Android ICS 4.0.3 RC1 by Onecosmic Installation Tutorial for SGS GT I9000 (100th Post!!!)

Onecosmic recently released the latest port for Samsung Galaxy S GT I9000, I9000b, Captivate & Vibrant from its previous Beta2 build. The following tutorial will guide you step by step to install the latest Android ROM Ice Cream Sandwich 4.0.1 Release Candidate 1.

For the installation, you first need to download a few zip files as follows:

• For GT I9000 (International Version):
1. ROM: ICS_4.0.3_r1-RC1-i9000-reupload.zip OR ICS_4.0.3_r1-RC1-i9000-reupload.zip
2. Kernel: FuguModICS_GT-I9000_update.zip
3. Kernel + Voodoo Color: FuguModICSRC1_GT-I9000_voodoo-color.zip
4. Kernel + Voodoo Color + Sound: FuguModICSRC1_GT-I9000_voodoo.zip
5. SuperUser for ICS: Superuser-3.0.7-efghi-signed.zip
• For I9000b:
1. Rom: ICS_4.0.3_r1-RC1-i9000b.zip
2. Kernel: FuguModICS_GT-I9000_update.zip
3. Kernel + Voodoo Color: FuguModICSRC1_GT-I9000_voodoo-color.zip
4. Kernel + Voodoo Color + Sound: FuguModICSRC1_GT-I9000_voodoo.zip
5. SuperUser for ICS: Superuser-3.0.7-efghi-signed.zip

Instruction

--- Make sure the the device has 100% battery so that, there aren't any problems during the flashing.---s:

IF YOU ARE FLASHING FOR THE FIRST TIME: (You should be able to flash this on top any ROM, but some people report flashing over CM7 works better)

1. Install Kernel

2. Go to Recovery (Three button combination Vol Up + Home Key + Power Off)

3. Clean Cache and Dalvik Cache and do Factory reset

4. Install ROM from sdcard using "Install zip from sdcard" option in recovery.

5. Install 'SuperUser'

6. Install 'Kernel' again :)

7. Reboot

· If you get into a bootloop after these steps, redo the above steps. Note that first run may take a couple of minutes!

· If you are stuck in ICS logo animation go to recovery, wipe dalvik / wipe cache / do a factory reset / install superuser / install kernel

IF YOU ARE UPGRADING FROM AN EARLIER BUILD:

1. Flash the newest build in CWM. If you have rebooted and your phone will not go past the kernel screen

2. Boot into CWM and wipe data/factory reset and wipe cache partition.

3. Reflash the appropriate kernel.

4. Reboot.

· If you have actually read and tried all these instructions and are still stuck PLEASE POST YOUR PROBLEMS IN IN THE COMMENTS SECTION AND THEY WILL GET ADDRESSED ASAP.

· If you boot up and you can't get 3G, you did something wrong. Try flashing the JVT modem.

Source: http://phanse.wordpress.com/2011/12/23/android-ics-4-0-3-rc1-by-onecosmic-installation-tutorial-for-sgs-gt-i9000/

Recover Your Lost IM Passwords

I am writing this post for those people who have lost their passwords and want to recover them. You can recover your password with a nifty tool MessenPass It is a password recovery tool that reveals the passwords of the following instant messenger applications:

• MSN Messenger
• Windows Messenger (In Windows XP)
• Windows Live Messenger (In Windows XP And Vista)
• Yahoo Messenger (Versions 5.x and 6.x)
• Google Talk
• ICQ Lite 4.x/5.x/2003
• AOL Instant Messenger v4.6 or below, AIM 6.x, and AIM Pro.
• Trillian
• Trillian Astra
• Miranda
• GAIM/Pidgin
• MySpace IM
• PaltalkScene
• Digsby

MessenPass can only be used to recover the passwords for the current logged-on user on your local computer, and it only works if you chose the remember your password in one of the above programs. You cannot use this utility for grabbing the passwords of other users. So all those GEEKS who were thinking that it is a Cracking tool I am sorry for broking your heart, but Hey! you can use it as don't you?

You can also use MessenPass
in Command Line mode without displaying any user interface.

Hope it would help you out, if you have any problem leave a comment.

Disclaimer: This information is provided by the author as it is from the application source. The author will not be liable for any special, incidental, consequential or indirect damages due to loss of data or any other reason.

All About SAM Files

What is SAM?

SAM is short for Security Accounts Manager, which is located on the PDC and has information on all user accounts and passwords. Most of the time while the PDC is running, it is being accessed or used.

What do I do with a copy of SAM?

You get passwords. First use a copy of SAMDUMP.EXE to extract the user info out of it. You do not need to import this data into the Registry of your home machine to play with it. You can simply load it up into one of the many applications for cracking passwords, such as L0phtCrack, which is available from: http://www.L0phtCrack.com

Of interest to hackers is the fact that all access control and assorted parameters are located in the Registry. The Registry contains thousands of individual items of data, and is grouped together into "keys" or some type of optional value. These keys are grouped together into subtrees -- placing like keys together and making copies of others into separate trees for more convenient system access.

The Registry is divided into four separate subtrees. These subtrees are called

• HKEY_CLASSES_ROOT
• HKEY_CURRENT_USER
• HKEY_LOCAL_MACHINE
• HKEY_USERS

We'll go through them from most important to the hacker to least important to the hacker.

First and foremost is the HKEY_LOCAL_MACHINE subtree. It contains five different keys. These keys are as follows:

• SAM and SECURITY - These keys contain the info such as user rights, user and group info for the domain (or workgroup if there is no domain), and passwords. In the NT hacker game of capture the flag, this is the flag. Bag this and all bets are off.

The keys are binary data only (for security reasons) and are typically not accessible unless you are an Administrator or in the Administrators group. It is easier to copy the data and play with it offline than to work on directly.

• HARDWARE - this is a storage database of throw-away data that describes the hardware components of the computer. Device drivers and applications build this database during boot and update it during runtime (although most of the database is updated during the boot process). When the computer is rebooted, the data is built again from scratch. It is not recommended to directly edit this particular database unless you can read hex easily.

There are three subkeys under HARDWARE, these are the Description key, the DeviceMap key, and the ResourceMap key. The Description key has describes each hardware resource, the DeviceMap key has data in it specific to individual groups of drivers, and the ResourceMap key tells which driver goes with which resource.

• SYSTEM - This key contains basic operating stuff like what happens at startup, what device drivers are loaded, what services are in use, etc. These are split into ControlSets which have unique system configurations (some bootable, some not), with each ControlSet containing service data and OS components for that ControlSet. Ever had to boot from the "Last Known Good" configuration because something got hosed? That is a ControlSet stored here.
• SOFTWARE - This key has info on software loaded locally. File associations, OLE info, and some miscellaneous configuration data is located here.

The second most important main key is HKEY_USERS. It contains a subkey for each local user who accesses the system, either locally or remotely. If the server is a part of a domain and logs in across the network, their subkey is not stored here, but on a Domain Controller. Things such as Desktop settings and user profiles are stored here.

The third and fourth main keys, HKEY_CURRENT_USER and HKEY_CLASSES_ROOT, contain copies of portions of HKEY_USERS and HKEY_LOCAL_MACHINE respectively. HKEY_CURRENT_USER contains exactly would you would expect a copy of the subkey from HKEY_USERS of the currently logged in user. HKEY_CLASSES_ROOT contains a part of HKEY_LOCAL_MACHINE, specifically from the SOFTWARE subkey. File associations, OLE configuration and dependency information.

What are hives?

Hives are the major subdivisions of all of these subtrees, keys, subkeys, and values that make up the Registry. They contain "related" data.

All hives are stored in %systemroot%\SYSTEM32\CONFIG. The major hives and their files are as follows:

Hive	File	Backup File
HKEY_LOCAL_MACHINE\SOFTWARE	SOFTWARE	SOFTWARE.LOG
HKEY_LOCAL_MACHINE\SECURITY	SECURITY	SECURITY.LOG
HKEY_LOCAL_MACHINE\SYSTEM	SYSTEM	SYSTEM.LOG
HKEY_LOCAL_MACHINE\SAM	SAM	SAM.LOG
HKEY_CURRENT_USER	USERxxx ADMINxxx	USERxxx.LOG ADMINxxx.LOG
HKEY_USERS\.DEFAULT	DEFAULT	DEFAULT.LOG

Hackers should look for the SAM file, with the SAM.LOG file as a secondary target. This contains the password info.

Hive	File	Backup File
HKEY_LOCAL_MACHINE\SOFTWARE	SOFTWARE	SOFTWARE.LOG
HKEY_LOCAL_MACHINE\SECURITY	SECURITY	SECURITY.LOG
HKEY_LOCAL_MACHINE\SYSTEM	SYSTEM	SYSTEM.LOG
HKEY_LOCAL_MACHINE\SAM	SAM	SAM.LOG
HKEY_CURRENT_USER	USERxxx ADMINxxx	USERxxx.LOG ADMINxxx.LOG
HKEY_USERS\.DEFAULT	DEFAULT	DEFAULT.LOG

Hackers should look for the SAM file, with the SAM.LOG file as a secondary target. This contains the password info.

For ease of use, the Registry is divided into five separate structures that represent the Registry database in its entirety. These five groups are known as Keys, and are discussed below:

HKEY_CURRENT_USER

This registry key contains the configuration information for the user that is currently logged in. The users folders, screen colors, and control panel settings are stored here. This information is known as a User Profile.

HKEY_USERS

In windowsNT 3.5x, user profiles were stored locally (by default) in the systemroot\system32\config directory. In NT4.0, they are stored in the systemroot\profiles directory. User-Specific information is kept there, as well as common, system wide user information.

This change in storage location has been brought about to parallel the way in which Windows95 handles its user profiles. In earlier releases of NT, the user profile was stored as a single file - either locally in the \config directory or centrally on a server. In windowsNT 4, the single user profile has been broken up into a number of subdirectories located below the \profiles directory. The reason for this is mainly due to the way in which the Win95 and WinNT4 operating systems use the underlying directory structure to form part of their new user interface.

HKEY_LOCAL_MACHINE

This key contains configuration information particular to the computer. This information is stored in the systemroot\system32\config directory as persistent operating system files, with the exception of the volatile hardware key.

The information gleaned from this configuration data is used by applications, device drivers, and the WindowsNT 4 operating system. The latter usage determines what system configuration data to use, without respect to the user currently logged on. For this reason the HKEY_LOCAL_MACHINE regsitry key is of specific importance to administrators who want to support and troubleshoot NT 4.

HKEY_LOCAL_MACHINE is probably the most important key in the registry and it contains five subkeys:

• Hardware: Database that describes the physical hardware in the computer, the way device drivers use that hardware, and mappings and related data that link kernel-mode drivers with various user-mode code. All data in this sub-tree is re-created everytime the system is started.
• SAM: The security accounts manager. Security information for user and group accounts and for the domains in NT 4 server.
• Security: Database that contains the local security policy, such as specific user rights. This key is used only by the NT 4 security subsystem.
• Software: Pre-computer software database. This key contains data about software installed on the local computer, as well as configuration information.
• System: Database that controls system start-up, device driver loading, NT 4 services and OS behavior.

Information about the HKEY_LOCAL_MACHINE\SAM Key

This subtree contains the user and group accounts in the SAM database for the local computer. For a computer that is running NT 4, this subtree also contains security information for the domain. The information contained within the SAM registry key is what appears in the user interface of the User Manager utility, as well as in the lists of users and groups that appear when you make use of the Security menu commands in NT4 explorer.

Information about the HKEY_LOCAL_MACHINE\Security key

This subtree contains security information for the local computer. This includes aspects such as assigning user rights, establishing password policies, and the membership of local groups, which are configurable in User Manager.

HKEY_CLASSES_ROOT

The information stored here is used to open the correct application when a file is opened by using Explorer and for Object Linking and Embedding. It is actually a window that reflects information from the HKEY_LOCAL_MACHINE\Software subkey.

HKEY_CURRENT_CONFIG

The information contained in this key is to configure settings such as the software and device drivers to load or the display resolution to use. This key has a software and system subkeys, which keep track of configuration information.

Understanding Hives

The registry is divided into parts called hives. These hives are mapped to a single file and a .LOG file. These files are in the systemroot\system32\config directory.

Registry Hive	File Name
HKEY_LOCAL_MACHINE\SAM	SAM and SAM.LOG
HKEY_LOCAL_MACHINE\SECURITY	Security and Security.LOG
HKEY_LOCAL_MACHINE\SOFTWARE	Software and Software.LOG
HKEY_LOCAL_MACHINE\SYSTEM	System and System.ALT

Command Prompt Codes

Some BASIC Commands:

1. Accessibility Controls - access.cpl
2. Accessibility Wizard - accwiz
3. Add Hardware Wizard - hdwwiz.cpl
4. Add/Remove Programs - appwiz.cpl
5. Administrative Tools - control admintools
6. Automatic Updates - wuaucpl.cpl
7. Bluetooth Transfer Wizard - fsquirt
8. Calculator - calc
9. Certificate Manager - certmgr.msc
10. Character Map - charmap
11. Check Disk Utility - chkdsk
12. Clipboard Viewer - clipbrd
13. Command Prompt - cmd
14. Component Services - dcomcnfg
15. Computer Management - compmgmt.msc
16. Control Panel - control
17. Date and Time Properties - timedate.cpl
18. DDE Shares - ddeshare
19. Device Manager - devmgmt.msc
20. Direct X Troubleshooter - dxdiag
21. Disk Cleanup Utility - cleanmgr
22. Disk Defragment - dfrg.msc
23. Disk Management - diskmgmt.msc
24. Disk Partition Manager - diskpart
25. Display Properties - control desktop
26. Display Properties - desk.cpl
27. Dr. Watson System Troubleshooting Utility - drwtsn32
28. Driver Verifier Utility - verifier
29. Event Viewer - eventvwr.msc
30. Files and Settings Transfer Tool - migwiz
31. File Signature Verification Tool - sigverif
32. Findfast - findfast.cpl
33. Firefox - firefox
34. Folders Properties - control folders
35. Fonts - control fonts
36. Fonts Folder - fonts
37. Free Cell Card Game - freecell
38. Game Controllers - joy.cpl
39. Group Policy Editor (for xp professional) - gpedit.msc
40. Hearts Card Game - mshearts
41. Help and Support - helpctr
42. HyperTerminal - hypertrm
43. Iexpress Wizard - iexpress
44. Indexing Service - ciadv.msc
45. Internet Connection Wizard - icwconn1
46. Internet Explorer - iexplore
47. Internet Properties - inetcpl.cpl
48. Keyboard Properties - control keyboard
49. Local Security Settings - secpol.msc
50. Local Users and Groups - lusrmgr.msc
51. Logs You Out Of Windows - logoff
52. Malicious Software Removal Tool - mrt
53. Microsoft Chat - winchat
54. Microsoft Movie Maker - moviemk
55. Microsoft Paint - mspaint
56. Microsoft Syncronization Tool - mobsync
57. Minesweeper Game - winmine
58. Mouse Properties - control mouse
59. Mouse Properties - main.cpl
60. Netmeeting - conf
61. Network Connections - control netconnections
62. Network Connections - ncpa.cpl
63. Network Setup Wizard - netsetup.cpl
64. Notepad - notepad
65. Object Packager - packager
66. ODBC Data Source Administrator - odbccp32.cpl
67. On Screen Keyboard - osk
68. Outlook Express - msimn
69. Paint - pbrush
70. Password Properties - password.cpl
71. Performance Monitor - perfmon.msc
72. Performance Monitor - perfmon
73. Phone and Modem Options - telephon.cpl
74. Phone Dialer - dialer
75. Pinball Game - pinball
76. Power Configuration - powercfg.cpl
77. Printers and Faxes - control printers
78. Printers Folder - printers
79. Regional Settings - intl.cpl
80. Registry Editor - regedit
81. Registry Editor - regedit32
82. Remote Access Phonebook - rasphone
83. Remote Desktop - mstsc
84. Removable Storage - ntmsmgr.msc
85. Removable Storage Operator Requests - ntmsoprq.msc
86. Resultant Set of Policy (for xp professional) - rsop.msc
87. Scanners and Cameras - sticpl.cpl
88. Scheduled Tasks - control schedtasks
89. Security Center - wscui.cpl
90. Services - services.msc
91. Shared Folders - fsmgmt.msc
92. Shuts Down Windows - shutdown
93. Sounds and Audio - mmsys.cpl
94. Spider Solitare Card Game - spider
95. SQL Client Configuration - cliconfg
96. System Configuration Editor - sysedit
97. System Configuration Utility - msconfig
98. System Information - msinfo32
99. System Properties - sysdm.cpl
100. Task Manager - taskmgr
101. TCP Tester - tcptest
102. Telnet Client - telnet
103. User Account Management - nusrmgr.cpl
104. Utility Manager - utilman
105. Windows Address Book - wab
106. Windows Address Book Import Utility - wabmig
107. Windows Explorer - explorer

Command Prompt Basics

For use in command prompt on you own computer or network:


CMD or command.com = use whichever works best or whichever one is available ( to open command prompt in the run command.
EXIT = exit the command prompt
PATH = displays the places that if will look for if not in the name first
CLS = clears up everything on command prompt page
TIME = displays time and you can change it if you want
HELP = displays help, more commands
DIR OR DIR /? = Shows a lot of information
CD\PROGRA~1 ENTER THEN DIR = Programs installed (1)
CD\ ENTER THEN DIR = shows installations of programs
(DEL OR COPY OR DIR) *.* C:\TARGET = you can either delete, copy or dir a program
NET = you get options to use it
SHUTDOWN –LETTER OR SHUTDOWN/? = you can shutdown

Your computer or another computer

NETSTAT = view the stats of the computers one feature is
to get people’s I.P. for more type netstat/?

FSUTIL AND FSUTIL FSINFO = shows you things like list of
all drives
BASIC OF CMD PART 2
ERASE C:\PROGRAM FILES = erases all program files or leave
just the c delete everything

NBTSTAT = GETTING INFORMATION ON YOUR COMPUTER
AND OTHERS

TREE = displays all files on program files and desktop good
for seeing if you have any keyloggers

TRACERT (IP) = to see if the I.P. exist
NET USE C: \\PCNAME\C$ /USER: PCNAME\ADMINISTRATOR
= to sign in as an administrator that’s not signed in

NSLOOKUP SET TYPE=MX EXP:HOTMAIL.COM = getting ips
from web sites

/WHOIS (SCREENAME) = only on a chat room, to find
information a that person which owns the screename an I.P.

For use in command prompt for path chanching

DISKPART = shows you stuff like the computer name and
takes you to disk part option

CD\PROGRA~1 ENTER THEN DIR = Programs installed (2)
CD \WINDOWS \SYSTEM = to look for stuff in this folders

BASIC OF CMD PART3
TELNET : remote controlling
NET START MESSENGER = start net send when it is disable
For use in command prompt only on a network or hacking

BOOTCFG = you can make changes to boot the computer ,
boot it mess it up

GPRESULT = shows all the information of a computer
DRIVERQUERY = list of drives and their properties
GETMAC = this gets the Mac (media access control) address
NETSH = good for hacking a network configuration tool
type netsh /? For more

OPENFILES = only for windows professional allows an
administrator to display or disconnect open files

REG = THE CONSOLE REGISTRY TOOL
SYSTEMINFO = info
TASKLIST AND TASKKILL = LIKE PRESING CTRL+ALT+DELETE

NTFS vs FAT

To NTFS or not to NTFS—that is the question. But unlike the deeper questions of life, this one isn't really all that hard to answer. For most users running Windows XP, NTFS is the obvious choice. It's more powerful and offers security advantages not found in the other file systems. But let's go over the differences among the files systems so we're all clear about the choice. There are essentially three different file systems available in Windows XP: FAT16, short for File Allocation Table, FAT32, and NTFS, short for NT File System.

FAT16
The FAT16 file system was introduced way back with MS–DOS in 1981, and it's showing its age. It was designed originally to handle files on a floppy drive, and has had minor modifications over the years so it can handle hard disks, and even file names longer than the original limitation of 8.3 characters, but it's still the lowest common denominator. The biggest advantage of FAT16 is that it is compatible across a wide variety of operating systems, including Windows 95/98/Me, OS/2, Linux, and some versions of UNIX. The biggest problem of FAT16 is that it has a fixed maximum number of clusters per partition, so as hard disks get bigger and bigger, the size of each cluster has to get larger. In a 2–GB partition, each cluster is 32 kilobytes, meaning that even the smallest file on the partition will take up 32 KB of space. FAT16 also doesn't support compression, encryption, or advanced security using access control lists.

FAT32
The FAT32 file system, originally introduced in Windows 95 Service Pack 2, is really just an extension of the original FAT16 file system that provides for a much larger number of clusters per partition. As such, it greatly improves the overall disk utilization when compared to a FAT16 file system. However, FAT32 shares all of the other limitations of FAT16, and adds an important additional limitation—many operating systems that can recognize FAT16 will not work with FAT32—most notably Windows NT, but also Linux and UNIX as well. Now this isn't a problem if you're running FAT32 on a Windows XP computer and sharing your drive out to other computers on your network—they don't need to know (and generally don't really care) what your underlying file system is.

The Advantages of NTFS
The NTFS file system, introduced with first version of Windows NT, is a completely different file system from FAT. It provides for greatly increased security, file–by–file compression, quotas, and even encryption. It is the default file system for new installations of Windows XP, and if you're doing an upgrade from a previous version of Windows, you'll be asked if you want to convert your existing file systems to NTFS. Don't worry. If you've already upgraded to Windows XP and didn't do the conversion then, it's not a problem. You can convert FAT16 or FAT32 volumes to NTFS at any point. Just remember that you can't easily go back to FAT or FAT32 (without reformatting the drive or partition), not that I think you'll want to.

The NTFS file system is generally not compatible with other operating systems installed on the same computer, nor is it available when you've booted a computer from a floppy disk. For this reason, many system administrators, myself included, used to recommend that users format at least a small partition at the beginning of their main hard disk as FAT. This partition provided a place to store emergency recovery tools or special drivers needed for reinstallation, and was a mechanism for digging yourself out of the hole you'd just dug into. But with the enhanced recovery abilities built into Windows XP (more on that in a future column), I don't think it's necessary or desirable to create that initial FAT partition.