Cliff Hamilton's Blog

Edit gatedefender suspicious compressed files detection

cliffhamilton — Wed, 18 Nov 2009 09:40:37 +0000

Aanpassen gatedefender voor detectie van suspicious compressed files.

De panda gatedefender kan grotere gecomprimeerde bestanden ( bijv. zip of rar) aanmerken als suspicious compressed files. Als de gatedefender dit aantreft zal deze eerst het bestand downloaden, uitpakken en vervolgens de inhoud scannen. Het resulteert vrijwel altijd in een corrupt bestand als het uiteindelijk wordt geopend door degene die het heeft opgevraagd.

Een bekend probleem met dit systeem is het downloaden van Support packs van de HP ftp site die vaak enkele honderden MB’s bevatten, met heel veel ingepakte bestanden en mappen.

Er zijn een aantal manieren om dit te omzeilen, maar geen om dit op te lossen.

Panda raadt het volgende aan:

Ga in de gatedefender console naar: Protection settings >> Content filter protection >> Content Filter http/FTP settings.

Zet het vinkje bij Enable file filter aan.

Klik vervolgens op HERE, om de filter te configureren.

Nu kunnen we de filter instellen om suspicious compressed files door te laten:

Je kunt het filter ook aanpassen zodat hij grotere bestanden door gaat laten:

Klik op options:

Make Windows Icon Files With Photoshop

cliffhamilton — Thu, 05 Nov 2009 15:37:09 +0000

introMake Windows Icon Files With Photoshop

This is how to make windows icon files with photoshop.
It is a simple process like just making an image but you need a plug-in.
Attached is the Plug-in.

How to Make a Cursor:
Learn to Make a Custom Cursor

image not found

Hotel Near MePicture By Me

poopster101

All Edited Icons

poopster101

instructables

poopster101

ICOFormat.8bi27 KB

step 1Open Explorer

Go to C:\Program Files\Adobe\Adobe Photoshop CS2\Plug-Ins\File Formats\ Put the plugin given at the beginning in there. Then Open Photoshop

image not found

Plug-in given at beginning

poopster101

other preexisting plug-ins

poopster101

step 2Edit Like Normal File

Just make what you want the icon to be. You probably want to start with a transparent background.

image not found

really bad smiley

poopster101

step 3Save As .ICO

Save the file as an .ICO file.

image not found

Saved as “ICO (Windows Icon)(*.ICO)

poopster101

filename

poopster101

step 4Apply Icon

1.Go to a folder or shortcut and right click and press properties. 2.Then go to the customize tab. 3. Then press “Change Icon…” 4.Then find your icon and press ok through.

image not found

properties

poopster101

step 5Done

Done Look at that sweet Smiley Icon

image not found

BALLIN’ SMILEY ICON

poopster101

source: http://www.instructables.com/id/E9R1TX8A1FEYF7IL80/

How to Manually Uninstall Trend Micro OfficeScan Corporate Edition Client

cliffhamilton — Thu, 05 Nov 2009 15:33:12 +0000

Go to Control Panel Services (services.msc), and stop the following services:
- OfficeScanNT Listener
- OfficeScanNT RealTimeScan
- OfficeScanNT Personal Firewall (if enabled)
Run Registry Editor (regedit.exe).
Navigate to the following registry key

hive:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services

Delete the following keys (if available):
- Ntrtscan
- Tmlisten
- TmFilter
- VSApiNt
- TMPreFilter
- TM_CFW
- OfcPfwSvc
Navigate to the following registry hive:

HKEY_LOCAL_MACHINE \SOFTWARE\TrendMicro

HKEY_LOCAL_MACHINE \SOFTWARE \Wow6432Node\TrendMicro (in 64-bit Windows operating system)

Delete the following keys (if available):
- OfcWatchDog
- Pc-cillinNTCorp or OfficeScanCorp (depending on the client)
- RemoteAgent
- PC-cillin
- CFW
Browse to the following registry key hive:

HKEY_LOCAL_MACHINE \SOFTWARE \Microsoft\Windows\CurrentVersion\Run

Delete the OfficeScanNT Monitor key.
Navigate to the following registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

Delete the OfficeScanNT key.
Delete the OfficeScan program group (Trend Micro OfficeScan Client) from the Windows Start menu.
Restart the computer.
Delete the directories that contain the OfficeScan Client program files, normally located inside Program Files folder.

Above steps work for OfficeScan 7.x client in Windows 2003/XP/2000/NT/Vista/2008 machine. For Trend Micro OfficeScan Corporate Edition (OSCE) – 5.58, OfficeScan Corporate Edition (OSCE) – 6.5, Client / Server / Messaging Suite for SMB – 2.0, follow these manual uninstallation steps instead.

Delete the Trend Micro OfficeScan Client program shortcut in Start Menu, by right click on it and then choose Delete.
Delete the installed files located in the OfficeScan folder under the \Program Files\Trend Micro\OfficeScan Client directory.
Open the Registry Editor (regedit).
Navigate to the following registry key:

HKEY_LOCAL_MACHINE\Software\TrendMicro

Delete the following keys:
- OfcWatchDog
- PC-cillin
- PC-cillinNTCorp
Also delete the following registry hives:
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OfficeScanNT Monitor
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OfficeScanNT
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ntrtscan
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tmfilter
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tmlisten
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TmPreFilter (for Win2003)
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSApiNt
Right click on My Computer

, click Manage and then select Device Manager.

Enable the Show Hidden Devices option.
Remove the following hidden devices in Non-Plug and Play Drivers tree pertaining to OfficeScan (right-click and select Uninstall):
- Trend Micro VSAPI NT
- Trend Micro FILTER
- Common Firewall Driver
- NTRTSCAN (if available)
- TMLISTEN (if available)
Restart the OfficeScan client machine.

source: http://www.mydigitallife.info/2008/07/18/how-to-manually-uninstall-trend-micro-officescan-corporate-edition-client/

Resource HackerTM

cliffhamilton — Thu, 05 Nov 2009 08:43:23 +0000

source: http://www.angusj.com/resourcehacker/

What is Resource Hacker^TM?

Resource Hacker^TM is a freeware utility to view, modify, rename, add, delete and extract resources in 32bit Windows executables and resource files (*.res). It incorporates an internal resource script compiler and decompiler and works on Win95, Win98, WinME, WinNT, Win2000 and WinXP operating systems.Viewing Resources: Cursor, Icon, Bitmap, GIF, AVI, and JPG resource images can be viewed. WAV and MIDI audio resources can be played. Menus, Dialogs, MessageTables, StringTables, Accelerators, Delphi Forms, and VersionInfo resources can be viewed as decompiled resource scripts. Menus and Dialogs can also be viewed as they would appear in a running application.

Saving Resources: Resources can be saved as image files (*.ico, *.bmp etc), as script files (*.rc), as binary resource files (*.res), or as untyped binary files (*.bin).

Modifying Resources: Resources can be modified by replacing the resource with a resource located in another file (*.ico, *.bmp, *.res etc) or by using the internal resource script compiler (for menus, dialogs etc). Dialog controls can also be visually moved and/or resized by clicking and dragging the respective dialog controls prior to recompiling with the internal compiler.

Adding Resources: Resources can be added to an application by copying them from external resource files (*.res).

Deleting Resources: Most compilers add resources into applications which are never used by the application. Removing unused resources can reduce an application’s size.