Computer And Internet, Miscellaneous, Personal, Tips & Trick

In this short article we will learn how to created an custom google translate tools. Google translate tools is free translate service provided by google. This tools really help people to translate some website/page to any language people want.

Google translate tools standards is not really interesting in style *lol* So why we don’t created a simple good looking translate tools our own, but of course we have to credited google as this service provider? Alright let’s created it, I want everyone be creative as possible.

First we have to know how translate tools format working. Example:

http://translate.google.com/translate?hl=en&sl=en&tl=pl&u=http%3A%2F%2Fwww.istanto.net

This is standard format when google translate try to translating my blog from English to Polish. There is some rules we can manipulate it. Example, I try change tl=pl with tl=id:

http://translate.google.com/translate?hl=en&sl=en&tl=id&u=http%3A%2F%2Fwww.istanto.net

The result is I got id translation page (Indonesian). When I try change sl=en to sl=id I got result:

http://translate.google.com/translate?hl=en&sl=id&tl=id&u=http%3A%2F%2Fwww.istanto.net

So the answer is we can manipulate this format if we know country code! That it! Standard format would be like this:

http://translate.google.com/translate?hl=en&sl=[YOUR PAGE ORIGINAL LANGUAGE]&tl=[LANGUAGE YOU WANT TRANSLATED TO]&u=[PAGE SOURCE]

HL = Hidden Language? *lol* I Don’t know! This properties maybe the language setting on each computers or from where google page country we coming from.

SL = Source Language

TL = Translated Language

U = User

Okay we already know and understand this format, our next goal is created a custom html code to follow this format. This is a simple code I created, if you can please use CSS to make this code clean.

<style>
.translate img {
filter:alpha(opacity=100);
-moz-opacity: 1.0;
opacity: 1.0;
border:0;
padding-left:0px;
}

.translate:hover img {
filter:alpha(opacity=50);
-moz-opacity: 0.50;
opacity: 0.50;
border:0;
}

</style>
<div style=”text-align:center”>

<a class=”translate” href=”#” target=”_blank” rel=”nofollow” title=”English” onclick=”window.open(‘http://translate.google.com/translate?u=’+encodeURIComponent(location.href)+’&langpair=en%7Cen&hl=en’); return false;”><img alt=”English” border=”0″ align=”absbottom” title=”English” height=”24″ src=”http://www.istanto.net/flag/uk-flag.png” style=”cursor: pointer;margin-right:8px” width=”24″/></a>

<a class=”translate” href=”#” target=”_blank” rel=”nofollow” title=”French” onclick=”window.open(‘http://translate.google.com/translate?u=’+encodeURIComponent(location.href)+’&langpair=en%7Cfr&hl=en’); return false;”><img alt=”French” border=”0″ align=”absbottom” title=”French” height=”24″ src=”http://www.istanto.net/flag/france-flag.png” style=”cursor: pointer;margin-right:8px” width=”24″/></a>

<a class=”translate” href=”#” target=”_blank” rel=”nofollow” title=”German” onclick=”window.open(‘http://translate.google.com/translate?u=’+encodeURIComponent(location.href)+’&langpair=en%7Cde&hl=en’); return false;”><img alt=”German” border=”0″ align=”absbottom” title=”German” height=”24″ src=”http://www.istanto.net/flag/german-flag.png” style=”cursor: pointer;margin-right:8px” width=”24″/></a>

<a class=”translate” href=”#” target=”_blank” rel=”nofollow” title=”Spain” onclick=”window.open(‘http://translate.google.com/translate?u=’+encodeURIComponent(location.href)+’&langpair=en%7Ces&hl=en’); return false;”><img alt=”Spain” border=”0″ align=”absbottom” title=”Spain” height=”24″ src=”http://www.istanto.net/flag/spain-flag.png” style=”cursor: pointer;margin-right:8px” width=”24″/></a>

<a class=”translate” href=”#” target=”_blank” rel=”nofollow” title=”Italian” onclick=”window.open(‘http://translate.google.com/translate?u=’+encodeURIComponent(location.href)+’&langpair=en%7Cit&hl=en’); return false;”><img alt=”Italian” border=”0″ align=”absbottom” title=”Italian” height=”24″ src=”http://www.istanto.net/flag/italy-flag.png” style=”cursor: pointer;margin-right:8px” width=”24″/></a>

<a class=”translate” href=”#” target=”_blank” rel=”nofollow” title=”Dutch” onclick=”window.open(‘http://translate.google.com/translate?u=’+encodeURIComponent(location.href)+’&langpair=en%7Cnl&hl=en’); return false;”><img alt=”Dutch” border=”0″ align=”absbottom” title=”Dutch” height=”24″ src=”http://www.istanto.net/flag/dutch-flag.png” style=”cursor: pointer;margin-right:8px” width=”24″/></a>

<br/><br/>

<a class=”translate” href=”#” target=”_blank” rel=”nofollow” title=”Russian” onclick=”window.open(‘http://translate.google.com/translate?u=’+encodeURIComponent(location.href)+’&langpair=en%7Cru&hl=en’); return false;”><img alt=”Russian” border=”0″ align=”absbottom” title=”Russian” height=”24″ src=”http://www.istanto.net/flag/russian-flag.png” style=”cursor: pointer;margin-right:8px” width=”24″/></a>

<a class=”translate” href=”#” target=”_blank” rel=”nofollow” title=”Brazil” onclick=”window.open(‘http://translate.google.com/translate?u=’+encodeURIComponent(location.href)+’&langpair=en%7Cpt&hl=en’); return false;”><img alt=”Brazil” border=”0″ align=”absbottom” title=”Brazilian” height=”24″ src=”http://www.istanto.net/flag/brazil-flag.png” style=”cursor: pointer;margin-right:8px” width=”24″/></a>

<a class=”translate” href=”#” target=”_blank” rel=”nofollow” title=”Japanese” onclick=”window.open(‘http://translate.google.com/translate?u=’+encodeURIComponent(location.href)+’&langpair=en%7Cja&hl=en’); return false;”><img alt=”Japanese” border=”0″ align=”absbottom” title=”Japanese” height=”24″ src=”http://www.istanto.net/flag/japan-flag.png” style=”cursor: pointer;margin-right:8px” width=”24″/></a>

<a class=”translate” href=”#” target=”_blank” rel=”nofollow” title=”Korean” onclick=”window.open(‘http://translate.google.com/translate?u=’+encodeURIComponent(location.href)+’&langpair=en%7Cko&hl=en’); return false;”><img alt=”Korean” border=”0″ align=”absbottom” title=”Korean” height=”24″ src=”http://www.istanto.net/flag/korean-flag.png” style=”cursor: pointer;margin-right:8px” width=”24″/></a>

<a class=”translate” href=”#” target=”_blank” rel=”nofollow” title=”Arabic” onclick=”window.open(‘http://translate.google.com/translate?u=’+encodeURIComponent(location.href)+’&langpair=en%7Car&hl=en’); return false;”><img alt=”Arabic” border=”0″ align=”absbottom” title=”Arabic” height=”24″ src=”http://www.istanto.net/flag/arab-flag.png” style=”cursor: pointer;margin-right:8px” width=”24″/></a>

<a class=”translate” href=”#” target=”_blank” rel=”nofollow” title=”Chinese Simplified” onclick=”window.open(‘http://translate.google.com/translate?u=’+encodeURIComponent(location.href)+’&langpair=en%7Czh-CN&hl=en’); return false;”><img alt=”Chinese Simplified” border=”0″ align=”absbottom” title=”Chinese Simplified” height=”24″ src=”http://www.istanto.net/flag/china-flag.png” style=”cursor: pointer;margin-right:8px” width=”24″/></a>

<div style=”font-size:10px; padding:8px 0px 0px 0px”><a href=”http://www.istanto.net/how-to-creating-custom-google-translate-tools.html” target=”_blank”>Custom Google Translate Tools</a> – <a href=”http://www.google.com” target=”_blank”>Provided by google</a>

</div></div>

The result will be like this:

That’s looks beauty right? :) You can add more translated language if you want. All you need to do is preparing the country flag pictures and edited the code. I wan’t someone created wordpress plugins for this custom translate, you’re free to use code in here.

That’s the lesson for today, have a nice day. :)

Share |
1 Star2 Stars3 Stars4 Stars5 Stars (2 votes, average: 5.00 out of 5)
Loading ... Loading ...
Computer And Internet, Personal, Tips & Trick

Computer virus always using sociable technique to infecting their victims. When there is gossip virus creator always using this gossip to spreading their virus ex:paris hilton xxx movies, what FBI hidding from us, etc. This time they’re using facebook popularity to infect all facebook fans. This virus also has been reported bundled with FAKE antispyware security tools.

When you see this on your monitor that mean you’re already infected.

Just ignore this fake antispyware warning, if you follow it you will get more virus infected your computer or your operating system gonna be corrupt.

How to Remove Facebook Virus W32/Obfuscated.D2!genr :

1. It’s recommended to running windows in “safe mode” when in cleaning process, backup all your important data first!.

2. Disable “System Restore” when in cleaning process.

3. Disconnected your computers from local network.

4. Download “unlocker” and install it.

5. Download “security task manager“  then kill virus process active in computer background.

6. Download repair.inf then right click, choose “install”. Make sure repair.inf content same with this:

[Version]

Signature=”$Chicago$”
Provider=nobody

[DefaultInstall]
AddReg=inject
DelReg=rem

[inject]
HKLM, Software\CLASSES\batfile\shell\open\command,,,”"”%1″” %*”
HKLM, Software\CLASSES\comfile\shell\open\command,,,”"”%1″” %*”
HKLM, Software\CLASSES\exefile\shell\open\command,,,”"”%1″” %*”
HKLM, Software\CLASSES\piffile\shell\open\command,,,”"”%1″” %*”
HKLM, Software\CLASSES\regfile\shell\open\command,,,”regedit.exe “%1″”
HKLM, Software\CLASSES\scrfile\shell\open\command,,,”"”%1″” %*”
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell,0, “Explorer.exe”
HKCU, Software\Microsoft\Internet Explorer\Main, tart Page,0, “about:blank”
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon,userinit,0, “userinit.exe”

[rem]
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Run,reader_s
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Run,47543326
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Run,PromoReg
HKCU, SOFTWARE\Microsoft\Windows\CurrentVersion\Run,reader_s
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System,EnableProfileQuota
HKLM, SOFTWARE\AGProtect
HKLM, SOFTWARE\47543326
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Network, UID
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion, Rlist
HKU, .DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\{43BF8CD1-C5D5-2230-7BB2-98F22C2B7DC6}
HKU, .DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\{8FFA689D-2C2B-2B2E-D865-74C04CA4EF06}

7. Delete this file list has been created by virus,  before you doing this set your computers to show all hidden files.

%systemroot%\Documents and Settings\All Users\Application Data\47543326
%systemroot%\Documents and Settings\%user%\Start Menu\Programs\Security Tools.lnk
%systemroot%\Documents and Settings\%user%\Desktop\Security Tools.lnk
%systemroot%\Documents and Settings\%user%\Application Data\wiaservg.log
%systemroot%\Documents and Settings\%user%\Local Settings\Temp\*.tmp
%systemroot%\WINDOWS\Temp\wpv311256600826.exe
%systemroot%\WINDOWS\Temp\wpv411256806849.exe
%systemroot%\Documents and Settings\%user%\reader_s.exe
%systemroot%\Documents and Settings\%user%\Start Menu\Programs\Startup\isqsys32.exe
%systemroot%\WINDOWS\system32\reader_s.exe
%systemroot%\Windows\system32\wbem\proquota.exe
%systemroot%\windows\system32\sdra64.exe

%systemroot%\Windows\system32\lowsec
local.ds
user.ds
user.ds.lll

* NOTE: when you have problem deleted folder %systemroot%\Windows\system32\lowsec and file %systemroot%\windows\system32\sdra64.exe please use unlocker. Right click on folder/files then choose unlocker, choose deleted then click OK. If there any warning just ignore it.

7. Deleted all temporary files using ATF-Cleaner.

8. Update your best antivirus then scan full all your system, make sure there is no virus/worm/trojan left.

9. Subscribe to my blog… hehehe :D

Good luck, have a great day :)

[Version]
Signature=”$Chicago$”
Provider=nobody

[DefaultInstall]
AddReg=inject
DelReg=rem

[inject]
HKLM, Software\CLASSES\batfile\shell\open\command,,,”"”%1″” %*”
HKLM, Software\CLASSES\comfile\shell\open\command,,,”"”%1″” %*”
HKLM, Software\CLASSES\exefile\shell\open\command,,,”"”%1″” %*”
HKLM, Software\CLASSES\piffile\shell\open\command,,,”"”%1″” %*”
HKLM, Software\CLASSES\regfile\shell\open\command,,,”regedit.exe “%1″”
HKLM, Software\CLASSES\scrfile\shell\open\command,,,”"”%1″” %*”
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell,0, “Explorer.exe”
HKCU, Software\Microsoft\Internet Explorer\Main, tart Page,0, “about:blank”
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon,userinit,0, “userinit.exe”

[rem]
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Run,reader_s
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Run,47543326
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Run,PromoReg
HKCU, SOFTWARE\Microsoft\Windows\CurrentVersion\Run,reader_s
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System,EnableProfileQuota
HKLM, SOFTWARE\AGProtect
HKLM, SOFTWARE\47543326
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Network, UID
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion, Rlist
HKU, .DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\{43BF8CD1-C5D5-2230-7BB2-98F22C2B7DC6}
HKU, .DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\{8FFA689D-2C2B-2B2E-D865-74C04CA4EF06}

Share |
1 Star2 Stars3 Stars4 Stars5 Stars (2 votes, average: 5.00 out of 5)
Loading ... Loading ...
Make Money Online, Short Reviews, Tips & Trick

Do you have website with a lot traffic but not success on monetize it? Already try CPC program but nobody clicks on that ads? Another CPM networks banners sucks on their rate? then you should try infinityads!

Infinitiads is another product from yesup network. We’ll already know yesup reputation since long time ago, bet it NO SCAM. Very easy to joined infinityads as long your website not contains adult/porn content I think you’ll welcomed to this network. Payout also very lower only $5, net 15 days. Mean each month (or maybe day) you should reach this minimum payout threshold easily.

What I like about infinityads? I like they because they do allowed all website language to joined. There’s hundreds language in this world and if another networks only accept english based site mean another website with non-english language will be gonna bankrupt soon because they can’t monetize it. NOT in infintyads :) as long your website not contain adult/porn content you can monetize it, no matter what primary language you’re using. Earnings also depend on your traffic, how much (number) and where do (country) they coming from. If you have more than 10.000 unique visitors daily or 100.000 pageviews daily you should earn around $5-$50 daily (already tested by myself).

What website type should match with infinityads? I think it’s to risk if you put infinityads in website/blog within targeted keyword because actually you will loos some money if you put it on there. I recommended to use infinityads on website with untargeted keyword type like: Forum, Groups, or any website with lower CPC keyword ex: games, international talk (since mostly only English language giving high rate CPC), problem solver, mp3 collection, wallpapers (deppend, you have to check first), video hosting site, free file/document hosting, classified, and many more.

Infinityads might be a good last solution for revenue generator if your website not perform good on any network (and you frustrated hehehe). Actually this ads a little annoying to your visitors because it will open pop-up, but don’t worry if you’re not planed to fully forced all traffic converted to money you can set the frequency cap. It will make your visitors not always get pop-up ads (but also this can lowers your earnings, my recommendation analyzed first)

My Strategy:

  • Convert website with good traffic but not success on CPC.
  • Last solution for money generator for high traffic site (build/buy).
  • If your website visitors never clicking on ads (analyze first).
  • Solution for non-english website but with good traffic.

Joined in here infinityads.com (no refferal links) if you don’t mind you can write on comment box “referred by istanto.net” to let they know where you coming from :D

Thank you! have a nice day.

Share |
1 Star2 Stars3 Stars4 Stars5 Stars (1 votes, average: 5.00 out of 5)
Loading ... Loading ...
Computer And Internet, Personal, Tips & Trick

Squid is a caching proxy server that can help reduce internet bandwidth usage and improving response time of loading a website by caching and re-using frequently opened web page. Squid reduce the bandwidth usage and accelerate the website loading by caching static website objects such as images, flash objects and text files, with some modification Squid can cache larger files such as PDF, MP3, executable, flash videos, etc.

Last week ago my client ask me to install squid on his computers. First time I meet problem because I’m not familiar with windows 7 (XP Still the best for me). The mostly problem I meet is I can’t install squid as windows 7 service. Anyway I finally found the way to do this… Want to know? keep reading this tutorial…

Preparation before you install squid:

  1. Squid 2.7
  2. Squid.conf sample

The step to install squid on windows 7:

1. Extract squid 7 and put it on example “c:\squid“.

2. Get squid.conf sample and save it as “squid.conf” put this files on example “c:\squid\etc

3. Now the important step! we have to disable UAC (User Account Control) if we didn’t disable this we will got problem on installing squid as windows service. Mostly a lot of  people try to install squid on windows 7 has problem on this step.

Control Panel -> System and Security -> Change User Account Control Settings

Slide the bar into “Never Notify” You need to restart your computer after doing this step.

4. Open command prompt. Then install squid service by typing “squid -i” in your command prompt. If you success you will see something like this:

5. Build your squid cache by typing “squid -z” You will see this message “Creating Swap Directories” in your command prompt, just waiting until it finished.

6. After squid service installed and squid cache finish building now you have to start this service.

Control Panel -> Administrative Tools -> Services

Look for service with name “squid” the start this service (you can also configure it too to auto start each time your computer on)

7. Make sure squid process is running on your computer background. You can see this on task manager in services tab.

8. It’s might important and secure to re-enable back again User Account Control Settings.

9. You just finished installing squid, congratulation :D

Now you have to configure your web browser to use this squid. Open your web browser and looking for (mostly network) then write your squid IP and squid Port. Example my squid IP server is 192.168.1.254 and port 3128.

That’s it, another web browser will have almost same configuration like this. Have a nice day :)

Share |
1 Star2 Stars3 Stars4 Stars5 Stars (1 votes, average: 5.00 out of 5)
Loading ... Loading ...
Make Money Online, Tips & Trick

I know, not every visitors in this blogs would to buy my virtual credit cards or using bank account service. If you are my readers I have another solution for you to get your paypal account verified without need to spend SINGLE CENTS. Keep reading on this article….

In the older article I already writing about free Payoner cards to verified your paypal account, I believe many of us already have this cards but there is no money on this card, Correct? When there is no money on this card actually we can’t using this card to verified our paypal account. I know, a lot of people emailed me and asking how to this,that,bla-bla-bla, etc.

Yesterday I found another solution for this problem, When you have this free cards you just need to add funds at least $10 into this card to verified your paypal account (that’s the reason why I’m selling VCC with price around $10) How? you can add funds to this card using western union. To bad, I believe many of readers will comments they want to add funds without pay anything :P *LOL*

Alright, here is the freeeeeeeeeeeeeeeeee way (sorry, only for publisher) :D

  1. Register on infolinks (if you don’t mind please write “refer by istanto.net” in registration comments box to promote me *lol*)
  2. After get approved click on “my account
  3. Edit your payment information, you can see link on there to get your payoneer card.
  4. Once you get this card you can waiting for payout from infolinks into this card. (infolink payout now lower $50)
  5. Once this card active and have balance at least $10 you can use this card to verify your paypal account.

That’s it, worth to try, Have a nice day… :D

Share |
1 Star2 Stars3 Stars4 Stars5 Stars (No Ratings Yet)
Loading ... Loading ...
Miscellaneous, Personal, Tips & Trick

Actually I have been searching the way for doing this trick long time ago. How to show ads inside wordpress post (like a picture) but no lucky on the result. Usually information I got is only showing ads inside the article but with standard size 480×60 or just a simple plugin to show ads in the first,middle or the end article. I want a beauty position, this position will be a good spot for ads inside wordpress article.

I fell really stupid when I found the tricks is really simple *lol* Tested it on my technology reviews blog… :D

The result will be like this sample:

When I tested it with another modern browser, firefox and opera the result is same beauty:

How to doing this tricks? Just follow this 5 simple steps :)

1. Login into your wordpress admin panel.

2. Click on Appearance, then click editor.

3. Click on your single.php files (it’s actually single post for wordpress).

4. Find the text “php the_content(‘Read the rest of this entry &raquo;’);” before this text add this code:

<div style=”float:left; padding-right:10px;”>
Your Ads Code Here
</div>

5. It’s done! You can customize it to make it looking good.

Hahaha this is my shortest article, enjoy it people! have a nice day :D

Share |
1 Star2 Stars3 Stars4 Stars5 Stars (No Ratings Yet)
Loading ... Loading ...
Make Money Online, Short Reviews, Tips & Trick

This is might be the easiest way to make money with fun activities without need to spend some money to start. I think everyone already know about some website out there offering some cash for some download service. But have you heard someone make a good money from this fun daily activities? Mostly traditional similar service will giving you maximum $10 for 1,000 download but in ShareCash it’s growing to 60%, You will earn 20 to 60 cents per download!

In simulation if your files get download at least 100 times daily and your download rate is $0.50 per download then you will earn $50 daily, in a month if this statistic stable you should earn $1,500.00 monthly… not bad :D

This is a fair rate I think, before we start we need a little strategy. First  we may looking for hosting, find a warez hosting or hosting allowed you to linking a warez files then build your blog/website with information linked to this sharecash files. If you don’t want spend your money for hosting then just use some free hosting service out there! I’m not forced you’ll to buy hosting, it’s just an option to make a better organized files and information.

Here is my tips and trick for people want to earn money easy money using ShareCash:

  1. Upload files that people looking for/rare, Usually this is a warez files or some important document or anything that will take people attention.
  2. Promote your files in forum or social networking (facebook, myspace, etc) or using SEO technique to get lot of viewer (NO SPAM, EVERYONE HATE SPAM).
  3. If you’re limited by not allowed warez files, uploading a genuine files in sharecash then uploading the other files on rapidshare or some website with similar service.
  4. Keep continue promoting and updated your file list.

With this tips you should earn money at least $1-$unlimited daily! NO JOKE, everyone can reach this target as long they keep on focus. Now I believe people will asking is sharecash legit or scam? In my experience with them they already paid me 3 times with good amount so there is no scam.

Minimum payout is $10 (it’s very low if compared with similar service) you will get paid when you reach this limit on 1st month then it will paid to your paypal account on the middle of next month. Example you earn $5 in Januari, then $6 in February, You will get paid $11 on 15 March.

Have fun earn money! :)

Share |
1 Star2 Stars3 Stars4 Stars5 Stars (No Ratings Yet)
Loading ... Loading ...
Computer And Internet, Miscellaneous, Personal, Tips & Trick

This is a new stupid virus/trojan that will redirected all your traffic to google.com (209.85.225.99) infected my client on 01-01-2010, This virus was made using visual basic with size around 212-233KB. If active it has another supported files with random size.

How to know if you’re infected?

It’s very easy, if you browsing on internet or opening antivirus website then your page always redirected to google website that mean you’re infected by this virus.

Master Files

When this virus active it will created some master files and downloading some another supported files from internet. It will spreading files in different location to make it hard to cleaned. This virus also hiding as windows service and windows drivers.

This is a list of virus master files:

  • %systemroot%\windows\system32
  1. wmispqd.exe
  2. Wmisrwt.exe
  3. qxzv85.exe
  4. qxzv47.exe
  5. secupdat.dat
  • %systemroot%\Documents and Settings\%user%\%xx%.exe, Where xx is random character with size 6KB (example: rclxuio.exe).
  • %systemroot%\windows\system32\drivers
  1. Kernelx86.sys
  2. xx%.sys, where xx is random character with size 40KB (example: cvxqkopsd.sys)
  3. Ndisvvan.sys
  4. krndrv32.sys
  • %systemroot%\Documents and Settings\%user%\secupdat.dat
  • %systemroot%\Windows\inf
  1. Netsf.inf
  2. Netsf_m.inf

Spreading Technique and Virus Affect

This virus will spreading in your network or using any removable disk using a autorun technique. If we look in the back mostly all virus using this same technique to spreading, Maybe a good option to modify your windows to disable autorun.

Virus will blocking some windows function like: System Restore, Windows Firewall, RPC DCOM, etc. Virus will also redirected mostly antivirus or security website into google.com using hosts file.

How to Remove W32/SmallTroj.VPCG

1. Deactivated “System Restore” when in cleaning  progress.

2. Disconnected your computer from Network/LAN.

3. Rename msvbvm60.dll (%systemroot%\Windows\system32\msvbvm60.dll) to backup.dll This step to prevent virus active because this virus was made using visual basic, virus will need msvbvm60.dll to run, when you rename it virus can’t active. After you cleaned this virus I recommended you to rename backup.dll back to msvbvm60.dll.

4. Deleted virus master files using Mini PE2XT, Because some rootkit hidden as windows service and driver you need to boot your computers using Mini PE2XT then follow the step:

Menu -> Programs -> File Management -> Windows Explorer

Then deleted files “Virus Master Files” (check in this article).

5. Deleted registry made by virus using Mini PE2XT

Menu -> Programs -> Registry Tools -> Avast! Registry Tools

HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\\ctfmon.exe
HKEY_LOCAL_MACHINE\system\ControlSet001\services\kernelx86
HKEY_LOCAL_MACHINE\system\CurrentControlSet\services\kernelx86
HKEY_LOCAL_MACHINE\system\CurrentControlSet\services\passthru
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ctfmon.exe
HKEY_LOCAL_MACHINE\system\ControlSet001\services\%xx%
HKEY_LOCAL_MACHINE\system\CurrentControlSet\services\%xx%

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List
* %windir%\system32\ wmispqd.exe = %system%\ wmispqd.exe:*:enabled:UpnP Firewall

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List
* %windir%\system32\ wmispqd.exe = %system%\ wmispqd.exe:*:enabled:UpnP Firewall

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List
* %windir%\system32\ wmispqd.exe = %system%\ wmispqd.exe:*:enabled:UpnP Firewall

HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
* Change string value Userinit to = userinit.exe

ATTENTION: %xx% is random character, this key created to run .SYS with size 40KB.

6. Restart your computer then use this repair-inf (rename it to repair.inf) right click on it then choose install.

[Version]
Signature=”$Chicago$”
Provider=Nobody

[DefaultInstall]
AddReg=UnhookRegKey
DelReg=del

[UnhookRegKey]
HKLM, Software\CLASSES\batfile\shell\open\command,,,”"”%1″” %*”
HKLM, Software\CLASSES\comfile\shell\open\command,,,”"”%1″” %*”
HKLM, Software\CLASSES\exefile\shell\open\command,,,”"”%1″” %*”
HKLM, Software\CLASSES\piffile\shell\open\command,,,”"”%1″” %*”
HKLM, Software\CLASSES\regfile\shell\open\command,,,”regedit.exe “%1″”
HKLM, Software\CLASSES\scrfile\shell\open\command,,,”"”%1″” %*”
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell,0, “Explorer.exe”
HKLM, software\microsoft\ole, EnableDCOM,0, “Y”
HKLM, SOFTWARE\Microsoft\Security Center,AntiVirusDisableNotify,0×00010001,0
HKLM, SOFTWARE\Microsoft\Security Center,FirewallDisableNotify,0×00010001,0
HKLM, SOFTWARE\Microsoft\Security Center,AntiVirusOverride,0×00010001,0
HKLM, SOFTWARE\Microsoft\Security Center,FirewallOverride,0×00010001,0
HKLM, SYSTEM\ControlSet001\Control\Lsa, restrictanonymous, 0×00010001,0
HKLM, SYSTEM\ControlSet002\Control\Lsa, restrictanonymous, 0×00010001,0
HKLM, SYSTEM\CurrentControlSet\Control\Lsa, restrictanonymous, 0×00010001,0
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden, CheckedValue,0×00010001,0

[del]
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System,DisableRegistryTools
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System,DisableCMD
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer,NoFolderOptions
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Run,ctfmon.exe
HKLM, SYSTEM\ControlSet001\Services\kernelx86
HKLM, SYSTEM\ControlSet002\Services\kernelx86
HKLM, SYSTEM\CurrentControlSet\Services\kernelx86
HKLM, SYSTEM\CurrentControlSet\Services\mojbtjlt
HKLM, SYSTEM\ControlSet001\Services\mojbtjlt
HKLM, SYSTEM\ControlSet002\Services\mojbtjlt
HKLM, SYSTEM\ControlSet001\Services\Passthru
HKLM, SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore
HKLM, SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate, DoNotAllowXPSP2
HKLM, SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ctfmon.exe

7. Deleted all temporary internet files using ATF Cleaner.

8. Restore your hosts files using HostsXpert.

9. To make sure your system totally clean and to prevent virus from coming back please scan full your system using Norman Malware Cleaner, If you don’t like Norman I would recommended you to use AVIRA.

Good luck! :)

Share |
1 Star2 Stars3 Stars4 Stars5 Stars (No Ratings Yet)
Loading ... Loading ...
Make Money Online, Miscellaneous, Online Business, Tips & Trick

Did you got a lot of mobile traffic on your blog? You stress on turning your blog become friendly view on mobile browser? If this your problem then you must be happy for this article. For worpress user you can turn your blog become mobile friendly view using MobilePress plugins. This is really nice plugins, just download it then upload into your hosting server, Activated it and you’re ready for mobile viewer!

mobilepress

Using this mobilepress plugins you also can joined their mobile ad network and analytic.  Analytic can really help you to know how much visitors look on your blog using their cellphone. Badly mobilepress only offer Aduity ad service. But don’t be sad we can edited this theme and using another mobile ad network. Right now all I know about good mobile ad network are AdMob, Adsense for mobile, and AdModa. Register to one or all from this network, after you get accepted you can start to generate code for your mobile ads, put it into your mobilepress theme and try to look it from your cellphone.

This day trends about mobile site are growing, not really big but it’s enough to start a new trend. I take sample from admob they claim Global Impressions Served 135,733,769,195 This is really good opportunity for converting your popular blog become mobile friendly site.

Good luck, have a nice day :)

Share |
1 Star2 Stars3 Stars4 Stars5 Stars (No Ratings Yet)
Loading ... Loading ...
Miscellaneous, Personal, Tips & Trick

In this article we will learn how to secure our wordpress blog using some .htaccess technique. Of course there is no system perfect in this world. Everything should have bug, no matter it’s high or low risk. When last time you have seen blog with wordpress got hacked? Well, This happen to me 3 times on one of my crazyporn blog. The hackers always controlling my admin panel and it’s happen 3 times until I playing with my new toys to stop this guy.

What is .htaccess? In several web servers (most commonly Apache), .htaccess (hypertext access) is the default name of a directory-level configuration file that allows for decentralized management of web server configuration. Read full in wikipedia. Back to the topic what should we do to stop hackers controlling our admin area?

There is lots of technique, what I write in here just some technique using .htaccess files:

  1. Protected your wp-login.php files.
  2. <Files wp-login.php>
    Order deny,allow
    Deny from All
    Allow from xxx.xxx.xxx.xxx
    </Files>

    Where xxx.xxx.xxx.xxx is your IP, if you meet problem to know your IP just look on IPchicken.com

  3. Protected your wp-config.php
  4. Wp-config is vital configuration files for wordpress, it should secured to stop people viewing it’s content.

    <files wp-config.php>
    order allow,deny
    deny from all
    </files>

  5. Protected your wp-comment-post.php
  6. Even if you’re using Akismet plugins, to reduce spambot post via remote access you can use this code. (Change yourblog.com with your own domain name)

    RewriteEngine On
    RewriteCond %{REQUEST_METHOD} POST
    RewriteCond %{REQUEST_URI} .wp-comments-post\.php*
    RewriteCond %{HTTP_REFERER} !.*yourblog.com.* [OR]
    RewriteCond %{HTTP_USER_AGENT} ^$
    RewriteRule (.*) ^http://%{REMOTE_ADDR}/$ [R=301,L]

  7. Protected .htaccess file.
  8. This code will protect all files with “.hta” string on it.

    <Files ~ “^.*\.([Hh][Tt][Aa])”>
    order allow,deny
    deny from all
    satisfy all
    </Files>

After using this tips the hackers can’t controlling my wordpress admin panel again hahaha! he try to inject using wordpress bug but when I limited IP to access admin panel he’s cry *lol* yay, I win! finally I beat this noob *lol* :P

Share |
1 Star2 Stars3 Stars4 Stars5 Stars (No Ratings Yet)
Loading ... Loading ...