Rootkit Detector and Remover
March 23, 2009
The first time I encountered a rootkit is when both my laptop and
desktop was infected by a virus called JambanMu. It is a virus but
using rootkit method to hide itself. I felt that something was not
right on both of my computers but no matter what security software that
I used to scan my computers, it would come up nothing. Then I
accidentally found out about a tool called GMER which is able to detect
and remove rootkit. The name of this tool does sound like a gaming tool
but it’s not. Actually I just wanted to take a look at how his tool
works but it ended up telling me about the rootkit that is present on
my system! Then after a little research, I found out that it was the
JambanMu virus that I brought back from one of my work place.
GMER is an application that detects and removes rootkits.
It scans for:
hidden processes hidden threads hidden modules hidden services hidden files hidden Alternate Data Streams hidden registry keys drivers hooking SSDT drivers hooking IDT drivers hooking IRP calls inline hooks
Other than able to detect and remove rootkits, you can also view
your computer processes, modules, services and files. It can also scan
and list all the programs that are auto started when Windows is booted
up. Another good thing about GMER is it has a built-in registry editor
in case the rootkit or virus has enabled registry editing restriction.
At the final tab, there is a CMD console where you can run command
lines if the Windows command prompt has been disabled.
Like I said, GMER did detect a rootkit on my computer but wasn’t
able to totally remove it because it is a persistent virus that just
kept coming back after cleaning it up. If GMER did not inform me about
the rootkit presence on my computer, I could be the source of infecting
many other computers with the computer virus.
A lot of advanced trojan is able to use rootkit technology to hide
the process by injecting to the kernel level but luckily not often used
because it is unstable and will cause the computer to crash if it fails
to inject. Although I personally do not worry so much on rootkit
infection but it is still good to run GMER once in a while to check on
my computer for any suspicious hidden process. It takes only a few
seconds to scan your computer. If you can’t run GMER, maybe your
computer is already infected by a rootkit that stops GMER from running.
Try renaming gmer.exe to another name and then run it. There are
actually a lot more free and portable anti-rootkit software, perhaps I
should compile a list when I am feeling better from the bad flu that I
am currently having.
Technorati Tags: rootkit, security, GMER, catchme, cleaner
Powered by Computer 2000
Windows Keyboard Shortcuts
March 23, 2009
This tutorial lists many of the keyboard shortcuts that can be found in Windows operating systems. Keep in mind that not all of these shortcuts work in all versions of Windows or may perform a different task than listed here.
ALT or F10 | Highlights the menu options at the top of an application which can then be browsed using the arrow keys. |
ALT + TAB | Cycle through open programs. Continue pressing TAB to switch to the desired application. When highlighted, releasing the ALT key will select it. |
ALT + ESC | Cycle through open programs. Continue pressing the Esc key to cycle. |
ALT + F4 | Close active application. |
CTRL + ALT + Delete (Windows 9x) | Reboot/Shutdown the computer. |
CTRL + ALT + Delete (NT, 2000, XP, 2003) | Launches Windows security screen. |
CTRL + Print Screen | Takes a screenshot of the current view which can be pasted into a graphics program such as Paint or Photoshop. |
CTRL + A | Selects all items currently on the screen. Give it a try right now to see what it does. |
CTRL + C | Copy an item to the clipboard. Typically, the text, image or file that will be copied must first be selected. |
CTRL + V | Paste item from the clipboard. |
CTRL + X | Cut (remove) an item and paste it to the clipboard. |
CTRL + S | Save the currently active document |
CTRL + P | Prints active document |
CTRL + N | Opens a new document/window for the active application |
CTRL + Z | Undo action. This reverts the last action that you have taken. |
CTRL + Y | Redo action |
F1 | When viewing the Desktop, this opens Windows Help. When working with an application, it launches the help files for that particular application. |
F2 | Rename file. Click once on a file’s icon and hit F2. This will highlight the name of the file and allow you to rename it. |
F3 | Find. Within an application, this opens up a search box that will search your open document. In Windows, it will open Windows Search. |
F4 | Expands a drop down menu. For example, in Internet Explorer, F4 will drop down the “Address” menu. |
F5 | Refresh/reload active window. |
Windows Key or CTRL + ESC | Shows or hides the Start Menu |
Windows Key + Pause/Break | Launches System Properties |
Windows Key + D or M | Minimizes active windows |
Windows Key + E | Launches “My Computer” |
Windows Key + F | Launches “Search For Files and Folders” |
Windows Key + R | Launches the “Run” dialogue box |
Windows Key + CTRL + F | Launches the “Search For Computers” |
Windows Key + U | Opens Utility Manager. Utility Manager is an accessibility utility that enables you to check the status of accessibility programs (Microsoft Magnifier, Narrator, On-Screen Keyboard) and to start or stop them. |
HOME | In word processing applications this will take you to the beginning of the current line. In other apps, it may take you to the top of the page. |
END | In word processing applications this will take you to the end of the current line. In other apps, it may take you to the bottom of the page. |
CTRL + HOME | Moves cursor to the top of the page. |
CTRL + End | Moves cursor to the bottom of the page. |
Page Up | Moves the cursor in your document or screen up one page. |
Page Down | Moves the cursor in your document or screen down one page. |
Here are some of the more odd keyboard shortcuts.
Hold Right SHIFT for 8 seconds | Switches FilterKeys on and off. |
Left ALT + Left Shift + Print Screen | Switch High Contrast mode on and off. |
Left ALT +Left Shift + NUM LOCK | Switch MouseKeys on and off. |
Press SHIFT 5 times | Switch StickyKeys on and off. |
Hold NUM LOCK for 5 seconds | Switch ToggleKeys on and off. |
Technorati Tags: Windows Keyboard Shortcuts
Powered by Computer 2000
5 Ways to Speed Up Your PC
March 23, 2009
No matter how fast your processor and regardless of how much ram you carry, there comes a time when you realize your computer just doesn’t run as fast as it did when you bought it. Windows loads slower, programs take longer to launch, and, in general, your computer drags like it just came off a 2-night drinking binge. If this sounds like your situation, these 5 tips should help you get some extra speed from your PC.
Disk Cleanup Utility
You may not realize it, but just because you finish with a file doesn’t mean your computer does. In many cases, if your computer’s hard drive were a garage, you would have unused junk files piled 20 feet high and spilling out into the street. Everyone should use the Windows “Disk Cleanup Utility” to delete old, unused, and temporary files that clog your hard drive.
Click Start, point at All Programs (or Programs), Accessories, System Tools, and click Disk Cleanup. Analyze your hard drive for files you can eliminate and it may shock you to see how much hard drive space (and speed) you can free up with a few clicks.
Defrag
Imagine a properly maintained hard drive as room the size of Wal-Mart filled with filing cabinets. Now imagine ripping open every drawer of every filing cabinet, slinging the contents onto the floor and trying to find one document -that’s a fragmented hard drive. Sometimes lack of speed simply results from your computer working too hard to find the files it needs. You can solve this problem by “defragging” your hard drive.
Click Start, point to All Programs (or Programs), Accessories, System Tools, and click Disk Defragmentor. Choose the disk you want to defragment and expect to let the program run for several hours.
Uninstall Unused Software
We all maintain software on our systems we rarely, if ever, use. That software can steal system resources.
Click Start, Control Panel, and “Add Remove Programs” to pull up a screen that allows you to remove old programs you don’t use anymore. Simply select and uninstall all programs you know for sure you don’t need or want.
Buy More RAM
Increasing your RAM, a computer’s memory, can dramatically increase speed when running certain operations or programs. RAM costs so littlenow that you should install the maximum amount of memory your system can handle.
If your computer seems slow, now’s the time for additional RAM
Stop Them At Startup
This operation requires a bit more technical savvy than the other four, so proceed with caution. Many programs load into the system tray in the lower right of your computer’s desktop and consume system resources even if you never use them.
Click Start, Run, type in msconfig, and press Enter. Click the “Startup” tab to see a list of programs that automatically start with Windows. Clear the check box next to programs you know you don’t want to load at startup.
But don’t clear any checkbox unless you are 100% certain of a program’s purpose. Once you finish, click OK and it will prompt you to restart Windows.
Tags: Speed Up Your PC
Powered by Computer 2000