Showing posts with label Virus/Trojan/Worm. Show all posts
Showing posts with label Virus/Trojan/Worm. Show all posts

The Ways to Format Your Phone

The phone, like computers did not escape from virus attacks. Viruses that attack could cause files on the phone to be corrupted, often hangs, and work phone so slow. Use anti-virus does not necessarily resolve the issue. Even from some antivirus experience only adds to the workload phone. If this happens, the phone needs to reformat to restore it like new again. Here we discuss about re-format the Nokia phones with Symbian operating system.

Before you reformat, important data in the phone's internal memory to the back up first. To backup the contacts we can use the application Contact Back Up. As for backing up SMS can use Message Storer. In addition to these two applications, other options could be used for copying SeleQ application. Contacts file in the c: / system / data / contact.cdb file name.

Conditions to reformat are:
- Number phone lock code
- The availability of mobile phone batteries or better yet fully charged before.

If the phone alive, here the steps:
- Type the code * # 7370 # (if * # 7780 # to return to the original settings), select yes to confirm.
- Enter the phone lock code, if the code is still the standard for Nokia 12345
- The phone will restart, wait a while until formatting is complete.

Another way to manually format when the phone is dead. Steps:
- Press the green button (keypad dial / call), the number "3? , Press the asterisk (*), fences (#), and the power button simultaneously.
- Enter the phone lock code. Wait a moment, the format will work.

After the process is complete, the phone will re-clean as new. For Sony Ericcson, re-formatting can be done directly from the settings menu. Select return to its original settings and enter the lock code (usually the default code is 0000 SE).


Tag: Handphone Format, Format tricks your phone, Tips Phone Formatting, Nokia Formatting tricks


Read More!

7 Steps Eradicate The Conficker Virus

If your computer is already infected with the Conficker virus , which now scourge of computer users around the world, not to worry. You are not alone because there are estimated to have 12 million infected computers around the world today. If the antivirus is still failing to overcome, there is a way membasminya even need a bit of hard work.

Consider the 7 steps eradicate the Conficker virus from Vaksincom following:

1. Decide who will clean your computer from the network / Internet. Turn off WiFi access when there and pull the ethernet cable from the LAN network.

2. Turn off system restore (Windows XP / Vista).

How select Start>> All Programs>> Accesories>> System Tools>> System Restore and then select the settings menu off for all partitions. (See Figure 1)

3. Turn off the active virus process in services. Use the removal tool from Norman to clean the virus is active. This program is available free of charge and can be downloaded below (See Figure 2):

http://download.norman.no/public/Norman_Malware_Cleaner.exe

4. Delete service svchost.exe implanted fake virus in the registry. You can search the registry manually. (See Figure 3)

5. Delete Task Schedule made by the virus. (C:-WINDOWS-Tasks)

6. Remove string registry created by the virus. To make it easier to use the registry script below. Copy this script and then install.

[Version]

Signature = "$ Chicago $"

Provider = Vaksincom Oyee

[DefaultInstall]

AddReg = UnhookRegKey

DelReg = del

[UnhookRegKey]

HKCU, Software-Microsoft-Windows-CurrentVersion-Explorer-Advanced, Hidden, 0x00000001, 1

HKCU, Software-Microsoft-Windows-CurrentVersion-Explorer-Advanced, SuperHidden, 0x00000001, 1

HKLM, SOFTWARE-Microsoft-Windows-CurrentVersion-Explorer-Advanced-Folders-Hidden-SHOWALL, CheckedValue, 0x00000001, 1

HKLM, SYSTEM, CurrentControlSet-Services-BITS, Start, 0x00000002, 2

HKLM, SYSTEM-CurrentControlSet-Services-ERSvc, Start, 0x00000002, 2

HKLM, SYSTEM-CurrentControlSet-Services-wscsvc, Start, 0x00000002, 2

HKLM, SYSTEM-CurrentControlSet-Services-wuauserv, Start, 0x00000002, 2



[del]

HKCU, Software-Microsoft-Windows-CurrentVersion-Applets, dl

HKCU, Software-Microsoft-Windows-CurrentVersion-Applets, ds

HKLM, SOFTWARE-Microsoft-Windows-CurrentVersion-Applets, dl

HKLM, SOFTWARE-Microsoft-Windows-CurrentVersion-Applets, ds

HKLM, SYSTEM-CurrentControlSet-Services-tcpip-Parameters, TcpNumConnections

Use notepad to copy, then save with the name "repair.inf" (use the Save As Type option to All Files to avoid mistakes). Run repair.inf with right click, then select install.

Note: For the active file on startup, you can disable the "msconfig" or be able to manually delete the string:

"HKLM, SOFTWARE-Microsoft-Windows-CurrentVersion-Run"

7. For cleaning the virus W32/Conficker.DV optimally and prevent re-infection, antiviral agents should use an updated and can detect this virus very well and patch your computer with http://www.microsoft.com/technet/security/Bulletin/ MS08-067.mspx to prevent reinfection
source:tekno.kompas.com

Read More!

Tools To Analyze A Virus

The virus is spread in the Internet, from day to day growing more and many companies such as Kaspersky antivirus providers, McAffe, Norton and others compete to create an anti-competition that is very powerful. 
Making a course antivirus alone can not be separated from the introduction of the virus itself. We must analyze how it works, what is able to do by the virus, the virus spread, and so forth. 
To do an analysis of a virus usually requires tools that can analyze a play and the virus quickly

Here are some tools you can use to analyze a virus.

1. Malcode Analysis Pack
(http://labs.idefense.com/software/download/?downloadID=8)
This tool consists of a variety of applications that can help you analyze a malcode.
For example, such as ShellExt, socketTool, fakeDNS, Sheilcode2Exe and so forth.

2. For Windows Autorun
(http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx)
This application is used to determine the location of auto-starting of the startup screen which is located in the windows.
This application will show the program to run when the system bootup or login.

3. RegMon for Windows
(http://technet.microsoft.com/en-us/sysinternals/bb896652.aspx)
This tool can display the applications which are access to your system registry.
All will be displayed in real-time

4. Filemon for Windows
(http://technet.microsoft.com/en-us/sysinternals/bb896642.aspx)
This tool will display the system activity of a file in the operating system in real-time.



5. Multipot (http://labs.idefense.com/software/download/?downloadID=9)
This application is designed to collect a lot of malicious code found on the internet.

6. Process Explorer for Windows
(http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx)
This tool handles information about the process dal DLLs that are currently open.
This application shows the list of processes that are active at that time.

7. Resource Hacker (http://www.angusj.com/resourcehacker/)
Tool that can be used to change the resource on the Win32 executables and resource files that other.

8. Rootkit Unhooker (http://www.antirootkit.com/software/RootKit-Unhooker.htm)
Applications for mendateksi rootkit.
Some of the features are offered, among other Ultimate Drivers Detection, Hidden Files Detection and so on.

9. SysAnalyzer (http://labs.idefense.com/software/download/?downloadID=15)
This tool is able to analyze malcode automatically run time to monitor what is being done by the system and the process is running.

10. PE Identifier (http://www.peid.info/)
This application is used to detect the packers, cryptors.
Mendeteks this tool is capable of more than 600 signatures from a different PE file.

11. VB Decompiler Lite (http://www.vb-decompiler.org/download.htm)
A decompiler for programs that berextensi EXE, DLL and OCX.

12. MiTec EXE Explorer (http://www.mitec.cz/exe.html)
This tool was created as an executable reader.
This application is able to read and displays executable file properties and structure of a file is analyzed
(finderonly)

Read More!

CAUTION!, Kido new Variant (aka Conficker, Downadup) stake out your back!

Today, I Receive e-mail from my friend albert nelson, now I promote here
CAUTION!, Kido new Variant (aka Conficker, Downadup) stake out your back!

Kido aka Conficker after success with 'achievement' in the previous variants, conficker back with a plan to descend again to the dozens of new variants million computers around the world. Attack will be held starting on 1 April 2009.

By using the new system algorithm, Kido can easily function to turn on the computer Antivirus target. In addition, Kido also update itself automatically from many different sources. Aggravate the situation, Kido also send malicious program infection to other computer that is connected in a network or internet network. Moreover, this attack can bootnet place that allows another computer ready to be governed from the remote to do what is desired by it

Kaspersky, Antivirus leading developer recommends that all users of Windows Operating System update to update the security of the Operating System that is used with the MS08-067, MS08-068 and MS09-001 and always update your Kaspersky Virus Signature. If your network or workstation entered by Kido, Kido Killer immediate use of the Kaspersky Lab

Consult your questions or difficulties regarding Kaspersky, Kido (aka Conficker, Downadup) in your company to info@solusi.com

Read More!

Disclaimer :

I can not guarantee that the information on my blog is 100% correct