WINDOWS TRICKS & SHORTCUTS

fleamailman
Student
Joined: 02 Oct 2006
Posts: 89
Loc: geneva
Status: Offline

October 19th, 2006, 1:09 pm

the idea:
to make a popup reminder
(examples: monthly payments, weekly errands, homework, to do lists, etc.,)
- step 1. make a batch file with text and colored background
- step 2. use scheduled tasks to lanch it when you want it

step 1: to make a colored batch file that puts text on screen

runbox command
- press keyboard buttons: winkey + r
- paste this in slot: notepad
- press: enter
(notepad window opens)

- type in window: @echo off
(this hides the commands so one only sees the text)
- type: color 1f
(f is the color of background, 1 is the color of text)
(the list of color choices is below)
- type: echo.
(gives you a blanc line)
- type for example: sunday is garbage day
- type: echo.
- type: pause
(pause just means end here)
- click top of window: file
- choose: save as
- type for example: "garbage day.bat"
(don't forget the inverted commas, or it won't show on screen)
- press: save
done

step 2: to use scheduler to lanch the batch.file

runbox command
- press keyboard buttons: winkey + r
- paste this in slot: tasks
- press: enter
- click: add scheduled task
(scheduled task wizard window appears)
- click: next
- click: browse
- find your newly made bat file
- double click your newly made bat file
- optional, type name of task
(best just leave it but if you have many...)
- choose lanching time(s)
(for example choose: weekly)
- press: next
(if weekly, choose the day and time)
- press: next
(password prompt appears)
- ignore password prompt
- press: next
- tick box: open advanced properties for this task when I click finish
- click: finish
- tick box: run only if logged on
(apply button appears)
- click: apply
- click: ok
done

[footnote 1] to change the colors:
- normally cmd is 07, that is 0 black background and 7 white text , to change color just choose from below, for example I like 1f which is

0 = black
1 = blue
2 = green
3 = aqua
4 = red
5 = purple
6 = yellow
7 = white
8 = gray
9 = light blue
a = light green
b = light aqua
c = light red
d = light purple
e = light yellow
f = light white

here is a simple template, so you only have to write the text:
(replace 'this is where you write your text' with your text)

@echo off
color 1f
echo.
echo this is where you write your text
echo.
pause

blitz replying is not speed, it's readiness

Anonymous
Bot
- www.ozzu.com
Joined: 25 Feb 2008
Posts: ?
Loc: Ozzuland
Status: Online

October 19th, 2006, 1:09 pm

fleamailman
Student
Joined: 02 Oct 2006
Posts: 89
Loc: geneva
Status: Offline

October 22nd, 2006, 6:34 am

to repair the ntldr (the ntldr is the boot loader) and the ntdetect.com (the ntdetect.com is responsible for detecting basic hardware)

fix you will need a Windows XP CD.
- stick the Windows XP CD in, and boot your computer from the CD
(once you have booted up, you will see a blue screen)

click: R
(To go into the Recovery Console)
- type: password
(if you don’t recall setting a password for the Admin, try leaving it blank then hit enter, if you get an error, that means that there was a password. You will need this password to continue)

Once in the recovery console,
type: copy D:/i386/ntldr C:
(note my CD Drive is letter D: so change this to whatever your CD Drive is and my Windows is on C: so change that drive to whatever your Windows is on):
- press: enter
( if it asks you if you want to replace a file, say yes)
- type: copy D:/i386/ntdetect.com C:
- press: enter
( if it asks you if you want to replace a file, say yes)
Then Reboot.

blitz replying is not speed, it's readiness

fleamailman
Student
Joined: 02 Oct 2006
Posts: 89
Loc: geneva
Status: Offline

October 22nd, 2006, 6:36 am

to restore missing boot files when the boot is corrupted

- check that boot sequence is set to cd
(ask if you don't understand)
- turn on the computer
- place XPcd in the computer
- turn off the computer
- turn on the computer again
- press: r
- press: enter
(black screen appear, recovery console)
- type: run "Attrib -H -R -S" on the C:\Boot.ini file
- press: enter
- type: delete C:\Boot.ini file
- press: enter
- type: run Bootcfg /rebuild
- press: enter
- type: run Fixboot
- press: enter
- type: exit
- press: enter
- restart your computer normally

blitz replying is not speed, it's readiness

fleamailman
Student
Joined: 02 Oct 2006
Posts: 89
Loc: geneva
Status: Offline

October 22nd, 2006, 6:37 am

to delete an invalid bootpath:

run command
- press keyboard buttons: winkey + r button
- paste this: msconfig
- press: enter
- click tab: boot.ini
- click button: check all boot paths
(computer checks the boot paths and removes invalid ones)
- restart the computer

blitz replying is not speed, it's readiness

fleamailman
Student
Joined: 02 Oct 2006
Posts: 89
Loc: geneva
Status: Offline

October 22nd, 2006, 6:50 am

the subject of these last few posts has been what to do when one is not arriving at post in XP(post being the your desktop). next will be something else, if you have a request let me know, and I will cut paste it here(without linking) canned replies look easy until one tries you make them for yourself

blitz replying is not speed, it's readiness

fleamailman
Student
Joined: 02 Oct 2006
Posts: 89
Loc: geneva
Status: Offline

November 4th, 2006, 10:18 am

hjt logs, which number needs which scan

r0 - Internet Explorer Start/Search pages URLs
Blocking Unwanted Parasites with a Hosts File
http://www.mvps.org/winhelp2002/
the actual list
http://www.mvps.org/winhelp2002/hosts.txt
WHOIS Lookups
http://www.DNSstuff.com
IPWHOIS
http://www.dnsstuff.com/pages/whois.htm
http://samspade.org/

r1 - Internet Explorer Start/Search pages URLs
Blocking Unwanted Parasites with a Hosts File
http://www.mvps.org/winhelp2002/
the actual list
http://www.mvps.org/winhelp2002/hosts.txt
WHOIS Lookups
http://www.DNSstuff.com
IPWHOIS
http://www.dnsstuff.com/pages/whois.htm
http://samspade.org/

F0 - Autoloading programs from INI files = fix all these
F1 - Autoloading programs from INI files = very old program
Pacman's Startup List
http://www.sysinfo.org/startuplist.php

01 - Hosts file redirection
Blocking Unwanted Parasites with a Hosts File
http://www.mvps.org/winhelp2002/
the actual list
http://www.mvps.org/winhelp2002/hosts.txt
WHOIS Lookups
http://www.DNSstuff.com
IPWHOIS
http://www.dnsstuff.com/pages/whois.htm
http://samspade.org/

O2 - Browser Helper Objects
CLSID / BHO List / Toolbar Master List
http://www.castlecops.com/CLSID.html
CLSID List
http://sysinfo.org/bholist.php
TonyK's BHO & Toolbar List
http://www.sysinfo.org/bholist.php

O3 - Internet Explorer toolbars
CLSID / BHO List / Toolbar Master List
http://www.castlecops.com/CLSID.html
CLSID List
http://sysinfo.org/bholist.php
TonyK's BHO & Toolbar List
http://www.sysinfo.org/bholist.php

O4 - Autoloading programs from Registry
StartupList Index
http://www.castlecops.com/StartupList.html
Startup Database Forum.
http://www.bleepingcomputer.com/startups/
The File Database
http://www.bleepingcomputer.com/filedb/
ProcessLibrary
http://www.processlibrary.com/
Uninstall Programs Database
http://www.bleepingcomputer.com/uninstall/

O5 - IE Options not visible in Control Panel
Unless you or your system administrator have knowingly hidden the icon from Control Panel, have HijackThis fix it.

O6 - IE Options access restricted by Administrator
Unless you have the Spybot S&D option 'Lock homepage from changes' active, or your system administrator put this into place, have HijackThis fix this.

O7 - Regedit access restricted by Administrator
Always have HijackThis fix this, unless your system administrator has put this restriction into place.

O8 - Extra items in IE right-click menu
If you don't recognize the name of the item in the right-click menu in IE, have HijackThis fix it.

O9 - Extra buttons on main IE button toolbar, or extra items in IE 'Tools' menu
List of Extra Internet Explorer Buttons
http://www.castlecops.com/O9.html

O10 - Winsock hijacker
Layered Service Providers (LSPs)
http://www.castlecops.com/LSPs.html

O11 - Extra group in IE 'Advanced Options' window
The only hijacker as of now that adds its own options group to the IE Advanced Options window is CommonName. So you can always have HijackThis fix this.

O12 - IE plugins
Most of the time these are safe. Only OnFlow adds a plugin here that you don't want (.ofb).

O13 - IE DefaultPrefix hijack
These are always bad. Have HijackThis fix them.

O14 - 'Reset Web Settings' hijack
If the URL is not the provider of your computer or your ISP, have HijackThis fix it.

O15 - Unwanted sites in Trusted Zone
Most of the time only AOL and Coolwebsearch silently add sites to the Trusted Zone. If you didn't add the listed domain to the Trusted Zone yourself, have HijackThis fix it.

O16 - ActiveX Objects (aka Downloaded Program Files)
ActiveX Objects
http://www.castlecops.com/ActiveX.html

O17 - Lop.com domain hijackers
Blocking Unwanted Parasites with a Hosts File
http://www.mvps.org/winhelp2002/
the actual list
http://www.mvps.org/winhelp2002/hosts.txt
WHOIS Lookups
http://www.DNSstuff.com
IPWHOIS
http://www.dnsstuff.com/pages/whois.htm
http://samspade.org/

O18 - Extra protocols and protocol hijackers
Extra protocols and protocol hijackers
http://www.castlecops.com/O18.html

O19 - User style sheet hijack
In the case of a browser slowdown and frequent popups, have HijackThis fix this item if it shows up in the log. However, since only Coolwebsearch does this, it's better to use CWShredder to fix it.

O20 - AppInit_DLLs Registry value autorun020
AppInit_DLLs and Winlogon Notify
http://www.castlecops.com/O20.html

O21 - ShellServiceObjectDelayLoad Registry key autorun
This is an undocumented autorun method, normally used by a few Windows systemHijackThis uses a whitelist
of several very common SSODL items, so whenever an item is displayed in
the log it is unknown and possibly malicious. Treat with extreme care.

components
ShellServiceObjectDelayLoad
http://www.castlecops.com/O21.html

O22 - SharedTaskScheduler Registry key autorun
This is an undocumented autorun for Windows NT/2000/XP only, which
is used very rarely. So far only CWS.Smartfinder uses it. Treat with care.
Shared Task Scheduler
http://www.castlecops.com/O22.html

O23 - Windows NT Services
This is the listing of non-Microsoft services. The list should be the same as the one you see in the Msconfig utility of Windows XP. Several trojan hijackers use a homemade service in adittion to other startups to reinstall themselves. The full name is usually important-sounding, like 'Network Security Service', 'Workstation Logon Service' or 'Remote Procedure Call Helper', but the internal name (between brackets) is a string of garbage, like 'O?’ŽrtñåÈ²$Ó'. The second part of the line is the owner of the file at the end, as seen in the file's properties.
Note that fixing an O23 item will only stop the service and disable it. The service needs to be deleted from the Registry manually or with another tool. In HijackThis 1.99.1 or higher, the button 'Delete NT Service' in the Misc Tools section can be used for this.
List of Windows XP/NT services
http://www.castlecops.com/O23.html
Spyware Encyclopedia
http://www3.ca.com/securityadvisor/pest/search.aspx

others:
----------------------------

Encyclopedia
http://www3.ca.com/securityadvisor/pest/search.aspx

Rogue Products
http://www.spywarewarrior.com/rogue_ant ... m#products

Removal Tools
http://downloads.andymanchesta.com/

Back to top

blitz replying is not speed, it's readiness

fleamailman
Student
Joined: 02 Oct 2006
Posts: 89
Loc: geneva
Status: Offline

November 4th, 2006, 10:21 am

This tut is ongoing to be revised but the idea is to make a list of the tools that are used in HJT log reading, a kind of reverse enginering of HJT logs. This is because even if one is aware that X or Y entry is bad, if one doesn't know the tool which is being used for then, it is hard to recognised the malware, whereas if you know what the tool is for, you get a good idea of what is going on even if you cannot recognise the entries themselves. Best not to play with the tools, so haven't added the direct links which one can get from the site anyway.

about:buster
is a program that is used to help clean up the CWS infection called Home Search Assistant.

ads spy
a small tool to list, view or delete 'alternate data streams' (ADS) on Windows 2000/XP with NTFS file systems.

aproposfix
http://swandog46.geekstogo.com/
this tool removes all known variants of the Apropos rootkit infection which is not otherwise identifiable or removable by normal means.

ATF cleaner
http://www.atribune.org/content/view/19/2/
cleaning of all user temp folders, administrator only can use this feature.
cleaning of the java cache, which seems to be harbouring more and more malware.
cleaning for the opera browser, including operas cache, cookies, history, download history, saved passwords and visited links

averger
http://swandog46.geekstogo.com/
a full-scriptable, kernel-level driver designed to remove highly persistent files and registry keys/values protected by entrenched malware.

BHOlist
a frontend for TonyKlein's BHO Collection that downloads the list, and displays it in a sortable, searchable list.

Brute Force Uninstaller
http://www.softpedia.com/get/Tweak/U...nstaller.shtml
BFU is a scripting program that can execute a series of preset commands like a Windows batch file, aimed at uninstalled programs that are hard to remove, uninstall improperly or simply unwanted.

bugoff
this little app disables a few exploits that are commonly used by browser hijackers (including CWS), thus protecting you from infection.

ccleaner
http://www.filehippo.com/download_ccleaner/
ccleaner (crap cleaner) is a freeware system optimization and privacy tool. It removes unused and temporary files from your system - allowing Windows to run faster, more efficiently and giving you more hard disk space.

combofix
....link missing, still looking for its homepage anyone....
combofix specifically targets SurfSideKick, qoologic, look2me or any combination of that group.
picks out Vundo infections and clears some, but not all.

command line process
http://www.beyondlogic.org/consultin...rocessutil.htm
command line utility to view, kill, suspend or set the priority and affinity of processes

dllcompare
is a scanner to help detect hidden or non-accessible files in Windows, like the CWS super-hidden dll.

Dr.Web CureIt

e2takeout
e2takeout removes the E2Give and PTech malware, a program that tracks where a user browses, from your system.

findlop
http://www.geekstogo.com/forum/findlop-t113343.html
this is the latest batch put together by Metallica to find the full names of the folders used by LOP
adware.Lop adds its own toolbar and search button to Internet Explorer

fixwareout
http://vil.nai.com/vil/content/v_131783.htm
Wareout is not a virus or trojan. The WareOut product is a spyware/adware scanner that is used to scan the local computer.

FIXPATH2

f-secure
http://support.f-secure.com/enu/home/ols3.shtml#
a free beta on line scan

gmer
http://www.gmer.net/
an application that detects rootkits amonst other thing too

haxfix
an application that detects rootkits amonst other things
http://forum.hijackthis.de/showthread.php?t=15448
http://www.sophos.com/virusinfo/anal...haxdoorap.html
haxfix is for the 'backdoor haxdoor family', Haxdoor: ****32.dll type

isearchfix
A tool that fixes ISRVS hijacks.

itty bitty process manager
standalone version of the little process manager included in HijackThis (Misc Tools section).

jotti's malwarescan
http://virusscan.jotti.org/
a site where a file can be uploaded to see if it is, or has, malware

killbox
http://www.killbox.net/
killbox is a tool to delete in-use files, if the file is running, killbox will attempt to end the process (close the running file) and delete it.

kill2me
removal tool specifically for the Look2Me parasite....

l2m9xfix
tool that fixes the new Look2Me on Win9X(old windows like win98)

lsp-fix
http://www.cexx.org/lspfix.htm
lsp-fix is a tool that repairs a loss of Internet access associated with certain types of software. This type of software, known as a Layered Service Provider or LSP, typically handles low-level Internet-related tasks, and data is passed through a chain of these programs on its way to and from the Internet. However, due to bugs in the LSP software or deletion of the software, this chain can get broken, causing the Internet connection to become inaccessible.

l2m9xfix
http://swandog46.geekstogo.com/
this tool removes all known variants of the look2me / VX2 infection on windows 9X (98 or ME) operating systems.

oiuninstaller
http://www.outerinfo.com/howto.html
uninstalls outerinfo adware

msnvirrem
msnvirrem is an applicaton that removes changes, and kills files created by a strain of msn worm (namely w32.Chod, Virkel, or Landis.O).

nailfix
A fix for the nail/aurora infection.

paperfix
A tool that removes the peper trojan

qoofix9x
http://swandog46.geekstogo.com/
this tool removes all known variants of the qoologic trojan on Windows 9X (98 or ME) operating systems.

regserch
http://www.xs4all.nl/~fstaal01/regsearch-us.html
registry search is a program to search the Registry for all instances of a string

requesting files from spykiller
http://www.thespykiller.co.uk/forum/index.php?board=1.0
this is not a program but when the reader is stumped by something rare or new, a request is sent to this site and the file details are returned, only qualified HJT sites can receive files from this databank.

rkfile
RKfiles relies on an an EXE file and a BAT file. The BAT file runs the EXE, and dumps text to a text log file. It is similar to HJT in that it scans known startup locations for bad files, but reports them differently. RKFiles and FindQoologic are starting to be used more at various sites because thay check a few things differently than HJT. If someone is having trouble determining a source of a problem with HJT, RKFiles and FindQoologic can sometimes help pinpoint it.

scanner.virus
http://scanner.virus.org/
a site where a file can be uploaded to see if it is, or has, malware

sdfix
no explainable link yet
this tool deals with rats(romote access trojans) winctrl.exe

smitfraudfix
http://siri.urz.free.fr/Fix/SmitfraudFix_En.php
tool removes desktop hijack malware: adwarepunisher, adwareSheriff, alphaCleaner, antispyware soldier, antivirusGolden, avgold, bravesentry, malwarewipe, pesttrap, psguard, quicknavigate.com, security iguard, smitfraud, spyAxe, spyfalcon, spyguard, spyheal, spysheriff, spyware vanisher, spyware soft stop, spywarequake, spywaresheriff, spywarestrike, startsearches.net, titanshield antispyware, trust cleaner, updatesearches.com, virtual Maid, virusblast, virusburst, win32.puper, winhound, emedia codec, hq codec, icodecpack, Intcodec, media-codec, mpcodec, pornmag pass, pcodec, strcodec, winmediacodec, x password generator, X Password manager, zipcodec...

startuplist
simple tool that lists all and every auto starting program on your system.

[virustotal
http://www.virustotal.com/en/indexf.html
a site where a file can be uploaded to see if it is, or has, malware

vundofix
http://www.softpedia.com/get/Antivirus/VundoFix.shtml
VundoFix.exe is a removal tool developed to remove Virtumonde infections.

winpfind
http://www.bleepingcomputer.com/files/winpfind.php
winpfind is a program that scans common locations on your hard drive for files that match certain patterns known to be used by malware. It will also provide exports of certain registry keys that are used by various malware.

---end---

to be edited and built on....
good link for info on malware threats as seen in the forums
http://www.viruslist.com/en/viruses/encyclopedia

blitz replying is not speed, it's readiness

fleamailman
Student
Joined: 02 Oct 2006
Posts: 89
Loc: geneva
Status: Offline

November 5th, 2006, 8:58 am

blitz replying is not speed, it's readiness

fleamailman
Student
Joined: 02 Oct 2006
Posts: 89
Loc: geneva
Status: Offline

November 19th, 2006, 4:11 pm

blitz replying is not speed, it's readiness

Vampire
Novice
Joined: 22 Jul 2006
Posts: 18
Status: Offline

November 22nd, 2006, 2:07 pm

To send messages over a network use the cmd.exe or command.com some networks block the cmd.exe, then type:

netsend (IP) (message) ***please note the spaces***

to shutdown computers over a network type:

shutdown -s -m (IP) -t (X) -c (text)

Where -S = shutdown
-M = Machine, thats why IP is required
-T = Time, in seconds
-C = Text to be shown before shutting the computer down
(X)= Seconds

This will shutdown the computer, but if you have any applications open it'll ask you to save changes before shutting down and it'll stop the shuttind down process, to bypass that use:

shutdown -f -s -m (IP) -t 0

That'll force the shutdown, and cant be stopped...

If you wanna stop the shutting down process (when given some time)
Type on command:

shutdown -a

To shutdowns many computers at once type:

shutdown -i

and get familiar with the window that'll come up, add as many computer as you want, (within your network), and please dont use this on call centers! hahaha.

To kill processes use (usually works with WXP P):

taskkill /IM (process name with extension)

You can create batch files to execute these with double click!

*****

and as a side note, get familiar with the registry because there lies almost everything you need....

fleamailman
Student
Joined: 02 Oct 2006
Posts: 89
Loc: geneva
Status: Offline

November 23rd, 2006, 7:50 pm

to make an invisible folder(no text, no icon)

- make a folder on your screen,
(don't care about the name)
- right hand click and choose: properties
- click tab: customise
- click: change icon
(change icon for new folder folder appears)
- look for the padlock icon
- click on the blanc space right of the padlock icon
- click: ok
- click: apply
(folder is invisible but text remains)
- hightlight the text of the folder
- press and hold down the keyborad button: alt
- type with number pad: 255
- release the keyboard button: alt
- click icon to set

[footnote: one is supposed to tick in my computer the folder options to 'hide extensions for known type of file' which I have not done]
[footnote2: if you want to make a second invisible folder in the same place, it is alt+255 then alt+255 again, reads as double blanc folder]

blitz replying is not speed, it's readiness

owh
Born
Joined: 03 Dec 2006
Posts: 3
Status: Offline

December 3rd, 2006, 3:46 am

Browsing all tricks, and the net, I can't find the solution to my problem. Wonder if anyone here can help:

Wanna disable address bar, tool bar, menu bar in Windows Explorer as well as IE, that cannot be re-enable by the user. Anyway to do it through the registry or policy, and how?

Will appreciate any help. Thanks.

fleamailman
Student
Joined: 02 Oct 2006
Posts: 89
Loc: geneva
Status: Offline

December 3rd, 2006, 5:44 am

owh, wrong thread right forum, simply you can disable what you like but someone else can still enable them by reversing the steps you take, and "both getting into cmd, into policy and into regedit" become great goals if there is the promise of internet afterwards. there mayby some passworded software out there that does it but the XPsystem alone.....

blitz replying is not speed, it's readiness

neonitb
Beginner
- YIM
Joined: 04 Jan 2007
Posts: 35
Loc: India
Status: Offline

January 5th, 2007, 12:04 pm

Try these out
Alt+tab maximize
Alt+spacebar immediately followed by "N" Minimize
F2 Rename

Unreal Diehl
Newbie
Joined: 17 Jan 2007
Posts: 8
Status: Offline

January 17th, 2007, 8:31 pm

I have a good'n i like to use, i use it when im playing an online game or something on my computer that doesn't stay up for long that i wanna show people.
press prt scr/sysrq then go to word pad or microsoft word or something and right click and paste. There you go, a Screenshot. Not sure if this would classify as a Windows shortcut, but just wanted to share. and it is the only time i ever used the key, and might be the first for some of you.

oh and f11 maximizes your screen, and when you press alt+tab and keep alt held in you can keep pressing tab to go to the program you want that you have on the toolbar or whatever.

Anonymous
Bot
- www.ozzu.com
Joined: 25 Feb 2008
Posts: ?
Loc: Ozzuland
Status: Online

January 17th, 2007, 8:31 pm

1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30

To Reply to this topic you need LOGIN or REGISTER. It is free.

Post Information

Total Posts in this topic: 439 posts
Moderators: UNFLUX, grinch2171, labrego
Users browsing this forum: No registered users and 230 guests

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

WINDOWS TRICKS & SHORTCUTS

Post Information

Member Login

Useful Resources

Posting Information

Other Languages

Website Development

Graphics

OS & Hardware