&
Advertise Here with Today.com
 

Archive for the 'Virus' Category

Nov 08 2008

Found suspicious files on your PC? Send it to Virus Total

Published by djyano under Virus Edit This

Virustotal is a service that analyzes suspicious files and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines.

Simple browse for suspicious files and upload. The scanning process of your sample can take over 15 minutes.

No time to wait? You can also send the files through email.

Sending files by email

Create a new message with scan@virustotal.com as destination address of your email.

1. Write SCAN in the Subject field.
2. Attach the file to be scanned. Such file must not exceed 20 MB in size. If the attached file is larger, the system will reject it automatically.
3. You will receive an email with a report of the file analysis. Response time will vary depending on the load of the system at the time of placing your request.

Lazy to write an email? Use Virus Total Uploader. It enables you to directly send files from your system using the context menu.

Virus Total Uploader Download

Features

  • Free, independent service
  • Use of multiple antivirus engines
  • Real-time automatic updates of virus signatures
  • Detailed results from each antivirus engine
  • Real time global statistics
  • Protect your PC now, Visit Virus Total [at] Virustotal.com


    Advertise Here with Today.com

    No responses yet

    Jun 07 2008

    Where do Viruses and Trojan Hide?

    Published by djyano under Virus Edit This

    The following article was written by ShaolinTiger

    1. START-UP FOLDER.

    WINDOWS opens every item in the Start Menu’s Start Up folder. This folder is prominent in the Programs folder of the Start Menu. Notice that I did not say that WINDOWS “runs” every program that is represented in the Start Up folder.

    It means “opens every item.” There’s an important difference. Programs represented in the Start Up folder will run, of course. But you can have shortcuts in the Start Up folder that represent documents, not programs.

    For example, if you put a MICROSOFT Word document in the Start Up folder, Word will run and automatically open that document at bootup; if you put a WAV file there, your audio software will play the music at bootup, and if you put a Web-page Favourites there, Internet Explorer (or your own choice of a browser) will run and open that Web page for you when the computer starts up. (The examples cited here could just as easily be shortcuts to a WAV file or a Word document, and so on.)

    2. REGISTRY.

    WINDOWS executes all instructions in the “Run” section of the WINDOWS Registry. Items in the “Run” section (and in other parts of the Registry listed below) can be programs or files that programs open (documents), as explained in No. 1 above.

    3. REGISTRY.

    WINDOWS executes all instructions in the “RunServices” section of the Registry.

    4. REGISTRY.

    WINDOWS executes all instructions in the “RunOnce” part of the Registry.

    5. REGISTRY.

    WINDOWS executes instructions in the “RunServicesOnce” section of the Registry. (WINDOWS uses the two “RunOnce” sections to run programs a single time only, usually on the next bootup after a program installation.)

    6. REGISTRY.

    WINDOWS executes instructions in the HKEY_CLASSES_ROOTexefileshellopencommand “%1″ %* section of the Registry. Any command imbedded here will open when any exe file is executed.

    Other possibles:

    [HKEY_CLASSES_ROOTexefileshellopencommand] =”"%1″ %*”
    [HKEY_CLASSES_ROOTcomfileshellopencommand] =”"%1″ %*”
    [HKEY_CLASSES_ROOTbatfileshellopencommand] =”"%1″ %*”
    [HKEY_CLASSES_ROOThtafileShellOpenCommand] =”"%1″ %*”
    [HKEY_CLASSES_ROOTpiffileshellopencommand] =”"%1″ %*”
    [HKEY_LOCAL_MACHINESoftwareCLASSESbatfileshellopenc ommand] =”"%1″%*”
    [HKEY_LOCAL_MACHINESoftwareCLASSEScomfileshellopenc ommand] =”"%1″%*”
    [HKEY_LOCAL_MACHINESoftwareCLASSESexefileshellopenc ommand] =”"%1″ %*”
    [HKEY_LOCAL_MACHINESoftwareCLASSEShtafileShellOpenC ommand] =”"%1″%*”
    [HKEY_LOCAL_MACHINESoftwareCLASSESpiffileshellopenc ommand] =”"%1″ %*”

    If keys don’t have the “”%1″ %*” value as shown, and are changed to something like “”somefilename.exe %1″ %*” than they are automatically invoking the specified file.

    7. BATCH FILE.

    WINDOWS executes all instructions in the Winstart batch file, located in the WINDOWS folder. (This file is unknown to nearly all WINDOWS users and most W*NDOW$ experts, and might not exist on your system. You can easily create it, however. Note that some versions of W*NDOW$ call the WINDOWS folder the “WinNT” folder.) The full filename is WINSTART.BAT.

    8. INITIALIZATION FILE.

    WINDOWS executes instructions in the “RUN=” line in the WIN.INI file, located in the WINDOWS (or WinNT) folder.

    9. INITIALIZATION FILE.

    WINDOWS executes instructions in the “LOAD=” line in the WIN.INI file, located in the WINDOWS (or WinNT) folder.

    It also runs things in shell= in System.ini or c:WINDOWS system.ini:

    [boot] shell=explorer.exe C:W*NDOW$filename

    The file name following explorer.exe will start whenever WINDOWS starts. As with Win.ini, file names might be preceeded by considerable space on such a line, to reduce the chance that they will be seen. Normally, the full path of the file will be included in this entry. If not, check the WINDOWS directory

    10. RELAUNCHING.

    WINDOWS reruns programs that were running when WINDOWS shut down. WINDOWS cannot do this with most non-MICROSOFT programs, but it will do it easily with Internet Explorer and with WINDOWS Explorer, the file-and-folder manager built into WINDOWS. If you have Internet Explorer open when you shut WINDOWS down, WINDOWS will reopen IE with the same page open when you boot up again. (If this does not happen on your WINDOWS PC, someone has turned that feature off. Use Tweak UI, the free MICROSOFT WINDOWS user interface manager, to reactivate “Remember Explorer settings,” or whatever it is called in your version of WINDOWS.)

    11. TASK SCHEDULER.

    WINDOWS executes autorun instructions in the WINDOWS Task Scheduler (or any other scheduler that supplements or replaces the Task Scheduler). The Task Scheduler is an official part of all WINDOWS versions except the first version of WINDOWS 95, but is included in WINDOWS 95 if the MICROSOFT Plus Pack was installed.

    12. SECONDARY INSTRUCTIONS.

    Programs that WINDOWS launches at startup are free to launch separate programs on their own. Technically, these are not programs that WINDOWS launches, but they are often indistinguishable from ordinary auto-running programs if they are launched right after their “parent” programs run.

    13.C:EXPLORER.EXE METHOD.

    C:Explorer.exe

    WINDOWS loads explorer.exe (typically located in the WINDOWS directory)during the boot process. However, if c:explorer.exe exists, it will be executed instead of the WINDOWS explorer.exe. If c:explorer.exe is corrupt, the user will effectively be locked out of their system after they reboot.

    If c:explorer.exe is a trojan, it will be executed. Unlike all other autostart methods, there is no need for any file or registry changes - the file just simply has to be named c:explorer.exe

    14. ADDITIONAL METHODS.

    Additional autostart methods. The first two are used by Trojan SubSeven 2.2.

    HKEY_LOCAL_MACHINESoftwareMICROSOFTActive SetupInstalled Components
    HKEY_LOCAL_MACHINESoftwareMICROSOFTWINDOWSCurrentv ersionexplorerUsershell folders
    Icq Inet
    [HKEY_CURRENT_USERSoftwareMirabilisICQAgentAppstest]
    “Path”=”test.exe”
    “Startup”=”c:test”
    “Parameters”=”"
    “Enable”=”Yes”
    [HKEY_CURRENT_USERSoftwareMirabilisICQAgentApps]
    This key specifies that all applications will be executed if ICQNET Detects an Internet Connection.
    [HKEY_LOCAL_MACHINESoftwareCLASSESShellScrap] =”Scrap object”
    “NeverShowExt”=”"

    This key changes your file’s specified extension.

    See Also :

  • How to avoid phone viruses
  • How to test your antivirus software functioning properly?
  • Scan your Linux-Distro for Root Kits
  • How to remove Hacktool.Rootkit
  • Ways To Stop Computer Malware
  • 10 Tips For Virus Free
  • Top 5 Free Anti Virus
  • Top 7 Best Free Online Scan

  • No responses yet

    May 20 2008

    How to test your antivirus software functioning properly?

    Published by djyano under Virus Edit This

    It is sure that we are all using different kind of antivirus software, free or paid, for our computer’s security. But how can we know how well this antivirus software protects us. It is very dangerous to visit such a malicious web site to test our software.

    To test our antivirus software in full safety, we need to create a false virus file Eicar. This file is detected as a virus by the antivirus software, but it is not like one, it does not contain any viral code. If the false virus is detected, it is that your antivirus software is active and protects you.

    • To create this virus open Notepad
    • Copy the following character string in the Notepad

    X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

    • Name this file as aicar.com and save it
    • If your antivirus is correctly activated, it must then alert you instantaneously the presence of the Eicar virus.
    • Then ask your antivirus software to remove this file.

    If the antivirus does not detect anything, then there might be a problem. It could be because of two reasons: permanent protection is badly configured or there were some problems during antivirus installation. Look in to these and correct it.

    And if the false virus is still not detected, you must then seriously think of changing anti-virus software.

    In my case, I tested this with Avast antivirus software. Avast detected and removed it completely.

    Source : http://jayaprakashkv.blogspot.com

    Related articles :

  • Where do Viruses and Trojan Hide?
  • How to avoid phone viruses
  • Scan your Linux-Distro for Root Kits
  • How to remove Hacktool.Rootkit
  • Ways To Stop Computer Malware
  • 10 Tips For Virus Free
  • Top 5 Free Anti Virus
  • Top 7 Best Free Online Scan

  • No responses yet

    May 06 2008

    6 ways to safeguard your PC online

    Published by djyano under Virus Edit This

    Here are some precautions you can take to keep your PC safe from online hazards like viruses, worms, and Trojan horses:

  • Install an antivirus software program on your computer (for more info, see the related tip: Protect your PC with antivirus software).
  • Be suspicious of any e-mail attachments that you receive from unknown sources. E-mail is the main source of viruses, worms, and Trojan horses.
  • Be suspicious of downloads sent to you via chat applications (such as MSN Messenger or AIM).
  • Be picky about where you download files from on the Internet; many virus and worm writers use free software to disguise malicious applications.
  • Make sure that your PC has all the latest patches and updates installed (if you run Windows, visit the Windows Update site to install all the patches your operating system needs).
  • Scan all discs and downloads for viruses before running them.
  • The information in this tip originally appeared in the PC Protection 101 online class.

    Related articles :

  • Where do Viruses and Trojan Hide?
  • How to avoid phone viruses
  • How to test your antivirus software functioning properly?
  • Scan your Linux-Distro for Root Kits
  • Dangerous Online Activities
  • How to remove Hacktool.Rootkit
  • Ways To Stop Computer Malware
  • 10 Tips For Virus Free
  • Top 5 Free Anti Virus
  • Top 7 Best Free Online Scan
  • 12 Top Computer Threats

  • 2 responses so far

    Apr 16 2008

    12 Top Computer Threats

    Published by djyano under Virus Edit This

    The internet is undoubtedly a fantastic resource for families and offers a rich vein of educational content. However, there are potential dangers - welcome to the seedy world of viruses, spam, trojans, pornography, spyware and other nasties.


    Here are the Top Twelve Threats Computer User Should Avoid:
    1. Viruses - A computer program that copies itself. They often disrupt your computer system or damage your data. Viruses are usually received by email attachments so be careful opening anything from a dubious source. They can affect anyone, for example, the destructive Mydoom worm affected one out of three small and mid-sized businesses.

    2. Spyware - Sends information about you and your computer to somebody else. Spyware may send the addresses of sites you have visited or worse still, transmit personal information. With today’s concerns about identify theft this is a real worry. For example, CoolWebSearch may hijack web searches, home page, and other Internet Explorer settings. Spyware is normally received as part of shareware or freeware downloaded from the web.

    3. IP Spoofing - A technique to gain unauthorized access to computers, whereby the intruder sends messages to a computer with an address indicating that the message is coming from a trusted host.

    4. Trojans - An apparently legitimate computer program that is really intended to disrupt and damage computer activity by sending information, perhaps even passwords onto a third party without you knowing. As an example, recent emails entitled “Osama Bin Laden Captured” attempted to download the “Trj/Small.B.” Trojan if the embedded URL was clicked. This trojan attempts to hijack the PC.

    5. Spam - Unsolicited mail often promoting products of a dubious financial or sexual nature. Don’t leave your email address on websites and internet bulletin boards as they are harvested by spammers.

    6. Adware - puts advertisements on your screen. These take many forms including popups, popunders and advertisements that appear later, even if your browser is closed. Some are sent using the Windows Messenger service which allows a spammer to direct an advertisement straight to your computer by sequentially sending messages to IP addresses. Always irritating, they are also often of a pornographic nature.

    7. Diallers - for those of us still with dial up modems, dialler programs redirect calls to a very expensive number. You won’t know until you get the bill.

    8. Hijackers - Hijackers take control of your web browser and may reset your home page, search bar and search pages. They can redirect you to undesirable sites or stop you going to particular sites.

    9. Hackers - With so much personal data available online to anyone with a password you must be sure your password is secure. If you are using your mother’s maiden name, your cat’s name or your birthday then your password is at risk. Here are two tips for making a secure password. Method One - pick two random unrelated three letter words and two digits. Mix them up and what do you have? A secure password such as “red19cat” or “hotpin73″. Method Two - pick a short sequence of words such as Now Is The Winter Of Our Discontent Made Glorious’ and you have a password of “nitwoodmg”. You could even change the I’s and O’s to digits.

    10. Phishing - Emails purporting to come from reliable sources such as Paypal, Ebay or your bank. Often wanting you to verify your account details, they can look very realistic but are generally scams to harvest usernames and passwords. Always open a new browser winder and type the address there, rather than clicking on the link provided.

    11. Hoaxes - Chain letters, scams, false alarms. At best they take up time and bandwidth but at worst vulnerable can be victims of fraud. Pass it on!

    12. Stranger-danger - For those of us with children - do you know what they actually do when they are online? Are they working on homework tasks, downloading illegal music or pornography? Or are they chatting to strangers in chat rooms? You should consider blocking access to undesirable sites and logging their activity with a surveillance tool. Oh, and don’t forget that where children are concerned, computers should always be kept in a family room and never in their bedroom.

    Three Step Action Plan

    There are three essential steps that should be taken to ensure your PC is kept threat-free.

    Firstly, be sensible when opening attachments or following email instructions from apparently reputable sites.

    Secondly, make sure you are using the latest service pack of Windows as Microsoft is continually closing loopholes to tighten up security.

    Finally, there’s a range of low cost tools such as firewalls, antivirus, spam blockers and spyware killers available. Like everything else they vary in quality and you tend to get what you pay for so always do your research first and perhaps try a free trial before getting your credit card out.

    Related articles :

  • Where do Viruses and Trojan Hide?
  • How to avoid phone viruses
  • Scan your Linux-Distro for Root Kits
  • How to remove Hacktool.Rootkit
  • Ways To Stop Computer Malware
  • 10 Tips For Virus Free
  • Top 5 Free Anti Virus
  • Top 7 Best Free Online Scan
  • How to test your antivirus software functioning properly?

  • No responses yet

    Apr 08 2008

    10 Tips For Virus Free

    Published by djyano under Virus Edit This

    I’m just doing my daily googling and found these great tips for you all, i think it would great if share this tips if you keen on protecting your computer. You can visit http://askit.uq.edu.au to search for more tips. Lets continue reading…


    1. Have Anti-Virus Software installed on your computer

    One of the easiest ways to avoid getting a virus is to have some kind of Anti-Virus Software on your computer, and keep it up-to-date. There are a number of Anti-Virus packages available, it is a matter of finding one that suits you.

    There are a number of Freeware and Shareware products available. An example is ClamWin Antivirus, a free virus scanner which can be set to regularly download the latest virus definitions just like paid software.

    Another source of free software, including anti-virus software, is magazines. Computing magazines such as APC (Australian Personal Computing) often attach free CD’s which include good quality software, for example, Norton AntiVirus.

    Some sites with Freeware and Shareware Anti-Virus Software (This is not a comprehensive list):

    While many freeware and shareware products are excellent, it is important to bear in mind these points:

    1. You get what you pay for; and
    2. Buyer beware!

    2. Update your Anti-Virus Software

    Most virus companies create monthly or weekly virus updates. These updates cover profiles of all th enew viruses that have been discovered. There are over 500 new viruses discovered every month, which makes it crucial that you keep your Anti-Virus software updated.

    To update your software you will need to go to your Anti-Virus software site, for example, if you have McAfee Anti-Virus software you will need to go to the McAfee website. Once you are at the appropriate website you need to find the new profiles and download them. Once they have been installed you may need to restart your computer.

    3. Patch your Operating System

    Viruses are developed to take advantage of known vulnerabilities in programs. To ensure that these vulnerabilities are not taken advantage of companies produce “patches”. It is important that you regularly download these.

    If you have the Microsoft suite of programs, you will need to go to the Microsoft Windows Update site. In most newer operating systems, for example, Windows 2000 and Windows XP, all you need to do is click on the Start button, All Programs, and then on the Windows Update menu option. This will take you to the Windows Update site (make sure you have an active Internet connection at the time).

    Alternatively, you can open Internet Explorer and visit http://windowsupdate.microsoft.com/.

    If you have an Apple Macintosh, you can download the the latest security updates from the Apple site.

    4. Hoax or Real?

    It is important that when you receive a notice telling you about the latest viruses infecting computers around the world, that you don’t immediately believe it! Before you believe the notice and delete files or send it on to all your friends, make sure it is a real virus. These are often hoax notices.

    5. E-mail Attachments

    E-mail is one of the most common ways of communicating on the Internet. It is also one of the most common ways that viruses are spread. The e-mail itself, that is, the text of the message will NOT contain the virus. Viruses are found in attachments to emails.

    Not all attachments will be infected with a virus. Make sure that you are careful and do not open any attachments before checking that they are not “odd” or unusual in some way.

    For example, an attachment may have an unusual file extension - like a Word document called my document.doc.vbs. This file should be deleted straightaway. Contact the sender to verify what you were supposed to receive.

    Straight data files cannot contain viruses as they need files that contain some kind of executable code. Files with extensions such as .txt, .csv, .jpg, .gif, and .mp3 are unlikely to contain viruses. However, files with extensions such as .doc, .xls, .exe, .scr and .htm may contain viruses.

    6. E-mail Security

    Depending on what email software (for example, Eudora, MS Outlook, Pegasus, etc) you use, there will be settings that you can change to ensure that you don’t accidentally accept a virus. Ensure the following:

    • Do Not automatically open attachments
    • Do Not automatically download attachments
    • Disallow or prompt to read HTML e-mail. If your email client allows it, turn off the preview pane
    • Patches need to be downloaded and run regularly

    7. Sharing Disks

    At University, another common way that viruses are spread is via disk sharing. All Library computers have Anti-Virus software on them, ensure that everyone is aware of the risks with viruses and disks are checked regularly. Before you open someone else’s disk on your computer, scan it with your Anti-Virus software.

    If a disk is only going to be used to read information, then write protect it by pushing the tab on the disk up. This will stop data being written to the disk and therefore any viruses from accidentally being placed onto your disk.

    8. Backup, Backup, Backup…

    If a virus does infect your computer it may corrupt one or more files. This may mean that they assignment your were about to submit or Ph.D. Thesis is now useless. It is important that you regularly backup all your files.

    • Buy floppy disks and learn how to take care of them<.
    • Always save a backup copy of your file as soon as you begin it. You can do this by:
      • Clicking the Save Button on the Toolbar, or
      • Pressing Ctrl+S on the keyboard, or
      • Clicking File » Save.
    • If you’re working on campus (especially in the Library), save the file to your floppy disk.
      If you’re working at home, you can also save to the hard drive (usually called the C:\ drive) of your computer.
    • Always save the file after every significant change - for example after every paragraph.
    • The more important the file, the more copies you should make of it.
      • Use more than one floppy disk, as floppy disks corrupt quite easily. Don’t depend on one only.
      • If you have access to more than one computer, put copies of your files on each of them.

    9. Macro Settings

    There are a number of viruses that are known as Macro Viruses. Webopedia estimates that 75% of all viruses are macro viruses. Applications such as Microsoft Word, Excel and PowerPoint allow you to create quite powerful macros. Macro Viruses are embedded in documents and can embed themselves in all future documents you create. Anti-Virus software can detect these.

    Ensure your macro settings are set to medium protection:

    • Open the application (eg. MS Word, Excel or PowerPoint)
    • Click on Tools
    • Click on Macros and then Security
    • It is best to set the security to Medium

      With a Medium setting you will be told if there is a macro embedded within a document. If you receive an attachment with a macro, do not open it unless you are certain that there should be one. Contact the person who sent the document to you to confirm whether or not there should be a macro.

    • Click on OK

    If you have an older version of Office (Office 97, for example), the macro settings may not be exactly the same. You need to ensure that your version of Office does NOT automatically run macros.

    10. Download or Purchase from trusted sources

    Aside from e-mail and disk sharing, downloading files from the Internet is the most common way to get a virus. When downloading files from the Internet, ensure that the site scans their files. If they don’t, download the file to a floppy disk and scan with your Anti-Virus Software.

    When downloading or purchasing software it is better to use legitimate or trusted sources. Purchasing or downloading illegal copies increases the risk of there being viruses attached.Digg my article

    Source from http://askit.uq.edu.au

    Related articles :

  • Where do Viruses and Trojan Hide?
  • How to avoid phone viruses
  • Scan your Linux-Distro for Root Kits
  • How to remove Hacktool.Rootkit
  • Ways To Stop Computer Malware
  • How to test your antivirus software functioning properly?
  • Top 5 Free Anti Virus
  • Top 7 Best Free Online Scan
  • 12 Top Computer Threats

  • 2 responses so far

    Mar 10 2008

    How to remove Hacktool.Rootkit

    Published by djyano under Virus Edit This

    The concerned users have to update their antivirus Generally speaking, even if its name is intriguing or attractive it does not need to run a doubtful attached file without having made confirm its sending by the sender then it have analyzed with an antivirus up to date.

    Before beginning the removal, it is imperative to make sure to have applied the precautionary measures above to prevent any reinfection of the computer by the virus. The users not having an antivirus can use free of charge one on-line free antivirus to seek and eliminate the virus.

    Go here first and download and run the sysclean package.
    http://www.trendmicro.com/download/dcs.asp You will also need the latest pattern file for the Sysclean programme. You can get it HERE. Read the instructions carefully in the .txt file HERE.

    There is a program available that can show if you have a Rootkit problem.
    It can be downloaded here: Rootkit Revealer Important Rename RootKitRevealer.exe to nailsetter.exe. The reason for this is that some rootkit trojans can detect this program and hide themselves from it.

    Please download AproposFix from HERE and save it to your desktop. Extract it but don`t run it yet.

    Boot into safe mode, under your normal user name(NOT THE ADMINISTRATOR ACCOUNT). See how here.

    Open the aproposfix folder on your desktop and doubleclick RunThis.bat and follow the prompts.

    When the tool is finished, please reboot back into normal mode and post a new HijackThis log, along with the entire contents of the log.txt file in the aproposfix folder.

    There is also this tool available, known as the Gromozon removal tool. that can help to eliminate certain types of rootkit known as the Gromozon rootkit.

    Run the Gromozon tool.

    It may not run at all and if it does run, it may tell the user that the infection is not present on the machine.

    At this point the user must choose to continue with the scan.

    Prevx tool will reboot the machine and run its cleaning process.

    As an interesting aside: it seems that ONLY people who run NAV/NORTON/SYMANTEC bloatware seem to be HIT by this!

    To set things straight:
    HiJackThis does NOTHING for or against a Hacktool.Rootkit infection! It can ONLY reveal SOME of the symptoms!
    HJT does NOT show: remon.sys, orans.sys, msdirectx.sys and whatever else these files might be called.

    If you DO run a Hijackthis scan however,
    first put HijackThis in e.g C:\Program Files\HJT and NOT in Temp or on the Desktop!. Important: Rename HijackThis.exe to HijackThis1991.exe this is because some new malware can hide from HijackThis.exe.

    Look for any or all of these files:
    They can be in either \WINDOWS\ or \WINNT\.

    Running processes:
    C:\WINDOWS\javapanel.exe
    C:\WINDOWS\taskcntr.exe
    C:\WINDOWS\System32\xpjava.exe

    O23 - Service: ECA (cpanel) - Unknown owner - C:\WINDOWS\javapanel.exe
    O23 - Service: TASKESV (TESV) - Unknown owner - C:\WINDOWS\taskcntr.exe
    O23 - Service: SystemManager - Unknown owner - C:\WINDOWS\sysmanager.exe

    To get rid of them:

    Boot in Safe Mode, see how here.
    (ME/XP only) Switch System restore OFF, see how here.
    In Windows Explorer, turn on “show all files and folders, including hidden and system”. See how here.

    Next, open Windows Task Manager by pressing CTRL+ALT+DELETE.
    Click the Processes tab, select the process (if there) and click End Process for:
    javapanel.exe
    taskcntr.exe
    xpjava.exe
    sysmanager.exe

    Next, click Start/Run and type services.msc and click OK. Look for the service:
    javapanel.exe
    taskcntr.exe
    xpjava.exe
    sysmanager.exe
    Doubleclick it, click Stop if it’s running, and change the Startup type to Disabled.

    Next, run a HJT scan and (if still there) place a tick-mark in the little square before:
    ……………………………………………………………. ………………………..
    C:\WINDOWS\javapanel.exe
    C:\WINDOWS\taskcntr.exe
    C:\WINDOWS\System32\xpjava.exe

    O23 - Service: ECA (cpanel) - Unknown owner - C:\WINDOWS\javapanel.exe
    O23 - Service: TASKESV (TESV) - Unknown owner - C:\WINDOWS\taskcntr.exe
    O23 - Service: SystemManager - Unknown owner - C:\WINDOWS\sysmanager.exe
    ……………………………………………………………. ………………………..
    Now click on the Fix Checked button in HJT. Exit HJT.

    When done, from between the above dotted lines, delete the highlighted bold files.
    Delete all files and directories from: C:\Documents and Settings\[username]\Local Settings\Temp
    Repeat this for ALL [usernames].
    Rightclick IE on the desktop, select Properties, click on Delete Cookies, and Delete Files.
    Delete ALL files and directories from: C:\WINDOWS\Temp (except files dated from TODAY).
    (XP only) Delete ALL files from C:\WINDOWS\Prefetch.
    Boot normal.
    (ME/XP only) When all OK, switch System Restore back on. Digg my article

    Source Taken @ http://www.techspot.com

    Related articles :

  • Where do Viruses and Trojan Hide?
  • How to avoid phone viruses
  • Scan your Linux-Distro for Root Kits
  • Ways To Stop Computer Malware
  • 10 Tips For Virus Free
  • Top 5 Free Anti Virus
  • How to test your antivirus software functioning properly?
  • Top 7 Best Free Online Scan
  • 12 Top Computer Threats

  • No responses yet

    Feb 18 2008

    Ways to Stop Computer Malware

    Published by djyano under Virus Edit This

    Very often when our computer has been connected to the Internet, this causes problems. Usually the main reason is computer spyware programs, which have taken control of our PC. Spyware, adware, Trojans and all the other kinds of malware have joined forces against us. And we must ask ourselves some questions, such as: Do we know the origin of spyware or what exactly is meant by spyware.

    All these questions on what is spyware will only be normal for anyone. We hear about them and read on them when we run into some articles over the web or in magazines and editorials. Knowing what is spyware is only the tip of the iceberg. Encountering and experiencing spyware is another.

    It takes seconds on the Net for your computer to become infected by potential threats such as malware. You can?t fight potential threats without the help of a spyware program. Such a program is the weapon against malware in the form of spyware, adware, phishing attacks, keyboard loggers, etc., which you can catch easily from a floppy, CD and above all from the Net. There is a lot of information on the Web about what exactly computer spyware is and what it can cause.

    It is a delusion to think that your spyware program is updated and this keeps your PC safe from all the nastiest malware on the Web. You might not be completely wrong but the majority of the anti-virus and spyware programs, which exist today, are designed to fight only specific types of malware. Even if you have installed a firewall, this does not provide complete protection against computer spyware because spyware authors know the habits of users and manage to sneak their malware behind firewalls and infect your computer without your knowledge and consent.

    In reality, there is no single computer spyware that can protect users today. These worms and Trojans will always find a way to infect any workstation they get into. It all depends on how they are identified using specific spyware programs such as Adware or Spyware Doctor. These are only two sample programs. How about the others?

    The best thing to do is to check out sites first. With their rampant invasion, adware and malware are usually forewarned these days. The risk is yours to take if you disregard warnings coming from anti-virus software installed or even through the Windows security center today. There are a million sites which have been infected today and itemizing them one by one is really a waste of time.

    The best thing to do is be careful and be up to date with installed security software on your computer. Never take this for granted because the risks are quite high. Adware and Malware are aimed at creating havoc to any workstation it gets the chance to do so. Don?t let this be your computer because you will surely regret it. Always be on the defensive. They are all available online or from your nearest computer shop. All you have to do is select and ask around and protection from these malware and spyware is within reach.


    No responses yet

    Feb 16 2008

    Learning About Spyware Removal

    Published by djyano under Virus Edit This

    Spyware removal is essential for proper computer functioning, and so if you do not already have a working Spyware removal tool on your computer then it is important that you find one as soon as possible. Know that there are quite a few different worthwhile choices out there, but before you can decide on the right one for you, you will need to need to understand a bit more about Spyware itself.

    What is Spyware?

    Spyware is basically a sort of umbrella term, one that is used to describe any software that works by performing tasks such as advertising, collecting personal information or changing the configuration of your computer. Spyware can significantly slow down the processes and speed of your computer and can therefore quickly become a serious problem on any computer system.

    Spyware is also often associated with software that displays advertisements known as adware, or software that tracks personal and sensitive information. It is important that you take precautions and care whenever you are downloading anything onto your computer even if you think it is completely safe, because you may be downloading Spyware along with it. Make sure that you carefully read all disclosures including the license agreement and privacy statement and remember that sometimes the inclusion of unwanted software in a given software installation is documented but other times it may appear at the end of a license agreement or privacy statement and most times you will not even notice it at all.

    After An Infection

    Once you do have Spyware on your computer then you are going to have to use the proper Spyware removal tool to get rid of it. Some Internet service providers include anti Spyware software in their service packages. But if not and you have a Windows network then you can use Windows Defender, which comes with Windows Vista. All you need to do is run the tool to scan your computer for Spyware with this Spyware remover and then review any files that have been discovered, select suspicious files for removal and then quarantine or remove them.

    There are many other Spyware removal software programs and tools available that you can use, and it is important that you take the time to choose not only the one that sounds the best but the one that is going to be best suited for you and your computer system needs. Also make sure to keep up to date on all the updates for the most effective Spyware removal.


    No responses yet

    Advertise Here