change unix time (10 digit) to date format

mysql : from_unixtime

oracle : unixts_to_date (for oracle8)

php : echo date('Y-m-d H:i:s', 1325729398);

Virus Tutorial: Making viruses non-active with MsConfig (Part III)

When we found viruses in Windows Task Manager and we have used software which acting as task manager, it is better if we combine it with Msconfig. This is how we do:

1. Get into the safemode (can be read in the previous articles).

2. Click Start>>RUN, click msconfig>>startup>>untick mark at the virus items.

3. There are several viruses which making this msconfig disabled.

Try to use script from vaksin.com

...............................

[Version]

Signature="$Chicago$"

Provider=Vaksincom

[DefaultInstall]

AddReg=UnhookRegKey

DelReg=del

[UnhookRegKey]

HKLM, Software\CLASSES\batfile\shell\open\command,,,"""%1"" %*"

HKLM, Software\CLASSES\comfile\shell\open\command,,,"""%1"" %*"

HKLM, Software\CLASSES\exefile\shell\open\command,,,"""%1"" %*"

HKLM, Software\CLASSES\piffile\shell\open\command,,,"""%1"" %*"

HKLM, Software\CLASSES\regfile\shell\open\command,,,"regedit.exe "%1""

HKLM, Software\CLASSES\scrfile\shell\open\command,,,"""%1"" %*"

HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell,0, "Explorer.exe"

[del]

HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System,DisableRegistryTools

HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System,DisableCMD

HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer,NoFolderOptions

HKCU, Software\Microsoft\Windows\CurrentVersion\Run,Tok-Cirrhatus

HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Run,Bron-Spizaetus

..........................

Copy to note pad with buka.inf

It is easy to use, right click this file then click “install”.

To get better result, you can combine it with regedit.

Virus Tutorial: Detecting viruses through Windows Task Manager (Part II)

Once, my computer became slow after I plugged a flash disk without scanning it first. I assumed it was usual if a computer became slow, but I finally detect that there was something wrong. Finally, I searched the information and found out that it was because local viruses. They duplicated folders so the harddisk became full.

I tried checking through Windows Task Manager by pushing Ctrl+Alt+Del in one time. There I found applications with weird names running by consuming huge memory. Sometimes the processes can not be deleted (End Process), but don’t panic. There are several ways to stop those unwanted processes.

1. Try to show Windows Task Manager, if it is disabled by the viruses try to use softwares there are in internet. Googling with the keyword “cprocess, Autoruns, iKnowProcess and ProcessExplorerNt.

2. If it doesn’t work, try safemode. Generally, most viruses aren’t active in safe mode. We can enter into safe mode by pushing F8 botton when Windows restart after bios screen showes up dan before the sign on Windows appears.

If it still doesn’t work, there are several ways such as using MSconfig. We’ll talk about it in some other time…



May this writing is useful for you…

...