Task manager registry editor disabled due to virus

Windows Registry : Something you must know

http://digitalpbk.blogspot.com/2007/03/windows-registry-something-you-must.html manager and registry editor can be disabled by entries in this folder. If DisableRegistryTools, DisableTaskMgrhas a value 1, then regedit.exe and taskmgr.exe (registry editor and task manager cannot be run !!) Some viruses make use of this to disable the end tasking of virus applications. ...

WORM_RONTOKBRO.Y versus me

http://digitalpbk.blogspot.com/2007/01/wormrontokbroy-versus-me.html by the virus, it restarted the computer ! But I got the exe name "eksplorasi.exe".Battle 2: RegeditIn an effort to save my system, after rebooting tried to run the "regedit" registry editor where most viruses register in the HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Runto start when the computer starts. But I failed in the battle again. It has disabled the registery editor. Battle 3:Safe modeIn the next battle, I rebooted the computer in safe mode (F8 before booting ...

Brontok Virus manual removal steps

http://digitalpbk.com/virus/brontok-manual-removal-steps-free-tool out for the following symptoms : Unable to access any anti virus sites Folder options is disabled in Windows Explorer Unable to run Windows Registry Editor regedit.exe System restarts often Brontok Manual Removal Steps In order to remove Brontok Manually, the following steps have to be followed. The virus restarts the computer if you try to kill the process. So its favourable if you have a different OS on the same machine or plug your hard drive to a different system and clean it up. Read ...

jwgkvsq.vmx - Conficker virus manual removal

http://digitalpbk.blogspot.com/2009/04/jwgkvsqvmx-conficker-virus-manual.html Conficker disables the Background Intelligent Transfer Service (BITS) and Windows Automatic Updates. So If you find these services disabled, be alert. (To checkout what services are running and their statuses Run > services.msc.Follow these steps to detect and remove Conficker virus:Run regedit.exe registry editorGoto HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\SvcHost\netsvcsDouble click the key to see if there is a random value at its end.Note the "zbtthjd" at the end ...

Permission Denied on Hosts File (Windows 7)

http://digitalpbk.com/windows/host-file-windows-7-write-permission-denied Permission Denied on Hosts File (Windows 7) On Windows 7, I was trying to edit the host file using Komodo and was getting Permission Denied, and tried notepad too still got permission denied. I thought initially it was McAfee Anti Virus that was disabling the edit of host file as this file is an important system configuration file. The reason but was that Windows requires the editor to run with administrator privileges to edit the file, this is different in Windows XP because all programs ...

microsoftpowerpoint.exe win32 usb worm manual removal

http://digitalpbk.blogspot.com/2008/04/microsoftpowerpointexe-win32-usb-worm.html the contents of the folder. Usually in /Documents and Settings/User/Local Settings/Temp/.Now the system must be free of the virus. Disable the autorun to prevent further infections.To prevent infections again to the usb, delete the contents of MicrosoftPowerPoint.exe and place a 0byte file with the same name.Thats all:) ...

Disable Autorun Windows XP

http://digitalpbk.blogspot.com/2007/10/disable-autorun-windows-xp.html Disable Autorun Windows XP Do this very important!!Most viruses uses the autorun.inf to get itself infected on your computer. Autorun.inf is a small file that instructs the windows os to do when the CD is inserted into the computer. In genuine cases , it runs a setup in case of a Software Installation Disc. In the other case it may run a virus and gets your system infected. All you got to do to get the virus is put the CD. Same is the case for Mass Storage Devices like Memory Sticks, Pen Drives ...

0x80070002-A problem is preventing Windows from accurately checking the license for this computer

http://digitalpbk.blogspot.com/2008/04/0x80070002-problem-is-preventing.html the following from Microsoft knowledge base.Reset the default security provider in Windows XPTo reset the default security provider in Windows XP, delete the relevant registry keys in the Windows registry. To do this, follow these steps:1. Start the computer. Press the F8 key during startup to start the computer in Safe mode.2. Start Registry Editor (Regedt32.exe).3. Delete the following registry keys in the Windows registry:HKEY_USERS\.DEFAULT\Software\Microsoft\Cryptography\ProvidersHKEY_USERS\S-1 ...

amvo.exe Virus Manual Removal Steps

http://digitalpbk.blogspot.com/2008/02/amvoexe-virus-usb-memory-stick.html solution. To get rid run regedit, find all keys related to amvo.exe or the name of the virus.Run msconfig in the Start Up Tab you can find the amvo.exe or its variants.Remove all occurrence of the name from regedit.Reboot the System.Step 2Reboot and do the following changes to the Registry using regeditHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer searchidden en 1HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer searchsystemdirs en 1HKEY ...

XSS - Part 2 (Cookie stealing and Defacement)

http://digitalpbk.blogspot.com/2006/12/xss-part-2-cookie-stealing-and.html XSS - Part 2 (Cookie stealing and Defacement) Please note that this article is for educational purposes only, and is targeted at webmasters who have never seen this scenario. Please donot harm anyone. Disclaimer : I am not responsible for any damages arising due to methods specified in this page. Webmasters please fix it ASAP.In the first part we injected javascript successfully, and we got an alert. Now let us move to step 2 , defacing and cookie stealing.Cookie Stealing using XSSCookie ...