Jigsaw Boys

How To: Remove Virus Trigger 2009

Jamsi — Thu, 13 Nov 2008 04:19:36 +0000

Yet another rogue spyware program on the loose, this time named “Virus Trigger 2009″.

One thing I noticed about this program, is that the website looks quite professional and appears in the number 1 spot in google when you search for keyword “Virus Trigger 2009″. Nasty huh.

Time to check this baby out.

After firing up my dummy box, I proceeded to download Virus Trigger 2009.

Screenshots

Like most Rogue Spyware applications, its hard to actually minimize or close the Virus Trigger window, especially when it prompts you to purchase the application.

Manual Removal of Virus Trigger 2009

Virus Trigger 2009 installs itself into the following folder.
c:\program files\VirusTriggerBin <- Delete this folder

Virus Trigger 2009 runs as the following processes
VirusTriggerBin.exe and uninst.exe <- Use the taskmanager to kill these processes

Removing from Startup
To remove this program from starting up when your computer starts, following these instructions

1) Click the start menu, then run
2) Type “msconfig” and hit enter
3) Click the startup Tab
4) Untick “VirusTriggerBin”
5) Reboot

The Solution

Whilst you can manually remove “Virus Trigger 2009″ by simply deleting registry keys and files as per the manual removal stage featured above, its much easier to remove “Virus Trigger 2009″ simply by using PCTools Spyware Doctor..

PCTools Spyware Doctor
The team here at Jigsawboys recommends this product to everyone, in fact just last week I told my 76 year old grandma to install it to protect her PC! But PCTools Spyware Doctor is not just for amateurs, its unique advanced options allow novice computer users to get underneath the program to fully customize a security solution that suit your needs.

Download PCTools Spyware Doctor for Free

Why use PCTools Spyware Doctor

World class virus detection; PCTools have won many awards all over the world for their software applications. Including PC Magazines “Editors Choice” (2008) and also Ica Labs “Certified AntiVirus” (2008)
What Antivirus company do you know that offers 24/7 support? Thats right, call PCTools day or night.
The company resides in Sydney, Australia so you can be sure that you will receive fast, friendly support 24/7!

No related posts.

How To: Remove Ultra Antivirus 2009

Jamsi — Tue, 11 Nov 2008 11:59:13 +0000

Yet another nasty rogue anti-spyware program is amongst us, this time named “Ultra Antivirus 2009″. I managed to get this baby loaded on my test machine and boy did I let her rip!

Ultra Antivirus 2009 pretends to be a “Anti-Spyware” program, often tricking users into thinking its a legitimate program. The main goal of Ultra Antivirus 2009 is to trick users into purchasing the software, often by providing fake scan results and informing the user that the software detected threats on the computer.

But alas that is not true, and when reality kicks in; your computer is in fact fine. Ultra Antivirus 2009’s main goal is to get you to Purchase Their Product!

For gods sake DON’T DO IT!

Screenshots

Analysis Stage

Ultra Antivirus 2009 installs itself into the following folder.
c:\program files\UltraAv <- Delete this folder!

Through some analysis, I uncovered that Ultra Antivirus 2009 connects to the following server in order to retrieve new information regarding payment details.
Internet Protocol, Src: 91.208.0.223 (91.208.0.223)
Not Good ..

Removing from Startup
To remove this program from starting up when your computer starts, following these instructions

1) Click the start menu, then run
2) Type “msconfig” and hit enter
3) Click the startup Tab
4) Untick “UltraAV”
5) Reboot

The Solution

Whilst you can manually remove Spyware protector by simply deleting registry keys and files as per the Analysis stage featured above, its much easier to remove Ultra Antivirus 2009 simply by using PCTools Spyware Doctor.

Download PCTools Spyware Doctor for Free

Why use PCTools Spyware Doctor

World class virus detection; PCTools have won many awards all over the world for their software applications. Including PC Magazines “Editors Choice” (2008) and also Ica Labs “Certified AntiVirus” (2008)
What Antivirus company do you know that offers 24/7 support? Thats right, call PCTools day or night.
The company resides in Sydney, Australia so you can be sure that you will receive fast, friendly support 24/7!

No related posts.

Remove Win32/Heur Virus

Jamsi — Tue, 11 Nov 2008 02:00:54 +0000

So a friend of mine had a virus called “Win32/Heur”. According to research, the Win32 Heur virus spreads via peer to peer programs such as iMesh, WinMX, Ares and torrents. This virus is nasty for a few reasons;

It actually records your browsing activities and displays advertisements to you based on your usage.
It de-activates your anti-virus and firewall programs
It spreads like crazy!

How can I fix this?

To remove the Win32/Heur virus I ended up getting my friend to download PCTools Internet Security which completely removed the virus.

Its free to download so give it a try!

No related posts.

Downgrade from IE8 to IE7

Jamsi — Tue, 11 Nov 2008 01:06:55 +0000

So you’ve tried Internet Explorer 8 (IE8) and you’re not impressed. Lucky for you there’s a quick solution to downgrade back to trusty old IE7!

Windows XP Solution
1) Click the Start menu, control panel
2) From the control panel select “Add/Remove programs”
3) Find Internet Explorer 8 and proceed to uninstall it.

After the uninstall is complete you’ll be able to use IE8.

Windows Vista Solution
1) Click the Start menu, control panel
2) From the control panel select “Programs and Features”
3) Find Internet Explorer 8 and proceed to uninstall it.

No related posts.

Vista NTLM Setting

Jamsi — Fri, 07 Nov 2008 04:02:01 +0000

A few users have reportedly had troubles with accessing storage devices that require NTLM authentication. For those running vista, you may or may not know that it only uses NTLMv2 authentication and therefore it won’t work.

To get your storage device to work with Vista, you can enable your Windows Vista PC to use both NTLM and NTLMv2 authentcation, in order to communicate with older SAN devices.

Solution

Click the Start Menu, then “Run”
Type “secpol.msc”
Select Local Policies
Select Security Options
Find Network Security: LAN Manager
From the drop down list, select: “Send LM & NTLM - use NTLMv2 session security if negotiated”

Now you should be able to communiate with older SAN devices in Windows Vista!

Installing IIS on Windows Vista

WinXP Taskbar Double

Jamsi — Fri, 07 Nov 2008 01:17:58 +0000

The problem:
Your windows XP taskbar is showing as two rows or it has doubled in size.

The solution:
Lucky for you, fixing this problem is dead simple.

First of all, make sure your taskbar is NOT locked.
1) Right click the taskbar (Make sure you “right click” a blank space, that is, don’t right click a running program)
2) Ensure that “Lock the Taskbar” is NOT ticked.

Now you need to reduce the size of your taskbar.
1) Seen the line to the right of the taskbar? (It’s either dotted or a straight line)
2) Put your mouse over this line until your mouse cursor shows <-->
3) Drag that sucker down!

It may take you a few times to get it right. Once you’ve got a single row task bar, you can re-arrange your toolbar sections (quicklaunch etc)

No related posts.

Windows Updates Won’t Install

Jamsi — Sat, 01 Nov 2008 03:37:44 +0000

I’ve seen this problem a few times, whereby you will be in the middle of doing a Windows Update and right after the updates have downloaded, they will refuse to be installed - often freezing and not showing any sign of further progress.

Here are a few solutions that are known to work.

Solution 1 - Reinstalling Windows Installer 3.1
Try installing a fresh new copy of Windows Installer 3.1. (Download it here). The Windows Installer is an application installation and configuration service, and is used by a number of Microsoft products to install applications on your computer.

Solution 2
If you are trying to install Updates via the Windows XP update agent (found in the start menu), try stopping the Agent service and then run Windows update through your web browser (Internet Explorer).

To do this, you must first stop the Automatic Update Server.

1) Click on your Start Menu, then Run
2) Type: services.msc
3) Find the row that says “Automatic Updates”, right click it and select “stop”.
4) Close the windows
5) Launch Internet Explorer and select the Tools menu, then “Windows Update”.
6) Proceed to run a Microsoft Windows Update

Good luck!

No related posts.

ASP.NETs Forms Based Authentication

Jamsi — Fri, 31 Oct 2008 08:23:06 +0000

Websites that offer membership based services often require their important files to be secured from non-members. For this purpose, they need to implement form based authentication that ensures that only members can access the files and even if a non-member copies the exact location of the file on the server, he/she is denied access to the file and redirected back to the login page. Let’s check it out.

1. If you are using an IDE then you need to create a new project and add a LoginPage.aspx page. Switch to html view and add the following code inside the tag of you LoginPage.aspx page.

<h2> <font face="Times New Roman">Login Credentials</font> </h2>
<table> <tr>
<td>User Name :</td>
<td><input id="CUserName" type="text" runat="server" NAME="CUserName"></td>
<td>="CUserName" Display="Static" ErrorMessage="*" runat="server" ID="VUserName" /></td></tr>
<tr>
<td>Password:</td>
<td><input id="CUserPass" type="password" runat="server" NAME="CUserPass"></td>
<td>="CUserPass" Display="Static" ErrorMessage="*" runat="server" ID="VUserPass" /></td> </tr>
</table>
<input type="submit" Value="Login" runat="server" ID="cmdLogin" NAME="cmdLogin">
</p>
Label id="lblMsg" ForeColor="red" FontName="Times New Roman" FontSize="12" runat="server"/>

2. Now, change the authentication in your web.config file to and modify the authentication parameters as given below:


="*" />
="?" />
</authorization>

3. Now, browse the virtual directory in Internet Information Services (IIS), right click on it to access the properties. Move to security tab & click on edit to check Anonymous access option.

4. On your IDE change the view mode to code view for the LoginPage.aspx page and add the following code to it. Refer to Point 4 of Code Event Handler at http://support.microsoft.com/kb/308157

Provide your own coding for authenticating the username & password

if CUserName.Value = "AAAAAAA" and CUserPass.Value = "BBBBBBBB" Then
FormsAuthentication.RedirectFromLoginPage(CUserName.Value , True)
else
Response.Redirect("LoginPage.aspx" , True)
End if
End Sub

5. Create a new page and name it as DefaultPage.aspx and add the following to the html view of the page.

<table border="0">
<tr><-td>http://ServerName/FormsAuth/SecuredFolder/AnyFile.doc</td>
<td><-asp:Button id="SendFile" runat="server" Text="Send File"></asp:Button></td>
</tr>
</table>

Now, switch to code view for this page & add the following lines

Private Sub Button_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button.Click FormsAuthentication.SignOut()
Response.Redirect("LoginPage.aspx" , True)
End Sub
Private Sub SendFile_Click( ByVal sender As System.Object , ByVal e As System.EventArgs ) Handles SendFile.Click
Response.ContentType = "application/msword"
Response.Clear()
Response.TransmitFile("SecuredFolderAnyFile.doc") ‘Create a SecuredFolder in Virtual Directory & add “AnyFile.doc” to it
Response.End()
End Sub

Why I used a button instead of a hyperlink is because in case of hyperlink the file will be cached and even if you change the contents of the file, the old file will be displayed. A button will prevent this.

6. Protect the SecuredFolder and ensure that you have granted the READ permission to the Network service or ASPNET. Run your project and try what happens when you try to paste the url of the file and then access it. You will notice a Login page instead of the file.

Using Windows Authentication under IIS7 (ASP.NET)

How To: Configure IPSec with Sonicwall

Jamsi — Thu, 23 Oct 2008 10:08:03 +0000

A few months ago, I had the pleasure of installing and configuring a VPN link between an outdated Linux box and a Sonicwall TZ170. Oh the joys I had in getting this to work ..

The Sonicwall device was located in a data center, whilst the Linux machine was located in an office protecting a 192.168.0.0/24 network, and my task was to join the two devices using IPSec. The best way to illustrate this setup is by displaying the configuration files. As an example, the following are the IP addresses used in the config samples.

Sonicwall TZ170 = 111.111.111.111
Linux machine = 222.222.222.222

The Linux IPSec Server

The Linux server is running Debian so a simple “apt-get install ipsec” had IPSec installed in no time.
Initially, I decided to use a simple preshared password for authentication. PLEASE NOTE the order that my ipsec.secrets file is displayed, there are many articles on Google which flip the left and right sides around.

My /etc/ipsec.secrets file

222.222.222.222 111.111.111.111 : PSK “test”

My /etc/ipsec.conf file

conn sonicwall
auth=esp
authby=secret
auto=add
esp=3des-sha1
ike=3des-sha1
keyexchange=ike
keyingtries=1
pfs=no
type=tunnel
left=111.111.111.111
leftsubnet=111.111.111.111/32
leftnexthop=%defaultroute
right=222.222.222.222
rightsubnet=192.168.0.0/24

The Sonicwall TZ170

Please note, even one incorrect setting will render your IPSec connection useless so triple check everything. Once logged into the Sonicwall TZ170 device, click the VPN menu then click the “Add” button.

To get this point-to-point VPN working with a Linux server using IPSec, you MUST use the exact details in the following diagrams. Simply substitute 111.111.111.11 with the Public IP of the Sonicwall device and substitute 222.222.222.222 with the Public IP of the Linux server.

Where it has “Choose Local network from list”, you’ll need to create a network object which represents the local network your protecting. In my example it was 192.168.0.0/24. Where it says Choose destination network, you’ll need to create a network object that represents the Linux server, so for this example it would be a single internet host with an IP of: 222.222.222.222

Once both sides have been configured, switch back to your Linux machine and from the console (be sure your logged in as root) simpy type;

ipsec auto –up sonicwall

Hopefully you see something like; (The main part to look for is the “established” part.

Oct 23 20:54:06 localhost pluto[18968]: “sonicwall” #2411: STATE_MAIN_I4: ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp1024}

If you run into troubles look through the logs on the Sonicwall to see why the connection failed. Another good place to look is on the Linux machine under /var/log/secure

No related posts.

Ubuntu Virtual Machine

Jamsi — Thu, 23 Oct 2008 09:39:17 +0000

One of the biggest problems I faced when I made the switch to Ubuntu was my workplace. You see, I’m often assigned to projects that require me to work on websites and online systems using ASP.NET and C#. It’s these projects that require me to have access to Visual Studio 2005 and mSQL on my laptop. So the problem? These are all Windows applications. At first I was going to setup a dual boot system on my laptop, but first I told myself I’d give Sun’s VirtualBox a whirl, and I’m sure glad I did.

If you’re an Ubuntu user who needs access to Windows applications for work or university like myself, VirtualBox is certainty the way to go and I’ll briefly tell you why.

It’s free
It’s fast
I can store files on my Ubuntu system and access them from Windows
Once the VirtualBox tools addon had been installed within Windows, it made switching between Windows and Ubuntu a dream.
VirtualBox’s networking features are superb. Setup a virtual interface to allow your Virtualbox to be its own networking device, or use the inbuilt Network Address Translation (NAT) feature to streamline network connectivity to your VirtualBox OS.
Because VirtualBoxes are stored in a single .VDI file, its never been easier to backup your entire virtual operating system. Simply burn the VDI file to disc and in case of an emergency you can simply restore your entire Virtualbox operating system.

So How Do you Go About Installing VirtualBox?

Lucky for you, its dead simple.

Simply download the .DEB package that suits your Ubuntu operating system (depending on whether you have Hardy, Gusty or Drapper) and install.

Download VirtualBox .DEB Packages here

Once downloaded, use

dpkg -i VirtualBox_1.3.8_Ubuntu_yourubuntuversion.deb

You may get asked a question telling you to accept the terms and conditions so simply select yes. Once installed, you should see VirtualBox under Accessories > System Tools > Sun xVM VirtualBox.

Enjoy!

Meebo Crashes Firefox on Ubuntu

Jamsi — Thu, 23 Oct 2008 08:37:13 +0000

So I felt like some instant messaging action and my favorite IM client at the moment is web based Meebo, which allows you to log into multiple IM networks using the one sexy, Ajax client otherwise known as Meebo. But BAM, Firefox closed without a hint of what the problem was. So I tried again, typed in http://www.meebo.com and BAM again - Firefox closed again. Hmm.

So I did a bit of Googling and it seems that I’m not the only problem that has this Meebo crashing firefox bug. Some people have stated that it only crashes whenever they visit the secure version of meebo (https://).

I managed to fix the problem simply by doing the first thing that came to my head; and that was to clear the private data (aka session cache etc). In Firefox 3 you can do this by holding ctrl + shift + delete. I’m not sure why this fixed the problem but if it works for you, then I’ve done my job :). If you found a different solution to fix this issue, use the comment section below to share your solution.

The GridView fired event PageIndexChanging which wasn’t handled

Jamsi — Tue, 21 Oct 2008 23:49:41 +0000

If you’ve set a gridviews AllowPaging attribute to “true”, you’ll notice the following error;

The GridView fired event PageIndexChanging which wasn’t handled

To setup paging with Gridviews, you also need to set the page index property to the new page that you wish to view. Funny enough, this is extremely easy to do. See below for a code example written in C#.

The ASPX page

1	ID="gvList" runat="server" AutoGenerateColumns="true" AllowPaging="true" PageSize="10" OnPageIndexChanging="gvList_PageIndexChanging">

and the C# code

    protected void gvList_PageIndexChanging(object sender, GridViewPageEventArgs e)
    {
        bindGrid();
 
        gvList.PageIndex = e.NewPageIndex;
        gvList.DataBind();
    }

No related posts.