Pages

Wednesday, July 27, 2011

How to crosscheck your antivirus....

To check whether your antivirus is working ....


1. Open Notepad
2. Now copy the below code in the notepad :


X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*


and save this file as virus.exe if your antivirus deletes this file or/else scan manually for virus in this file.. if your antivirus catches the virus in it its working otherwise switch to other antivirus....


-Prashant

Saturday, May 21, 2011

Re-enabling the Registry Editing


Many A times we run across the situation where VIRUS/Spyware program disables the Registry editing manually. And when we try to access the registry a message box pops out and says "Registry editing has been disabled by your administrator".

There are two methods to overcome this problem.
  • To edit the registry through CMD (Command Prompt), this is the easiest way to re-enable the registry editing. One can use following command to change the registry editing setting/permission.
                "REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v                              DisableRegistryTools /t REG_DWORD /d 0 /f"

    (The command has to be written without the quotes, One can make a batch file using this command if it has to be used repeatedly on his computer)

  • The second method include the Windows Group/Security Policy Editing using GPEDIT.
    • Run a command GPEDIT.MSC
      •  Navigate to
                  ->"User Configuration"
                         -> Administrative Templates
                                  ->Systems.
      • Under the settings window open an option "Prevent access to Registry Editing Tools" by double clicking on it. 
      • Now select DISABLED option and apply.
      • Close the window and Restart the system.
Note : Both of the above mentioned method requires system Restart.

Chitika1