The first time I encountered a rootkit is when both my laptop and
desktop was infected by a virus called JambanMu. It is a virus but
using rootkit method to hide itself. I felt that something was not
right on both of my computers but no matter what security software that
I used to scan my computers, it would come up nothing. Then I
accidentally found out about a tool called GMER which is able to detect
and remove rootkit. The name of this tool does sound like a gaming tool
but it’s not. Actually I just wanted to take a look at how his tool
works but it ended up telling me about the rootkit that is present on
my system! Then after a little research, I found out that it was the
JambanMu virus that I brought back from one of my work place.

GMER is an application that detects and removes rootkits.

Detect and Remove Rootkit with GMER

It scans for:

  • hidden processes
  • hidden threads
  • hidden modules
  • hidden services
  • hidden files
  • hidden Alternate Data Streams
  • hidden registry keys
  • drivers hooking SSDT
  • drivers hooking IDT
  • drivers hooking IRP calls
  • inline hooks
  • Other than able to detect and remove rootkits, you can also view
    your computer processes, modules, services and files. It can also scan
    and list all the programs that are auto started when Windows is booted
    up. Another good thing about GMER is it has a built-in registry editor
    in case the rootkit or virus has enabled registry editing restriction.
    At the final tab, there is a CMD console where you can run command
    lines if the Windows command prompt has been disabled.

    Like I said, GMER did detect a rootkit on my computer but wasn’t
    able to totally remove it because it is a persistent virus that just
    kept coming back after cleaning it up. If GMER did not inform me about
    the rootkit presence on my computer, I could be the source of infecting
    many other computers with the computer virus.

    A lot of advanced trojan is able to use rootkit technology to hide
    the process by injecting to the kernel level but luckily not often used
    because it is unstable and will cause the computer to crash if it fails
    to inject. Although I personally do not worry so much on rootkit
    infection but it is still good to run GMER once in a while to check on
    my computer for any suspicious hidden process. It takes only a few
    seconds to scan your computer. If you can’t run GMER, maybe your
    computer is already infected by a rootkit that stops GMER from running.
    Try renaming gmer.exe to another name and then run it. There are
    actually a lot more free and portable anti-rootkit software, perhaps I
    should compile a list when I am feeling better from the bad flu that I
    am currently having.

    Download Now

    Technorati Tags: , , , ,

    Powered by Computer 2000

    This tutorial lists many of the keyboard shortcuts that can be found in Windows operating systems. Keep in mind that not all of these shortcuts work in all versions of Windows or may perform a different task than listed here.

    ALT or F10 Highlights the menu options at the top of an application which can then be browsed using the arrow keys.
    ALT + TAB Cycle through open programs. Continue pressing TAB to switch to the desired application. When highlighted, releasing the ALT key will select it.
    ALT + ESC Cycle through open programs. Continue pressing the Esc key to cycle.
    ALT + F4 Close active application.
    CTRL + ALT + Delete (Windows 9x) Reboot/Shutdown the computer.
    CTRL + ALT + Delete (NT, 2000, XP, 2003) Launches Windows security screen.
    CTRL + Print Screen Takes a screenshot of the current view which can be pasted into a graphics program such as Paint or Photoshop.
    CTRL + A Selects all items currently on the screen. Give it a try right now to see what it does.
    CTRL + C Copy an item to the clipboard. Typically, the text, image or file that will be copied must first be selected.
    CTRL + V Paste item from the clipboard.
    CTRL + X Cut (remove) an item and paste it to the clipboard.
    CTRL + S Save the currently active document
    CTRL + P Prints active document
    CTRL + N Opens a new document/window for the active application
    CTRL + Z Undo action. This reverts the last action that you have taken.
    CTRL + Y Redo action
    F1 When viewing the Desktop, this opens Windows Help. When working with an application, it launches the help files for that particular application.
    F2 Rename file. Click once on a file’s icon and hit F2. This will highlight the name of the file and allow you to rename it.
    F3 Find. Within an application, this opens up a search box that will search your open document. In Windows, it will open Windows Search.
    F4 Expands a drop down menu. For example, in Internet Explorer, F4 will drop down the “Address” menu.
    F5 Refresh/reload active window.
    Windows Key or CTRL + ESC Shows or hides the Start Menu
    Windows Key + Pause/Break Launches System Properties
    Windows Key + D or M Minimizes active windows
    Windows Key + E Launches “My Computer”
    Windows Key + F Launches “Search For Files and Folders”
    Windows Key + R Launches the “Run” dialogue box
    Windows Key + CTRL + F Launches the “Search For Computers”
    Windows Key + U Opens Utility Manager. Utility Manager is an accessibility utility that enables you to check the status of accessibility programs (Microsoft Magnifier, Narrator, On-Screen Keyboard) and to start or stop them.
    HOME In word processing applications this will take you to the beginning of the current line. In other apps, it may take you to the top of the page.
    END In word processing applications this will take you to the end of the current line. In other apps, it may take you to the bottom of the page.
    CTRL + HOME Moves cursor to the top of the page.
    CTRL + End Moves cursor to the bottom of the page.
    Page Up Moves the cursor in your document or screen up one page.
    Page Down Moves the cursor in your document or screen down one page.

    Here are some of the more odd keyboard shortcuts.

    Hold Right SHIFT for 8 seconds Switches FilterKeys on and off.
    Left ALT + Left Shift + Print Screen Switch High Contrast mode on and off.
    Left ALT +Left Shift + NUM LOCK Switch MouseKeys on and off.
    Press SHIFT 5 times Switch StickyKeys on and off.
    Hold NUM LOCK for 5 seconds Switch ToggleKeys on and off.

    Technorati Tags:

    Powered by Computer 2000

    No matter how fast your processor and regardless of how much ram you carry, there comes a time when you realize your computer just doesn’t run as fast as it did when you bought it. Windows loads slower, programs take longer to launch, and, in general, your computer drags like it just came off a 2-night drinking binge. If this sounds like your situation, these 5 tips should help you get some extra speed from your PC.

    Disk Cleanup Utility
    You may not realize it, but just because you finish with a file doesn’t mean your computer does. In many cases, if your computer’s hard drive were a garage, you would have unused junk files piled 20 feet high and spilling out into the street. Everyone should use the Windows “Disk Cleanup Utility” to delete old, unused, and temporary files that clog your hard drive.

    Click Start, point at All Programs (or Programs), Accessories, System Tools, and click Disk Cleanup. Analyze your hard drive for files you can eliminate and it may shock you to see how much hard drive space (and speed) you can free up with a few clicks.

    Defrag
    Imagine a properly maintained hard drive as room the size of Wal-Mart filled with filing cabinets. Now imagine ripping open every drawer of every filing cabinet, slinging the contents onto the floor and trying to find one document -that’s a fragmented hard drive. Sometimes lack of speed simply results from your computer working too hard to find the files it needs. You can solve this problem by “defragging” your hard drive.

    Click Start, point to All Programs (or Programs), Accessories, System Tools, and click Disk Defragmentor. Choose the disk you want to defragment and expect to let the program run for several hours.

    Uninstall Unused Software
    We all maintain software on our systems we rarely, if ever, use. That software can steal system resources.

    Click Start, Control Panel, and “Add Remove Programs” to pull up a screen that allows you to remove old programs you don’t use anymore. Simply select and uninstall all programs you know for sure you don’t need or want.

    Trial software testing

    Buy More RAM
    Increasing your RAM, a computer’s memory, can dramatically increase speed when running certain operations or programs. RAM costs so littlenow that you should install the maximum amount of memory your system can handle.

    If your computer seems slow, now’s the time for additional RAM

    Stop Them At Startup
    This operation requires a bit more technical savvy than the other four, so proceed with caution. Many programs load into the system tray in the lower right of your computer’s desktop and consume system resources even if you never use them.

    Click Start, Run, type in msconfig, and press Enter. Click the “Startup” tab to see a list of programs that automatically start with Windows. Clear the check box next to programs you know you don’t want to load at startup.

    But don’t clear any checkbox unless you are 100% certain of a program’s purpose. Once you finish, click OK and it will prompt you to restart Windows.

    Tags:

    Powered by Computer 2000