السلام عليكم و رحمة الله
برنامج الحماية : Universal Shield
رابط البرنامج :

التعريف بالبرنامج :

Ability to hide files, folders, or drives from all other users (including the administrator).
Encrypts files and folders.
A mask that allows you to hide file groups (for example, c:\*.doc).
Ability to set permissions (Read, Write, Visibility, Delete) for any files, folders, and drives. For example, you can make your files Read Only and make it impossible to delete them.
An access lock on your private folders and settings (My Documents, Favorites, Control Panel, Internet History, and so forth).
A protection wizard.
Password protection for files, folders, and drives.
Unlimited number of objects to protect.
Access restrictions on your data against local network users as well as Internet users.
Password-protected start of Universal Shield.
Password-protected uninstall of Universal Shield.
Use of hot keys to start Universal Shield and to change the protection mode from other Windows applications.
Trusted processes that allow you to specify the process that can override the protection.
Stealth Mode that allows you to hide the program from other people.
Ability to lock your Windows desktop so that users cannot delete, add, or modify the shortcuts and icons on your desktop.
Adds files and folders via an Explorer menu command.
Enables protection automatically if the computer has been idle.
Protects files and folders even in Windows Safe Mode.
High-level protection.
High performance rates.
Multilingual interface.
Support of FAT, FAT32, and NTFS systems

اداة تخطي الحماية : Universal Shield Unlocker

رابط التحميل :
http://www.multiupload.com/IMNYQZR950

السلام عليكم و رحمة الله

برنامج الحماية : Lock Folder Xp

رابط البرنامج :

http://www.everstrike.com/lock_folder.htm

التعريف بالبرنامج :

Ability to hide files, folders, or drives from all other users (including the administrator).
Password protection for files, folders, and drives.
Unlimited number of objects to protect.
Access restrictions on your data against local network users as well as Internet users.
Ability to lock your Windows desktop so that users cannot delete, add, or modify the shortcuts and icons on your desktop.
Password-protected start of Lock Folder XP.
Ability to managing program from tray.
Windows Explorer commands for instant folder hiding.
Automatic protection activation after a set idle time.
High-level protection.
High performance rates.
Multilingual interface.
Support of FAT, FAT32, and NTFS systems

اداة تخطي الحماية : Lock Folder Xp Unlocker

رابط التحميل : 

http://www.multiupload.com/ARBKUZKPZX

السلام عليكم و رحمة الله

الأداة باصدارين:
Standalone
و Plugin خاص بــ FastScanner

الجديد :
امكانية اضافة قيم Overlay سواء ببايتات فارغة او بايتات خاصة…
رابط التحميل :  http://www.multiupload.com/O6A3C27PTE

Release 0.2 :
—
 [+] Add overlay (Null bytes).
 [+] Add overlay (Custom bytes).
 [+] Drag n drop support.
 [+] Released without using packers (Nspack packer cause False positive malware result for 0.1 release).
 [!] Minor bugs fixed.

Release 0.1 :
—
 Save Overlay value [.Ovl]
 Save new file without Overlay [.New]
 Support All Executable Files (*.exe *.dll *.ocx *.sys *.cpl *.scr)

بسم الله الرحمن الرحيم

وصف البرنامج :

Easy File & Folder Protector protect files and folders situated on local media of Windows 95/98/ME/NT/2000/XP with Easy File & Folder Protector at Windows kernel level. Your can deny access to certain files and folders, or to hide them securely from viewing and searching. Easy File & Folder Protector has an easy-to-use user interface allowing you to allocate access to your files and folders between your users according to predefined timetables. Each PC user can have his own list of allowed and disallowed files and folders within certain time periods. The program does not modify your media: in protecting your files, it just uses a high-reliability VXD driver working at Windows kernel level. This guarantees that Easy File & Folder Protector will never lose your data, as may happen if you use other file- and folder-protecting software. The program uses unique technology, which allows you to protect system files and folders such as the Windows System, Registry and Swap files. The program’s interface is very easy to use. On-line help is available.

Major Features:

• Protect files and folders
• Protect files
• Protect Folders
• Disable Internet access
• Password-protect any program
• Protect files and programs by time
• Hide folders

اداة تعطيل الحماية :

رابط التحميل :

http://rapidshare.com/files/292910189/Easy_File_and_Folder_Protector_Unlocker.rar

بسم الله الرحمن الرحيم

وصف البرنامج :

Protect your files and folders with File & Folder Protector at Windows kernel level. This great easy-to-use password-protected security utility lets you password-protect certain files and folders, or to hide them securely from viewing and searching just with a click of mouse. When PC user tries to access any protected file or folder, dialog box querying password appears on the screen. If entered password is valid, the user can access this file or folder, otherwise not. File & Folder Protector does not modify your media: in protecting your files or folders, it just uses a high-reliability VXD driver working at Windows kernel level. This guarantees that File & Folder Protector will never lose your data, as may happen if you use other file- and folder-protecting software. Due to unique technology, the program also lets you protect system files and folders such as the Windows System, Registry and Swap files. You will find it very easy to use. Excellent on-line help is available. Try our password and security tools. Free downloads.

اداة تعطيل الحماية :

رابط التحميل :

http://rapidshare.com/files/292910349/File_and_Folder_Protector_Unlocker.rar

بسم الله الرحمن الرحيم

وصف البرنامج :

Keep your private files into password protected Lockbox

My Lockbox™ is a security software enabling you to password protect any folder on your computer.

The protected folder (lockbox) is hidden from any user and application of your system, including Administrator and System itself. It is impossible to access the lockbox not only from the local computer, but also from the net.

The program is extremely easy to use. You can set the lockbox location and the password during the setup procedure. After the setup is done, lockbox will be hidden and locked until you enter the valid password.

My Lockbox Control Panel allows you easily change basic lockbox parameters: lockbox location, protection status, password.

In addition, skinned user interface lets you choose from different skins to select the most comfortable look and feel of the software.

Features and benefits

• Very easy in use
• Almost any folder on your computer can be password protected
• Instant protection – no file scrambling or moving to another place
• Lockbox folder is inaccessible even by the system administrators
• Lockbox folder is inaccessible both locally and remotely.
• Lockbox folder can be protected in Windows safe mode
• Windows XP x64 support
• Hotkeys support – you can popup Control Panel with a simple keystroke.
• Skinned user interface
• Freeware

اداة تعطيل الحماية : My LockBox Unlocker

رابط التحميل :

http://rapidshare.com/files/292910966/MyLockBox_Unlocker.rar

بسم الله الرحمن الرحيم

وصف البرنامج :

Hide Folders® XP – Hide, lock and password protect your private files and folders from other users.

Hide Folders® XP is a simple but ingenious program for Microsoft Windows XP and 2000 users. Every day we trust our personal files to a computer. Who knows how many people will want to get access to them? If you share your computer with coworkers, children, spouse or your computer is always connected to the Internet, your private files are under threat of being revealed. Since 2001, our Hide Folders software products help our users to hide private files and folders from prying eyes.

Features and benefits

• Unlimited number of files and folders to protect
• Different protection modes: Hide folder, Lock folder, Hide & Lock folder
• Instance protection – It doesn’t perform any file scrambling or moving to another “secret” place.
• Protected folders will be inaccessible to all users including system administrators
• Password protection against unauthorized users
• Folders can be protected even in Safe mode
• True stealth mode
• Windows XP x64 compatibility
• Optional Windows Explorer integration
• Evidence elimination
• Hot keys support

اداة تعطيل الحماية : Hide Folder Xp Unlocker

رابط التحميل : http://rapidshare.com/files/292910757/Hide_Folders_XP_Unlocker.rar

بسم الله الرحمن الرحيم

وصف البرنامج :

Hide Folders® 2009 – Hide, lock and password protect your private files and folders from other users.

 Hide Folders 2009 is an innovative software application which enables you to password protect all the private information on your hard drive. You can make your files and folders inaccessible, invisible or protect them from modification. The protected folders or files are not accessible by any users – no matter how they are trying to get in – locally or from the net. Effective protection mechanism, intuitive user interface, and set of fine-tuning options will suit the needs of everyone from novice Windows users to computer experts. Since 2001, our Hide Folders software products help our users to hide private files and folders from prying eyes.

Features and benefits

• Effective protection methods allow you to hide folders out from users and applications in Microsoft Windows XP and Windows Vista
• Nobody but you will access your hidden folders.
• 4 protection methods available: Hide, Lock, Hide & Lock, Read Only
• NTFS, FAT32 and FAT volumes are supported.
• File masks support.
• Unlimited number of folders can be protected at the same time.
• Trusted processes support – processes which are permitted to access the protected data.
• No file system structure modifications will occur.
• Effective password protection when running program.
• Effective password protection when uninstalling program.
• Removing Hide Folders 2009 folder from the system will not uncover hidden folders.
• Files from hidden folders will not be lost even if someone tries to remove an upper-level folder.
• Clear recent documents option. Hide Folders 2009 clears records of recently accessed documents if these documents reside in the hidden folders.
• Clear Recycle Bin items originally located in hidden folders.
• Secure Hide Folders 2009 by removing itself from the list of mostly used programs (Windows start menu).
• Secure Hide Folders 2009 by removing itself from Add/Remove software Control Panel applet.
• Hide Folders 2009 will not hide your Windows, Windows System folders and Windows partition root folders – so careless using of Hide Folders 2009 would not bring the system down.
• True stealth mode – you cannot detect the program with Windows Task Manager.
• Safe mode support – The folders can be hidden even if your computer is running in safe mode.
• Hot keys to manage basic Hide Folders 2009 functions.
• Command line support of all main Hide Folders 2009 functions.
• Support of folders named with national language symbols .
• Hide Folders 2009 is multilingual software, its user interface supports different languages and can be easily translated to new languages.
• Intuitive and extremely easy-to-use user interface with visual styles support.

اداة تعطيل الحماية : Hide Folders 2009 Unlocker

رابط التحميل : http://rapidshare.com/files/292910506/Hide_Folders_2009_Unlocker.rar

بسم الله الرحمن الرحيم

أصبح من الطبيعي في السنوات الأخيرة ملاحظة أن معظم برامج الحماية  الحديثة تعتمد في حمايتها بنسبة 80% على استعمال الدرايفر سواء كانت هذه البرامج موجهة إلى محاربة البرامج الضارة أو حماية سرية أعمال المستعمل، و مع قلة الخبراء الجيدون  في التعامل مع الدرايفرات تجعلنا نتساءل عن مدى كفاءة دمجها في هيكل الحماية…

هل تعلم ؟ :

• الدرايفر هو ملف مستقل يعطي إمكانية استدعائه من طرف أي برنامج خارجي، من حيث التحميل و إلغاء التحميل و إرسال البيانات  و استقبالها…
•  إمكانية حذف مفتاح التسجيل الخاص بأي درايفر يجعل النظام لا يحمله مما يبطل الحماية تماما…
• إمكانية حذف الدرايفر أو تغيير اسمه يبطل الحماية أيضا…
• معظم برامج الحماية تعطل عند تشغيل النظام في الوضع الآمن بسبب عدم تحميل النظام للملفات التي تسمح بالتعامل مع الكرنل مود مثل : ntoskrnl.exe و غيرها…
•  الاعتماد على حدث التشغيل عند التحميل في الدرايفر لتنفيذ الأوامر طريقة غير مجدية دون اللجوء إلى استعمال IRP و تنظيم الأحداث حسب الحاجة و الحالة…
• عدم التحقق من داخل الدرايفر من البرنامج المستدعي له يسمح لأي برنامج خارجي بالتحكم فيه…
• الاعتماد الكلي على الــ SSDT hook و امكانية الغاء الــ Hook  بكل سهولة تضعف فعالية هذه الطريقة في مراقبة النظام او في  بناء حماية ذاتية قوية…

Malware Analysis :

W32/Sality malware has many ways to spread and take system control, among them two Kernel mode threads that will try to disable.

Many disinfection tools and Antivirus became obsolete cause of these Kernel mode threads.

The only difficulty is to get correct names of these threads, Sality create driver with random names but registry service key name still constant:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\abp470n5

or

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\asc3360pr

Disable Sality infection process:

1- Run Kernel Detective (Rootkit Analysis Tool by GamingMaster AT4RE).

2- Select Processess in the list chooses System.

3- Go to Threads.

4- In StartAddress search Thread name RandomName.sys[.text](our target 02 threads):

To get Thread name read registry value ImagePath

5- Right Click, choose Force Terminate :: Risky

Now Sality is disabled, you can install Antivirus or Removal Tool to clean your system.

But do not launch any executable on the infected system, using a flash disk for decontamination.