autorun.inf Compilations: Being "Automatic" is a Complicated Pain in the Neck.

.

Actually I've finished my autorun.inf compilation a while ago, but didn't have my time to write a post about it. And this post is initially my way of distraction-killer because I always get distracted when writing other blog posts. hurmmmmm.. :-(

Strangely, when I was just the one who notices some incoming trends or going to write a sudden niche or sharing the world a piece of my mind, the world around me has already started writing my stuff, LOL. My life is somewhat always like that. My silver lining is I have more free time coz the question for my answer is already there for me, but at times I wanted to be that *pioneer blogger* too!   ;-)

Okies dokies. Here is another of my self-claim "analysis" then, presenting...
autorun.inf Compilations: Being "Automatic" is a Complicated Pain in the Neck?!

Autorun.inf compilations

A personal compilation of 37 bad autorun.inf I gathered from USB drives.. X-O And, sorry for my silly mistake, I should've write autorun commands instead of autorun scripts. Commands is the real term, and script is my wrong-imagination term - I hope you gets the real idea (and the real term)... :-(

Continued analysis (from the ebook):

• From Wikipedia, autorun.inf have five (5) sections: [autorun], [content], [exclusivecontentpaths], [ignorecontentpaths], and [deviceinstall]. Only [autorun] section and it's keys is used throughout the whole compilations. 
• [autorun] and [deviceinstall] section can be found in Windows XP or later. The other three - [content], [exclusivecontentpaths] and [ignorecontentpaths] can be found in Windows Vista or later version of Windows.
• and, before, between or after a section, actually you can write almost anything into a autorun.inf file. As from the compilations above, you can see how they masks the autorun.inf keys with blablabla texts to hide the real commands. Pretty sneaky eh? ;-)
• While usually Windows reads AutoRun commands in English, I don't know whether commands written in other languages is in effects too. What I know is, I don't trust autorun.inf sometimes. 

Ooigi.blog: "Autorun: to run or not to run?"
:-?
.

How to Show Hidden Files in Windows XP~

.

How to view hidden files and folders in Windows?

How to find hidden files/folders in XP?

Or How to open hidden files or folder in Windows XP?

Here is a pictorial e-book guide where you can apply with almost every Microsoft Windows out there. (Sorry, I do not have any Win7 or Vista PC at the moment...). It's almost the same thing, look for your folder settings, and change some options, and apply.

For me, by showing my hidden files I might be able to remember some of my important operating files in my computer. Plus, by remembering this strange and faded-colored files, our quest in detecting and searching for hidden virus will become much faster and more easier. Seriously, it helps~   ;-)

How to show hidden files in windows XP

Just a quick post because important points is already explained inside. Remember, do not delete strange looking files or faded folders, okay? Hidden files is meant to be hidden, by changing their original attribute, hidden files is meant to be a show only. No deletion, absolutely no deletion okay? Good boy~~   :-)


Ooigi.blog: "Understand what others didn't see, maybe your computer can become virus-free~~"
;-)
:.

Unlocker 1.8.9: Pendelete Penge-kill Proses Peng-unlock USB drive yg Susah di-Remove >>

.
Paling sakit hati bila nak Safely Remove Hardware (USB), dia stuck dan tak dapat di-remove. Apa lagi yang tengah akses USB nih? Aiyoooooohhh~~ X-O

Jadi, jum belajar macamana nak remove/stop [The device 'Generic volume' cannot be stopped right now. Try stopping the device again later.]

Ini dia ebook tentang cara-cara memberhentikannya.

Stopping unremovable generic volume/USB -

Pautan rujukan
: [http://ccollomb.free.fr/unlocker/] Unlocker 1.8.9 by Cedrick 'Nitch' Collomb.
: [http://ccollomb.free.fr/blog/] Cedrick Collomb blog. Of course, they say every atom in our bodies was once part of a star


Ooigi.blog: "Remove maksudnya remove laa, kan?"

.

My Way of csrss.exe Viring (Removal) >>

.
Feeling slow??
Recently I get infected by csrss.exe and my computer generate Kamicak folder in every USB I insert. X-O
So, armed with my little knowledge, I fight back that csrss.exe culprit once and for all~~

Firstly, What is csrss.exe?
Answer from Wiki:

• csrss.exe stands for Client/Server Runtime Subsystem - a component of Microsoft Windows NT operating system.
• it provides the user mode side of the Win32 subsystem and is included in Windows 2000, XP, 2003, Vista, Server 2008 and the latest OS, Windows 7.
• because most of the Win32 subsystem operations have been moved to kernel mode drivers, in Windows NT 4 and later csrss.exe is mainly responsible for Win32 console windows, GUI shutdown, and threading.
• csrss.exe is a critical system operation, terminating it will results the infamous blue screen of death (BSOD)~
• and, under normal circumstances, csrss.exe cannot be terminated with the taskkill command or with the Task Manager, though it is possible in Vista if the Task Manager is run in Administrator mode.

Yes, csrss.exe is a critical windows process, deleting is on your own discretion. ;-P   But, because lame virus programmer love to play with every antivirus software out there, they 'masks' the real csrss.exe with another one that spreads spyware/malware in our computer~   X-O

Then, how to remove (stops) the fake csrss.exe??
I've done searching the web for it, and this is a list of how to do it~ Read all of it, and choose the method which you understands best. Please make a backup of your operating system in case of anything bad happen later, huhu... (God forbid anything bad happens~)

• Yahoo! Answer : How to remove csrss.exe? This site teaches how to do it by using another Windows profile to delete the infected profile.
• eHow.com : How to clean csrss.exe. This one is using safe mode to execute TrendMicro CWShredder.exe to remove both csrss.exe and CoolWebSearch.
• HowtoFixComputers.com/forum :You can try several options here. Clean and verify add-ons one by one to detect the culprit, or use online/offline scanner, or manually removes csrss.exe in Windows entry.
• Neuber.com : Nimda.E? You can read many many ways to information about csrss.exe here.
• SpywareRemove.com : Manual detection and anti-spyware software..
• File.net : Read lots of csrss.exe story under the description~~

Alternative method??
You might want to use my way of csrss.exe viring~ It works for me, but you might dislike the software I'm using (GVR.exe)~   :-O Below is my pdf on how to do that~ (DocStoc sometimes loads very slow mo...) :-(