<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>TECHiE TALKS &#187; virus</title>
	<atom:link href="http://www.icpep.org/category/virus/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.icpep.org</link>
	<description>Just another techie stuff</description>
	<lastBuildDate>Fri, 23 Jul 2010 04:53:01 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
		<item>
		<title>Online Virus Scan</title>
		<link>http://www.icpep.org/on-line-virus-scan/</link>
		<comments>http://www.icpep.org/on-line-virus-scan/#comments</comments>
		<pubDate>Mon, 06 Jul 2009 15:24:48 +0000</pubDate>
		<dc:creator>paparts</dc:creator>
				<category><![CDATA[Internet]]></category>
		<category><![CDATA[Software]]></category>
		<category><![CDATA[virus]]></category>

		<guid isPermaLink="false">http://www.icpep.org/?p=722</guid>
		<description><![CDATA[Surfing on the net has been trouble some now a days because there are a lot phishing, fraud, syware, malware, trojans on line. I have been using this free online anti virus scanner for a while now and it has been a good help to me. I am sharing this to everyone so that you [...]]]></description>
			<content:encoded><![CDATA[<p align="center"><img class="alignnone size-full wp-image-723" title="online virus scan" src="http://www.icpep.org/wp-content/uploads/2009/07/online-virus-scan.jpg" alt="online virus scan" width="300" height="225" /></p>
<p align="justify">Surfing on the net has been trouble some now a days because there are a lot phishing, fraud, syware, malware, trojans on line.  I have been using this free online anti virus scanner for a while now and it has been a good help to me.  I am sharing this to everyone so that you will also have some ideas on how to make sure the site you are visiting is safe and you can also help contribute in reviewing some site.</p>
<p><span id="more-722"></span></p>
<p align="justify">The first tool I am using the McAfee Site Advisor which can be downloaded on their <a href="http://www.siteadvisor.com/download/windows.html">site</a>.  Below is a better look on how to use the tool.</p>
<p align="center"><img class="alignnone size-full wp-image-724" title="techie talks sample" src="http://www.icpep.org/wp-content/uploads/2009/07/techie-talks-sample.jpg" alt="techie talks sample" width="640" height="480" /></p>
<p align="justify">The image is a sample result in searching search engines.  below the result is the status bar where the green McAfee site advisor icon turns green if the site is clean and turns red if the site has a virus.  The site advisor also gives warning and the icon turns to orange. So whenever you encounter a site that turns the icon to red that means that the site is harmful and contains bad links that can harm your computer.</p>
<p align="center"><img class="alignnone size-full wp-image-726" title="dr web antivirus" src="http://www.icpep.org/wp-content/uploads/2009/07/dr-web-antivirus.jpg" alt="dr web antivirus" width="296" height="59" /></p>
<p align="center"><img class="alignnone size-full wp-image-727" title="dr web anti virus scanner" src="http://www.icpep.org/wp-content/uploads/2009/07/dr-web-anti-virus-scanner.png" alt="dr web anti virus scanner" width="269" height="297" /></p>
<p align="justify">Another tool I am using is the Dr. Web on line virus scanner all you need to do is right click on the link and it will scan the selected link then gives the result.</p>
<p>Above all there is one great thing to this on line virus scan, it cost nothing which means we can use it for free.</p>
<p class="buymebeer"><form action="https://www.paypal.com/cgi-bin/webscr" target="paypal" method="post"><input type="hidden" name="cmd" value="_xclick" /><input type="hidden" name="business" value="allajosephcagadas@gmail.com" /><input type="hidden" name="return" value="" /><input type="hidden" name="item_name" value="Can You Buy Me a Beer? for Online Virus Scan" /><input type="hidden" name="currency_code" value="USD" /><input type="hidden" name="amount" value="" /><input type="image" src="http://www.icpep.org/wp-content/plugins/buy-me-beer/icon_beer.gif" align="left" alt="Buy Me a Beer" title="Buy Me a Beer" hspace="3" /></form><a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&amp;business=allajosephcagadas@gmail.com&amp;currency_code=USD&amp;amount=&amp;return=&amp;item_name=Can+You+Buy+Me+a+Beer?+for+Online+Virus+Scan" target="paypal">Did find the post very useful? Maybe you want to buy me a glass of beer!</a></p>]]></content:encoded>
			<wfw:commentRss>http://www.icpep.org/on-line-virus-scan/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Teleporn.net Redirect</title>
		<link>http://www.icpep.org/telepornnet-redirect/</link>
		<comments>http://www.icpep.org/telepornnet-redirect/#comments</comments>
		<pubDate>Tue, 09 Jun 2009 07:24:35 +0000</pubDate>
		<dc:creator>paparts</dc:creator>
				<category><![CDATA[Internet]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[virus]]></category>

		<guid isPermaLink="false">http://www.icpep.org/?p=689</guid>
		<description><![CDATA[In the past few days I was solving a problem on a site and the problem was this; The site has an iframe virus, the site pings teleporn.net and most links redirect to ask.com or teleporn.net which is a banned site, the site was banned  because it installs a virus on your system without knowing [...]]]></description>
			<content:encoded><![CDATA[<p style="text-align: justify;">
<p style="text-align: justify;">In the past few days I was solving a problem on a site and the problem was this;  The site has an iframe virus, the site pings teleporn.net and most links redirect to ask.com or teleporn.net which is a banned site, the site was banned  because it installs a virus on your system without knowing it.  This problem has bothered me most of the time because I am having a hard time where to fix the teleporn.net redirection.  So how did I solve the problem?  First thing was that I investigated every file that I have.  And there I found out that a script was appended on the PHP and HTML files I have on the server.  To have a picture how the script looks like, I have an image below:</p>
<p style="text-align: center;"><img class="size-full wp-image-690 aligncenter" title="virus-image" src="http://www.icpep.org/wp-content/uploads/2009/06/virus-image.jpg" alt="virus-image" width="493" height="390" /></p>
<p><span id="more-689"></span></p>
<p style="text-align: center;"><span style="text-decoration: none;"><img class="size-full wp-image-692 aligncenter" title="iframe-virus" src="http://www.icpep.org/wp-content/uploads/2009/06/iframe-virus.jpg" alt="iframe-virus" width="528" height="40" /></span></p>
<p style="text-align: center;"><img class="size-full wp-image-691 aligncenter" title="avast" src="http://www.icpep.org/wp-content/uploads/2009/06/avast.jpg" alt="avast" width="357" height="409" /></p>
<p style="text-align: justify;">
<p style="text-align: justify;">So I downloaded all the files on my local computer and I have an avast antivirus which is also cool to use though its annoying sometimes.  Let it scan the downloaded files and everytime it detects the script I just erased the apended script and make sure you don&#8217;t just comment the script because it will still be detected as a virus.</p>
<p style="text-align: justify;">I cleaned all the files removing the iframe and the script that was appended.  As I have observed it writes mostly on index.php, index.html, login.php, login.html, auth.php  files.  This was causing the redirection and ping of the teleporn.net site which is a banned site.  Sooner your will be banned as well for linking to the site and this will be a very bad reputation for your site.</p>
<p style="text-align: justify;">How did the ask.com redirection link fixed?  Look at your .htaccess file erase everything that has the code below:</p>
<p style="text-align: center;"><img class="size-full wp-image-693 aligncenter" src="http://www.icpep.org/wp-content/uploads/2009/06/htaccess-redirection.jpg" alt="htaccess-redirection" width="513" height="421" /></p>
<p style="text-align: justify;">After deleting the code seen above then the link would be fine now.  So that way I solved all of the problems thanks to AVAST anti virus that it helped me a lot in solving the problem.  You should also check some every directory because  there are .htaccess files that are being created with redirection of banned sites.  You can also try using other anti virus that can detect the script that is being appended.  This is is more faster than doing it manually.</p>
<p style="text-align: justify;">I hope I have helped someone who has the same problem I have though searches on this kind of problem very low.  I hope this will be a great help for you.  Send me a comment if how it works for you.</p>
<p class="buymebeer"><form action="https://www.paypal.com/cgi-bin/webscr" target="paypal" method="post"><input type="hidden" name="cmd" value="_xclick" /><input type="hidden" name="business" value="allajosephcagadas@gmail.com" /><input type="hidden" name="return" value="" /><input type="hidden" name="item_name" value="Can You Buy Me a Beer? for Teleporn.net Redirect" /><input type="hidden" name="currency_code" value="USD" /><input type="hidden" name="amount" value="" /><input type="image" src="http://www.icpep.org/wp-content/plugins/buy-me-beer/icon_beer.gif" align="left" alt="Buy Me a Beer" title="Buy Me a Beer" hspace="3" /></form><a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&amp;business=allajosephcagadas@gmail.com&amp;currency_code=USD&amp;amount=&amp;return=&amp;item_name=Can+You+Buy+Me+a+Beer?+for+Teleporn.net+Redirect" target="paypal">Did find the post very useful? Maybe you want to buy me a glass of beer!</a></p>]]></content:encoded>
			<wfw:commentRss>http://www.icpep.org/telepornnet-redirect/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>What a Spyware can Do</title>
		<link>http://www.icpep.org/what-a-spyware-can-do/</link>
		<comments>http://www.icpep.org/what-a-spyware-can-do/#comments</comments>
		<pubDate>Thu, 21 May 2009 15:40:18 +0000</pubDate>
		<dc:creator>paparts</dc:creator>
				<category><![CDATA[virus]]></category>
		<category><![CDATA[spyware]]></category>

		<guid isPermaLink="false">http://www.icpep.org/?p=632</guid>
		<description><![CDATA[Spyware is a malware that is placed secretly on a computer. It tracks the user’s behavior and reports information back to a central source.  Some types of spyware are simply annoying because they cause increased spam or unwanted pop-ups, but others can go so far as to threaten the security of your PC and personal [...]]]></description>
			<content:encoded><![CDATA[<p style="text-align: justify;">
<p style="text-align: center;"><img class="size-full wp-image-634 aligncenter" title="spyware_detected" src="http://www.icpep.org/wp-content/uploads/2009/05/spyware_detected.jpg" alt="spyware_detected" width="300" height="267" /></p>
<p style="text-align: center;">
<p style="text-align: justify;">Spyware is a malware that is placed secretly on a computer. It tracks the user’s behavior and reports information back to a central source.  Some types of spyware are simply annoying because they cause increased spam or unwanted pop-ups, but others can go so far as to threaten the security of your PC and personal information.</p>
<p style="text-align: justify;">Spyware can act like a peeping tom or, at worse, a geeky thief. There a lot of things that a spyware can do, spyware can be installed on your PC without your consent.  Typically, spyware finds its way onto PCs by “piggybacking” onto a file, such as a computer game, a music file, or a free software program or it can be downloaded from the Internet when you visit a particular website. Pests such as spyware can often lurk silently on your computer until someone or something sets them off,  or until they are found and properly removed.<span id="more-632"></span></p>
<p style="text-align: justify;">Another thing is that spyware compromises your data, computing habits, and identity.  Spyware can monitor information about your computing habits, such as what websites you visit, or record your keystrokes,  which in the end can lead to identity theft. For example, spyware can record the keystrokes that you use while keying in a credit card number and send this number to a “cyberthief.”</p>
<p style="text-align: justify;">Spyware can also alters your  PC settings.  Some forms of spyware can also wreak havoc by altering computer settings like your web browser home page setting or the placement of your desktop icons. This doesn’t do much damage to your PC, but it’s really annoying. You suddenly get an error that the Administrator has blocked the files that you want to access such as the task manager.</p>
<p style="text-align: justify;">The most hated thing I don&#8217;t like is that spyware can rob your PC of system speed and Internet access efficiency. This can become a big problem when you’re trying to use the programs on your PC, watch videos online, or download large files. And it will bother you a lot especailly when you are in a hurry of doing your stuff.</p>
<p style="text-align: justify;">
<p class="buymebeer"><form action="https://www.paypal.com/cgi-bin/webscr" target="paypal" method="post"><input type="hidden" name="cmd" value="_xclick" /><input type="hidden" name="business" value="allajosephcagadas@gmail.com" /><input type="hidden" name="return" value="" /><input type="hidden" name="item_name" value="Can You Buy Me a Beer? for What a Spyware can Do" /><input type="hidden" name="currency_code" value="USD" /><input type="hidden" name="amount" value="" /><input type="image" src="http://www.icpep.org/wp-content/plugins/buy-me-beer/icon_beer.gif" align="left" alt="Buy Me a Beer" title="Buy Me a Beer" hspace="3" /></form><a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&amp;business=allajosephcagadas@gmail.com&amp;currency_code=USD&amp;amount=&amp;return=&amp;item_name=Can+You+Buy+Me+a+Beer?+for+What+a+Spyware+can+Do" target="paypal">Did find the post very useful? Maybe you want to buy me a glass of beer!</a></p>]]></content:encoded>
			<wfw:commentRss>http://www.icpep.org/what-a-spyware-can-do/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Computer Security Threats</title>
		<link>http://www.icpep.org/computer-security-threats/</link>
		<comments>http://www.icpep.org/computer-security-threats/#comments</comments>
		<pubDate>Tue, 19 May 2009 21:21:43 +0000</pubDate>
		<dc:creator>paparts</dc:creator>
				<category><![CDATA[virus]]></category>
		<category><![CDATA[Computer Virus]]></category>

		<guid isPermaLink="false">http://www.icpep.org/?p=591</guid>
		<description><![CDATA[In a Windows XP system files computer security threats are not new to it. The damage caused by viruses can range from rendering useless just a few files to affecting your entire computer, possibly requiring you to reinstall your operating system and start from scratch.  And this is one sure thing that we don&#8217;t want [...]]]></description>
			<content:encoded><![CDATA[<table border="0" cellspacing="0" cellpadding="0" width="100%">
<tbody>
<tr>
<td align="justify">In a Windows XP system files computer security threats are not new to it. The damage caused by viruses can range from rendering useless just a few files to affecting your entire computer, possibly requiring you to reinstall your operating system and start from scratch.  And this is one sure thing that we don&#8217;t want to happen.</td>
</tr>
<tr>
<td>
<p align="justify">
Here is one important thing that you should also remember that not all computer problems are caused by viruses. Even though your computer, or a particular program, may not be running properly, this could be caused by other things, such as a bug (which is simply an error in the application’s code), or misconfiguration of software or hardware. Contact the software or hardware vendor to see if they are aware of any issues and if they can help. </p>
<p> <span id="more-591"></span> </p>
<p align="justify">This are some list that could be a caused by the slowing down of your PC that could be causing failures that enables computer security threats what we usually know is the <strong>VIRUS</strong>.  A “generic” computer virus is a small program that attaches itself to another program or document, such as a word processing document, and replicates it with the potential to cause damage to your computer.  A more common type of virus is one that “invades” your email program and spreads to contacts in your address book. </p>
<p align="justify">
Another thing could be <strong>WORMS</strong>.  This type of virus is specifically engineered to make extensive use of email and security holes in software or operating systems to spread rapidly.   </p>
<p align="justify">
You can also count in <strong>TROJANS</strong>. This is a type of program that pretends to be something harmless, but has a damaging or otherwise malicious intent.  For example, a person may get a program by email or the Internet that he or she thinks is a computer game; however, when the person runs the supposed game, the program deletes files on the computer or injects viruses. </p>
<p align="justify">Computer security threats can be solved using antivirus.  This three common programs that are capable of infecting Operating systems especially Windows are harmful especially when you have thousands of files in your computer.  With one click everything can be infected.  We can prevent these things from happening by using antivirus and keep it up to date.  One great antivirus I am using for quite some time and works fine is the ESET NOD32.</p>
</td>
</tr>
</tbody>
</table>
<p class="buymebeer"><form action="https://www.paypal.com/cgi-bin/webscr" target="paypal" method="post"><input type="hidden" name="cmd" value="_xclick" /><input type="hidden" name="business" value="allajosephcagadas@gmail.com" /><input type="hidden" name="return" value="" /><input type="hidden" name="item_name" value="Can You Buy Me a Beer? for Computer Security Threats" /><input type="hidden" name="currency_code" value="USD" /><input type="hidden" name="amount" value="" /><input type="image" src="http://www.icpep.org/wp-content/plugins/buy-me-beer/icon_beer.gif" align="left" alt="Buy Me a Beer" title="Buy Me a Beer" hspace="3" /></form><a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&amp;business=allajosephcagadas@gmail.com&amp;currency_code=USD&amp;amount=&amp;return=&amp;item_name=Can+You+Buy+Me+a+Beer?+for+Computer+Security+Threats" target="paypal">Did find the post very useful? Maybe you want to buy me a glass of beer!</a></p>]]></content:encoded>
			<wfw:commentRss>http://www.icpep.org/computer-security-threats/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Show Hide File Extension</title>
		<link>http://www.icpep.org/show-hide-file-extension/</link>
		<comments>http://www.icpep.org/show-hide-file-extension/#comments</comments>
		<pubDate>Fri, 01 May 2009 02:02:43 +0000</pubDate>
		<dc:creator>paparts</dc:creator>
				<category><![CDATA[Computers]]></category>
		<category><![CDATA[Microsoft]]></category>
		<category><![CDATA[virus]]></category>
		<category><![CDATA[Linux]]></category>
		<category><![CDATA[MAC]]></category>
		<category><![CDATA[windows]]></category>

		<guid isPermaLink="false">http://www.icpep.org/?p=528</guid>
		<description><![CDATA[What are file extension or file types? File types are like embedded signatures, telling the operating system that this type of file can be opened by this  software or program and also to  associate with it properly.  A  file extension is one or several letters at the end of a filename. Usually three or four [...]]]></description>
			<content:encoded><![CDATA[<p style="text-align: justify;">What are <a href="http://www.computerfileextensions.com/">file extension</a> or file types?</p>
<p style="text-align: justify;">File types are like embedded signatures, telling the operating system that this type of file can be opened by this  software or program and also to  associate with it properly.  A  file extension is one or several letters at the end of a filename. Usually three or four letters,  Filename extensions usually follow a period (dot) and indicate the type of information stored in the file.  One good example is &#8220;Warcraft III.exe&#8221; the .exe <a href="http://www.computerfileextensions.com/">file extension</a> this means that Warcraft III is an executable program file.  &#8220;.exe&#8221; file extensions are sometimes dangerous to open especially when you don&#8217;t know the file.  If you have files such as &#8220;.exe&#8221;, better not open it because some of this types are viruses and this can surely ruin your entire operating system especially for Microsoft Windows.<span id="more-528"></span></p>
<p style="text-align: justify;">To show hide your file extension for windows is just go and open <strong>My Computer</strong> then click <strong>Tools</strong> menu and click <strong>Folder Options </strong>and click the <strong>View</strong> tab.  You should have the same as the image below:</p>
<p style="text-align: justify;"><img class="aligncenter size-full wp-image-529" title="show-hide-file-extension" src="http://www.icpep.org/wp-content/uploads/2009/04/show-hide-file-extension.jpg" alt="show-hide-file-extension" width="639" height="434" /></p>
<p style="text-align: justify;">If you want to show file extensions then you can always check the box and click apply.  Conversely, you can uncheck it if you dont want to see the file extension.</p>
<p style="text-align: justify;">
<div style="float:left;">Showing the file extension is advantageous especially for Microsoft Windows, since by just looking at the file you can know what type of file it is aside from looking at the icon.  Most worms that are spread all over the web are having an icon of a folder yet they are .exe files.  This is a very big threat for those who dont know what the file is.  Most o f the effects of this worms is that they replicate all the folders you have in your computer and hide the original ones and replace it with a .exe file with a folder icon.  They will disable your task manager, change the policy on your conputer, disable <a href="http://www.computerfileextensions.com/">registry</a> editing and disable the msconfig where you configure your start up programs.</div>
<div style="float:right;"><script type="text/javascript"><!--
google_ad_client = "pub-4547412119801593";
/* Show Hide File Extension */
google_ad_slot = "9191273179";
google_ad_width = 180;
google_ad_height = 150;
// --></script><br />
<script src="http://pagead2.googlesyndication.com/pagead/show_ads.js" type="text/javascript"></script></div>
<p style="text-align: justify;">One disadvantage of this for most users is that when you rename the file and the extension is remoced the file will no longer work.  One example is that when you have a &#8220;example.doc&#8221; which is a MS Word File  and rename it to &#8220;myproject&#8221; the file will not work unless you write the file extension.  Renaming it back to &#8220;myproject.doc&#8221; will rename the file and will work on .doc editing software.</p>
<p class="buymebeer"><form action="https://www.paypal.com/cgi-bin/webscr" target="paypal" method="post"><input type="hidden" name="cmd" value="_xclick" /><input type="hidden" name="business" value="allajosephcagadas@gmail.com" /><input type="hidden" name="return" value="" /><input type="hidden" name="item_name" value="Can You Buy Me a Beer? for Show Hide File Extension" /><input type="hidden" name="currency_code" value="USD" /><input type="hidden" name="amount" value="" /><input type="image" src="http://www.icpep.org/wp-content/plugins/buy-me-beer/icon_beer.gif" align="left" alt="Buy Me a Beer" title="Buy Me a Beer" hspace="3" /></form><a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&amp;business=allajosephcagadas@gmail.com&amp;currency_code=USD&amp;amount=&amp;return=&amp;item_name=Can+You+Buy+Me+a+Beer?+for+Show+Hide+File+Extension" target="paypal">Did find the post very useful? Maybe you want to buy me a glass of beer!</a></p>]]></content:encoded>
			<wfw:commentRss>http://www.icpep.org/show-hide-file-extension/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Boot Sector Virus</title>
		<link>http://www.icpep.org/boot-sector-virus/</link>
		<comments>http://www.icpep.org/boot-sector-virus/#comments</comments>
		<pubDate>Fri, 17 Apr 2009 09:18:00 +0000</pubDate>
		<dc:creator>paparts</dc:creator>
				<category><![CDATA[virus]]></category>

		<guid isPermaLink="false">http://www.icpep.org/?p=477</guid>
		<description><![CDATA[If you have problems on retrieving your of data or your data suddenly disappears, or you are having failure on starting up your computer. Then you must have a boot sector virus in your hard disk drive(HDD).  This needs an attention before all your data will be lost, you do not need any boot sector [...]]]></description>
			<content:encoded><![CDATA[<p style="text-align: justify;">If you have problems on retrieving your of data or your data suddenly disappears, or you are having failure on starting up your computer.  Then you must have a boot sector virus in your hard disk drive(HDD).  This needs an attention before all your data will be lost, you do not need any boot sector virus removal tool all you need is an installer of you windows XP.</p>
<p style="text-align: justify;">A Boot Sector Virus is a virus that resides in your hardisk&#8217;s first sector or usually on the HD0 where the first boot sector resides.  The virus replaces the DOS boot sector or commonly known as the Master Boot Record(MBR).  MBR is a program that is executed every time you computer starts up.  This means that every now and then the virus is also executed every time the computer is started and is loaded into the memory.  This could then spread to every storage devices that the computer writes.<span id="more-477"></span></p>
<p style="text-align: justify;">My Anti-virus is avira and it has a free services that can be used on your computer.  One of the common virus that is widely spread is the boot sector virus BOO/Sinowal.A or the boo.sinowal.d.  When I first saw the virus,   Avira Anti virus has detected the malware and suggested to use the boot sector removal tool called avira boot sector repair tool but sad to say it was to no avail.  I was really troubled with the virus since it slowly corrupts the software   on the PC and the computer  hangs every now and then and it really &#8220;hampers&#8221; every work inside the office.  I thought Avira  could remove the boot sector virus but sad to say it didn&#8217;t.  I also tried other anti virus and of the same fail result.</p>
<p style="text-align: justify;">I researched the net and found few information and so I decided to post this and hoping that this will be of use to other having the same trouble.  There are few information on how to solve boot sector malware BOO/Sinowal.  Avira boot sector removal too has failed and this is one thing that would surely work.</p>
<p style="text-align: justify;">I solved the problem and all  we need is a <a href="http://www.icpep.org/set-boot-to-cd-rom/" target="_blank">Windows XP bootable CD</a>.  To remove the virus completely the first step is to boot the CD on you DVD/CD drive.  Let it boot until your reach this point.</p>
<p style="text-align: center;"><img class="size-full wp-image-389 aligncenter" title="windows-repair" src="http://www.icpep.org/wp-content/uploads//windows-repair.gif" alt="windows-repair" width="504" height="277" /></p>
<p style="text-align: justify;">
<p style="text-align: justify;">Press R for repair and you will be this environment</p>
<p style="text-align: justify;">
<p style="text-align: center;"><img class="aligncenter size-full wp-image-391" title="windowrecover" src="http://www.icpep.org/wp-content/uploads//windowrecover.jpg" alt="windowrecover" width="504" height="293" /></p>
<p style="text-align: center;">
<p style="text-align: left;">Press 1 to enter to windows directory.  Enter your administrator password if you have enabled it. After entering the password, type fixmbr as shown below.</p>
<p style="text-align: left;">C:\WINDOWS&gt;fixmbr</p>
<p style="text-align: left;">If you have partitioned your hard drive (  D:  E:  &#8230;) make sure you have a back up for all the files on the other partition because there is a possiblity that the other partition will not function after executing the command because this will change the boot record, erasing the virus that resides on the HD0 of your disk drive.</p>
<p style="text-align: justify;">After typing fixmbr there is a warning that will prompt you, just type y and ENTER.  This is very quick, and in seconds a new Master Boot Record is created, the boot sector virus is then is removed form the hardisk.  Restart your computer and everything is back to normal.  If you are having troubles accessing the other partition right click on it and format.  then you can restore the files that you have backed u before starting the removal of the boot sector virus.</p>
<p style="text-align: justify;">
<table width="100%" border="0" cellspacing="0" cellpadding="0" align="center">
<tr>
<td>
  <iframe src="http://rcm.amazon.com/e/cm?t=techtalk02-20&#038;o=1&#038;p=8&#038;l=as1&#038;asins=0596009267&#038;fc1=000000&#038;IS2=1&#038;lt1=_blank&#038;m=amazon&#038;lc1=0000FF&#038;bc1=FFFFFF&#038;bg1=FFFFFF&#038;f=ifr" style="width:120px;height:240px;" scrolling="no" marginwidth="0" marginheight="0" frameborder="0"></iframe>
    </td>
<td>
    <iframe src="http://rcm.amazon.com/e/cm?t=techtalk02-20&#038;o=1&#038;p=8&#038;l=as1&#038;asins=1597492507&#038;fc1=000000&#038;IS2=1&#038;lt1=_blank&#038;m=amazon&#038;lc1=0000FF&#038;bc1=FFFFFF&#038;bg1=FFFFFF&#038;f=ifr" style="width:120px;height:240px;" scrolling="no" marginwidth="0" marginheight="0" frameborder="0"></iframe>
    </td>
<td>
    <iframe src="http://rcm.amazon.com/e/cm?t=techtalk02-20&#038;o=1&#038;p=8&#038;l=as1&#038;asins=B00117HE4G&#038;fc1=000000&#038;IS2=1&#038;lt1=_blank&#038;m=amazon&#038;lc1=0000FF&#038;bc1=FFFFFF&#038;bg1=FFFFFF&#038;f=ifr" style="width:120px;height:240px;" scrolling="no" marginwidth="0" marginheight="0" frameborder="0"></iframe></p>
</td>
<td>
    <iframe src="http://rcm.amazon.com/e/cm?t=techtalk02-20&#038;o=1&#038;p=8&#038;l=as1&#038;asins=B001B5J8QA&#038;fc1=000000&#038;IS2=1&#038;lt1=_blank&#038;m=amazon&#038;lc1=0000FF&#038;bc1=FFFFFF&#038;bg1=FFFFFF&#038;f=ifr" style="width:120px;height:240px;" scrolling="no" marginwidth="0" marginheight="0" frameborder="0"></iframe>
    </td>
<td>
    <iframe src="http://rcm.amazon.com/e/cm?t=techtalk02-20&#038;o=1&#038;p=8&#038;l=as1&#038;asins=B0024M1AHO&#038;fc1=000000&#038;IS2=1&#038;lt1=_blank&#038;m=amazon&#038;lc1=0000FF&#038;bc1=FFFFFF&#038;bg1=FFFFFF&#038;f=ifr" style="width:120px;height:240px;" scrolling="no" marginwidth="0" marginheight="0" frameborder="0"></iframe>
    </td>
</tr>
</table>
<p class="buymebeer"><form action="https://www.paypal.com/cgi-bin/webscr" target="paypal" method="post"><input type="hidden" name="cmd" value="_xclick" /><input type="hidden" name="business" value="allajosephcagadas@gmail.com" /><input type="hidden" name="return" value="" /><input type="hidden" name="item_name" value="Can You Buy Me a Beer? for Boot Sector Virus " /><input type="hidden" name="currency_code" value="USD" /><input type="hidden" name="amount" value="" /><input type="image" src="http://www.icpep.org/wp-content/plugins/buy-me-beer/icon_beer.gif" align="left" alt="Buy Me a Beer" title="Buy Me a Beer" hspace="3" /></form><a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&amp;business=allajosephcagadas@gmail.com&amp;currency_code=USD&amp;amount=&amp;return=&amp;item_name=Can+You+Buy+Me+a+Beer?+for+Boot+Sector+Virus+" target="paypal">Did find the post very useful? Maybe you want to buy me a glass of beer!</a></p>]]></content:encoded>
			<wfw:commentRss>http://www.icpep.org/boot-sector-virus/feed/</wfw:commentRss>
		<slash:comments>12</slash:comments>
		</item>
		<item>
		<title>Windows Impossible Bugs</title>
		<link>http://www.icpep.org/windows-impossible/</link>
		<comments>http://www.icpep.org/windows-impossible/#comments</comments>
		<pubDate>Fri, 16 Jan 2009 03:31:31 +0000</pubDate>
		<dc:creator>paparts</dc:creator>
				<category><![CDATA[Windows Hacks]]></category>
		<category><![CDATA[virus]]></category>
		<category><![CDATA[Hacks]]></category>

		<guid isPermaLink="false">http://www.icpep.org/?p=225</guid>
		<description><![CDATA[This is really true, i’ve tried this myself. #1. An Indian discovered that nobody can create a FOLDER anywhere on the computer which can be named as “CON”. This is something pretty cool…and unbelievable. .. At Microsoft the whole Team, couldn’t answer why this happened! Whatever you do, you can NEVER create a folder name [...]]]></description>
			<content:encoded><![CDATA[<p style="text-align: center;"><img class="size-full wp-image-226 aligncenter" title="windows-impossible" src="http://www.icpep.org/wp-content/uploads//windows-impossible.jpg" alt="windows-impossible" width="500" height="335" /></p>
<p style="text-align: justify;">This is really true, i’ve tried this myself.<br />
<script type="text/javascript"><!--
google_ad_client = "pub-4547412119801593";
/* windows impossible */
google_ad_slot = "9069494066";
google_ad_width = 468;
google_ad_height = 60;
// --></script><br />
<script src="http://pagead2.googlesyndication.com/pagead/show_ads.js" type="text/javascript"></script><br />
 #1. An Indian discovered that nobody can create a FOLDER anywhere on the computer which can be named as “CON”. This is something pretty cool…and unbelievable. .. At Microsoft the whole Team, couldn’t answer why this happened!</p>
<p>Whatever you do, you can NEVER create a folder name as “Con”, You wanna bet?</p>
<p>Second, do the following<span id="more-225"></span></p>
<p>#2 For those of you using Windows, do the following:</p>
<p>a.) Open an empty notepad file</p>
<p>b.) Type “Bush hid the facts” (without the quotes)</p>
<p>c.) Save it as whatever you want.</p>
<p>d.) Close it, and re-open it.</p>
<p>Is it a bug or what?</p>
<p>#3 (last but not the least)</p>
<p>Microsoft crazy facts: This is something pretty cool and neat…and unbelievable. .. At Microsoft the whole Team, including Bill Gates, couldn’t answer why this happened!</p>
<p>It was discovered by a Brazilian. Try it out yourself…</p>
<p>Open Microsoft Word and type</p>
<p>=rand (200, 99)</p>
<p>And then press ENTER</p>
<p>This was an amzing discovery and is very cool&#8230;<br />
 <script type="text/javascript"><!--
google_ad_client = "pub-4547412119801593";
/* windows impossible */
google_ad_slot = "9069494066";
google_ad_width = 468;
google_ad_height = 60;
// --></script><br />
<script src="http://pagead2.googlesyndication.com/pagead/show_ads.js" type="text/javascript"></script></p>
<p class="buymebeer"><form action="https://www.paypal.com/cgi-bin/webscr" target="paypal" method="post"><input type="hidden" name="cmd" value="_xclick" /><input type="hidden" name="business" value="allajosephcagadas@gmail.com" /><input type="hidden" name="return" value="" /><input type="hidden" name="item_name" value="Can You Buy Me a Beer? for Windows Impossible Bugs" /><input type="hidden" name="currency_code" value="USD" /><input type="hidden" name="amount" value="" /><input type="image" src="http://www.icpep.org/wp-content/plugins/buy-me-beer/icon_beer.gif" align="left" alt="Buy Me a Beer" title="Buy Me a Beer" hspace="3" /></form><a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&amp;business=allajosephcagadas@gmail.com&amp;currency_code=USD&amp;amount=&amp;return=&amp;item_name=Can+You+Buy+Me+a+Beer?+for+Windows+Impossible+Bugs" target="paypal">Did find the post very useful? Maybe you want to buy me a glass of beer!</a></p>]]></content:encoded>
			<wfw:commentRss>http://www.icpep.org/windows-impossible/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Delete Undeletable Files</title>
		<link>http://www.icpep.org/delete-undeletable-files/</link>
		<comments>http://www.icpep.org/delete-undeletable-files/#comments</comments>
		<pubDate>Thu, 08 Jan 2009 11:01:21 +0000</pubDate>
		<dc:creator>paparts</dc:creator>
				<category><![CDATA[Computers]]></category>
		<category><![CDATA[Software]]></category>
		<category><![CDATA[Windows Hacks]]></category>
		<category><![CDATA[virus]]></category>
		<category><![CDATA[Computer]]></category>

		<guid isPermaLink="false">http://www.icpep.org/?p=187</guid>
		<description><![CDATA[How do we delete undeletable files in windows? There are files that windows don&#8217;t allow us to delete especially when the file is currently being used.  This is a good thing  if it isn&#8217;t a malware or any virus.  The question is how do we delete windows files that does not allow us? Click the [...]]]></description>
			<content:encoded><![CDATA[<p style="text-align: center;"><img class="size-full wp-image-188 aligncenter" title="delete-error" src="http://icpep.org/wp-content/uploads//delete-error.jpg" alt="delete file error" width="408" height="128" /></p>
<p>How do we delete undeletable files in windows?</p>
<p style="text-align: justify;">There are files that windows don&#8217;t allow us to delete especially when the file is currently being used.  This is a good thing  if it isn&#8217;t a malware or any virus.   The question is how do we delete windows files that does not allow us? <span id="more-187"></span></p>
<p style="text-align: justify;"><script type="text/javascript"><!--
google_ad_client = "pub-4547412119801593";
/* unlocker assistant */
google_ad_slot = "2779182159";
google_ad_width = 468;
google_ad_height = 15;
// --></script><br />
<script src="http://pagead2.googlesyndication.com/pagead/show_ads.js" type="text/javascript"></script> Click the Start menu, select Run, and type CMD to bring up the Command Prompt. Now hit CTRL-ALT-DEL to open the Task Manager. Under the Processes tab, highlight explorer.exe and click End Process. ALT-Tab your way to the Command Prompt and then navigate to the directory of the fi le you’re trying to delete using the CD command (cd C:\Program Files\installers). Where installers is the folder name or the filename.  Next, use the delete command to delete the offending file (del installers.exe or del installers if it is a folder). ALT-Tab back to the Task Manager, select New Task under File, and type explorer.exe to bring back the Windows shell. Another thing to try is the unlocker and it is a free software for windows and is effective.  You can Download it <a href="http://ccollomb.free.fr/unlocker/">here</a>.  Some Preview of the software:</p>
<div id="attachment_189" class="wp-caption aligncenter" style="width: 241px"><img class="size-full wp-image-189" title="tutorial1" src="http://icpep.org/wp-content/uploads//tutorial1.png" alt="unlocker assistant" width="231" height="214" /><p class="wp-caption-text">unlocker assistant</p></div>
<p><script type="text/javascript"><!--
google_ad_client = "pub-4547412119801593";
/* unlocker assistant */
google_ad_slot = "2779182159";
google_ad_width = 468;
google_ad_height = 15;
// --></script><br />
<script src="http://pagead2.googlesyndication.com/pagead/show_ads.js" type="text/javascript"></script></p>
<div id="attachment_190" class="wp-caption aligncenter" style="width: 588px"><img class="size-full wp-image-190" title="tutorial2" src="http://icpep.org/wp-content/uploads//tutorial2.png" alt="unlocker assistant" width="578" height="212" /><p class="wp-caption-text">unlocker assistant</p></div>
<p style="text-align: justify;">
<p class="buymebeer"><form action="https://www.paypal.com/cgi-bin/webscr" target="paypal" method="post"><input type="hidden" name="cmd" value="_xclick" /><input type="hidden" name="business" value="allajosephcagadas@gmail.com" /><input type="hidden" name="return" value="" /><input type="hidden" name="item_name" value="Can You Buy Me a Beer? for Delete Undeletable Files" /><input type="hidden" name="currency_code" value="USD" /><input type="hidden" name="amount" value="" /><input type="image" src="http://www.icpep.org/wp-content/plugins/buy-me-beer/icon_beer.gif" align="left" alt="Buy Me a Beer" title="Buy Me a Beer" hspace="3" /></form><a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&amp;business=allajosephcagadas@gmail.com&amp;currency_code=USD&amp;amount=&amp;return=&amp;item_name=Can+You+Buy+Me+a+Beer?+for+Delete+Undeletable+Files" target="paypal">Did find the post very useful? Maybe you want to buy me a glass of beer!</a></p>]]></content:encoded>
			<wfw:commentRss>http://www.icpep.org/delete-undeletable-files/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>How to check for virus Presence</title>
		<link>http://www.icpep.org/how-to-check-for-virus-presence/</link>
		<comments>http://www.icpep.org/how-to-check-for-virus-presence/#comments</comments>
		<pubDate>Mon, 08 Dec 2008 00:51:37 +0000</pubDate>
		<dc:creator>paparts</dc:creator>
				<category><![CDATA[Computers]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[virus]]></category>
		<category><![CDATA[Computer]]></category>

		<guid isPermaLink="false">http://icpep.org/?p=80</guid>
		<description><![CDATA[There are some tools and procedures that can tell with 99.44 percent accuracy whether your computer has a virus. Here are the actions to take: 1. Find out whether your computer has antivirus software: Check for any Anti-virus software installed on your computer. To do this just Click Start&#62;control Panel&#62;Security Center. 2. Find out whether [...]]]></description>
			<content:encoded><![CDATA[<p><script type="text/javascript"><!--
google_ad_client = "pub-4547412119801593";
/* virus */
google_ad_slot = "6951935713";
google_ad_width = 250;
google_ad_height = 250;
// --></script><img class="aligncenter size-full wp-image-437" title="20090219main2" src="http://www.icpep.org/wp-content/uploads/2008/12/20090219main2.jpg" alt="20090219main2" width="425" height="213" /><br />
<script src="http://pagead2.googlesyndication.com/pagead/show_ads.js" type="text/javascript"></script></p>
<p>There are some tools and procedures that can tell with 99.44 percent accuracy whether your computer has a virus. Here are the actions to take:</p>
<p>1.  Find out whether your computer has antivirus software:<br />
 Check for any Anti-virus software installed on your computer.  To do this just Click Start&gt;control Panel&gt;Security Center.</p>
<p>2.  Find out whether your antivirus software is up to date:<br />
 You can always know whether your anti virus is up to date because most of the antivirus gives a warning whenever your antivirus is not up to date.</p>
<p>3.  Scan your computer for viruses: When you know that your computer has antivirus software — and that it’s up to date — you can use it to scan your computer for viruses.<br />
 If you have an Internet connection, you might think that you can take a shortcut and try one of those online virus scanning tools — but don’t do that at this point! The risks of connecting to the Internet without antivirus software and a firewall are greater than the benefit you’d get from knowing whether you have a virus — and you could end up with a virus if you use the ’Net unprotected. (It’s like drinking unboiled water from a polluted river — think Montezuma’s Revenge here).  For some really good reasons not to use an online scanning tool as a first resort, because this might be frauds and could be sources for viruses.  Suffice to say: Make sure you’re protected before you venture out.<span id="more-80"></span></p>
<p>4.  Remove the virus: If your virus-scanning tool finds a virus on your computer, there are two basic outcomes:<br />
 • Automatic removal: Chances are your virus scanning tool will be able to fix your computer by removing the virus. Most of the time this is the case. Newer virus tools will, in effect, tell you, “Hey you, I found a virus on your computer. Do you want me to clean it up or not?” I really cannot imagine why you would want to say no.<br />
 Personally I think you should just get rid of the virus right away and deal with the consequences, however mild or severe, afterward.<br />
 • Manual removal — and more work: If, however, your virus-scanning tool tells you that it cannot get rid of the virus, a little more work is in order. For instance, you may need to download a special virus removal tool from your antivirus software vendor; such tools are sometimes built for specific, hardto-remove viruses.<br />
 When you get rid of viruses, you’ve made a good start. (Done? Who said anything about done?) Review the ways you use your computer: Did something you do regularly get you into virus trouble in the first place? By identifying the things you do that expose you to threats like viruses, you can reduce your exposure by doing some things differently. Preventive actions — the cyber equivalent of washing your hands before handling food — take a little time, but they can save a lot of misery later.<br />
 <script type="text/javascript"><!--
google_ad_client = "pub-4547412119801593";
/* virus */
google_ad_slot = "6951935713";
google_ad_width = 250;
google_ad_height = 250;
// --></script><br />
<script src="http://pagead2.googlesyndication.com/pagead/show_ads.js" type="text/javascript"></script></p>
<p class="buymebeer"><form action="https://www.paypal.com/cgi-bin/webscr" target="paypal" method="post"><input type="hidden" name="cmd" value="_xclick" /><input type="hidden" name="business" value="allajosephcagadas@gmail.com" /><input type="hidden" name="return" value="" /><input type="hidden" name="item_name" value="Can You Buy Me a Beer? for How to check for virus Presence" /><input type="hidden" name="currency_code" value="USD" /><input type="hidden" name="amount" value="" /><input type="image" src="http://www.icpep.org/wp-content/plugins/buy-me-beer/icon_beer.gif" align="left" alt="Buy Me a Beer" title="Buy Me a Beer" hspace="3" /></form><a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&amp;business=allajosephcagadas@gmail.com&amp;currency_code=USD&amp;amount=&amp;return=&amp;item_name=Can+You+Buy+Me+a+Beer?+for+How+to+check+for+virus+Presence" target="paypal">Did find the post very useful? Maybe you want to buy me a glass of beer!</a></p>]]></content:encoded>
			<wfw:commentRss>http://www.icpep.org/how-to-check-for-virus-presence/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
