Wednesday, October 1, 2008

Enable the tools disabled by virus

If you got a virus usually it will disable the following things so that you can't be able to delete the virus.

It will disable Folder Options menu item from View menu, disables the Task Manager, and disables the Registry Editor.

You can enable all these from the Group Policy editor by yourself manually.

  • Go to Windows > Run > gpEdit.msc
  • Folder Options: Go to User Configuration > Administrative Templates > Windows Components > Windows Explorer > Removes the Folder Options menu item from the Tools menu. Disable this option. Now you should be able to see Folder Options in the View menu of your explorer window.
  • Task Manager: Go to User Configuration > Administrative Templates > System > Ctrl+Alt+Del Options > Remove Task Manger. Disable this option.
  • Registry Editor: Go to User Configuration > Administrative Templates > System > Prevent Access to Registry Editing Tools. Disable this option.
But, it is good to have alternatives for these things since viruses usually disables the default tools but not the alternative softwares.

You can use Process Explorer as alternative for Task Manager. Similarly you can use Explorer2 as alternative for default windows explorer. If you don't like Explorer2 many more explorer softwares are available, you can choose from any of those. I don't know alternatives for the Registry Editor. Please feel to share those you know in the comments section below.

Related Posts:
Stop viruses coming from Pen Drives
Remove Amvo.exe virus, Funny UST Scandal, Fun.exe DC.exe SVIQ.exe
Task Manager, Registry Accessing disabled?
Disable Autoplay, Messenger Service
Important steps while cleaning virus
What is this process

Subscribe to my site feed for receiving more tips. You can get more tips in your email for free.

Monday, May 12, 2008

Clean New Folder.exe, RegSvr.exe Virus

Recently I got infected with this virus. This virus just shows a message when windows started, "Rundll.exe is not found.......", and infecting the pen drives for first few days. Not much harm. But after 4 or 5 days it is starting creating copies of virus file in many folders. The copy will be having the same name as the folder name and it also having folder icon, so that we will think it as another folder.

When I have searched Internet, I got the following link useful Am I Works. I have developed a tool for removing this virus.

Download New Folder virus removal tool, unzip it, and double click on RemoveVirus.bat file. Tell me if you get rid of virus in comments section.

Note: If you are not able to open Registry Editor (Win+R, regedit.exe), See Accessing Registry disabled?

Subscribe to my site feed for receiving more tips. You can get more tips in your email for free.

Related:
Stop Viruses coming from Pen drives
Task Manager Disabled?
Important Steps when cleaning viruses

Sunday, May 4, 2008

Stop viruses coming from pen drives

Now a days pen drives ( or USB drives ) are became necessary. But there is a problem with these pen drives. They can be very easily infected by viruses. But, we can not live without using pen drives.

You can be a bit more careful when using pen drives to prevent them infecting your system with different types of viruses.

  • First disable auto play in your system. This prevents viruses in the pen drive from running automatically when pen drives are inserted into the system. (Please note that this will disable auto playing of CDs also).
  • After inserting pen drive into the system open it in explorer mode only, don't open it in My Computer.
    • To open Explorer, press Win+E on your keyboard.
    • Or right click on My Computer, and select explorer.
    • If My Computer is already opened, click on 'Folders' in the tool bar (or View menu> Explorer Bar> Folders).
  • Always open pen drive by clicking on the pen drive name from the left pane only. Don't open from right pane.
  • Don't open the files you don't need. If you find any file suspicious, right click on file name and select properties. It will show complete details about that file. Don't rely on icons. Some viruses use folder icon to make us think that they are folders, and most probably we will double click on that to see what is there in that folder which actually executes the virus.
A little careful handling of pen drives will prevent a lot many viruses.

Related:
Remove Amvo.exe virus, Funny UST Scandal, Fun.exe DC.exe SVIQ.exe
Task Manager, Registry Accessing disabled?
Disable Autoplay, Messenger Service
Important steps while cleaning virus
What is this process

Subscribe to my site feed for receiving more tips. You can get more tips in your email for free.

Sunday, March 23, 2008

Blogger plugins, widgets

Have a look at the following site. It contains lot of tips and plug-ins for the blogger.com.

http://www.bloggerplugins.org


Related:
HTML Parser
Recent Posts widget for new Blogger
Related Posts Plug-in for Wordpress

Subscribe to my site feed to know more cool sites. You can get them in your email for free.

Add recent posts widget in new blogger

If you don't like blog archive or just want to display simply the latest posts you can do that with the following simple (or silly) trick.

  • First get your blog's feed URL. This will be usually
    http://YOURBLOGNAME.blogspot.com/feeds/posts/default
    Ex: http://4paisa.blogspot.com/feeds/posts/default
    In my case I am using Feedburner for my feed, so my default feed URL
    http://feeds.feedburner.com/4paisa
  • Go to Layout tab in your blogger dashboard, click on Add a page element.
  • Select 'Feed' in the list, give your own feed URL here.
  • Thats it. You can place this widget at the location you like.
You can display the latest comments also using the above tip. To do this use your comments URL instead.
It will be like
http://BLOGNAME.blogspot.com/feeds/comments/default?alt=rss

BTW blogger provides separate feed for every label also. It will be like
http://BLOGNAME.blogspot.com/feeds/posts/default/-/LABELNAME

Subscribe to my site feed for receiving more tips. You can get more tips in your email for free.




Parse HTML for new Blogger

http://www.blogcrowds.com/resources/parse_html.php


If you want to modify the new blogger template, you need to know XML. If you don't know XML or you have done changes in the old blogger template in HTML and want to use them, go to the above link. You need to paste your HTML code in the form at the above link and click on parse button. It will generate XML source which can be used to change new blogger template.


Subscribe to my site feed for knowing about more cool sites. You can get to know abour more cool sites in your email for free.

Thursday, March 13, 2008

How to delete Facebook Account?

You can deactivate your account, if you want to delete your account only temporarily. When you deactivate your account, you are like deleted from Facebook - no one can find your profile. Except all your data (friends, networks, etc...) will be saved, so that you can reactivate later.

To deactivate, click on 'account' at the top right corner. There will be 'deactivate' link at the bottom right. It will ask a reason when you clicked on the link. Select an option, and click on Deactivate button. If you want to reactivate, just login as usual. When you do that, Facebook sends a confirmation email to you. You can start using Facebook again by clicking on the confirmation link in the email.

If you want to permanently delete Facebook account, click on the following link and fill the form.
Delete Facebook Account

Links:
http://www.facebook.com/help.php?page=5

Read More:
How to delete Gmail, Yahoo mail accounts
Backup dictionary in MS-Word
Backup Mails in Outlook Express
Open Multiple Firefox profiles at the same time
Firefox: View status bar in full screen

Subscribe to my site feed for receiving more tips. You can get more tips in your email for free.

Sunday, March 9, 2008

Removed Fun.exe, dc.exe, SVIQ.exe virus

I have got a virus, which automatically opening the Yahoo messenger. So, when I have looked the processes in the task manager, I have found the following processes Fun.exe, dc.exe, SVIQ.exe.

I killed those processes, by right clicking the process and select "End Process Tree". After I have killed all those processes, I searched Internet and found the following link W32.Imaut.AS (also called Dung Coi). Then I have deleted all the virus files and cleaned the registry.

I am describing the exact steps below:

  • First go to the task manager (right click on the task bar > task manager) and select the processes tab.
  • Right click on the Fun.exe, dc.exe, SVIQ.exe and select "End Process Tree". This stops the viruses from interrupting in the cleanup process.
  • Go to the MSConfig (Win+R, type MSConfig and press enter). Go to the startup tab. Uncheck the dc.exe, fun.exe, SVIQ.exe, Other.exe, Win.exe. This stop the virus processes from starting with the windows.
  • Next go to the Registry Editor (Win+R, type RegEdit and press enter). Remove the following keys
    • dc, dc2k5, fun under the key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
    • load, run under the key HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows
    • Go to the key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon and Modify Shell's value to "Explorer.exe".
    • Remove HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\dc
    • Remove HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\dc2k5
    • Remove HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Fun
    • Remove HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Load
    • Remove HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Run
  • Delete the following files.
    • %Windir%\Help\Other.exe
    • %Windir%\inf\Other.exe
    • %Windir%\system\Fun.exe
    • %Windir%\System32\config\Win.exe
    • %Windir%\System32\WinSit.exe
    • %Windir%\dc.exe
    • %Windir%\SVIQ.exe
    • %Windir%\System32\NWB.dat
    • c:\PNga.txt
    • %Windir%\wininit.ini
I have created two files to automate the process of deleting the Registry keys, and the virus files. Download Fun Virus Removal, unzip it. Double click on the RemoveVirus.bat file.

Thats it. I got rid from the virus. I read in the net that this virus will create a copy of virus file in directories with the same name and uses a folder icon, so that users will click on it thinking it was a folder. But, I dint get any files like that, if you got any files like that, don't click on them, delete them immediately. If you have any doubt, right click on that and select properties, then you can know whether it is a file or folder.

Read More:
Important steps when cleaning virus
Disabling Auto Play in Windows
Task Manager Disabled?
Registry access disabled?
What is this Process?

Subscribe to my site feed for receiving more tips. You can get more tips in your email for free.

Registry Accessing disabled?

Many viruses disable the access to the registry so that we can't remove the virus entries in the registry. In these cases you can download the following file UnHookExec.inf. After downloaded, right click on the file, and select Install.

You can enable it manually by editing the group policy editor. Go to Windows > Run > gpEdit.msc
Go to User Configuration > Administrative Templates > System > Prevent Access to Registry Editing Tools. Disable it. You should be able to open regedit now.

Source: Tool to reset shell\open\command registry keys

Subscribe to my site feed for receiving more tips. You can get more tips in your email for free.

Saturday, February 23, 2008

Firefox: Open search results in new tab

In Firefox, if you type a query and hit enter in the search box, you will get results in the current tab by replacing the open page. You can open search results page in new tab by hitting alt+enter instead of enter. If you want to open search results page in new tab always, you can do so by changing config entries.

Type about:config, and go to the key browser.search.openintab and change its value to true.

Subscribe to my site feed for receiving more tips. You can get more tips in your email for free.


Latest Posts