Tutorial On How To Prevent Password Stealers

[jamesrocky]

Tutorial On How To Prevent Password Stealers.

Note: I am not the original author.Just thought of sharing it here The original author is w4r3zh4ck @ wbb and all credit goes to him


Today the most common thing for a hacker is to steal your passwords on various applications such as FireFox, MSN, XFire etc. Antiviruses doesn't work always, as hackers crypt their stealers with undetectable crypters and antiviruses don't detect them. So instead antivirus we are going to use firewall!

How password stealers work ?

They bind stealers into keygens or applications and once the application is executed, the stealer is also executed in hidden mode. Then the stealer finds it's target like the folder where all firefox passwords are stored, then decrypts the passwords and sends them to the attacker's FTP.

Example of a log by password stealer.



What we need

As i said above we need a good firewall. One of the best firewall is Comodo. By the way you can use Windows Firewall with Advanced Security by Microsoft, but this only works in Windows Vista or Windows 7.

Configuration

1. Comodo Internet Security
Download the latest Comodo from the above link and install it. Don't uncheck the firewall option !!

http://www.filehippo.com/download_comodo/

After you install it, reboot your PC. Now set the Firewall Security Level to Custom Policy Mode (as shown in the image).



After you've done that, you must create application rules in order to access the internet. To do that, open up Comodo and go to: Firewall -> Define a New Trusted Application. Now make rules for your applications that need internet access.



2. Windows Firewall with Advanced Security
This only works in Windows Vista and Windows 7 !!!
Now go to start and type: wf.msc
After opening it, you must block all outbound connection. To do that open up Windows Firewall with Advanced Security and click properties.



Now make sure that the 3 sections outbound connection is set to Blocked.



After that you need to create application rules in order to access internet. To do that, go to Outbound Rules and make new rule as shown on the image.

jamesrocky Reviewed by jamesrocky on 26th Jan 2010. Tutorial On How To Prevent Password Stealers Tutorial On How To Prevent Password Stealers. Note: I am not the original author.Just thought of sharing it here:D The original author is w4r3zh4ck @ wbb and all credit goes to him Today the most common thing for a hacker is to steal your passwords on various applications such as FireFox, MSN, XFire etc. Antiviruses doesn't work always, as hackers crypt their stealers with undetectable crypters and antiviruses don't detect them. So instead antivirus we are going to use firewall! How Rating: 5

[Royal King]

Nice, thanks. good tutorial

[Chri5]

does this actually 100% work?

[c0rrupt]

If you are using Firefox do the following:

Tools
Options
Security
Use a master password


Just by doing this i have ran a password stealer on my pc and it was not able to find any of my passwords.

[SJshah]

@c0rrupt, most newer stealers would be able to bypass a 'master password' very easily.

I never store my passwords in any browsers, ever. its not safe at all.

just have a look:
C:\Users\[USER]\AppData\Roaming\Mozilla\Firefox\Profiles\[PROFILE]\

[litewarez]

Great tutorial and i advice all members to do this or atleast another firefall because this type of password capturing is increasing dramatically!

time to nip it in the butt lol

[Profit]

If you are using Firefox do the following:

Tools
Options
Security
Use a master password


Just by doing this i have ran a password stealer on my pc and it was not able to find any of my passwords.

Correct.

[The Dude]

I use Keyscrambler appz to prevent pass stealers.

[Ivan]

does this actually 100% work?

Not realy... most advanced password stealers inject themselves into default browser or MSN process.

I use Keyscrambler appz to prevent pass stealers.

Keysclambers protects you from keyloggers, but not password stealers - they read passwords from memory/program files so they doesn't care if you patch kernel to obfuscate keys you press - application gets unobfuscated data anyway

[Profit]

Yeah Keyscrambler isn't stopping anything, try it on yourself - I have before.