Archive

Posts Tagged ‘Task Manager’

Lookup Unknown Files

December 9th, 2007

When was the last time that you checked your Task Manager for potentially dangerous files? I’ll admit that I don’t do it all that often because I put a lot of faith in my antivirus software, but I have been known to Google apps that I don’t recognize. I’m sure you’ve done your fair share of Googling filenames, right? Today I finally decided that there had to be a good site out there that I could use to lookup unknown files, in particular I wanted something that wasn’t popup infested! I went through dozens of sites before I came across WhatIsThatFile.com. It has a somewhat slick interface that shows matching filenames as you type in the search box. It will highlight files that are potentially dangerous, such as a virus or malware, and give a brief description of each. It will even let you know if an application is a prime target for infections, such as Internet Explorer (iexplore.exe). Right now it is home to information on over 3,000 files, which is a rather large selectio... Read More

ViNSENTO Tech Tips, Tutorials, Web Tips , , , , , , , , , , , , , , , , , ,

How to remove .vbs Autorun Worms

October 17th, 2007

example of it is the pooh.vbs. It exploits the autorun feature in memorycards and copies itself to computers and connected memory cards thereafter Because it does not spread itself to the internet, it hasn’t gained enough notoreity to be included in virus defenses of various programs Be sure to also clean your infected memory cards… Here’s how you clean it: Download startup control Panel at mlin.net (You’re going to use this later) Go to your Task Manager (Ctrl+Alt+Del)Terminate the Wscipt.exe processTerminate the Explorer.exe process Click New Task and Type “cmd” (without the quotes) type the following in your command prompt del c:\pooh.vbs /f/s/q/adel d:\pooh.vbs /f/s/q/a(include your other drives and USB drives that have been infected) del c:\autorun.infdel d:\autorun.inf(include your other drives and USB drives that have been infected) del c:\windows\system32\kernell.dll.vbs del c:\aikelyu.html /f/s/q/a Use the start-up program from mlin.net to r... Read More

ViNSENTO How-to, Tech Tips, Tutorials , , , , , , , , , , , , , , , , , , , ,

Removing IMGKULOT (VBS/Capiz-A) from your system

September 25th, 2007

Yesterday I helped a friend check his computer running WindowsXP. It has been continually displaying the follwing error: Windows – No Disk Exception Processing Message c0000013 Parameters 75b6bf9c 4 75b6bf9c 75b6bf9c As it turns out, his computer had a virus, quite a new one, which is called IMGKULOT, or VBS/Capiz-A. We were able to remove the virus manually. In case your computer gets infected with the same virus, here are the steps to do: Open the Task Manager by presssing Ctrl-Alt-Del and clicking on the Task Manager button on the dialog box that appears. In the Processes tab, locate wscript.exe. If you can’t see it, try clicking on the “Show processes from all users” checkbox. Highlight wscript.exe, and click on the “End Process” button. Highlight explorer.exe and click on the “End process” button as well. In the Task Manager menu, select File->New Task (Run…), type “cmd” on the Create New Task dialog box, and click on the OK button. This will open a c... Read More

ViNSENTO How-to, Tech Tips, Tutorials , , , , , , , , , , , , , , , , , , , ,