Friday, September 28, 2007

increase ur virtual memory in windows..

To well ur pc's problem is simple as u said the virtual memory is low..
to fix ir right click on "my computer" select "properties" from the menu that appears.. select the "advanced" tab
from the dialog window.. u will see three buttons from that select
under the performance options select the "settings button"

Click on the image to enlarge the image press back button
on ur browser to come back to this page





a new window will open select "advanced" tab in that..
select the "change" button from the "virtual memory heading" ..



click "system managed size" after selecting each drive in the list do not forget to press the set button after each drive selection .. (this is for guyz who don't want to be bothered for those who want a precise control select the custom button then set ur value 1024 for each drive should keep it pretty neat and tidy and avoids unnecessary fragmentation problems)
finally press ok u will see a warning that says u will need to restart for the settings to take effect press ok and select restart once prompted for if it does not ask just restart ur sytem



the actual appaerence of the dialog boxes vary depending up on the operating s but the procedure still is basically the same look sharp u will find all these buttons and dialogs ...

Thursday, September 27, 2007

win32/ahkheap.a folder picture.

last day when one of my friends rang me up for cleaning his pc i decided to make a pic of his computer so i could post here .. that green icon can be seen in process explorer by the name svchost.exe if u find it on ur pc dont hesitate kill process tree and do as directed in this link

http://dennyphilip.blogspot.com/2007/08/orkut-youtube-bannedfirefox-banned-try.html

here is the culprit





here is a view of the infected folder .. rather the base of operations for the virus/worm...
click on the photo to enlarge


and here is the a bit described version of the same




---------------------------------------------------
posted as an update...
---------------------------------------------------

Wednesday, September 19, 2007

have a .exe file with the name of the folder inside the folde..



Well to say the bad news ur system is infected with the virus brontok (common name )
i'll keep this post simple..
just click these three links to download removal tools..
after downloading unzip them (store in the root directory like c:\ for easy access)then execute them in order given below
it is recommended to turn of system restore else the virus might get replaced from the windows back up or run eset's nod 32 antivirus with latest up dates (warning: removal of virus manually or antivirus might disable ur exes running klwk.com will fix it if that happens the rest of them wont run until that is fixed)
execution order..

[ if ur window opens the file in this window click the back button on ur browser to get back to this page]

1)klwk.com link: http://www.mediafire.com/?b3rg9ebhxtd
2)cav-0.91.exe link: http://www.mediafire.com/?d2jnlhmy0td
3)aimfix.exe link: http://www.mediafire.com/?8zzi12fjj2b



Note all these files should be run with administrator privileges so run them under an adminstrator account from xp in vista right click on the file and select run as administrator . For klwk.com u have to run command prompt with admin rights (click start >> programs >> accessories >> there right click on command prompt select run as administrator go to the location where it is stored then type klwk.com

command to use in dos mode(command prompt)
Only the blue are command the green are for ur information do not type the green text in
purple coloured text means u have to substitute according to ur need.

To go to the root of the drive (say c:)
cd\
eg: c:\documents and seting\user name\:>cd\
result: c:\>

To go to a folder
cd
here
eg:c:\> cd new folder
result: c:\new folder\:>


To go to a folder inside that folder and so on..
C\new folder\:>\cd foldername
here
eg:c:\new folder\> cd new folder2
result: c:\new folder\new folder2:>

To go to a directory a level back
C\new folder\new folder\:>\cd..
like pressing the back arrow in ur "my computer".
eg:c:\new folder\newfolder2> cd..
result: c:\new folder\:>

To change the drive u are in
C:\> (drive letter):
eg: c:\>e:
result:e:\> here e: is to change ur drive to e drive type d: for d drive f: for f drive and so on

Restart ur computer and execute file until none of them show any traces

Friday, September 14, 2007

How to Manually unhide folders...

When do u need this?

Well some virus / trogen hides the folders and create a copy of itself using the folders name (mean time it hides the actual folder) in an attempt to fool u to click it and activate the file and it will be copied to any removable media that u connect (pendrive,mobiles etc..)

------------------------------------------------------------------------------------------------
updated content
to in hide files in any folder or drive download this file (u.bat)
link:http://www.mediafire.com/?dm0wqnfm1pd
copy it to the folder where u want to unhide
it is good idea to copy it to ur pen drive and run it as soon as u plug it to view all files or when u feel something is wrong if u have some files that appear and disappear in a few seconds u r most
probably infected.
double click the file.. u r done or if u want to do it manually the steps are given below.
------------------------------------------------------------------------------------------------
To view the hidden files and folder (that the virus hid) doa s follows)
press the windows key on ur keyboard and the R key together

+
this will bring up the run dialog type cmd and press enter
now the a black window with white letters (the default color scheme) will appear
now browse to the location u want using a combination of the following commands by typing them in and pressing enter /return key using ur key board.
Only the blue are command the green are for ur information do not type the green text in
purple coloured text means u have to substitute according to ur need.

To go to the root of the drive (say c:)
cd\
eg: c:\documents and seting\user name\:>cd\
result: c:\>

To go to a folder
cd
here
eg:c:\> cd new folder
result: c:\new folder\:>


To go to a folder inside that folder and so on..
C\new folder\:>\cd foldername
here
eg:c:\new folder\> cd new folder2
result: c:\new folder\new folder2:>

To go to a directory a level back
C\new folder\new folder\:>\cd..
like pressing the back arrow in ur "my computer".
eg:c:\new folder\newfolder2> cd..
result: c:\new folder\:>

To change the drive u are in
C:\> (drive letter):
eg: c:\>e:
result:e:\> here e: is to change ur drive to e drive type d: for d drive f: for f drive and so on

Now that u have reached the folder / drive to unhide a directory key in this command.

attrib -h /S /D

or


attrib -h *.* /S /D


if u are trying to view the heap41a directory created by
Win32/AHKHeap.A worm
type
attrib -h heap41a /S /D
and yes there is space each between each switch used (eg /D, /S, -h)
attrib -h /S /D

Now u should be able to see the hidden folder unless the virus / worm is actively trying to hide the files the u have to remove the virus first

if u have any doubts just post it in the comments.