Information about the W32/Sohanad.B Worm:

W32/Sohanad.B is a worm. The worm will infect Windows systems and spreads through Instant Messaging applications.
The worm arrives via the popular instant messaging applications.
Upon execution, this worm copies itself as SVHOST32.EXE or SVHOST.EXE in the Windows folder.
The worm modifies registry at the following location to load itself during each startup.

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

It also creates the following registry keys to modify the settings of Yahoo! Messenger:

HKEY_CURRENT_USER\Software\Yahoo\pager\View\YMSGR_buzz
HKEY_CURRENT_USER\Software\Yahoo\pager\View\YMSGR_Launchcast

The worm also modifies the registry to disable Registry Editor and Task Manager. It also changes the Internet Explorer (IE) home page. This worm propagates via Yahoo! Messenger, AIM, Windows Live Messenger or Windows Messenger by sending an instant message to all the contacts of an active user. This message contains a link to a remote copy of itself. When the recipient clicks the link, a copy of this worm is executed on the recipients’ system.

Read the rest of this entry »

Manual steps to back up the registry in Windows Vista or in Windows XP

Windows Vista

1.    Click StartStart button, type systempropertiesprotection in the Start Search box, and then press ENTER.
User Access Control permission If you are prompted for an administrator password or for a confirmation, type the password, or click Allow.
2.    Wait for Windows to search for available disks and most recent restore points. In the System Properties dialog box, on the System Protection tab, click Create,
3.    Type a name for the restore point and then click Create.
4.    After the restore point has been created successfully, click OK two times.

Note If System Restore is turned off, click to select the local disk, click Apply and then click Create.

Windows XP

1.    Click Start, click Run, type %SystemRoot%\system32\restore\rstrui.exe, and then click OK.
2.    On the Welcome to System Restore page, click Create a restore point, and then click Next .
3.    On the Create a Restore Point page, type a name for the restore point and then click Create
4.    After the restore point has been created, click Close.
Note If System Restore is turned off, you receive a message that asks whether you want to turn on System Restore now. Click Yes. Then, in the System Properties dialog box, click to clear the Turn off System Restore check box, click OK, and then repeat this step.

Read the rest of this entry »

SYMPTOMS

When you try to release and renew the IP address by using the Ipconfig program (Ipconfig.exe), you may receive one of the following error messages.

Message 1

An error occurred while renewing interface ‘Internet’: An operation was attempted on something that is not a socket.

Message 2

An error occurred while renewing interface Local Area Connection: the requested service provider could not be loaded or initialized.

When you start Internet Explorer, you may receive the following error message:

The page cannot be displayed

Read the rest of this entry »

I just want to take this opportunity to thank my top 10 Entrecard droppers, Thanks for the support and for consistently visiting and drop their Entrecard on my site, and also thanks to all Entrecard users who visited my site. Thanks again and more power to Entrecard.

webomatik
PinoyTux Weblog
pinoyskull [dot] com
sourkandy
Opcot.com extraordinary simplicity
Get Manipulated
Trip the Lady
Retire in Paradise
Health Nut Wannabee Mom
Michael Aulia’s Tech Blog