Information Security & Ethical Hacking
All tutorials and articles on this site are for Educational purpose only.
Do not misuse it. Articles are just for your knowledge and protect your self from
Black-Hat Hackers and Internet threats. Enjoy n feel free to ask questions...
Are you unknowingly letting hackers steal your data?
1) Security feature to disable any virus or malware running in hidden mode inside ur pc
you should perform the following action daily after u start your pc
Steps:
Start > Run > msconfig ENTER
click on start up > click on enable all > then click on disable all >
click apply > after that click on services >
at bottom click on hide all microsoft services > then click on disable all
> apply > ok > click exit without restart
2) If your task manager or registry is disabled by any virus infection,
then follow the steps below : (for Vista,Windows 7,8)
1st you have to run the following vbs script. For that u have to copy
and paste the script in notepad :
Option Explicit
Dim WshShell, strUserName, strDomain, strSID
Dim objWMIService, colItems, objItem, arrName, objAccount
Set WshShell = WScript.CreateObject("WScript.Shell")
Set objWMIService = GetObject("winmgmts:\\.\root\cimv2")
Set colItems = objWMIService.ExecQuery("Select * From Win32_ComputerSystem")
For Each objItem in colItems
arrName = Split(objItem.UserName, "\")
strDomain = arrName(0)
strUserName = arrName(1)
Next
Set objAccount = objWMIService.Get _
("Win32_UserAccount.Name='" & strUserName & "',Domain='" & strDomain & "'")
strSID=objAccount.SID
If trim(strSID) <> "" then
WshShell.RegDelete ("HKEY_USERS\" & strSID & "\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools")
Msgbox "Completed!"
End if
and then go to file > save as > type file name
e.g. Enable-Registry.vbs (the extention must be .vbs) > save as type
(there change text documents to all file by clickin the drop down box at right)
> then click on save > then check for the file u have just saved
> u can save it in desktop > after that double click Enable-Registry.vbs
> u will get a message "Completed!"
Now u can check if ur registry is enabled again?
Start > Run > regedit.exe ENTER :-)
After your registry is open u have to check for the following link in registry :
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\system
inside registry goto > click HKEY_CURRENT_USER > click Software > click Microsoft
> click Windows > click CurrentVersion > click Policies > click system
> there at the right side search for "DisableTaskMgr" or "TaskMgr" there right click
and delete it n u are done. :-)
check ur task manager by clicking Ctrl+Alt+Del together :-)
Comments
Post a Comment