>How to protect your computer from being invaded. Part3: Registry
Let's face it. Not every computer is connected to the internet round the clock. Either you get ready or get 'ambushed'. For those of you who has the time to go online, go get some of the new
Registry editing stuffs. Registry cleaner works too especially it comes with many, and I mean MANY, options for you to configure and customize how your PC and registry should work.
What to look for and what to do with the software? I'll let you know 2 vital options that you need to be able to configure. a)Startup category
Ensure that you can choose to disable or enable ANY 1 thing so that it loads or not during start up. Deleting is a good tool but not if you don't know which line is harmless. b)Security category
Includes options for file sharing, enabling/disabling right-click, registry editing, etc... Most trojans and viruses, when executed, tend to disable registry editing. It will also, sometimes 'delete' the
Folder Option found under Tools on your folder drop down menu which is the most irritating condition that I've ever encountered for the whole 6 years of my
virus debugging experience. What's the fuss about folder option? Under Folder Option, there's an option to enable hidden
files to be viewed. Check the 'Show all files'. There are many anti-viruses out there that will tell you when they found a virus and give you loads of excuses that the file is write-protected and nothing can be done. Which you have to manually search for it and delete it and it's impossible when it's hidden because sometimes even the 'search' can't 'see' it. When you can see everything, and I mean EVERYTHING, recheck for files listed in Part 2.2 especially the autorun.inf file. It's the nearest 'phone' that you can reach which will 'call' the virus whenever the folder (containing that particular autorun.inf) is accessed. Read what else is 'autorun'ed. If you are not sure that files are 'phone'-free, DO NOT RESTART. When you've cleaned every lines that you suspect, you can move on to edit your registry which I wouldn't really encourage. But if you're unable to go online and get hold of any registry editing tools, I won't stop you but when it comes to registry, be careful. Registry editing when disabled or locked, well, will not start even if you execute the original file. Worst case scenario that I've seen was, anything installed that affects the registry will NOT complete successfully. Best case scenario is, so far, none can prevent user from merging registries. Merging while the virus exists will only take effect temporarily, which soon the
setting will be reset to a setting the virus requests because the registry runs in real-time. Successful merging requires a technic called 'Registry tricking'. Why registry? Well, it's a 'window' Windows provides you to customize your start up. If you followed and cleaned every files in Part 2.2, this is the last step to ensure you have a safe & clean boot up and take your sweet time to destroy the viruses as they will not bother you anymore UNLESS you accessed one. Cleaning your start up isn't all that is left to do when you're in your registry. For example, 'calls' that will trigger the virus/trojan when you boot up along with explorer.exe which is in "Shell" under
is another criteria you have to look out for which it doesn't come with any existing registry editing softwares. In other words, either you have your registry edited manually, else everytime you start, and the 'call' doesn't reach any target (virus) for it to execute, a soon-to-be-irritating-error will occur. Registry tricking is what you do towards the registry(& how you do it) while changing the setting(that you wwords, you are reversing the effect. Timing is almost everything here as I mentioned, registry runs in real-time. Most of the time during infection, the 'show all' under Folder option goes hand in hand with the registry editing. The virus/trojan hides itself along with other files and lock your registry. You can enable the 'show all' inside registry if something is wrong with your Folder Option. If the registry is locked, you need to merge your back-uped registry which I suggested in Part 1 OR you can use software to edit them. Why go the extra miles when I can get my PC cleaned with anti-virus? Cleaning is one thing, restoring is another. Anti-virus doesn't restore your setting before the infection. Hope you learned something about computing. If your computer is all about games, you shouldn't be reading this. Go to bed.
More reviews about the arashispencer.googlepages.com/home