticked the SATARAIDS, rebooted
message gone. I removed all files regarding SATARAIDS and silcfg. my computer,properties, hardware - deleted them. removed the folder in program files. done a scan to remove any files or file fragments relating to the raid drivers. I did not realise I had lefe the cd in the drive for the raid drivers which i put in yesterday. I rebooted.
upon rebooting it did not say found new hard ware "raid card" possibly because the cd was in the drive and it automatticly installed the drivers. FIXED
NO MORE ANNOYING MESSAGE

My question is, I have been tasked to draw this shape,

This is to be done using C++ to write code that will calculate the points on this shape.

Important details.

User Input - Centre Point (X, Y), number of points to be shown, Font Size (influences radius)

Output - List of co-ordinates on the shape.

The overall aim once I have the points is to put them into a graph on Excel and it will hopefully draw it for me, at the user inputted size!

I know that the maximum Radius is 165mm and the minimum is 35mm. I have decided that my base [Font Size][1] shall be 20. I then did some thinking and came up with the equation.

Radius = (Chosen Font Size/20)*130. This is just an estimation, I realise it probably not right, but I thought it could work at least as a template.

I then decided that I should create two different circles, with two different centre points, then link them together to create the shape. I thought that the INSIDE line will have to have a larger Radius and a centre point further along the X-Axis (Y staying constant), as then it could cut into the outside line.*

*(I know this is not what it looks like on the picture, just my chain of thought as it will still give the same shape)

So I defined 2nd Centre point as (X+4, Y). (Again, just estimation, thought it doesn't really matter how far apart they are).

I then decided Radius 2 = (Chosen Font Size/20)*165 (max radius)

So, I have my 2 Radii, and two centre points.

This is my code so far (it works, and everything is declared/inputted above)

for(int i=0; i<=n; i++) //output displayed to user
{                                          
Xnew = -i*(Y+R1)/n; //calculate x coordinate
Ynew = pow((((Y+R1)*(Y+R1)) - (Xnew*Xnew)), 0.5); //calculate y coordinate

AND

 for(int j=0; j<=n; j++)//calculation for angles and output displayed to user
{
Xnew2 = -j*(Y+R2)/((n)+((0.00001)*(n==0))); //calculate x coordinate
Ynew2 = Y*(pow(abs(1-(pow((Xnew2/X),2))),0.5));
if(abs(Ynew2) <= R1)
    cout<<"\n("<<Xnew2<<", "<<Ynew2<<")"<<endl;

I am having the problem drawing the crescent moon that I cannot get the two circles to have the same starting point?

I have managed to get the results to Excel. Everything in that regard works. But when i plot the points on a graph on Excel, they do not have the same starting points. Its essentially just two half circles, one smaller than the other (Stops at the Y axis, giving the half doughnut shape).

If this makes sense, I am trying to get two parts of circles to draw the shape as such that they have the same start and end points.

If anyone has any suggestions on how to do this, it would be great, currently all I am getting more a 'half doughnut' shape, due to the circles not being connected.

So. Does anyone have any hints/tips/links they can share with me on how to fix this exactly?

Thanks again, any problems with the question, sorry will do my best to rectify if you let me know.

Cheers

• Deleting the account, and recreating it
• Deleting the account, and recreating it with a different username (upon changing my account's username)
• Logging out of Windows and logging back in

I have two problems for which I seek your advise.
The first is that Windows is not updating (Automatic Update is on).
I also tried to do it manually. Nada. I got this error message "The website has encountered a problem and cannot display the page you are trying to view. The options provided below might help you solve the problem."
The second is that I am unable to activate bluetooth. I have tried a
number of things, including "bthprops" command but to no avail.
My system configuration is:

OS Name Microsoft Windows XP Professional
Version 5.1.2600 Service Pack 2 Build 2600
OS Manufacturer Microsoft Corporation
System Name XYZ-FA3F8025301
System Manufacturer HCL Infosystems Limited
System Model    P5GC-TVM-SI
System Type X86-based PC
Processor   x86 Family 15 Model 6 Stepping 5 GenuineIntel ~2800 Mhz
Processor   x86 Family 15 Model 6 Stepping 5 GenuineIntel ~2800 Mhz
BIOS Version/Date   American Megatrends Inc. 0201, 3/9/2007
SMBIOS Version  2.4
Windows Directory   C:\WINDOWS
System Directory    C:\WINDOWS\system32
Boot Device \Device\HarddiskVolume1
Locale  United States
Hardware Abstraction Layer  Version = "5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)"
User Name   XYZ-FA3F8025301\xyz
Time Zone   India Standard Time
Total Physical Memory   1,536.00 MB
Available Physical Memory   642.33 MB
Total Virtual Memory    2.00 GB
Available Virtual Memory    1.96 GB
Page File Space 2.09 GB
Page File   C:\pagefile.sys

Please advise,
Regards,
diode2012

• becomes sporadic
• becomes completely non-responsive
• causes text to scroll up instead of down

Unplugging and reinserting the mouse transmitter (USB port) usually fixed the problem but only for a few minutes. Another identical mouse had the same behaviour. And then, by chance, I had to use task manager to kill the FlashPlayer plugin for an unrelated problem. To my surprise, the scrolling started working again. Now whenever the scrolling goes south I kill the plugin to fix it. I can only conclude there is a problem with FlashPlayerPlugin_11_6_602_180 (the current release). Upon further investigation I see other people have reported similar problems as far back as 2011. Is anyone else seeing this problem and does anyone have a fix?

PS: Once the scrolling gets screwed up it affects scrolling in other applications as well.

What I want: A driver that I can register as a service, so that I can add a virtual mointor to a windows computer when my program starts, i.e. the computer shows that there are two monitors attached, but there is only one phyiscal monitor.

What I've tried: I tried downloading the sample Kernal Driver from Microsoft, but when I install it on my Windows 8 machine, it uninstalls my other video driver and only shows a single monitor. I don't think it installs correctly and hoses the computer. On my windows 7 machine, I get the blue screen of death after the driver installs and the computer reboots. I'm not even sure it's what I'm looking for.

I've also tried CodeProject's display driver, but I cannot even compile the driver because most of the required includes and libraries are deprecated and no longer available for download from Microsoft (There is no Windows 2000 platform sdk)

I have been looking for open source display drivers, but had little luck in finding them. I have looked into things like UltraVNC, but their drivers are mirror drivers.

Halp? Are there any resources that would help me create a virtual display driver and register it as a service? Any books, resources, code projects, etc?

I'm really struggling with this one.

Thanks.

If anyone out there is familiar with the Motorola firewall, and can suggest any CUSTOM settings that might help, it would be very appreciated. Thanks...

How could the DVI connection suddenly fail on what is a relatively new monitor (3 months)? What in particular would have failed and is it something that is easily replacable/fixable?

Thanks.

It might be connected to global.asax or any other file that needs to load before the page gets hit, but if the site freezes and I remove all preloaded files nothing happens either. If I do an iisreset everything works fine. The sharepoint sites work, luckily, since they are the production environment. I wanted to add different type sites on the server, but they obviously, are not in production.

Testing is very tedious on this.

Neither the IIS log nor the windows logs show anything but sharepoint stuff, as though is is blocking the rest.

Ideas on how to debug this? I'm stuck.

Any third party tool helps me to get back my lost EDB file data in well mode?

I have dozens of hosts that generate logwatch, logcheck, and fail to ban messages sent by email. I'd like to use a new system to accept all those messages along with the following:

1) Archive messages from multiple servers for a set amount of time.
2) Search the historical emails for servername, message type, or other text.

I was thinking about some type of mail aggregator since these messages are already sent via email to my mailbox. I just need to direct the mail to a new host running postfix (or whatever) to receive the mail and store it for future searches.

Anyone have any thoughts on this? Perhaps someone has a better suggestion on what they do to store these types of logs.

maybe someone knows how to disable multiple cursor? I rarely use it but it annoys me when I accidentally turn it on and start edigint to lines instead of one. Then I need ctrl+z and edit again, that really is unproductive.

Thanks

#include"Wire.h"

#define DS1307_ADDRESS 0x68
byte zero = 0x00; //workaround for issue #527

void setup(){
  Wire.begin();
  Serial.begin(9600);
  setDateTime(); //MUST CONFIGURE IN FUNCTION
}

void loop(){
  printDate();
  delay(1000);
}

void setDateTime(){

  byte second =      45; //0-59
  byte minute =      06; //0-59
  byte hour =        11; //0-23
  byte weekDay =    2; //1-7
  byte monthDay =    27; //1-31
  byte month =       2; //1-12
  byte year  =       13; //0-99

 Wire.beginTransmission(DS1307_ADDRESS);

  Wire.write(zero); //stop Oscillator

  Wire.write(decToBcd(second));
  Wire.write(decToBcd(minute));
  Wire.write(decToBcd(hour));
  Wire.write(decToBcd(weekDay));
  Wire.write(decToBcd(monthDay));
  Wire.write(decToBcd(month));
  Wire.write(decToBcd(year));

  Wire.write(zero); //start

  Wire.endTransmission();

}

byte decToBcd(byte val){
// Convert normal decimal numbers to binary coded decimal
  return ( (val/10*16) + (val%10) );
}

byte bcdToDec(byte val)  {
// Convert binary coded decimal to normal decimal numbers
  return ( (val/16*10) + (val%16) );
}

void printDate(){

  // Reset the register pointer
  Wire.beginTransmission(DS1307_ADDRESS);

  Wire.write(zero);
  Wire.endTransmission();

  Wire.requestFrom(DS1307_ADDRESS, 7);

   int second = bcdToDec(Wire.read());
  int minute = bcdToDec(Wire.read());
  int hour = bcdToDec(Wire.read() & 0b111111); //24 hour time
  int weekDay = bcdToDec(Wire.read()); //0-6 -> sunday - Saturday
  int monthDay = bcdToDec(Wire.read());
  int month = bcdToDec(Wire.read());
  int year = bcdToDec(Wire.read());

 /*  int second = 11;
  int minute =18;
  int hour = 18;
  int weekDay = 1;
  int monthDay = 2;
  int month = 11;
  int year = 12;
*/
  //print the date EG   3/1/11 23:59:59
  Serial.print(monthDay);
  Serial.print("/");


  Serial.print(month);
  Serial.print("/");

  Serial.print(year);
  Serial.print(" ");
  Serial.print(hour);
  Serial.print(":");
  Serial.print(minute);
  Serial.print(":");
  Serial.println(second);

}

below it mac os x base system ( capacity 1.26 gb , available 110.9 mb , used 1.15 gb )

how should i install osx lion via usb.?
kindly help me

I suppose when a disk is read, some data is transferred to memory where the system knows if a drive is "write protected" or not.

A "write protected" USB stick seems completely lost for further usage because no formating, deletion or partition changes are allowed. I have the idea if the Drive attributes, stored in memory (not in the drive itself) could be changed then it would be possible to recover the frozen stick.

Any clever ideas on the subject?

X1 [n] = 4.5δ[n+7] -10 ≤n≤ 0

I use Linux Mint. In the settings per connection, there is a RANDOM button for the MAC address. I click it and it reports a random mac address for use on public wifi. You could also download MACCHANGER and try it as well.

I then use TOR network. Quite slow, but it does make it difficult to trace me. Remember, difficult does not mean impossible! And by the time anyone does trace my location, I am long gone (wink).

If you can figure out how to use JonDoFox, this makes things even harder to locate you.

Please remember. This is for information only. Do NOT use this information to attempt to break any laws in your country.

I do this because of a stalker stalking me (police reports have been made but nothing can be done until they actually break the law unfortunately) and not for anything illegal.

Most times I just spoof my mac address and use the normal IP address assigned by whatever free wifi I am logged into. This is for general surfing.

Another item - if you spoof mac address and use TOR, then use Hushmail, you are pretty safe.

Just try to make sure the exit node for TOR is OUT of your specific country (USA in my case). I like Germany myself. By the time they go through all the red tape, I am gone and using a different IP and MAC address.

Another way to change MAC address is to simply buy several wifi dongles. But many of them do not work in linux.
And any that you have to give your real personal info should be avoided at all costs.

If you know of any other methods or flaws in this procedure, PLEASE let me know asap!
Thanks!

For those who use a home router - you need to contact the maker of the router to see if you can set the access control list (ACL) or even report a different MAC address. But if you use Cable internet, the modem itself has a fixed MAC address that you can't change.