There’re two main characters there,one is called Kirenenko.Kirenenko wears a prison uniform with red stripes,whose temper is very bad.When he get angry you’d better stay away from him.Though was sentenced to death,he always hit the guards and never afraid.
    On the other hand,the other character is timid,whose name is Putin.He likes to dance kazachok on his bed，seems enjoy life in prison.His face will turn blue, red, and white when he is nervous depending on situation. Sometimes he would scream if he commit serious situation.

    Season 3 is currently running.

Still, there’re some strange processes get auto started.How to dig out them? ”Autoruns” can help you.

It lists all the auto-run-processes when you open the software as below:

There are many bottons above , they act as filters,sort the processes into many categories.Default sort is “all”,I used to choose the botton next to it,with which can easily find the processes made by some softwares ouside the system.

If you are not sure of the name of the process,check its adress to ensure.When you find the process is not expected, just use Autoruns to close it. Take out the mark in front of it, and it will not appear when you start your os the nexttime.

This software is a convenient shortcut of registry indeed.

Press  the button“open”,you can select  a process whith is running.Here I choose iexplorer.exe.

Then I type a site adress “www.google.cn” in,swith to Winsock Expert,it presents a great many informations:

Here we see ID no.1 provide an adress,IE has send a data pack to “203.208.39.99” through 20480 port.In order to make sure this adress is actually the one I want,I use “cmd” to ping google:

It’s true that google’s adress is “203.208.xx.xx”.

For the other informations,such as the content of the pack,can not be read directly by people.But since we know what it sends,a little change canbe made on the data and achieve our goals.

We can regard Winsock Expert as a advance edition of TCPView

    I would like to introduce three of them to you in three chapters,please enjoy them.

The first one : TCPView

    When you open it, you can see your links to the net immdiately.It shows four important informations:process,protocl,adress,and state.The colors mean it is active.When you open this software for the first time,the font canbe too small,just change it in “options”.

    Here’s a story.A year ago,my netfrends used to download musics and MTV from a network hard disk called “Raysource”.Suddenly I found something interesting about its downloader:it’s auto started when you enter your system, and remain active when I completed my download.

Here’s the snap of its process:

    I didn’t think it’s necssary for a downloader to autoly start,so there must be some reasons.So I used TCPView to check if it had links to somewhere.As I guessed,it did have links.

    So I uploaded a file to Raysource’s server,and asked my friend to download it.Even though I have closed all the windows about Raysource,it was active and had links to my friend.

This is the picture I saved the last year:

Those IP adresses was right my friends’.What does all of these mean?

This net hard disk makes use of the uploader and some downloaders’ hard disk.When someone want to download a file, the parts of file come from not only the server of Raysource,but also the uploader’s hard disk.After he achieves the whole download, Raysource will add his disk to the upload queue,too.

Of course,if these actions are annouced to users,it’s good.We call this sort of share as ”P2P”(Peer to peer).But Raysource tells nothing to it’s users,it just uses personal hard disk to lighten its server burden.

A user in the dark may admire Raysource’s speed of sending data,without noticing those data is actually from someone else’s PC.On the other hand,the uploader doesn’t know his disk is read by a process hided,and his bandwidth is occupied by it.

Thanks to TCPView,It provides evidences that the process is malfeasant.I love this little software because it’s quite light (196KB in total),and can be used directly without installing.

    What is TCG?The full name is “Trusted Computing Group”,it is a not-for-profit organization formed to develop, define and promote open, vendor-neutral, industry standards for trusted computing building blocks and software interfaces across multiple platforms.
    There’re many menbers in this group,such as Extreme Networks、Foundry Networks、Funk Software,and so on.They take up with a standard to prevent the internet from virus or attack like DDos.Here is a snap of it’s members:

    Network access control has evolved from merely protecting the network from an infected endpoint to a more comprehensive solution for network security, and TCG’s Trusted Network Connect (TNC) architecture has evolved with the market’s needs. The open framework, which is supported by many switches, VPNs, applications and other products and supports widely used standards such as 802.1x and others, not only protects the network, but supports remediation and quarantine as well as clientless endpoints.

    Not only network is being paid great attention to,but also our human are concerned with by TCG.On their home page,I saw a page named “Healthcare”.TCG technologies are available to help meet the regulatory requirements that include: Date Protection,Network Access,Audit and Conformance.

Our first character is Wbs43open.

Here we can choose a source file and a carrier,the source will be hided in the carrier,that we can’t notice without tools.

The second software is called TrueCrypt.This one depend on “virtual disk”,I’d like to study more on it later.

Select the kind of HASH here

We can change the size freely

Hashing done~

The last one is openstego

I fell quite intrersted when solved the last puzzle,and I learned how to make a puzzle myself,in order to prevent my secrets.

I ’m interested in basketball and computer entertainment such as anime，games，forum,and so on.Sometimes I suddenly become addicted to something,but easily drop it after a period of time.

For English is not my mother language,I feel a little uneasy when reading paragrah witten in English,even so,there’re more positive emotions than negative ones.When I was a middle school student,I  kept on reading books which was witten for English learners with translations beside each text.To be honest,I can’t understand the ones without translations.However,I have tried a series of book named <HarryPotter>,which was completely written in English.

I have travelled to many places in China before,but there’re more places there waiting for my visit.Since I got near-sighted,I became disliking travel gradually.Maybe I’d picked up this hobby again on the day that my eyes were cured.

A large number of  People care their family most,I’m not exeption.In a few years I may get married,but only god knows what will happen^^

I’m looking forward to a bight future.