FantasticFreeware.com

FoxAnalysis – Firefox 3 Internet History Analysis

http://forensic-software.co.uk/default.aspx

A free tool enabling analysis of internet history data generated using Mozilla Firefox 3.
      Extract data regarding:
      Bookmarks
      Cookies
      Downloads
      Form history
      Logins
      Web history
      Analyse data by filtering and sorting
      Save and load case files
      Export activity report to HTML, CSV or XML files
      Detailed extraction log provided

Auto Kill Any Process

http://akmasolutions.blogspot.com/2010/01/auto-kill-any-process.html

Auto Kill Any Process or A.K.A.P for short, is a very useful utility, to kill Multiple-Sets of different processes at once, by simply launching the program. This can come in handy if you want to cleanup relevant processes, after working with any application, or if you want to clear a set of expendable processes before starting another RAM intensive application, in just a few seconds, instead of using the tedious task manager.

Rkill-terminate the active processes of malware blocking antimalware

http://www.brighthub.com/computing/smb-security/articles/59807.aspx

Rkill is created by Microsoft MVP Lawrence Abrams (also known as Grinler in several security forums) of BleepingComputer.com. Rkill is malicious software process killer and anti-malware assistant because it will terminate the active processes of malware that is blocking your anti-malware, anti-virus, Task Manager, Process Explorer, Registry Editor, browsers and any other programs in loading. When it finished unloading or terminating malicious processes associated to rogue or malicious program, you can proceed to scan and clean the system using anti-malware or anti-virus program.
Where to Download and How to Use Rkill?

Rkill is a free download from BleepingComputer.com and available in different file extensions:

    * rkill.exe http://download.bleepingcomputer.com/grinler/rkill.exe
    * rkill.com http://download.bleepingcomputer.com/grinler/rkill.com
    * rkill.scr http://download.bleepingcomputer.com/grinler/rkill.scr
    * rkill.pif http://download.bleepingcomputer.com/grinler/rkill.pif

The file size is less than 300kb only (257kb to be exact). To use Rkill, simply execute rkill.exe. You should see the command prompt window indicating that rkill is terminating known malicious processes. The command prompt will disappear when it finished and you will find ncmd.cfxxe, rkill.reg and pev.exe which are created by rkill. If you will execute rkill.exe again, those files will be removed by rkill. You can also manually delete rkill and other files it added after you’ve finished in using or cleaning the system.

Note: You do not need to execute the entire file format of rkill but use each at a time; only if the first one will not run at all (if the command prompt window displaying rkill is in the process of terminating the malicious processes is not shown). If you using Windows Vista or Windows 7 with UAC enabled, you will need to right-click rkill and choose to run as admin.

TeboCam-Webcam Security Monitor 

http://teboweb.com/WebCam.html

Webcam Security Monitor  your flat/housewith a movement sensitive webcam security system your flat/housewith a movement sensitive webcam security system -Receive emails with images of any movement detected.
-Publish movement images to website.
-Graph of movement over time (with calendar facility).
-Start movement detection at a specified time.
-Set the sensitivity of movement detection.
-Plus lots of other features…

FireFound-locate lost laptop and wipe browser info

http://www.firefound.com/

FireFound is an add-on for Firefox and Fennec (mobile Firefox) that helps your find your computer (or mobile phone, in the case of Fennec) if it is lost or stolen. Every time your computer's location changes, FireFound sends a secure message to a central server with its current location. You can then log into the server and see your computer's current location.
All of the location data is encrypted, so no one can find out where your computer is without your password.

If you lose your computer, you can tell FireFound to clear your personal data (saved passwords, browsing history, etc.) if anyone starts your browser before you can retrieve it.

You can even run your own FireFound server; all of the code is open-source.

Note: All geolocation data is approximate, and should only be used as a guideline. If your computer has been stolen, do not try to retrieve it yourself – alert the police.

Remove Fake Antivirus

http://freeofvirus.blogspot.com/

Remove Fake Antivirus 1.53 is used to remove:

   1. Cyber Security
   2. Alpha Antivirus
   3. Windows Enterprise Suite
   4. Security Center
   5. Control Center
   6. Braviax
   7. Windows Police Pro
   8. Antivirus Pro 2010
   9. PC Antispyware 2010
  10. FraudTool.MalwareProtector.d
  11. Winshield2009.com
  12. Green AV
  13. Windows Protection Suite
  14. Total Security 2009
  15. Windows System Suite
  16. Antivirus BEST
  17. System Security
  18. Personal Antivirus
  19. System Security 2009
  20. Malware Doctor
  21. Antivirus System Pro
  22. WinPC Defender
  23. Anti-Virus-1
  24. Spyware Guard 2008
  25. System Guard 2009
  26. Antivirus 2009
  27. Antivirus 2010
  28. Antivirus Pro 2009
  29. Antivirus 360 and
  30. MS Antispyware 2009

(all of them are fake antivirus which are
viruses or trojans) from your computer.

Remove Fake Antivirus is used to remove
fake antivirus which are viruses or trojans.

Command line switch:
"/start" will start removing the fake antiviruses automatically. 

Superscan-Fast TCP & UDP Port Scanner for Windows

http://www.darknet.org.uk/2008/10/superscan-v40-fast-tcp-udp-port-scanner-for-windows/

This is another tool that has been around for a long time and I’ve been using it for years since it’s earliest versions, oddly however I’ve never posted about it.

So here it for the few of you that haven’t heard of it, probably the best port scanner on the Windows platform, very fast and compact and has good banner grabbing functionality.

SuperScan 4 is an update of the highly popular Windows port scanning tool, SuperScan.

Windows XP Service Pack 2 has removed raw sockets support which now limits SuperScan and many other network scanning tools. Some functionality can be restored by running the following at the Windows command prompt before starting SuperScan:

net stop SharedAccess

LAlarm-free laptop alarm security software

http://www.lalarm.com/en/LAlarm_Laptop_Alarm.htm

LAlarm is free laptop alarm security software. LAlarm sounds an alarm when a laptop is in danger of being stolen or losing data, and it can recover and destroy data if the laptop is stolen. LAlarm consists of five alarms and other security functions designed to protect laptops and sensitive data.      Highlights
    * Theft Alarm- It prevents laptop theft by sounding an alarm when a thief tries to steal a laptop.
    * Perimeter Alarm- It alerts when a laptop goes outside a perimeter. It helps prevent laptop misuse and keeps the laptop within a safe boundary.
    * Inattention Alarm- It sounds an alarm when the owner leaves the computer unattended in an unsafe area for a period of time. It helps prevent laptop theft.
    * Battery Alarm- It alarms when the battery is under stress in order to preserve the battery capacity and prolong the battery lifetime. It also alarms when the battery level is low to prevent data corruption due to sudden power loss.
    * Disk Alarm- It alarms when a hard disk drive needs a repair or replacement in order to prevent data loss and laptop failure.
    * Data Destruction- It protects sensitive data by destroying the data if the laptop is stolen.
    * Data Recovery- It can recover data from a stolen laptop.
    * Mobile Phone Alert- It sends an alert to a mobile phone via email or SMS.
    * Theft Response- you can tell your laptop what to do in advance if your laptop is in hands of a thief.
Prevent laptop theft. Laptop theft is common and a constant threat to laptop security. LAlarm emits a loud siren sound when a thief tries to steal a laptop. For example, you connect a laptop to a power outlet or fasten a laptop to a table by using a USB flash drive strap. An alarm will be triggered when the laptop is disconnected from the power outlet or removed from the table. LAlarm also warns the owner if the laptop is left unattended in an unsafe place for a period of time.
Protect sensitive data. LAlarm protects sensitive data on a laptop by permanently destroying the data if the laptop is stolen. The US Department of Defense clearing and sanitizing standard (DOD 5220.22-M) is used to ensure that data is securely destroyed. Optionally the data can be emailed to the owner before the destruction. LAlarm can also be used in wiping out all sensitive data at the end of laptop life cycle.

Keep it safe within a perimeter. It is useful (especially for businesses) to keep a laptop within a safe perimeter. It sounds an alarm when the laptop is used outside the perimeter. It helps prevent laptop misuse and provides another layer of laptop security.

Prolong the battery lifetime. Batteries are an expensive part of a laptop. LAlarm helps preserve battery capacity and prolong the battery lifetime by alerting when the battery is under stress. So that you can maximize the lifetime of your battery and avoid unnecessary expenses on new battery purchase.

Prevent data corruption. LAlarm alerts when a possible sudden power loss is imminent. The user will then be able to save the data and shutdown the computer properly and/or switch to the AC power. LAlarm helps prevent data loss and data corruption due to a sudden power loss.

Prevent data loss. The HDD (hard disk drive) holds important data but is subject to frequent error and logical or physical damages due to various causes. If error or damage is detected at an early stage, it could be repaired before becoming a more serious problem and prevent serious data loss. LAlarm alerts the user of both physical and logical disk problems.

Prevent laptop failure. Hard disk drive problem is a common cause of laptop failure. But most users are not aware of such problems being developed and escalated until the HDD finally halts and the data becomes irrecoverable. LAlarm detects signs of HDD deterioration and recommends a HDD replacement, thereby, a laptop failure is prevented. As a result, a costly laptop repair expense is saved.

Alarm to mobile phone. You can get an alert to your mobile phone via email or SMS when an alarm goes off. You can also get an instant alert about the data destruction confirmation.

Microsoft Security Essentials-real-time protection against viruses and spyware

http://www.microsoft.com/security_essentials/

Microsoft Security Essentials provides real-time protection for your home PC that guards against viruses, spyware, and other malicious software. icrosoft Security Essentials is a free* download from Microsoft that is simple to install, easy to use, and always kept up to date so you can be assured your PC is protected by the latest technology. It’s easy to tell if your PC is secure — when you’re green, you’re good. It’s that simple. icrosoft Security Essentials runs quietly and efficiently in the background so that you are free to use your Windows-based PC the way you want—without interruptions or long computer wait times.

Privatefirewall-free firewall

http://www.privacyware.com/personal_firewall.html

Privatefirewall detects, blocks and quarantines activity characteristic of known malware, hacking, phishing and other threat types so that personal computer users and IT managers within small, medium or large organizations can more effectively and proactively protect the environments and private data for which they are responsible. An exceptionally simple user interface makes Privatefirewall a breeze to manage. You'll realize expanded protection and become educated about the nature of activity – trusted and un-trusted – that occurs on your system

Network monitoring made easy with Connection Monitoring

http://www.globale-werbewelt.de/downloads/download-english/

As I haven’t been able to find a suitable program for monitoring my small home network without spending hundreds of Euros, I decided to develop my own – the Connection Monitor. This tool supports me in monitoring and securing my network. To enable you to do the same, I have made the Connection Monitor available as a free download.The Connection Monitor is a tool that allows the user to observe incoming and outgoing network connections. This is ideal for those whose computer is part of a local network or is accessible over an internet connection, as you can keep track of all wanted and unwanted outbound and inbound Socket-Connections on your computer monitor.

AnVir Task Manager Free

http://www.anvir.com/task-manager-windows-startup.htm

Freeware version of AnVir Task Manager with limited list of features.

• Security analysis of processes, startup programs and Windows services              
• Startup monitor: alerts on new startups, block undesired startup programs                
• Check files on VirusTotal.com with 30+ antivirus engines                
• Startup manager: manage all programs running on startup including services and Internet Explorer toolbars                
• Save HijackThis log with additional info 

SilverSHielD SSH/SFTP Server for Windows

http://www.k2sxs.com/silvershield.aspx

SilverSHielD is a SSH (SSH2) and SFTP server for Windows. Below you can read some of its features:

Authentication

    * Keyboard-interactive
    * Password-based
    * Public-Key

Additional security settings

    * Ability to set the maximum number of concurrent connections (Pro edition only)
    * Ability to force a delay upon new connection, for anti-hammering
    * Put the client IP in tarpit after a definable number of failed authentication attempts

Functions and subsystems

    * Secure Shell/Command (SSH2)
    * SFTP (Secure File Transfer)
    * Forwarding

Administration

    * Administration is performed though a modern Management Console, included in the download package, which establishes a secure channel with the SilverSHielD server and allows remote configuration of one or many servers

ProcHeapViewer-enumerate process heaps on windows

http://securityxploded.com/ProcHeapViewer.php

This is the tool to enumerate process heaps on windows. It uses much better technique than slower Windows heap API functions which makes it faster and efficient. You can enumerate the heaps from normal Windows processes as well as system services. Its very useful tool for anyone involved in analyzing process heaps. Vulnerability researchers can use it as a side tool for discovering heap related vulnerabilities.

Simple Port Tester

http://www.pcwintech.com/simple-port-tester

Simple Port Tester is a free program by PcWinTech.com to help users test if their ports are open with just a few clicks.
As of version 2.0.0 the program now tests both TCP & UDP ports.

 Screen shot

The trick with testing if your port forwarding is working is to have something on your computer actually listening on the port. If nothing is listening on the port the test will fail no matter what. This program will open the port, listen for the connection and help ensure a proper and reliable test as to whether or not your port forwarding is working.

Download, install and run it. Put in the port you wish to test and hit begin, that's it!

RootRepeal-rootkit detector

http://rootrepeal.googlepages.com/

RootRepeal is a new rootkit detector currently in public beta.  It is designed with the following goals in mind:

   1. Easy to use – a user with little to no computer experience should be able to use it.
   2. Powerful – it should be able to detect all publicly available rootkits.
   3. Stable – it should work on as many different system configurations as possible, and, in the event of an incompatibility, not crash the host computer.
   4. Safe – it will not use any rootkit-like techniques (hooking, etc.) to protect itself.

Currently, RootRepeal includes the following features:

   1. Driver Scan – scans the system for kernel-mode drivers.  Displays all drivers currently loaded, and shows if a driver has been hidden, and whether the driver's file is visible on-disk.
   2. Files Scan – scans any fixed drive on the system for hidden, locked or falsified* files.
   3. Processes Scan – scans the system for processes.  Displays all processes currently running, and shows if a processes is hidden or locked.
   4. SSDT Scan – shows whether any of the functions in the System Service Descriptor Table (SSDT) are hooked.
   5. Stealth Objects Scan – attempts to determine if any rootkits are active by looking for typical symptoms.
   6. Hidden Services Scan – scans for hidden system services.
   7. Shadow SSDT Scan – counterpart to the SSDT Scan, but deals mostly with graphics and window-related functions.

* – falsified files are files which have their size mis-reported to the Windows API.  Some rootkits use this to hide data.

Comodo Firewall and AntiVirus – free

http://personalfirewall.comodo.com/download_firewall.html

Comodo Internet Security 3.9 includes many new features, including multilingual support, integrated BOClean anti-malware protection, and a free 30 day trial of LivePCSupport.   

* Install the AntiVirus as a standalone

* Install the Firewall as a standalone

* Install both Firewall and AntiVirus

Smoothwall – Network Firewall

http://www.smoothwall.org/get/index.php

The SmoothWall Open Source Project was set up to develop and maintain SmoothWall Express – a free firewall that includes its own security-hardened GNU/Linux operating system and an easy-to-use web interface. The project is entirely funded by the company's commercial arm; SmoothWall Limited, which also employs many of the key project team members. There are also a number of individuals with no association to SmoothWall Limited who are voluntary project team members.

Untangle-Open Source Network Gateway

http://www.untangle.com/Open-Source-Package

Untangle apps can be download individually to tailor your Untangle Server to the specific needs of your network.& nbsp; However, many organizations choose to run all of Untangle's open source apps and the Open Source Package bundles them together in one convenient download.  All Untangle apps are:   

• Pre-configured to work right away
• Designed to run together seamlessly
• Integrated with a common GUI, logging & reporting

12 Open Source & Free Apps

• Web Filter
• Virus Blocker
• Spam Blocker
• Attack Blocker
• Phish Blocker
• Spyware Blocker
• Protocol Control
• Routing & QoS
• Firewall
• Intrusion Prevention
• OpenVPN
• Reports

Alternate Data Streams Scan Engine

http://www.delphifreeware.com/ads/

When dealing with network security, administrators often times don’t truly appreciate the lengths that a sophisticated hacker would go through to hide his tracks. Simple defacements and script kiddies aside, a sophisticated hacker with more focused goals looks to a perimeter system breach as an opportunity to progress further inside a network or to establish a new anonymous base from which other targets can be attacked.

In order to achieve this task, a sophisticated hacker would need time and resources to install what is known as a root kit or hacker tools with which he can execute further attacks. With this, comes the need to hide the tools of his trade, and prevent detection by the systems administrator of the various hacking applications that he might be executing on the breached system.

One popular method used in Windows Systems is the use of Alternate Data Streams (ADS). A relatively unknown compatibility feature of NTFS, ADS is the ability to fork file data into existing files without affecting their functionality, size, or display to traditional file browsing utilities like dir or Windows Explorer. Found in all version of NTFS, ADS capabilities where originally conceived to allow for compatibility with the Macintosh Hierarchical File System, HFS; where file information is sometimes forked into separate resources. Alternate Data Streams have come to be used legitimately by a variety of programs, including native Windows operating system to store file information such as attributes and temporary storage.

FreeFixer-malware removal tools

http://www.freefixer.com/

FreeFixer is a general purpose removal tool which will help you to delete potentially unwanted software, such as adware, spyware, trojans, viruses and worms. FreeFixer works by scanning a large number of locations where unwanted software has a known record of appearing or leaving traces. The scan locations include the programs that run on your computer, the programs that starts when you reboot your computer, your browser's plug-ins, your home page setting, etc.

FreeFixer does not know what is unwanted, so it presents the scan result and it's up to you decide if some file should be removed and if some settings should restored to their default value. Please be careful! If you delete a legitimate file you may damage your computer. To assist you when determining if anything should be removed you can find more information at FreeFixer's web site for each item in the scan result. You can for example see what other users chose to do in the same situation. You can also save log file of your scan result and consult the volunteers in one of the

Alonweb-free vpn Service

http://alonweb.com/

Ever faced the problem of blocking of your favourite websites at your corporate firewall? Don't want your boss, admin or local Big Brother to see what sites you visit, what you speak about on your favourite IM or what e-mails you send? There's only one solution for these problems: using crypted VPN tunnel to bypass your internet access resticitions and to secure sensitive information you transfer on the Net. Alonweb provides the Internet community with stable and reliable OpenVPN service free of charge.

Norman Malware Cleaner

http://www.norman.com/support/support_tools/58732/en

Norman Malware Cleaner is a Norman program utility that may be used to detect and remove specific malicious software (malware).
Note that it should not be used as a substitute for running normal proactive antivirus protection, but rather as a reactive tool to handle systems that are already infected.

By downloading and running the program below it will clean an infected system completely:

    * kill running processes that are infected
    * remove infections from disk (including ActiveX components and browser helper objects)
    * reveal and remove rootkits
    * restore correct registry values
    * remove references created by malware in hosts file
    * remove windows firewall rules for malicious programs

System requirements

    * Supported operating systems: Windows 98, Me, NT, 2000, XP, 2003 and Vista
    * Operating systems not supported: Windows 95

Svchost Process Analyzer- check svchost

http://www.neuber.com/free/svchost-analyzer/index.html

Svchost.exe is the most mysterious process in Windows XP/Vista. Svchost.exe is a generic host process name for services that run from dynamic-link libraries (DLLs). The authentic svchost.exe file is located in C:\Windows\System32, but numerous viruses and trojans use the same file and process name to hide their activities.The free Svchost Process Analyzer lists all svchost instances and checks the services they contain. This makes it easy to uncover Svchost worms like the infamous Conficker worm.Svchost Process Analyzer is a 100% freeware program from www.neuber.com. There is absolutely no installation required. Simply download and run the software.

logview4net-file udp eventlog mssql rss log monitor log viewer

http://jsisoft.com/logview4net

A free (open source) log monitor / log viewer for:

    * Files and folders
    * Incomming UDP traffic
    * EventLogs
    * SQL- Server tables
    * Atom and RSS feeds
    * StdOut and StdErr

Features:

    * Multiple actions, such as highlight, ignore and sound, based on event content.
    * Supports multiple simultaneous listeners in each session.
    * Supports several simultaneous sessions (MDI).