Sunday, June 22, 2008

HackCleaner

This great little freebie does an excellent job cleaning out many different kinds of junk from your PC, including cookies, many kinds of temporary files, Internet toolbars (called Browser Helper Objects, or BHOs), and unnecessary DLLs. It even includes a tool that will free up system RAM by moving data from RAM to a page file on your hard disk, to increase performance.The program also includes a nice security tool as well. It will automatically block any BHOs from being installed on your PC--a good thing, because some are spyware or malicious software.Download HackCleaner.

How viruses spoof the from-address in emails

You have effective anti-virus software, so your computer is clean,
You send an email to Fred,
Now your email address is in Fred's address book in his email software,
Fred does not have effective anti-virus software, and his computer has a virus,
The virus on Fred's computer scans his address book for all of the email addresses on it,
The virus sends email to every address on Fred's address book,
The virus emails do not say they are from Fred!, The virus pics another addresses from Fred's address book and puts it in the 'From field' in the outgoing email. The virus may combine the name from one address and the domain from another, creating a 'from address' that does not exist.
These emails are received by other computers, which detect the virus (because they have good anti virus software) and reject the email,
When the receiving computer rejects the viruses email it sends an 'Undeliverable' to the sender e.g. something like 'Subject: /Delivery Notification: Delivery has failed'.
But! the 'Undeliverable' note goes to the spoofed from address (not to Fred) e.g. the 'Undeliverable' note could be sent to you.
Often there is no trace of Fred's real address in the virus email or the 'Undeliverable' note, so you can not tell who's infected computer is sending these emails.
The solution: Make sure you have good anti-virus software and tell everyone you know to do the same.

Prevent Virus Attacks

You must run quality security software on your computers to protect your work and private data from viruses, spy ware, and other security threats. When it comes to security, there is no substitute for quality. See below our recommended quality solutions. If any of the following is difficult for you, get an IT Expert to do it for you. You must do the following or risk all of your work/data being compromised (think of it as locking your front door):
Get good anti virus software e.g. one of the below.Recommended anti virus software:- AVG - Our most recommended anti virus software.- Norton Anti virus- McAffee Anti Virus- Sophos Anti VirusBe sure to regularly update your 'virus definitions' e.g. once per week
Install a quality FirewallThere are many firewalls available, some good, some bad. Our recommendation is the FREE zone alarm. They provide a paid version with extra tools (of course), but we think the free firewall-only option is fine. Its getting harder on their site to see the free one (so look carefully!). At time of writing, go here, scroll down and click the free option. If the above link doesn't work, start looking from the Zone Alarm front page.
Install an anti-spy ware applicationThere are many available, some good, some bad. Our recommendation is the FREE: Spybot - Search & Destroy. Download here, and find Spybot info here.
Email Attachments: BEWARE OF ATTACHMENTS. Do not open email attachments you are not expecting. Viruses come with some very nasty messages to trick you into opening the attachment e.g. "Your email account has been canceled, see attachment for details". Even worse, the virus looks like it comes from an email address you recognize e.g. from admin@yourDomain.com (where 'your domain' is the domain name that you use). Virus attachments can have the following 'file extension': .exe, .pif. If you receive a .zip attachment and open it - make sure it doesn't contain a file with one of those extensions. Do not open attachments you haven't requested, even if they appear to be from people you know.

DELETING REGISTRY KEYS FROM COMMAND LINE

There are two ways to delete a key from the Registry from the Command line. At the Windows Command line:RegEdit /l location of System.dat /R location of User.dat /D Registry key to deleteYou cannot be in Windows at the time you use this switch.Or you can create a reg file as such:REGEDIT4[-HKEY_LOCAL_MACHINE\the key you want to delete]Note the negative sign just behind the[Then at the Command line type:1. RegEdit C:\Windows\(name of the regfile).

Finding IP adress of the mail sender

Yahoo !Log into your Yahoo! mail with your username and password.Click on Inbox or whichever folder you have stored your mail.Open the mail.If you do not see the headers above the mail message, your headers are not displayed . To display the headers,Click on Options on the top-right cornerIn the Mail Options page, click on General PreferencesScroll down to Messages where you have the Headers optionMake sure that Show all headers on incoming messages is selectedClick on the Save buttonGo back to the mails and open that mail.You should see similar headers like this:Yahoo! headers : Daniel.Look for Received: from followed by the IP address between square brackets [ ]. Here, it is 202.65.138.109.That is be the IP address of the sender!GmailWhen you receive an email, you receive more than just the message. The email comes with headers that carry important information that can tell where the email was sent from and possibly who sent it. For that, you would need to find the IP address of the sender. The tutorial below can help you find the IP address of the sender.Log into your Gmail account with your username and password.Open the mail.To display the headers,Click on More options corresponding to that thread. You should get a bunch of links. Click on Show original You should get headers like this:Gmail headers : DanielLook for Received: from followed by a few hostnames and an IP address between square brackets. In this case, it is 65.119.112.245. That is be the IP address of the sender!!NOTE:=This will not work if the sender uses anonymous proxy servers.HotmailLog into your Hotmail account with your username and password.Click on the Mail tab on the top.Open the mail.If you do not see the headers above the mail message, your headers are not displayed . To display the headers,Click on Options on the top-right cornerIn the Mail Options page, click on Mail Display SettingsIn Message Headers, make sure Advanced option is checked.Click on Ok buttonGo back to the mails and open that mail.If you find a header with X-Originating-IP: followed by an IP address, that is the sender's IP addressHotmail headers : Delano ,In this case the IP address of the sender is [68.34.60.59]. This is be the IP address of the sender.If you find a header with Received: from followed by a Gmail proxy like thisHotmail headers : DelanoLook for Received: from followed by IP address within square brackets[]. In this case, the IP address of the sender is [69.140.7.58].Or else if you have headers like thisHotmail headers : DelanoLook for Received: from followed by IP address within square brackets[].In this case, the IP address of the sender is [61.83.145.129] .If you have multiple Received: from headers, eliminate the ones that have proxy.anyknownserver.com.

Folder option missing in Widows XP

After a virus attack in one of my client machines, the folder options from the windows explorer was missing and we were unable to show all the files including the hidden ones. So here’s what I did to restore it back:Go to Run –>gpedit.mscUser Configuration –> Administrative Templates –> Windows Components –> Windows ExplorerEnable and then Disable “Removes Folder Options menu from Tools menu”Close all windows explorer windows and then open again.. most probably your folder options is back

Deleting undeletable file(s)

Open a Command Prompt window and leave it open.Close all open programs.Click Start, Run and enter TASKMGR.EXEGo to the Processes tab and End Process on Explorer.exe.Leave Task Manager open.Go back to the Command Prompt window and change to the directory the AVI (or other undeletable file) is located in.At the command prompt type DEL where is the file you wish to delete.Go back to Task Manager, click File, New Task and enter EXPLORER.EXE to restart the GUI shell.Close Task Manager.Or you can try thisOpen Notepad.exeClick File>Save As..>locate the folder where ur undeletable file isChoose 'All files' from the file type boxclick once on the file u wanna delete so its name appears in the 'filename' boxput a " at the start and end of the filename(the filename should have the extension of the undeletable file so it will overwrite it)click save,It should ask u to overwrite the existing file, choose yes and u can delete it as normalHere's a manual way of doing it. I'll take this off once you put into your first post zain.1. Start2. Run3. Type: command4. To move into a directory type: cd c:\*** (The stars stand for your folder)5. If you cannot access the folder because it has spaces for example Program Files or Kazaa Lite folder you have to do the following. instead of typing in the full folder name only take the first 6 letters then put a ~ and then 1 without spaces. Example: cd c:\progra~1\kazaal~16. Once your in the folder the non-deletable file it in type in dir - a list will come up with everything inside.7. Now to delete the file type in del ***.bmp, txt, jpg, avi, etc... And if the file name has spaces you would use the special 1st 6 letters followed by a ~ and a 1 rule. Example: if your file name was bad file.bmp you would type once in the specific folder thorugh command, del badfil~1.bmp and your file should be gone. Make sure to type in the correct extension.