Remove Regsvr.exe or worm_delf.fkz
February 20th, 2009
Remove virus Manually as it eats up Ur my empty hard disk space of around 700 MB This virus is know popularly as regsvr.exe virus, or as new folder.exe virus and most people identify this one by seeing autorun.inf file on their pen drives, But trend microidentified it as WORM_DELF.FKZ. It is spreading mostly using this pen drives as the medium.
Manual Process of removal
I prefer manual process simply because it gives me option to learn new things in the process.
1.Cut The Supply Line
- Search for autorun.inf file. It is a read only file so you will have to change it to normal by right clicking the file , selecting the properties and un-check the read only option.
- Open the file in notepad and delete everything and save the file.
- Now change the file status back to read only mode so that the virus could not get access again.
- Click start->run and type msconfig and click ok
- Go to startup tab look for regsvr and uncheck the option click OK.
- Click on Exit without Restart, cause there are still few things we need to do before we can restart the PC.
- Now go to control panel -> scheduled tasks, and delete the At1 task listed their.
2.Open The Gates Of Castle
- Click on start -> run and type gpedit.msc and click Ok.
- If you are Windows XP Home Edition user you might not have gpedit.msc in that case download and install it from Windows XP Home Edition: gpedit.msc and then follow these steps.
- Go to users configuration->Administrative templates->system
- Find “prevent access to registry editing tools” and change the option to disable.
Once you do this you have registry access back.3.Launch The Attack At Heart Of Castle- Click on start->run and type regedit and click ok
- Go to edit->find and start the search for regsvr.exe,
- Delete all the occurrence of regsvr.exe; remember to take a backup before deleting. KEEP IN MIND regsvr32.exe is not to be deleted.Delete regsvr.exe occurrences ONLY.
At one ore two places you will find it after explorer.exe in theses cases only delete the regsvr.exe part and not the whole part. E.g. Shell = “Explorer.exe regsvr.exe” the just delete the regsvr.exe and leave the explorer.exe
4.Seek And Destroy the enemy soldiers, no one should be left behind- Click on start->search->for files and folders.
- Their click all files and folders
- Type “*.exe” as filename to search for
- Click on ‘when was it modified ‘ option and select the specify date option
- Type from date as 1/31/2008 and also type To date as 1/31/2008
- Now hit search and wait for all the exe’s to show up.
- Once search is over select all the exe files and shift+delete the files, caution must be taken so that you don’t delete the legitimate exe file that you have installed on 31st January.
- Also selecting lot of files together might make your computer unresponsive so delete them in small bunches.
- Also find and delete regsvr.exe, svchost .exe( notice an extra space between the svchost and .exe)
Now do a cold reboot (ie press the reboot button instead) and you are done
- Now hit search and wait for all the exe’s to show up.
- Delete all the occurrence of regsvr.exe; remember to take a backup before deleting. KEEP IN MIND regsvr32.exe is not to be deleted.Delete regsvr.exe occurrences ONLY.
- If you are Windows XP Home Edition user you might not have gpedit.msc in that case download and install it from Windows XP Home Edition: gpedit.msc and then follow these steps.
Avast! Bootable Antivirus & Recovery Tools CD ( BART CD)
September 12th, 2008
Avast! Bootable Antivirus & Recovery Tools CD ( BART CD) | ISO | 157MB 
Avast! Bootable Antivirus & Recovery Tools CD (BART CD) is a breakthrough in the field of administration tools! In short it is a bootable CD, giving you the capability to detect/clean virus infections on a computer. All this can be done fast and reliably, without the risk of spreading the infection any further. But BART CD can do much more! It also contains tools for editing registry files (i.e. the files holding Windows Registry for the operating system) and a tool to check and fix disk errors. With the latest release of BART CD, the program now works with all Windows-supported file systems, i.e. NTFS, as well as less common storage devices, such as SCSI/RAID. In general BART will work on all disk devices that Windows XP can work on. Non-standard devices, such as those used in servers, can be handled by standard Windows XP drivers supplied by the hardware vendor.
BART CD also supports networking. After network support is started, NETBIOS and TCP/IP protocols will be available. It is also possible to map network drives. Just enter the path to the drive (in standard UNC format \server\share) and select the letter to map the drive to. After the drive is successfully mapped, you can work with the network drive just as with any other (local) drive - e.g. scan it with avast!. BART CD is a tool no administrator should be without - or, for that matter, anybody who deals with the recovery of data on hard drives. The license model is specified as a multi node license, such that, when you buy one BART CD, you can administer multiple computers, provided you only use one instance at any one time, and all by a single user.
Features overview:
¤ avast! Antivirus
¤ Registry Cleaner
¤ Disk Checker
¤ Data Shredder
¤ Registry Editor
¤ Event Viewer
¤ Services/Drivers
¤ Junk File Remover
¤ Servant Salamander
¤ Command-line Interpreter
¤ Text Editor
¤ BART CD Shell
avast! Antivirus:
The main, and most important component of BART CD is a special version of avast! 4 antivirus. It is built on exactly the same kernel as other avast! 4 Editions, which ensures excellent detection capabilities combined with high performance. It detects 100% of ITW viruses/worms (In-The-Wild), it also features advanced Trojan horse detection. The kernel of avast! antivirus has been certified by ICSA Labs. avast! also takes part in Virus Bulletin test, having received the VB100 award many times. In the latest version, the user interface of BART avast! antivirus has been completely redesigned. A wizard has been added to the interface to guide you through all settings. The settings allow you to turn on the scanning of archives (compressed files), and much more.
Sometimes, for instance, it may be undesirable to write to the hard disk (for example, because it would overwrite deleted files that you would like to restore somehow). BART is aware of such actions, and for an operation requiring disk storage (e.g. unpacking the archives to a temporary folder) it is possible to specify where to store such files.
avast! antivirus, included on the BART CD, is able to repair virus infections. This is done in a sophisticated way: if avast! detects a virus it is able to repair, control is given to a special module that performs the first phase of the repair process. The user is then asked to start the operating system from the hard disk. The second phase of the repair process is performed here - the virus objects, together with all references (such as registry associations), are removed. For security reasons, it is recommended to perform the third phase after another test from BART CD. A key value of BART CD is how it handles updates (especially of the virus database). The BART system works in the following way: the Builder part works on your Windows operating system (any version). It downloads the most recent versions of BART CD components (Internet connection is required).
The builder then creates an ISO image which the user has to burn to CD (ISO images are standard input files in most modern CD burning software). Since the virus database updates are rather frequent, it is recommended to use the CD-RW medium. In emergency cases, it is possible to use the updated virus database directly from BART CD - by loading it from a diskette. All programs on the BART CD work with UNICODE characters, so they are fully functional even in an environment where the standard code pages are not enough (Japanese, Chinese, Korean, Arabic, and also some European languages).
Registry Cleaner:
The Registry Cleaner will help you find and fix problems and inefficiencies in on-disk Windows NT/2000/XP/2003 registry hives. It also provides ways to recover the registry from virus attacks. The program is very configurable and allows running of different registry cleaning tasks.
Junk File Remover:
The Junk File Remover utility will help you find and delete unnecessary files that waste space on your hard drives. It can also empty system caches, such as Temporary Internet Files and IE history. It features very fast scanning and reliable fixing of any problems found.
avast! Disk Checker:
Disk Checker is a powerful tool for searching and repairing disk errors. It is quite similar to the ScanDisk tool or chkdsk.exe, supplied with the Windows operating systems. You can select either standard or thorough tests. The thorough test additionally performs a sector check. It is capable of finding bad sectors on your disk and marking them as such. The program works both with hard disks (including SCSI and RAID) and removable media.
Data Shredder:
The Data Shredder allows you to erase files in such a way that it is impossible to recover them by software or hardware means. When you delete a file using standard tools, only a reference to its data is removed from system allocation tables and the file's clusters are marked as unused, but no actual erasing is performed until another file overwrites the area on the disk where the original file resided. There are utilities capable of tracing and restoring deleted files, therefore you should never delete files containing sensitive information in the regular way.
avast! Registry Editor:
An absolutely essential tool for systems administrators is the avast! Registry Editor. It gives you unlimited access to the Windows Registry files located on your hard disk (Windows NT/2000/XP/2003 only). The data in the registry can be both read and modified. Some adminstrators consider this tool a life saver!. The program makes registry editing as easy as possible. It quickly scans all your local hard disks and tries to locate installed operating systems, together with their registry files. The operating systems found are presented by their name and root folder, thus avoiding the necessity to know the exact location of the registry files (usually OS-specific). Of course, it is also possible to map a specific registry file by entering its full path.
From the moment the registry is loaded, the program is (visually) similar to the standard Windows registry editor. Its user interface is intuitive and easy. The editor even makes it possible to load the data directly from a file. Before opening any registry file, you can specify whether the file should be backed up. If you select this option, the backup will be created in the same directory as the original file. Every time you open a registry file, a new backup will be created. If there are too many backups present, the user will be prompted to delete the old ones.
Event Viewer:
Event viewer is a utility similar to the original Event Log Viewer included with Windows. It has also very similar user interface. After selecting an on-disk OS installation to inspect, you can browse the event logs by selecting them on the left side of the main window. Records will be shown in the main list control. The main list control consists of columns that can be sorted by clicking on its headers. You can also add/remove or reorder the columns. Record details can be viewed by double-clicking on the record. While you’re in Event Properties window, you can navigate through the records by the Next and Previous buttons.
Services/Drivers:
The Services/Drivers applet lets you manage services and drivers that are installed on the system. It also lets you make basic changes to their configuration (such as startup type).
Command-line Interpreter:
Even though the tools described previously are very powerful, sometimes it is necessary to dive deeply into the operating system itself. In such cases, BART CD contains a command-line interpreter, compatible with the standard command.com and cmd.exe. Often it is enough to delete a single file (such as a broken driver) to solve your problem; however, BART command-line offers you much more! It has the full support of batch files; it also fully supports the XCOPY command, including all its parameters (as in the case of Windows XP). Another key feature is the ability to run your own programs. Most Windows programs can be started in BART! Thus, you can use your favorite recovery tool to restore deleted files or formatted partitions directly from BART CD.
Servant Salamander:
BART CD also includes the popular Servant Salamander file manager. Servant Salamander makes it easy to work with files on your drives. In addition to basic functions, such as moving, copying or deleting files, is also offers advanced operations, such as searching files according to many criteria (including searching files by content), group renaming, archives support (compression, decompression) etc. The user interface is split into two halves, each one showing the content of a (possibly different) directory. Drag & drop operations are also supported.
Simple text editor:
To make working with BART more comfortable, a simple viewer/editor of text file (Notepad-style) has been included. The tool can be useful, for example, to view the report files generated by avast! antivirus, or to view/edit the user log files. The program supports both ANSI and UNICODE character set.
BART CD Shell:
All available programs are presented by a simple shell that makes it possible to start the program easily. In addition, it displays the current state of the applications, license information, etc. By exiting the shell, you end your work with BART CD, and the computer is restarted.
Info:
Code:
http://www.avast.com/eng/avast_bart_cd.html
BART CD also supports networking. After network support is started, NETBIOS and TCP/IP protocols will be available. It is also possible to map network drives. Just enter the path to the drive (in standard UNC format \server\share) and select the letter to map the drive to. After the drive is successfully mapped, you can work with the network drive just as with any other (local) drive - e.g. scan it with avast!. BART CD is a tool no administrator should be without - or, for that matter, anybody who deals with the recovery of data on hard drives. The license model is specified as a multi node license, such that, when you buy one BART CD, you can administer multiple computers, provided you only use one instance at any one time, and all by a single user.
Features overview:
¤ avast! Antivirus
¤ Registry Cleaner
¤ Disk Checker
¤ Data Shredder
¤ Registry Editor
¤ Event Viewer
¤ Services/Drivers
¤ Junk File Remover
¤ Servant Salamander
¤ Command-line Interpreter
¤ Text Editor
¤ BART CD Shell
avast! Antivirus:
The main, and most important component of BART CD is a special version of avast! 4 antivirus. It is built on exactly the same kernel as other avast! 4 Editions, which ensures excellent detection capabilities combined with high performance. It detects 100% of ITW viruses/worms (In-The-Wild), it also features advanced Trojan horse detection. The kernel of avast! antivirus has been certified by ICSA Labs. avast! also takes part in Virus Bulletin test, having received the VB100 award many times. In the latest version, the user interface of BART avast! antivirus has been completely redesigned. A wizard has been added to the interface to guide you through all settings. The settings allow you to turn on the scanning of archives (compressed files), and much more.
Sometimes, for instance, it may be undesirable to write to the hard disk (for example, because it would overwrite deleted files that you would like to restore somehow). BART is aware of such actions, and for an operation requiring disk storage (e.g. unpacking the archives to a temporary folder) it is possible to specify where to store such files.
avast! antivirus, included on the BART CD, is able to repair virus infections. This is done in a sophisticated way: if avast! detects a virus it is able to repair, control is given to a special module that performs the first phase of the repair process. The user is then asked to start the operating system from the hard disk. The second phase of the repair process is performed here - the virus objects, together with all references (such as registry associations), are removed. For security reasons, it is recommended to perform the third phase after another test from BART CD. A key value of BART CD is how it handles updates (especially of the virus database). The BART system works in the following way: the Builder part works on your Windows operating system (any version). It downloads the most recent versions of BART CD components (Internet connection is required).
The builder then creates an ISO image which the user has to burn to CD (ISO images are standard input files in most modern CD burning software). Since the virus database updates are rather frequent, it is recommended to use the CD-RW medium. In emergency cases, it is possible to use the updated virus database directly from BART CD - by loading it from a diskette. All programs on the BART CD work with UNICODE characters, so they are fully functional even in an environment where the standard code pages are not enough (Japanese, Chinese, Korean, Arabic, and also some European languages).
Registry Cleaner:
The Registry Cleaner will help you find and fix problems and inefficiencies in on-disk Windows NT/2000/XP/2003 registry hives. It also provides ways to recover the registry from virus attacks. The program is very configurable and allows running of different registry cleaning tasks.
Junk File Remover:
The Junk File Remover utility will help you find and delete unnecessary files that waste space on your hard drives. It can also empty system caches, such as Temporary Internet Files and IE history. It features very fast scanning and reliable fixing of any problems found.
avast! Disk Checker:
Disk Checker is a powerful tool for searching and repairing disk errors. It is quite similar to the ScanDisk tool or chkdsk.exe, supplied with the Windows operating systems. You can select either standard or thorough tests. The thorough test additionally performs a sector check. It is capable of finding bad sectors on your disk and marking them as such. The program works both with hard disks (including SCSI and RAID) and removable media.
Data Shredder:
The Data Shredder allows you to erase files in such a way that it is impossible to recover them by software or hardware means. When you delete a file using standard tools, only a reference to its data is removed from system allocation tables and the file's clusters are marked as unused, but no actual erasing is performed until another file overwrites the area on the disk where the original file resided. There are utilities capable of tracing and restoring deleted files, therefore you should never delete files containing sensitive information in the regular way.
avast! Registry Editor:
An absolutely essential tool for systems administrators is the avast! Registry Editor. It gives you unlimited access to the Windows Registry files located on your hard disk (Windows NT/2000/XP/2003 only). The data in the registry can be both read and modified. Some adminstrators consider this tool a life saver!. The program makes registry editing as easy as possible. It quickly scans all your local hard disks and tries to locate installed operating systems, together with their registry files. The operating systems found are presented by their name and root folder, thus avoiding the necessity to know the exact location of the registry files (usually OS-specific). Of course, it is also possible to map a specific registry file by entering its full path.
From the moment the registry is loaded, the program is (visually) similar to the standard Windows registry editor. Its user interface is intuitive and easy. The editor even makes it possible to load the data directly from a file. Before opening any registry file, you can specify whether the file should be backed up. If you select this option, the backup will be created in the same directory as the original file. Every time you open a registry file, a new backup will be created. If there are too many backups present, the user will be prompted to delete the old ones.
Event Viewer:
Event viewer is a utility similar to the original Event Log Viewer included with Windows. It has also very similar user interface. After selecting an on-disk OS installation to inspect, you can browse the event logs by selecting them on the left side of the main window. Records will be shown in the main list control. The main list control consists of columns that can be sorted by clicking on its headers. You can also add/remove or reorder the columns. Record details can be viewed by double-clicking on the record. While you’re in Event Properties window, you can navigate through the records by the Next and Previous buttons.
Services/Drivers:
The Services/Drivers applet lets you manage services and drivers that are installed on the system. It also lets you make basic changes to their configuration (such as startup type).
Command-line Interpreter:
Even though the tools described previously are very powerful, sometimes it is necessary to dive deeply into the operating system itself. In such cases, BART CD contains a command-line interpreter, compatible with the standard command.com and cmd.exe. Often it is enough to delete a single file (such as a broken driver) to solve your problem; however, BART command-line offers you much more! It has the full support of batch files; it also fully supports the XCOPY command, including all its parameters (as in the case of Windows XP). Another key feature is the ability to run your own programs. Most Windows programs can be started in BART! Thus, you can use your favorite recovery tool to restore deleted files or formatted partitions directly from BART CD.
Servant Salamander:
BART CD also includes the popular Servant Salamander file manager. Servant Salamander makes it easy to work with files on your drives. In addition to basic functions, such as moving, copying or deleting files, is also offers advanced operations, such as searching files according to many criteria (including searching files by content), group renaming, archives support (compression, decompression) etc. The user interface is split into two halves, each one showing the content of a (possibly different) directory. Drag & drop operations are also supported.
Simple text editor:
To make working with BART more comfortable, a simple viewer/editor of text file (Notepad-style) has been included. The tool can be useful, for example, to view the report files generated by avast! antivirus, or to view/edit the user log files. The program supports both ANSI and UNICODE character set.
BART CD Shell:
All available programs are presented by a simple shell that makes it possible to start the program easily. In addition, it displays the current state of the applications, license information, etc. By exiting the shell, you end your work with BART CD, and the computer is restarted.
Info:
Code:
http://www.avast.com/eng/avast_bart_cd.html
Note - Password during run CD: ftd
Download :
Download :
Filed under ANTIVIRUS COLLECTIONS, SOFTWARE COLLECTIONS | Comment (0)
Antivirus for USB Flash Disk
June 23rd, 2008
By means of the given set of antiviruses-scanners you can check up your system on presence of viruses.
All programs work without installation, from any replaceable carrier. The given set covers all spectrum of virus dangers.
include :
Ad-Aware SE
Avira Antivir
AVAST!
McAfee Virus Scan
nod32AntiVirus
ClamWin
Trend Micro Sys Clean
Dr.Web Scanner for Windows
http://rapidshare.com/files/88775068/Antivirus_for_USB_Flash_.rar
or
http://u-slg1hv4l4.urlcash.net Filed under ANTIVIRUS COLLECTIONS | Comment (0)
TREND MICRO INTERNET SECURITY PRO
June 23rd, 2008
Comprehensive protection for upto 3 PCs
PRODUCT FEATURES:
* Anti-virus
* Anti-spyware
* Email safety scans
* Protection against rootkits
* Proactive intrusion blocking
* Anti-spam
* Two-way firewall
* Home network protection
* Website authentication
* Parental controls
* Data theft prevention
* Protection against ID theft
* Wireless hotspot verification
* PC performance tuning
* Free phone, email, chat support
SYSTEM REQUIREMENTS:
HDD Space:
350 MB
Memory:
256MB minimum (512MB recommended) for Windows XP
512MB minimum (1GB recommended) for Windows Vista Home Basic
1GB for Windows Vista Home Premium, Business or Ultimate
Resolution:
1024 x 768 (minimum)
Operating Systems:
* Windows Vista Ultimate, Business, Home Premium, or Home Basic
* Windows XP Home or Professional Edition, with Service Pack 2
* Windows XP Media Center Edition 2005, with Service Pack 2
* Windows XP Tablet PC Edition 2005, with Service Pack 2
CPU speed:
* Windows Vista (800 MHz, 1.0 GHz recommended)
* Windows XP (450 MHz minimum)
Instructions:
Download Trend Micro Internet Security Pro 2008 Trial Version. Then use the keygen.
When activating, if serial does not work, use a new serial generated using the keygen by using the following steps:
1. Exit Trend Micro.
2. Go to Start Menu > Run and run regedit.exe
3. In HKEY_LOCAL_MACHINE, go to SOFTWARE, TrendMicro, PC-cillin, and double-click the registry named 'SerialNumber'.
4. Create a new serial and paste it here.
5. Start TrendMicro and try to activate again.
6. Repeat if necessary.
Further product details:
http://us.trendmicro.com/imperia/md/content/us/pdf/products/homeandhomeoffice/internetsecuritypro/tisp-datasheet-final.pdf
Setup Download (32-bit):
http://build.trendmicro.com/en-US/TIS16p/TIS16p32/TrendMicro_TIS-Pro_16.0_1412_x32_F.exe
Setup Download (64-bit):
http://build.trendmicro.com/en-US/TIS16p/TIS16p64/TrendMicro_TIS-Pro_16.0_1412_x64_F.exe
KEYGEN
http://www.mediafire.com/?tcn2xbylb7z Filed under ANTIVIRUS COLLECTIONS | Comment (0)
F-Prot Antivirus 6.0.7.0 for Windows
June 14th, 2008
Info:
F-Prot is a quick and easy to use antivirus software package, specially designed to protect your data from virus infection and to remove any virus that may have infected your computer system. Running on all Windows versions, this security software package has various components that help keep your system secure from viruses, backdoors, trojans and other malicious programs. F-Prot includes the RealTime Protector, a memory-resident monitoring utility that observes all files accessed on your system, a Scheduler where you can set the Scanner to make automatic scans or updates on your system at any time and an Updater to manage all signature updates. In addition, the program's innovative and integrated heuristic detection capabilities provide the best possible protection against unknown future threats that may emerge.
FRISK Software's antivirus experts maintain an active vigil around the clock to catch new threats in their infancy and to provide our customers with new virus signature files as soon as possible. The virus signature files are updated every few days and whenever necessary.
Version 6 of Home edition is a new, significantly enhanced version that incorporates many changes and improvements, including new user interface, enhanced features such as automatic e-mail protection, automatic ActiveX protection, fully automated software upgrades and virus signature file updates, exclusion lists, backup system, a quarantine and improved automatic file system protection. In addition to these very significant improvements, version 6 of F-PROT Antivirus for Windows Home edition has maintained its competitive advantage as a reliable and easy-to-use antivirus product that consumes an absolute minimum of system resources.
F-PROT Antivirus for Windows Home offers fully automatic virus signature file updates and software upgrades through the Internet and the proxy server.
When you install F-PROT Antivirus, your computer is protected against viruses, worms, Trojan horses and other malicious programs round the clock. Version 6 of F-PROT Antivirus features automatic real-time protection to all files including archives, code downloads and e-mail attachments. If infected files found, F-PROT Antivirus will automatically disinfects or quarantines them automatically.
Download:
http://rapidshare.com/files/82667509/nunu.rar Filed under ANTIVIRUS COLLECTIONS | Comment (0)
McAfee VirusScan Plus 2008
June 14th, 2008
* The good: McAfee VirusScan Plus 2008 offers more than three user licenses at $10 per seat, the ability to scan links in IM messages, and the ability to watch movies or play games uninterrupted.
* The bad: McAfee VirusScan Plus 2008 uses the same interface as last year, lacks hourly updates, and remains somewhere in the middle of pack in our 2008 testing results.
* The bottom line: McAfee VirusScan Plus 2008's protection keeps up with the changing threats on the Internet, but the product itself doesn't excel.
McAfee VirusScan 2008 and other McAfee products are bundled with various hardware systems; for the purposes of protecting your PC, they'll do just that. Plus you'll get the manufacturer's technical support. But for the discerning user looking to get the best protection, we suggest you try another product. The lack of a quality technical support from McAfee is stunning given that smaller antivirus companies do a much better job supporting their customers than this venerable giant in the industry. Rather than putting its energy into marketing gimmicks like "triple play," it would be nice to see McAfee take the lead next year and offer a truly solid antivirus product like Kaspersky or even Norton.
Download:
http://rapidshare.com/files/82667571/lolo.rar Filed under ANTIVIRUS COLLECTIONS | Comment (0)