24 June 2008

0

Microsoft AntiSpyware/Windows Defender

Spyware is a relatively new kind of threat that common anti-virus applications do not yet fight very well. If you see new toolbars in your Internet Explorer that you didn't intentionally install, if your browser crashes, or if you browser start page has changed without your knowing, you most probably have spyware. But even if you don't see anything, you may be infected, because more and more spyware is emerging that is silently tracking your surfing behavior to create a marketing profile of you that will be sold to advertisement companies.

Windows Defender

Windows Defender is a free program that helps protect your computer against pop-ups, slow performance, and security threats caused by spyware and other unwanted software. It features Real-Time Protection, a monitoring system that recommends actions against spyware when it's detected, and a new streamlined interface that minimizes interruptions and helps you stay productive.



Windows Defender’s installation is quick and easy, but only if you have a genuine copy of Windows, learn how to make windows xp genuine, which doesn't have problems with the validation process and everything always goes smoothly. Otherwise, installing Windows Defender might be difficult and sometimes even impossible.

The program is launched as any other regular program. But usually you don't have to run it manually, as Windows Defender automatically loads on every Windows startup. Integrated real-time protection starts also.

Once the application is running you can start scanning your system. Windows Defender allows choosing between three scan modes: Quick Scan, Full Scan and Custom Scan. The first one enables an intelligent scan for parasites in common locations. Full Scan thoroughly examines the entire file system including not only system and application files, but also archives and suspicious objects not present in spyware definitions database. Custom Scan allows the user to select, which local hard drives to check. Each of three scans needs different time to complete. In our tests Quick Scan did not take more than three minutes, while Full Scan required almost an hour. During each of the scans Windows Defender checks all running processes, analyzes the Windows Registry and examines files and folders. The program scans all essential system components leaving no chances for most spyware parasites to hide.

Apart from common tools - Quarantined items and Allowed items - Windows Defender offers one additional utility - Software Explorer. This integrated tool provides details on startup programs, currently running applications, system networking components and software connected to the Internet.

Windows Defender is a decent anti-spyware program. It is free, powerful enough and yet very easy-to-use. However, it identifies and completely removes only regular spyware and adware parasites as well as some well-known, relatively old malware and viral threats. Unfortunately, Windows Defender does not provide reliable protection against widely spread trojans, worms and other malicious software. In other words, the program cleans most infections, but often cannot eliminate the cause, so the system gets re-infected. But if you have good antivirus program installed, then Windows Defender is just what you need

21 June 2008

0

Make XP genuine - No download necessary

Right click your desktop and select new text document.
* Open that document and paste the following info.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion]
"CurrentBuild"="1.511.1 () (Obsolete data - do not use)"
"ProductId"="55274-640-1011873-23081"
"DigitalProductId"=hex:a4,00,00,00,03,00,00,00,35,35,32,37,34,2d,36,34,30,2d,\
31,30,31,31,38,37,33,2d,32,33,30,38,31,00,2e,00,00,00,41,32,32,2d,30,30,30,\
30,31,00,00,00,00,00,00,00,86,56,4e,4c,21,1b,2b,6a,a3,78,8e,8f,98,5c,00,00,\
00,00,00,00,dd,da,47,41,cc,6b,06,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,38,31,30,32,36,00,00,00,00,00,00,00,b5,16,\
00,00,83,83,1f,38,f8,01,00,00,f5,1c,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,66,e5,70,f3
"LicenseInfo"=hex:33,b7,21,c1,e5,e7,cd,4b,fd,7c,c6,35,51,fd,52,57,17,86,3e,18,\
d3,f4,8c,8e,35,32,7b,d1,43,8d,61,38,60,a4,ca,55,c9,9a,35,17,46,7a,4f,91,fc,\
4a,d9,db,64,5c,c4,e2,0f,34,f3,ea

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WPAEvents]
"OOBETimer"=hex:ff,d5,71,d6,8b,6a,8d,6f,d5,33,93,fd

* For file type in the save dialog box select "all files" and for the filename type in License Key.reg or whatever you want. It doesn't matter as long as it has the .reg extension.
* Click save.
* Double click the file thats now on your desktop. It will ask you are you sure. Tell it yes.

* To see that it worked go to microsoft

20 June 2008

0

Removing virus manually in windows XP

Read this tutorial if u want to remove a virus not detected by antivirus software or if u want to be an amateur malware researcher. the tutorial may not be that good, i hadn't much time to go in more details.

Begginning of tut:

Start->Run->type cmd
in each drive type attrib /s /d it will display the list of all files in that drive along with folders. concentrate on files having SHR attribute.
normally virus files have two characteristics
1.SHR attribute
2.Queer name like amvo.exe,r6r.exe,autorun.inf etc.

Note:some system files also have this attribute like MSDOS.SYS,IO.SYS etc so before deleting googling about that file will help.


to delete these files type c:\>del /f /s /a >>

+ to view the content of files with .inf, .vbs, .c etc. i.e files which are not batch files or executables. go to explorer and then go to the required drive or folder and type the filename with extension. It wil open up in notepad.

+ there is another method. Go to the required location and type attrib -s -h -r filename then use gui to see that hidden file. if it is not an exe or .bat then just open it with notepad. Here you will get some information like a file name or a registry key which the virus affects or a startup item or process. Change this or uncheck the startup.

If the file is not deleted like it says "access denied" it means it already used by some process. open task manager and find a process of the same name or some process which is not a valid windows process(better google) and end that process.

if it's not found then open msconfig go to startup tab and look at it. If a startup items seems queer(u wil have this feeling if you're not experienced windows user otherwise all data startup items may seem queer.) uncheck that. You may also learn about the startup item by googling. after unchecking restart the computer.

This method is effective in removing some spywares or some small but annoying verry like maskrider etc. which are sometimes not detected by antivirus

More Tutorial