Thursday, June 11, 2009

Remove heap41a virus

How to Remove heap41a virus

  1. Press CTRL+ALT+DEL to open task manager

  2. Go to the processes tab and look for svchost.exe under the "image name". There will be many but look for the ones which have your username under the "username".

  3. Press DEL to kill these files. It will give you a warning, simply press Yes

  4. Repeat for other svchost.exe files with your username. Note: Do not kill svchost.exe under system, local service or network service.

  5. Type C:\heap41a in Start Menu > run.. and press enter. You need to do this because it is a hidden folder.

  6. Delete all files inside this folder.

  7. Again go to Start Menu > Run and type in Regedit

  8. Go to the menu Edit > Find

  9. Type "heap41a" here and press enter. You will get something like this "[winlogon] C:\heap41a\svchost.exe C:\heap(some number)\std.txt"

  10. Select that and Press DEL. It will ask "Are you sure you wanna delete this value", click Yes

  11. Now close the registry editor and you are done.

Make sure to delete the autorun.inf file and any unrecognized file ends with .exe in your pen drives and other external hard drives otherwise it will replicate itself again.

Enable or Disable Add-ins in Outlook 2007

To Enable or Disable Add-ins in Outlook 2007:

Please follow below steps

  • In Outlook 2007, go to Tools > Trust Center
  • Click on the Add-ins section
  • You will now see all active, non-active, and disabled add-ins.Click on the add-in you Want to enable/disable and then click on the Go button towards the bottom.
  • This will then open up the COM add-ins page. You can then check/uncheck the Add-ins you want to enable or disable.


How to find disable outlook 2007 add-ins and plugins

Disabling unnecessary plugins is a great way to make your Outlook run smoother. In Outlook 2007 Add-ins are listed under “Tools->Trust Center->Addins”. There are two types of Addins - COM Add-ins and Exchange Client Extensions.

Please follow below steps

1 To disable COM Add-ins:

  • Select “COM Add-ins” in the Manage drop-down at the bottom of the Trust Center window and click “Go”.

  • Uncheck any add-ins that you are not using.

2 To disable Exchange Client Extensions

  • Select “Exchange Client Extensions” in the Manage drop-down at the bottom of the Trust Center window and click “Go”.

  • Uncheck any add-ins that you are not using.

Please note that changes you made will only applied after outlook restarted

To Make Windows XP Shutdown Faster


In Windows XP Sometimes It Takes More Time To Shutdown The System, Usually This Happens One Or More Applications Is Hanging Up To 20 Seconds While The OS Tries To Shutdown. We Have A Couple Of Registry Tweaks To Help Force Windows To Shut Down More Quickly. Before Making Any Changes To The Registry It Is Highly Recommend To Create Backup


The first thing we need to go to registry editor. to do so click Start \ Run and type in “regedit” (no quotes) then click OK.


Now with the Registry Editor open locate the following key

HKEY_CURRENT_USER \ Control Panel \ Desktop

scroll down to HungAppTimeout and change the default 5000 to 1000 then click OK.

Then scroll down to WaitToKillAppTimeout from 20000 to 1000 then click OK.


Keep the Registry Editor open as we have 3 more values to change in two different sections.


Next we are going to

HKEY_LOCAL_MACHINE \ System \ CurrentControlSet \ Control

and double click on WaitToKillServiceTimeout to 1000 then click OK.


Finally, we need to navigate to

HKEY_USERS \ DEFAULT \ Control Panel \ Desktop

and change HungAppTimeout to 1000 and click OK.


Then scroll down to WaitToKillAppTimeout to 1000 and click OK.


backup and restore registry in windows xp

Manual steps to backup and restore registry in windows xp


Create backup

  1. Click Start, click Run, type %SystemRoot%\system32\restore\rstrui.exe, and then click OK.

  2. On the Welcome to System Restore page, click Create a restore point, and then click Next .

  3. On the Create a Restore Point page, type a name for the restore point and then click Create

  4. After the restore point has been created, click Close.

Restore backup

  1. Click Start, click Run, type %SystemRoot%\System32\Restore\Rstrui.exe, and then click OK.

  2. On the Welcome to System Restore page, click Restore my computer to an earlier time (if it is not already selected), and then click Next .

  3. On the Select a Restore Point page, click the system checkpoint. In the On this list select the restore point area, click an entry that is named "Guided Help (Registry Backup)," and then click Next. If a System Restore message appears that lists configuration changes that System Restore will make, click OK.

  4. On the Confirm Restore Point Selection page, click Next. System Restore restores the previous Windows XP configuration and then restarts the computer.

  5. Log on to the computer. When the System Restore confirmation page appears, click OK..

Backup and restore registry key


For example, let’s assume that we are working with the programs that start automatically when we start the computer. We want to be sure that we don’t mess up these registry entries so we want to back up the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

registry key. To do this, we would perform the following steps.

  1. Start the Registry Editor by going to Start→Run…, typing in regedit and then clicking the OK button.

  2. Browse to the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run registry key and click on it.

  3. Under the File menu, click on Export…

  4. Save the file as Startup.reg on the desktop.

You have successfully saved the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run registry key as Startup.reg.

The Startup.reg file is actually just a text file and you can open it up in notepad to see what is in it. If you want to add these registry settings back into your registry, simply right-click on the Startup.reg file and select Merge.

Note: When you merge a registry file back into the registry, it will overwrite any settings that are in that registry key. Use with caution!


Sunday, June 7, 2009

create folder option shortcut


Create folder option shortcut, please follow steps below

1 create new shortcut (right click in desktop and click create new shortcut

2 in the location field (type the location of the item)

type control folders

3 in the name field (type a name for this shortcut)

type shell32.dll

4 click finish

5 double click the shortcut and you will find that you can open folder option window with that shortcut.


Note: you can find target of the newly created shortcut, to do so right click in the shortcut and click properties. see the target field it looks like following

%windir%\system32\control.exe folders


If you copy control.exe folders in run command and press ok you will find that again you can open folder option window.

Remove autorun.inf virusus Using command prompt

Remove autorun.inf virusus Using command prompt

use "attrib" to check for Viruses or Malware

"attrib" is a very useful tool to check if your hard drives even your usb disks have been infected by a virus.

You will know if a Malware is inside your hard drive just by looking at the attributes of each files and the file that has the attributes of +s +h +r

The function of attrib is to set and remove file attributes (read-only, archive, system and hidden).


start attrib

To start attrib

  1. Go to Start Menu > Run

  2. Type cmd (cmd stands for command prompt)

  3. Press Enter key

The Command Prompt will appear showing us where is our location in the directory.


using attrib

To use attrib

Go to command prompt

1 then Go to the root of the directory first by typing cd\ then press enter.(because this is always the target of Malware / Virus)

2. Type attrib and press Enter key

+s - meaning it is a system file (which also means that you cannot delete it just by using the delete command)

+h - means it is hidden (so you cannot delete it)

+r - means it is a read only file ( which also means that you cannot delete it just by using the delete command)

Now we need to set the attributes of autorun.inf to -s -h -r (so that we can manually delete it)

  1. Type attrib -s -h -r autorun.inf in command prompt and press enter.( be sure to include -s -h -r because you cannot change the attributes using only -s or -h or -r alone)

  2. Type attrib again to check if your changes have been commited

  3. If the autorun.inf file has no more attributes, you can now delete it by typing del autorun.inf

Repeat these steps for removing virusus from the other partitions,external hard disks or usb drives.

NOTE : when autorun.inf keeps coming back even if you already deleted it, be sure to check your Task Manager by pressing CTRL + ALT + DELETE ( a virus is still running as a process. that’s why you cannot delete it. KILL the process first by selecting it and clicking End Process.use process killing softwares like runscanner or autoruns to view suspected process.you can find these softwares under our freeware tools page.

system restore using bootable cd

System restore with bootable cd support (ubcd4win or Hiren bootcd 9.8) in windows xp

In some cases you cant start your pc with windows xp, (even safe mode) sometimes it display error messages and stop continue, most this happened by corrupt system files and virus problem, to resolve this issue you can try system restoring, but this method is different and you need special bootable cd called as UBCD4WIN or Hiren bootcd 9.8.don't worry this cds is free of charge and download from our website. further steps as follows.


1 first set your pcs bios first boot device as cdrom, save and exit bios setup.

2 then insert ubcd4win cd into the cdrom.

3 then pc begin to booting with cdrom support

4 after all files were copied, you will get desktop pretty much similar to windows xp

5 locate system volume information folder in your windows installation partition

(eg-root of C drive)

6 go to system volume information folder

7 then select one of restore point (eg RP1 , RP2 ) and go to inside folder

8 go to snapshot folder

9 copy the following files.

_REGISTRY_MACHINE_SAM

_REGISTRY_MACHINE_SECURITY

_REGISTRY_MACHINE_SOFTWARE

_REGISTRY_MACHINE_SYSTEM

_REGISTRY_USER_.DEFAULT

10 Create new folder named config

11Copy above files to this folder

12 rename these files exactly looks like below

SAM

SECURITY

SOFTWARE

SYSTEM

DEFAULT

13 go to the following path

C:\WINDOWS\system32 (in here C: mentioned as windows installation partition)

14 locate folder named config

15 rename this folder as you like (eg – config old) (note – backup this folder before rename in case of emergency)

16 go to the folder earlier we created as config (in step 10, make sure all files were here and renamed correctly like in step 12)

17 copy this folder and paste in the following path

C:\WINDOWS\system32

18 restart pc.

19 reconfigure pcs bios first boot device as harddisk

20 save and exit

21 check your pc can start windows xp.


Most of the time this method is 100% success, we overcome this problem in many occasions. if your pc still cant boot from xp select another restore point and repeat steps from 8,if it still fails you have to do clean windows installation.

speedup start menu

to speedup start menu speed carefully follow below steps.
  1. Open the Start menu, click on Run, then type regedit and click OK.
  2. Find the following registry key:
    HKEY_CURRENT_USER\Control Panel\Desktop
  3. Find the string value MenuShowDelay, then right-click Modify and edit the value.
  4. Change the default value (which is 400) to something lower. The lower the number the faster it will open.

Increase Computer Startup Speed


One of the Main Reason that slow down the startup speed is the "Huge list of Startup Programmes". Some programme by default create a startup entry, such as Yahoo Messenger, Windows Live Messenger Skype etc.. It is not possible to find all your startup programme if you Go Start > Programmes > Startup. If you can disable unwanted startup programmes, your computer's start up speed will increase. please do as follows.

Press Win Key + R or Start > Run

Type msconfig presss ok

'System Configuration Utility' will open. Click on "Startup" Tab
That's where you will see the huge list of Start up Programme. You can get more detail of a Particular Programme by looking at Command and Location

What to Disable and What not to Disable?

In fact you can disable all Programme, But we recommand you to keep the Programme such as Antivirus, Spy ware removal Programme. If you have Norton Anti-vius Programme installed in your computer.
Click on Service Tab

Check "Hide Microsoft Srevices" Now Disable all the service, except the service you want to run background when computer start up such Antivirus, Spyware Removal and Firewall Software.

After you have completed the work with disabling start up Programme and services, Press Ok. You will be asked to restart the Computer. When you start the computer next time, you will get Notification window about your "System Configuration Utility". You 'check' not to show this notification again and press ok. That's it.