Donation for ComputerCare are welcome. If ComputerCare is useful to you; please consider helping me (even 1$,5$ or your wish) :

Registry is something defined as a module in your PC, where all user settings are stored in the form of Hexa-Decimal value.

Also there are some modification that can be done with registry editor of WINDOWS XP.

By downloading and merging Registry Tweaks u can literally enjoy working with PC.

Some of the files can help you to work without any interrupt like " SEND ERROR REPORT, Automatic Updates Notifications, etc. "


Some of the registry operation you can perform is :

Add Clipboard to the Control Panel.

Change Menu Show Delay

Disable the Desktop Cleanup Wizard

Disable Automatic Updates Notifications

Disable Windows Time Service

...................and many more


You can download registry tweaks from here ( Size = 62.86 KB )

Some of the users amongst us have faced the problem called as shown above.

WHAT IS WGA TOOL : A small utility that enables you to remove the Microsoft Windows Genuine Advantage Notifications tool, which is calling home and connect to MS servers every time you boot.

Windows Genuine Advantage Notifications is very much different than Windows Genuine Advantage Validation

You can download your WGA remove tool HERE ( Size = 13.5KB )

There is a convenient way to do it with a Windows NT password recovery CD which can used to reset the password for any account in Windows NT ,Windows 2000 ,Windows XP , Windows Vista.

Follow the below steps to rest your windows password:

1. Download the ISO image from here ( Size = 3.15 MB ) and burn a CD with this ISO image file.

2. Boot your computer using this bootable CD created in step 1. You may need to set your CD-ROM as first boot device in BIOS in order to boot from it.

3. Once you boot your computer with this CD, you will get a command based interface which is quite self-explanatory. On first screen, press enter key to boot in default mode.

4. After you boot, it gives option, it will show the drive partitions and will give the choice, "Please select the partition number." Press enter if windows is installed on C drive, else select the appropriate partition.

5. Now it will ask " What is path of Windows directory ?", press enter for default value.

6. Now it will show option "Select which part of registry to load" . Type 1 and press enter.

7. This will show the list of users on the windows. Type the name of the user for which you want to reset password and press enter.

8. Now it will show following choices

      1. Clear the password

      2. Edit password

      3. Promote user

      4. Unlock account

      5. Quit

Press 1 and press enter.

9. It will show a message " Password cleared ! "

10. It will give options to select another user, just type "!" (Exclamation mark) without quotes and press enter.

It will show previous menu, type q and press enter to quit from this menu.

11.Now it will show message " About to write files back ! Do it ? [n] " . Type "y" without quotes and press enter. It will show message "Edit Complete.

Note: You can also try again if it somehow failed. New run [n] " Simple press enter.

12. Remove the bootable CD from the tray and restart your computer.

Password Cleared and Trouble Fixed !

It has many other flavors:

Cannot delete file: Access is denied
There has been a sharing violation.
The source or destination file may be in use.
The file is in use by another program or user.
Make sure the disk is not full or write-protected and that the file is not currently in use.

Unlocker is the solution!

1. Simply right click the folder or file and select Unlocker




2. If the folder or file is locked, a window listing of lockers will appear




3. Simply click Unlock All and you are done!

You can download this tool free of cost from here( Size = 237.5 KB )

Source : http://ccollomb.free.fr/unlocker/

Two Method to solve the problem are listed below

Method 1:

You can simply open .RAR file by downloading the shareware version of WinRAR from here, but it would be a shareware version it wont offer full features of WinRAR

Method 2:

The complete solution to this problem could be solved by using a open source, free compression and decompression software called 7-Zip Click here to download

LEAVE YOUR REQUEST AND RECOMMENDATION TO

"I NEED THIS and I RECOMMEND THIS MODULE"

It happens sometimes when some malware change your files’s or folder attribute to system/hidden so that you can’t access them.

When you try to change the attributes of your files back to normal to access them but when you try to change the attributes they seem to be grayed out.

Today I am going to discuss a free tool called isReset that is designed to deal specially with this type of computer trouble and remove the left over virus infections.

Let see some features and how to use this tool.

What is isReset?

isReset resets your system/hidden files/folders so you can view/access them normally.

How To Use ?

Simply drag & drop your files/folders into the cross sign and then click RESET.

Please Note:

1. As this tool is a security software that deals with file system, windows registry and some system running process, so it MUST be given all the admin rights it require to do its job. So make sure you are running a administrator account on windows before using this tool.

2. We would also recommend to disable other security solutions like anti virus , Firewall and other monitoring tools.

[ Download isReset ]

There can be viruses or key loggers or some malicious softwares in your computer which might be connecting to Internet in background secretly. There are also many softwares which use Internet without asking for your permission.

So the big question is:

How to check which application or software is using the Internet connection?

The answer is that there are more than one ways of doing it, lets see the methods one by one.

Fix:

Using TCP-View Utility:

To see what applications are connected to the Internet or what applications are using Internet, you can use a small utility by Microsoft Sysinternals called TCPView. This is a small and handy utility which you can download here and run.

When you run the utility it will display all the applications which are connected to Internet. See the image below (Click to enlarge):

Connections which change state from one update to the next are highlighted in yellow; those that are deleted are shown in red, and new endpoints are shown in green.

And don’t worry about SVCHOST.EXE, this is a windows task which keeps running in background and will be displayed in this list several times.

This will give you an idea of what processes are using Internet connection. If you find anything suspicious, search that file and delete it if you think that its something that you have never installed something like that.

Geeky way:

Also there is a geeky way of doing this without using the TCPView Utility,for that open the command prompt and type the following command and it will display all the applications connected to Internet, it will refresh the list every two seconds.

netstat -b 2

Have a safe and secure Internet Surfing!

These days virus spread so easily through the pen drives and other portable drives, it has become very difficult for a normal person to protect his/her computer system.

Most common problems which are generally caused by the virus which spread through USB pen drives are:

1. Task Manager disabled problem in windows xp


2. Folder options disabled by Virus / Trojan


3. Registry editing has been disabled by your administrator

There are also cases when the user reported that their computer restart when they try to launch command prompt, or command prompt blinks for a second and nothing happens. 

Let’s see how can you enable your command prompt again when it is disabled by a virus.

Fix: 

There has been two most successful methods with which you can enable your disabled command prompt.

Method 1:

The simplest method to get your command prompt back is to add a registry key , but you should be having registry editing is enabled.   

1. Open Start >> Run and type the following command ( or just copy it )  

REG add HKCU\Software\Policies\Microsoft\Windows\System /v DisableCMD /t REG_DWORD /d 0 /f

2. Copy the above command and press Enter.

This will solve your trouble and your command prompt will be enabled.

Note: Method 1 may not work when your system is severely infected by a virus and even the registry editing is disabled due to which you are not able to run the above command from run prompt.

Method 2:

It involves a tool called RRT - Remove Restrictions Tool by sergiwa which can enable the disabled command prompt by virus.

It also helps in removing other restrictions which are also caused due to virus infection listed below.

Disable Folder Options

Disable Registry Tools

Disable Ctrl+Alt+Del

Disable Show hidden files & folders come with hidden attribute set to true!

Disable Run Command

Other than it also includes fixes for the removing 38 restrictions that are caused by different types of viruses.

Note: Make sure you boot in to Safe Mode to use Remove Restrictions Tool (RRT). Just click on the buttons and it’ll do it’s job.

The limited version is RRT tool is for FREE for personal use only. If you would like to use the application in a business environment you are required to license the application.    

I hope at least one of method given above will help to fix the trouble.

[ Download RRT ]

ARE YOU FACING SUCH SYMPTOMS IN YOUR PC :

1. Cannot open hard disk drives by double click.

2. Double clicking on any drive opens search.

3. Error message being displayed while trying to open drives.

4. Double clicking on any drive opens "Open With" dialog window.

5. Drive opens in new window on double click.

These issues mentioned above normally occur due to virus infections in computer. These are most commonly spread by pen drives or portable USB devices.

So, the whole problem persist due to 'autorun.inf' files created by virus in the root directory of drives.

In order to fix these problems, you can also try FREE virus removal tool which is released recently, called Autorun Eater. ( Size = 984.37 KB )

What is Autorun Eater?

It is a tool to scan and remove suspicious 'autorun.inf' files found in the root directory of all drives, A-Z, in real-time. Autorun Eater will remove any suspicious autorun.inf files even before the user attempts to open the drive.

Note: It will remove all the suspicious autorun.inf files from the virus infected pen drives but will not remove any other virus files so you would have to remove them manually or with some anti-virus tools.

It also fixes the three common problems caused by the viruses (as shown in the image below).

1. Task Manager disabled.
2. Registry editing disabled.
3. Hidden Folder Options.

Is your fixed SATA drive or C drive shown in tray in the list of Safely remove USB Mass storage device in Windows ? For many of my readers using Nvidia motherboard the answer is yes !

This kind of problem is seen after a windows updated few weeks back which had updated for optional Nvidia drivers. After this driver update many users have seen the fixed SATA drive as removable drive.

Why is my SATA drive in list of removable drives?

Nvidia motherboards / chip-sets  driver software has been enhanced to support some enhanced RAID technologies. Thus as a feature of it, the drives interprets all the SATA drives as hot-swappable drive. That is why you see fixed SATA drive in removable media list.

Before I talk of the fix, the important question is:

How dangerous is it to have your fixed drive in removable drives?

Well truly speaking, not very dangerous, because when you try to remove a drive which has windows installed on it, the windows will show an error saying that "The Device Generic volume cannot be stopped right now". This means that the media will not be released as it is in use by windows. So even if you accidentally click on Safely remove C:, the windows will not let you do that, thus there is no harm.

How to fix this issue?

The simplest fix is to revert the Nvidia Driver recently installed on the computer with the windows update. You can also do a system restore to a previous date when this problem was not there.

Even if you are not able to remove it successfully from the removable list, you can safely live with it there no problem being a removable drive.

What is Desktop.ini?

It is a Windows XP operating system file which stores information about customized folders view and settings. If you have customized the display of a folder in any way, such as changing its icon or manner of display this will store all the information.

What is thumb.db?

Thumbs.db is again Windows XP operating system file that stores a cache for Windows Explorer's thumbnail view.

If you Want to get rid of visibility of this 2 files then read next module

Note: Do not attempt to delete this file ....Instead hide that file using the procedure mentioned in next module.

Since desktop.ini and thumb.db are operating system files, but you are seeing them as because you may have set the windows explorer to show hidden/system files.

Follow the procedure listed below.

1. Open My Computer, click File Menu Tools ' Folder Options'

2. Click on the View tab.

3. Uncheck the checkbox which says: Do not show hidden files and folders� (as shown in the image below)

4. Put a check in the box which says: Hide protected operating system files (recommended)

5. Click ok.

Here is the screen shot of the setting that I have described.

What is hal.dll ?

Short for Hardware Abstraction Layer, HAL is an operating system programming layer that enables the operating system to operate with a hardware device. hal.dll is the dynamic link library file that implements the functionality of HAL.

When "hal.dll missing or corrupt" message appears, it can be because of damaged or missing hal.dll file. It can also be because of some wrong entries in boot.ini file in case you are using two operating systems on your computer. Also it can be because of improper BIOS entries of the disk drives etc.

FIX

Step 1: Check the boot device order in BIOS. For this follow the steps below:

* Restart your computer and keep pressing the Delete button on keyboard. This will take you to BIOS screen.

* Go to Boot Menu in BIOS and verify that your hard disk which contains Windows installation is the topmost in boot sequence if you have more than one hard disk.

Step 2: If the above step does not solve your problem, then you need to repair the boot.ini file.

Step 3: In most of the cases, Step 1 on checking the boot order and Step 2 on repair of boot.ini file will fix the problem. In case the problem is still there, you need to replace the hal.dll from Windows XP Boot disk. For this, boot the computer with the help of Windows XP Boot CD, select the repair setup. On command prompt, type the command as below:

expand x:\i386\hal.dl_ y:\windows\system32\hal.dll

Where x is the drive letter of your CD-ROM and Y is drive letter of your windows partition (usually c: )

Step 4: Even after Step3 if you are facing a problem, then you need to run a repair setup of Windows XP. See this link for details.

Step5: If you are still facing the problem, then unfortunately your Hard Disk Drive has gone faulty, you need to get it replaced.

This is nothing but the malware...!!!!!
if you really wanna get rid of the malware.

Here is the deal..

there is a File called
"heap41a"

which is located in C:\heap41a.

This is the Script which i got it when i checked the file.

#persistent
#notrayicon
settimer,ban,2000
return

ban:
WinGetActiveTitle, ed
ifinstring,ed,orkut
{
winclose %ed%
soundplay,C:\heap41a\2.mp3
msgbox,262160,ORKUT IS BANNED,Orkut is banned you fool`,The
administrators didnt write this program guess who did??
`r`r MUHAHAHA!!,30
return
}
ifinstring,ed,youtube
{
winclose %ed%
soundplay,C:\heap41a\2.mp3
msgbox,262160,youtube IS BANNED,youtube is banned you fool`,The
administrators didnt write this program guess who did??
`r`r MUHAHAHA!!,30
return
}
ifinstring,ed,Mozilla Firefox
{
winclose %ed%
msgbox,262160,USE INTERNET EXPLORER YOU DOPE,I DNT HATE MOZILLA
BUT USE IE `r OR ELSE...,30
return
}
ifwinactive ahk_class IEFrame
{

ControlGetText,ed,edit1,ahk_class IEFrame
ifinstring,ed,orkut
{
winclose ahk_class IEFrame
soundplay,C:\heap41a\2.mp3
msgbox,262160,ORKUT IS BANNED,Orkut is banned you fool`,The
administrators didnt write this program guess who did??
`r`r MUHAHAHA!!,30
return
}
ControlGetText,ed,edit2,ahk_class IEFrame
ifinstring,ed,orkut
{
winclose ahk_class IEFrame
soundplay,C:\heap41a\2.mp3
msgbox,262160,ORKUT IS BANNED,Orkut is banned you fool`,The
administrators didnt write this program guess who did??
`r`r MUHAHAHA!!,30
return
}
ControlGetText,ed,edit3,ahk_class IEFrame
ifinstring,ed,orkut
{
winclose ahk_class IEFrame
soundplay,C:\heap41a\2.mp3
msgbox,262160,ORKUT IS BANNED,Orkut is banned you fool`,The
administrators didnt write this program guess who did??
`r`r MUHAHAHA!!,30
return
}
ControlGetText,ed,edit4,ahk_class IEFrame
ifinstring,ed,orkut
{
winclose ahk_class IEFrame
soundplay,C:\heap41a\2.mp3
msgbox,262160,ORKUT IS BANNED,Orkut is banned you fool`,The
administrators didnt write this program guess who did??
`r`r MUHAHAHA!!,30
return
}
ControlGetText,ed,edit1,ahk_class IEFrame
ifinstring,ed,youtube
{
winclose ahk_class IEFrame
soundplay,C:\heap41a\2.mp3
msgbox,262160,youtube IS BANNED,youtube is banned you fool`,The
administrators didnt write this program guess who did??
`r`r MUHAHAHA!!,30
return
}
ControlGetText,ed,edit2,ahk_class IEFrame
ifinstring,ed,youtube
{
winclose ahk_class IEFrame
soundplay,C:\heap41a\2.mp3
msgbox,262160,youtube IS BANNED,youtube is banned you fool`,The
administrators didnt write this program guess who did??
`r`r MUHAHAHA!!,30
return
}
ControlGetText,ed,edit3,ahk_class IEFrame
ifinstring,ed,youtube
{
winclose ahk_class IEFrame
soundplay,C:\heap41a\2.mp3
msgbox,262160,youtube IS BANNED,youtube is banned you fool`,The
administrators didnt write this program guess who did??
`r`r MUHAHAHA!!,30
return
}
ControlGetText,ed,edit4,ahk_class IEFrame
ifinstring,ed,youtube
{
winclose ahk_class IEFrame
soundplay,C:\heap41a\2.mp3
msgbox,262160,youtube IS BANNED,youtube is banned you fool`,The
administrators didnt write this program guess who did??
`r`r MUHAHAHA!!,30
return
}

}

return

I notice that there are two websites which are been blocked...

1. Orkut
2. youtube

Finally found a solution given here:

1. Press CTRL+ALT+DEL and go to the processes tab

2. Look for svchost.exe under the image name. There will be many but look for the ones which have your username under the username

3. Press DEL to kill these files. It will give you a warning, Press Yes

4. Repeat for more svchost.exe files with your username and repeat. Do not kill svchost.exe with system, local service or network service!

5. Now open My Computer

6. In the address bar, type C:\heap41a and press enter. It is a hidden folder, and is not visible by default.

7. Delete all the files here

8. Now go to Start --> Run and type Regedit

9. Go to the menu Edit --> Find

10. Type "heap41a" here and press enter. You will get something like this "[winlogon] C:\heap41a\svchost.exe C:\heap(some number)\std.txt"

11. Select that and Press DEL. It will ask "Are you sure you want to delete this value?", click Yes

12. Now close the registry editor.

Now the virus is gone. But be sure to delete the autorun.inf file and any folder whose name ends with .exe in the pen drive.

UPDATE :

It seems that they have named this malware as w32.USBWorm and according to me , Avast is able to detect and remove it. I hope the other antivirus software will also be able to remove it.