Author: raymond

  • Download Windows XP Pro SP2 + Integrated November Updates

    Windows XP ProfessionalI have an original Windows XP Professional CD with a genuine product key. However, I never like to use that CD to reinstall my operating system because Service Pack 2 and other updates is not integrated. Imagine I have to spend around 30 minutes to install Windows XP, then install Service Pack 2, then go to Windows Update, download hundreds megabytes of updates and install. It’ll take at least 2 hours to complete installing Windows XP with all the latest patches.

    What I do is, I always look out for an ISO image that ETH0 release. The ISO image contains Windows XP Professional + Service Pack 2 + Latest Windows Updates integrated. It has serial number in it’s .NFO but I never use that key. Why use a pirated product key when I have a genuine one? All I need to do is install using ETH0 Windows XP CD, input my genuine product key and my Windows XP is up to date once complete installing! What a time-saver!

    I manage to find the latest Microsoft Windows XP Professional Corporate with Service Pack 2 and up to November Windows Updates in ISO format.


    Follow the steps below to download and burn a copy of Windows XP Professional with SP2 and November updates.

    1. Download all 6 parts from RapidShare. Look for the 6 parts at the comment area posted by “Niksas” from this website.
    Download Windows XP Professional with Serial Number

    2. Once you have all 6 parts, place them all in the same folder. Extract ONLY MSWXP29112006.part1.rar file.

    3. You will now get a total of 40 files ranging from e-xp2no2k6.rar to e-xp2no2k6.r37. Again, extract ONLY e-xp2no2k6.rar file.

    4. Now you’ll get the ISO file with the file name e-xp2no2k6.iso

    5. Burn it with Nero or any other CD Burning software. You can also refer to this ARTICLE for help on how to burn ISO.

    6. After burning, just put in the CD and set your BIOS to boot from your CD/DVD drive. Windows XP Professional installation will start.

    That’s all! It’s tough to download all 6 parts from RapidShare but trust me, it’s worth it. The ISO even has the latest Windows Genuine Advantage Validation v1.5.716.0 Cracked by ETH0. If you’ve a genuine Windows XP product key, you won’t even need to use the cracked WGA and the pirated product key that’s included in the package.

  • Reset or Recover Firefox Master Password

    Firefox uses master password to provide enhanced security by protecting the stored sign-on information for various websites. By default Firefox does not set the master password. However once you have set the master password, you need to provide it every time to view sign-on credentials.
    Reset Firefox Master Password
    So if you have lost the master password, then you have lost all the stored credentials as well.

    After a little research on Firefox master password, I found a way to reset the password and also a way to crack the master password.


    There’s a simple way on how to reset the Firefox master password.

    1. Run Firefox browser.

    2. At the address bar, type the following link and hit Enter.

    3. You will be prompted “If you reset your master password, all your stored web and e-mail passwords, form data, personal certificates, and private keys will be forgotten. Are you sure you want to reset your master password?”.

    4. Click “Reset” button and it will reset all your stored credentials.
    Decrypt Firefox Master Password

    Resetting the master password is rather useless since you’ll be loosing all your saved login information. I can easily create a new profile that won’t have a master password.

    There’s another way you can recover Firefox master password but it requires time, a good dictionary file and also a little bit of luck. FireMaster is the Firefox master password recovery tool. It uses various methods such as dictionary, hybrid and brute force techniques to recover the master password from the Firefox key database file.
    Bruteforce Firefox master password

    FireMaster is DOS base. So you need to understand and know the commands to use FireMaster. FireMaster is designed with good intention to prevent any master password related problems faced by Firefox users.

    [ Download FireMaster | FireMaster Website ]

    Now you know that Firefox Master Password can’t be easily decrypted. If you have a lot of saved login information in your Firefox, make sure you set a Master Password! Don’t wait until someone set a master password on your Firefox browser and then you’ll searching for ways to decrypt it.

  • The Equation

    7 Glance = 1 Smile
    7 Smile = 1 Meeting
    7 Meeting = 1 Kiss
    7 Kisses = 1 Proposal
    7 Proposal = 1 Marriage –
    And that 1 Bloody marriage has 77777 problems.
    So beware of glance!
    __________________________________________________________

    Exams:
    Exams are like GIRL FRIENDS;
    1,Too Many Questions.
    2,Difficult to Understand.
    3,More Explanation is Needed.
    4,Result is always FAIL!
    __________________________________________________________

    Liar:
    A man is dying of Cancer.
    His son asked him, “Dad, why do you keep telling people you are dying of AIDS?”
    Answer: “So when I’m dead no one will dare touch your mom
    __________________________________________________________

    Delivered:
    Sardar sent a SMS to his pregnant wife.
    Two seconds later a report came to his phone and he started dancing.
    The report said, “DELIVERED”.
    __________________________________________________________

    Three Feelings:
    What’s the difference between stress, tension and panic?
    Stress is when wife is pregnant,
    Tension is when girlfriend is pregnant, and
    Panic is when both are pregnant.

  • How To Install Latest ATI or NVIDIA Drivers on Laptop

    For people who has Acer, Asus, Dell, Toshiba laptops and it is using ATI Mobility RADEON graphics card, sorry to tell you that you can’t install the official ATI Mobility RADEON drivers. If you download the latest ATI Mobility RADEON drivers from ATI and try to install it on your laptop, you’ll get the error message “Thank you for your interest in CATALYST. Unfortunately, this software update cannot be installed on your system. Please contact your notebook manufacturer for driver updates.

    Unfortunately this software update cannot be installed on your system

    Official ATI website mentioned that only Alienware, Arima, Clevo, ECS, Eurocom, Falcon Northwest, FIC, Fujitsu Siemens, HyperSonic PC, Mitac, MSI, NEC-CI, Pro-Star, RockDirect, Sager and Uniwill can use their driver. Is downloading ATI drivers from the laptop manufacturer’s website the only way? No I don’t think so…


    Few days ago I wanted to reformat my hard drive to install a fresh copy of Windows XP on my Acer laptop using (Windows XP Professional Retail SP2 Integrated December 2007 ETH0) CD. After installation, I downloaded the ATI drivers and I wasn’t able to install it! This time I got a different error “Setup was unable to find components that can be installed on your current hardware or software configuration. Please make sure you have the required hardware or software.

    Setup was unable to find components that can be installed on your current hardware or software configuration

    I neither can’t install the official ATI driver nor the manufacturer’s ATI driver. At first I thought my graphics card on my laptop is faulty but I found out that the problem is on Windows XP Professional Retail SP2 Integrated December 2007 ETH0 CD. It uses RyanVM’s Update Pack and somehow it made my Windows unable to detect my graphics card.

    After a little searching, I found third party modified ATI and NVIDIA drivers from Omega Drivers. The purpose of the Omega Drivers is to provide gamers with an alternate set of drivers, ones that have more options and features than the original sets. The drivers contain optimizations, extra features (like OC capabilities), more resolutions and internal tweaks that can give them the edge in a gaming environment over the normal drivers, which are often tailored for synthetic benchmarks. All Omega driver sets are tested (unless noted) by the maker in his own PC or in an alternate PC (in the case of the Nvidia drivers) to ensure maximum compatibility and reliability.

    If your laptop is unable to install either official or manufacturer drivers, then use Omega Drivers.

    Another advantage of using Omega Drivers is you’ll get the latest driver. Newer drivers equals more functions, bug fixes and better performance. I checked Acer’s ATI Mobility RADEON drivers and the drivers are really outdated if compared with the latest version from official ATI website.
    download ATI driver
    As you can see, Acer is still using ATI display driver version 8.073 while in official ATI website is already 8.1! The ATI driver files from Acer also dated back to year 2004 which is nearly 4 years ago! Which would graphics driver you use? Manufacturer’s or Omega Drivers? I definitely would go for Omega Drivers if I can’t install the latest official ATI or NVIDIA drivers…

    [ Download ATI OmegaDrivers | NVIDIA OmegaDrivers ]

  • Delete a specific URL at the Internet Explorer Address Bar History

    When you use Internet Explorer to browse to a website and do so by directly typing the URL in the address bar, the URL you’ve typed will be saved. This is useful for your own use, but in case you’re using a computer of co-worker (or your wife, even nastier), and the URL you’ve typed is, hmmm… how should I say, a bit suspicious, then that URL could be viewed by the other user by pulling down the list.

    If you’ve logged on as your own user then that’s ok, but if you’ve temporarily used a different user’s account to “just check in your email” (wink wink…), then that might get you into trouble.
    That’s why you may want to remove, delete or clear the history of links from Internet Explorer address bar.

    Now here is the tricky part. We all know that you could simply clear your IE history (Internet Explorer > Tools >Internet Options > General tab > click Clear History), however that’ll clear ALL your history, including the address bar URL cache. That we do not want, because that’ll just signal the “other user” (e.g. wife) that you’ve done something you wanted to hide. And that my friend, is harder to explain.

    Please follow these steps in order to clear a specific URL from the history of the address bar in Internet Explorer.


    1. Start Registry Editor (Regedit.exe).
    Note: As always, before making changes to your registry you should always make sure you have a valid backup. In cases where you’re supposed to delete or modify keys or values from the registry it is possible to first export that key or value(s) to a .REG file before performing the changes.

    2. Locate the following key in the registry:
    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TypedURLs

    3. Delete all the URLx (e.g. URL1, URL2 and so on) that you do not wish to be visible in the address bar drop down list.
    Note: If you delete only certain keys, make sure that the remaining keys are in renamed in sequential order start from url1. Otherwise you might corrupt your remaining keys.

    4. Close the registry editor.

    All Internet Explorer windows should have been closed before doing the above steps.

  • Stop Virus from Running Automatically When you Execute Files

    Many worms and trojans make changes to the registry to so that it can automatically start whenever you boot up your computer and also to avoid easy detection by disabling Windows Task Manager, Registry Editor and etc… You can easily restore all those tools by using Remove Restriction Tool (RRT).

    I just recently found out that a virus can actually make some changes on your registry so that the virus will run automatically whenever you execute a file. Imagine, the virus will be loaded each time you run an executable (EXE) or a batch (BAT) file. Just last week I was cleaning a computer that was infected by Brontok. After finished scanning, cleaning the virus and restoring the changes made by virus, the Symantec Antivirus Corporate Edition still pops up notification stating that Brontok virus is found and automatically deleted. This happens EVERY TIME I run an executable file.

    Now I found out how it works and also how to disable the virus from running automatically whenever I run any file.


    This happens when a virus change one or more of the shell\open\command keys. If these keys are changed, the worm or Trojan will run each time that you run certain files.

    For example, if the \exefile\shell\open\command key is changed, the threat will run each time that you run any .exe file. This may also stop you from running the Registry Editor to try to fix this. They may also change a registry value so that you cannot run the Registry Editor at all.

    I’ve done a test by adding Notepad.exe path in \exefile\shell\open\command key. Then I tried running any EXE file, it will launch the EXE file with notepad! For Brontok virus, it loads a backdoor file called “shell.exe”. You won’t even notice anything abnormal when you run an EXE file.
    Virus Shell Open Command

    Thanks to Symantec Security Response for creating a script that is able to easily reset these registry values to their default settings.

    What is inside the script:

    [Version]
    Signature=”$Chicago$”
    Provider=Symantec

    [DefaultInstall]
    AddReg=UnhookRegKey

    [UnhookRegKey]
    HKLM, Software\CLASSES\batfile\shell\open\command,,,”””%1″” %*”
    HKLM, Software\CLASSES\comfile\shell\open\command,,,”””%1″” %*”
    HKLM, Software\CLASSES\exefile\shell\open\command,,,”””%1″” %*”
    HKLM, Software\CLASSES\piffile\shell\open\command,,,”””%1″” %*”
    HKLM, Software\CLASSES\regfile\shell\open\command,,,”regedit.exe “”%1″””
    HKLM, Software\CLASSES\scrfile\shell\open\command,,,”””%1″” %*”
    HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System,DisableRegistryTools,0×00000020,0

    Of all the shell\open\command keys, the exefile key is being used most frequently. When your computer starts, it loads a lot of EXE files. When you start a program, it also loads EXE file. The rest are seldom used unless you’re a power user. To be on the safe side, it’s better for Symantec to restore all of the shell\open\keys to default values.

    Instructions to install the script:
    1. Download the script at the end of this post by right-clicking on the link and save it to your desktop.
    2. Right-click on the file and select “install
    Install UnHookExec.Inf

    A great tool to carry around with me all the time to combat against nasty virus such as Brontok.

    [ Download Symantec Reset Shell Open Command Script ]

  • Daily Premium Software Giveaways at Raymond.CC Forum

    Asking a few people I know about giveaways on websites and they instantly say that it is very common nowadays. Back in early 2008, free giveaways are very rare and you can only find competition that you must win in order to enter the raffle. If you don’t believe me, try searching in Google for “giveaways” from 2000 to 2008 at the custom range time and you will hardly find any giveaways. The first time I did a giveaway on early 2008 was because I was walking around in a computer mall and saw a lot of boxed Kaspersky and Bitdefender software being sold. So I thought why don’t I buy one each and give it away to my readers?

    My first giveaway was held on March 2008 which attracted over 500 participants for Kaspersky Anti-Virus 7.0 giveaway and the second one attracted less than 200 which is for BitDefender Antivirus 2008. The method to pick the winner is by extracting the names from the comments and run them under a list randomizer at random.org. The only requirement to participate in the giveaway is to subscribe the blog’s daily newsletter. Simple and fair.

    Giveaways that are held on a lot of websites today I think are pretty absurd. It doesn’t seem to be the joy of giving, but rather than asking their readers to do things for them. For example, you must tweet, share, like, digg, stumble, subscribe, do everything that benefits the website and THEN you gain a very tiny chance to win when there is only 1 prize up for grasp. Another question to think about is whether the prize is really there, if the winners are even real, the selection of winners are not rigged, or… whole giveaway is a scam? Other than that, there are cheaters that tries to increase their chance in winning by using multiple different identities.


    I have this dream where I’ve always wanted to do an improved daily premium software giveaway based on an automated system and I am happy to say that it has been implemented in our forums.

    Raymond's Daily Giveaway

    Currently, all you need to do is to register a one time free account in our forum, agree with the giveaway rules, and click the “Enter Me!” button at the giveaway page. The system will automatically and randomly pick winner(s) upon reaching the draw date and time (3PM Malaysian GMT+8 time or 12AM PST). The current active giveaway (Kaspersky Anti-Virus 2012) schedule is a bit too long because I made a mistake on the date and time. A giveaway cycle is only for 24 hours and a new giveaway will automatically be posted when one has just ended. So it means that there will be a never-ending giveaway on our forum!

    Raymond.CC Daily Giveaway

    Another annoying problem on giveaways are sending of the licenses to the winners via email. There are countless times when they don’t receive my email because of their super sensitive spam filters and they blame me for not sending it. So I always make sure that I resend again using another email address if I don’t hear from them after 48 hours. This giveaway system is way better because the licenses are sent using private message (PM) and the winners are sure to get it once they log in to the forum.

    Many improvements on this giveaway system are in schedule and will be implemented in the coming weeks. More exciting prizes will be made available for giveaways. If you have any request, you can do so at the Request forum.

    Link to current daily giveaways: http://www.raymond.cc/forum/draw-entry/

  • Free 50 1 Year Emsisoft Anti-Malware 5.0 Full License Worth $2000

    About 3 months ago, Emsisoft has released a major update on a-squared and renamed it as Anti-Malware. If you have not heard of it, Emsisoft Anti-Malware (previous a-squared) has been recently taking the top 3, if not the first spot in malware detection tests. However its great detection does come with a price which is Emsisoft Anti-Malware 5.0 slows down in most actions that is performed on your computer, for example, compressing and decompressing files, converting audio to mp3, boot time, writing of text files and etc. If you check the antivirus benchmark report, most of the time you will find that Emsisoft Anti-Malware 5.0 is at the bottom, taking the most time to complete the benchmark.
    Free Emsisoft Antimalware license
    Please don’t take it wrongly that antivirus slows down your computer are bad. Some people may have a very powerful computer and slowing down merely a few seconds doesn’t matter to them as long as they know they are getting one of the best protection for their computer. Some other people like me that are very particular in squeezing every ounce of speed and having some knowledge on how not to get infected in the first place would prefer something lighter. Antivirus are meant to protect your computer from virus and that is their first priority but able to do that without putting much toil on the computer is a bonus.

    Emsisoft had a few free 1 year license giveaway last year and they are either about to or already expired. If you liked Emsisoft Anti-Malware, then here’s your chance to win a 1 year Emsisoft Anti-Malware 5.0 full license worth $40 each.


    The graphical user interface has been simplified and easy to manage as they are very straight forward. However when you go to the Guard tab, you can define application rules to protect certain process or executable file from being manipulated. Some malwares has the ability to inject itself to legitimate process and you won’t find anything suspicious just by looking at Task Manager. There are more options for Behavior Blocker, File Guard, Surf Protection and Host Rules.

    Free Emsisoft Anti-Malware 5 full license

    Emsisoft Anti-Malware 5.0 has 2 scanners to clean infections which is its own anti-malware engine and Ikarus Anti-Virus engine. It also comes with a newly written file guard which has the ability to scan programs when they are executed, created/modified or read. By default the file guard scans all files when they are created or modified but that slows down many operations on your computer. In my opinion, scanning only programs when they are executed should be good enough so you can have both the best protection and performance at the same time.

    Emsisoft Anti-Malware File Guard

    Another huge improvement for Emsisoft Anti-Malware 5.0 is the full support for Windows 7 and also 100% compatibility with 64 bit Windows. Also if your full version license is expired, the software can still work by automatically reverting back to freeware license allowing you to clean malware but without the guard features.

    Emsisoft Anti-Malware 5.0 Freeware License

    Another feature that I like in Emsisoft Anti-Malware 5.0 is the ability to limit the allowed configuration actions for non-admin user accounts. The Guest or Standard User won’t be able to mess around with the configurations and cause your computer to get infected if your computer is used by your family members or friends. There are also hundreds of other small improvements made on Emsisoft Anti-Malware 5.0.

    If you are interested in the giveaway, please first make sure that you’ve already a subscriber of our newsletter and then leave a comment. The lucky winners will be announced 24 hours later and I will send the coupon code to convert it into full license. Thanks to Christian Mairoll for sponsoring a hundred license to Raymond.CC readers. We are splitting the giveaway into 2 times. I have no specific dates for the second giveaway but it would be probably on September.

    [ Visit Emsisoft | Download Emsisoft Anti-Malware 5.0 ]

  • Subscribe and Get 1 Year FREE RapidShare Premium Account

    I noticed that my RSS readers has been increasing slowly but steadily every week. Now it has reached over 4000 subscribers and I’ve decided to give out 1 year of RapidShare Premium account when it reaches “5000” subscribers. So subscribe now and get daily computer articles delivered to your email address. Rest assured that your email will NOT be shared nor sold to anyone.
    FREE RapidShare Premium account

    It’s very easy to subscribe. You can either enter your email at the “Subscribe” box and click the Subscribe Me button on the right hand side of this page or you can also do the same on this page.


    I give out 1 year of RapidShare Premium account because I find that there are a LOT of things to download from RapidShare if you know how and where to find the links. I’ll even throw in a guide together with the RapidShare Premium account so that you can fully utilize your RapidShare Premium. Please see the table below on the benefits of RapidShare Premium account.
    RapidShare Premium giveaways
    Although it says “No Limits” for download limit, but in fact there is. You may download 25 GB within five days. This means in other words that you can download 5 GB every day. You can also “burst” and download 15 GB today and 10 GB tomorrow, but this means that you will not be able to download anything the following three days because we check how much you have downloaded in the last five days.

    5GB per day is quite a lot. Most of the ripped movies are only 600-700MB. So imagine you can download 6-7 movies per day! You’ll be watching 6-7 movies per day for a year! This is only an example of what you can download with RapidShare Premium account. Of course there are so many other things to download from RapidShare. RapidShare Premium account cost 54.99 EUR for a year and I’ll fully absorb that cost. You’ll also get free 8000 points. You can accumulate more points to extend your RapidShare premium account.

    Well if you are the lucky winner and for “some” reason you don’t want the FREE 1 year RapidShare Premium account, you can have anything you want that cost 54.99 EUR or less. I’ll just pay for it and have it shipped to your address. Since I think most of my readers are computer people, you’ll benefit a lot from the free 1 year RapidShare Premium account.

    So what are you waiting for? Subscribe to Raymond.CC Blog’s and stand a chance to win a free 1 year RapidShare Premium account!

    [ Subscribe Raymond.CC Blog For FREE ]

  • How To Send Files when Instant Messenger File Transfer is Blocked

    Sending files through instant messaging is convenient. Just drag the file that I want to send to the chat window and it’ll start transferring once the other party accepts it. Many times I can get quite annoyed when I am unable to send a file to someone through instant messenger such as Windows Live Messenger or Yahoo Messenger. This problem usually happens when they are in college or office, because very likely there is a firewall blocking it. I notice that even some people at home couldn’t send or receive files from Windows Live Messenger due to a bad configured router…

    Usually if the receiver is in office and everything is blocked except web browsing, the only way I can send the files over is to send it to his webmail or upload it to RapidShare. Other than this 2 method, I recently discovered another method to send files directly to the receiver.


    PipeBytes is a simple service which allows you to send a file to a friend.
    Free File Hosting With Expiration
    The unique benefits of this service are:
    * No software to install.
    * All you need is web browser.
    * Send files of any size!
    * Your buddy could start downloading file as you upload it. (That makes the file exchange process up to two times faster than other web-based file exhange services!)
    * It’s private unlike BitTorrent or other P2P techologies. The file is not shared on Internet – it is sent directly to your recipient.
    * You can watch YouTube videos while file is being transferred!

    If you want to send a file to your friend, click the “Send File” button, browse the file that you want to send and click “Start Upload“. You will then get a pick up code to send it to your friend. Your friend will then need to visit PipeBytes website, click the “Pickup File” button and enter the code. The only catch to use this service is the sender mustn’t close the browser window because PipeBytes is pretty much the same as sending a file to your friend using instant messenger. If the sender close the browser window, it will immediately cancel the transfer.

    Another thing that you should know is the file could be picked up only once! Once the transfer has started, you or anybody else will not be able to pick it up again without re-sending it.

    One huge advantage of PipeBytes service is it uses port 80 which is very rarely being blocked. If you ever encounter any problems sending or receiving files through instant messenger, you can use PipeBytes.

    [ Visit PipeBytes ]

  • Easily Access to Nearly 100 Hidden Utilities in Windows XP

    How many utilities do you know that is built-in Windows XP? Notepad, Wordpad, Character Map, Calculator, Microsoft Paint, these are the few utilities that I usually use. There are more at the Start Menu Accessories group but I seldom use it. Do you know that there are actually nearly 100 utilities in Windows XP which some of them are hidden and seldom accessed by a basic or normal computer users?

    If you arrange the icons by Type in Windows System32 folder, you’ll find many executable (.exe) files. A lot of hidden Windows XP utilities are actually placed in that folder. I just checked mine and it contains 357 exe files. However, not all executable file can be used. For example, I ran conime.exe which has the description Console IME but nothing appears. To make things easy, here is a small program that lets you easily access to nearly 100 hidden utilities in Windows XP.


    Hidden Utilities XP allows access to nearly 100 hidden utilities that are not normally accessible to the average user. System information, diagnostics, repair tools and more in both Windows and Command Line utilities are now easily opened. Hidden Utilities XP includes easy access to 53 Windows tools and 43 Command Line utilities.

    Windows XP hidden program

    Very useful and simple tool for people like me who can’t remember the command to run all utilities in Windows XP. Simple double click on the Windows or Command Line utilities that you want to open.

    This tool would be better if it includes a description of all the utilities and also letting us know what are the files that we are running. If you would like to know what file is being ran, you can simply open up Windows Task Manager and monitor for new processes. Alternatively, Process Explorer also able to tell you the command line location of an open Window. This tool is actually portable and it’s not necessary for the author to create an installer for it. You can browse to C:\Program Files\Camtech\Hidden Utilities XP and copy HTXP.exe to use another computer.

    Windows XP has been around for so many years and I don’t even know all of the utilities listed in this tool. What about you?

    [ Download Hidden Utilities XP ]

  • Neo’s SafeKeys v3 On-Screen Keyboard VS 12 Keyloggers

    The word “anti keylogger” today seems to be a universal meaning of keeping you safe against Keyloggers and not necessarily mean that it can detect and block keyloggers. Detecting, blocking and neutralizing keyloggers is one method normally used by traditional antivirus/antimalware but there a couple of ways that can also protect you against keyloggers such as using KeyScrambler to encrypt keystrokes so that keyloggers only captures random letters. Another method is to detect the keylogger “activities” such as taking screenshots, webcam logging, keyboard logging by using application such as Zemana AntiLogger. Each has their own unique way in keeping you safe against keyloggers and cannot be compared.

    Ever since I started testing a few security applications against keyloggers, Lunarwolf has been bugging me to test Neo’s SafeKeys v3. Moreover there are also some of you would prefer a portable software that could keep you safe against keyloggers. The official Neo’s SafeKeys v3 website claims that “Neo’s SafeKeys v3 provides 100% keylogger protection” and let us see if that is true…


    When you run Neo’s SafeKeys v3, it presents you with an on-screen keyboard. Basically you use your mouse to click on the characters to make up your password, then click twice on the asterisks (*) which will highlight all of it and drag-drop it onto the password box at the web browser or application.

    Neo's SafeKeys v3

    Logically not using your keyboard to type at all should prevent keyloggers from capturing what you have typed but that is not true if you look at the results below. 12 keyloggers has been tested against Neo’s SafeKeys v3 with Injection mode enabled and 3 keyloggers managed to capture the password after dragging and dropping it to the recipient password box.

    All In One Keylogger – PASS
    Ardamax Keylogger – PASS
    Refog Keylogger – PASS
    Revealer Keylogger Pro – PASS
    Ecodsoft Keylogger – PASS
    WebWATCHER – PASS
    BlackShades RAT – PASS
    CyberGate RAT – PASS
    DarkComet RAT – PASS

    Advanced Keylogger – FAIL
    Neo's SafeKeys fails in Advanced Keylogger
    Award Keylogger – FAIL
    Neo's SafeKeys fails in Award Keylogger
    Elite Keylogger – FAIL
    Neo's SafeKeys fails in Elite Keylogger

    Neo’s SafeKeys v3 is able to beat a lot of keyloggers but definitely not 100% especially when it comes to low-level kernel keyloggers. Nevertheless, it is free, has a portable version and comes with a few useful techniques in combating against keyloggers to attempt to protect your password. The latest version 3 comes with the “injection mode” which is enabled by default so you can drag and drop on programs such as KeePass, Roboform and etc.

    I understand that a lot of time and efforts are put into coding a software but claiming that it can provide 100% protection is just wrong unless it is proven. I personally feel sorry for those innocent and amateur computer users that put their 100% trust on a software when it cannot protect them 100%, risking their password being captured by keyloggers.

    [ Visit Neo’s SafeKeys Website ]

    UPDATE 14/June/2011: After reading the open letter that Neo has posted on his forum, I have decided to test the drag-drop method on Advanced Keylogger, Award Keylogger, Elite Keylogger, and Invisible KeyLogger Stealth. All 4 keyloggers failed to capture the password which I have dragged and dropped using the “Drag and Drop Mode”. The “drag and drop mode” is the safest method which you should use on all web forms, even on cybercafe. As for the “injection mode”, you should only use it on programs that does not work with drag and drop mode. If you don’t have LastPass to automate login for you on public computers, Neo’s SafeKeys with “drag and drop mode” is considered to be the next best option.

  • Effectively Remove Trojan, Virus, Spyware from Windows Startup

    I’ve been helping people to remove trojan, virus, spyware and unnecessary programs from Windows startup for many years now. It’s very interesting because you will learn the Windows startup methods from finding out where will the program be hidden. The old method by running System Configuration Utility(msconfig) doesn’t work so well now because there are many other ways to start the programs when Windows is being booted up without being displayed in System Configuration Utility(msconfig). Even some smart trojans are hidden from Task Manager, Processes tab.

    Spywares, it is by nature to create random filenames and file sizes so avoid detection. That is why you always need 2-3 antispywares to completely remove spywares. Using anti-spyware software such as Ad-Aware, SpyBot and XoftSpy is good to identify spyware files but I can assure you that it’s not smart enough to 100% completely remove trojan, virus or spyware from startup. For example, one of my friend’s computer has been infected by spyware because everything is so slow. I find it hard to even download, update or copy the anti-spyware scanners to the computer. However, I manage to copy the updated anti-spyware software to the computer, scanned it, and removed the potential infections. I restarted the computer and it is still slow. That shows that spyware is still being ran during startup.

    I am going to show you one of the best way to remove trojan, virus or spyware from startup but it requires you have at least some knowledge in computers, otherwise you’ll be removing the wrong startup programs which may cause the Windows to be unbootable.


    HijackThis is a general homepage hijackers detector and remover. Hijackers are spywares, trojans and viruses. They infect your computer without your knowledge.
    HijackThis Trojan Spyware removal
    Initially based on the article Hijacked!, but expanded with a lot of other checks against hijacker tricks. It is continually updated to detect and remove new hijacks. It does not target specific programs/URLs, just the methods used by hijackers to force you onto their sites.
    As a result, false positives are imminent, and unless you are sure what you’re doing, you should always consult with knowledgeable folks from forums before deleting anything or you can go a Google search on the filename to know if that file is a virus.

    There are 2 types of scan methods.
    1. Do a system scan and save a logfile.
    – This is for newbie who doesn’t want to mess around with their computers. It will scan your computer and create a hijackthis.log file which you can paste it to forums and request for help.
    2. Do a system scan only.
    – Same as first method but it doesn’t create log files. Mostly for advance user who would like to troubleshoot themselves.

    Again I would like to stress out that IF you’re unsure what to fix after running the scan, please request for help in forums. Simply removing any startup programs would result in an unbootable Windows.

    [ Download HijackThis ]

  • Download and Activate Kaspersky Security Suite CBE 11

    The popular Kaspersky Security Suite CBE has recently been updated to version 11 based on 2011 Kaspersky engine and released by ComputerBild on issue 11/2011. If you haven’t heard of Kaspersky Security Suite CBE 11, it is actually equivalent to the current Kaspersky Internet Security 2011, except renamed specially for ComputerBild’s release. Kaspersky Security Suite CBE 11 has everything that you need to stay safe and secure while you’re surfing the web. It provides constant protection for you and your family – whether you work, bank, shop or play online.

    Other than the name change, the program’s interface is in German but fortunately that can be easily changed by editing the registry and using the Shift+F12 hotkey to temporarily switch the interface to English. Another thing is you have to re-activate the software by requesting the new license key from ComputerBild every 3 months. It’s troublesome for some users but definitely worth it for others because it is free (normally cost $59.95 for 1PC 1Year) and your computer is protected by the latest Kaspersky 2011 engine.
    Kaspersky Security Suite CBE 11
    Anyone is able to register an account in ComputerBild’s website to request for the license key but the Kaspersky Security Suite CBE 11 installer can only be obtained from the promo disc. Thanks to Philipp from ccpowered, now we all get to use one of the best security software because he uploaded the installer to his website and left a comment on my previous Kaspersky CBE article.


    Here is how you can get your free Kaspersky Security Suite CBE 11 activation license code first.

    1. Go to this page http://www.computerbild.de/Kaspersky-Security-Suite-CBE-4280623.html

    2. If you have previously registered a ComputerBild account, then go ahead and login. If not click the Zur Registrierung link to sign up for one.

    3. Once you’re logged in, check the first option and click the button.
    Request Kaspersky Security Suite CBE 11 license key

    4. Check the email address that you’ve used to register the ComputerBild’s account. You should receive an email from COMPUTER BILD-Siche?rheits-Cent?er with the subject “Ihr Lizenzschlüssel für Kaspersky Security Suite CBE?”. Note down the license key that is on the body of the email.

    5. Download Kaspersky Security Suite CBE 11 installer from the links below. For your convenience, I have uploaded the Kaspersky Security Suite CBE 11 to HotFile, MediaFire, FileSonic, FileServe, RapidShare and FileFactory WITH premium direct downloads. Meaning you can immediately start downloading like a premium user except you don’t need to be one because I am sharing my available premium traffic with you. If it runs out of premium traffic, please try another host or simply use the regular download.

  • HotFile
  • MediaFire
  • FileSonic
  • FileServe
  • RapidShare
  • FileFactory
  • 6. Run the downloaded installer. First click Weiter button, followed by Akzeptieren and Installieren. Now you will come to a part where you have to activate the software. Type in the code that you got from step 4 and click the Weiter button. Once activated, click Weiter and finally Beenden. Now the latest Kaspersky Security Suite CBE 11 is installed and activated. Here is how you can change the interface language temporarily to English.

    7. Run Kaspersky Security Suite CBE 11 and on the top right corner, click on Einstellungen.

    8. Follow the numbered steps from the image below to deactivate self-defense.
    selbstschutz aktivieren

    9. Now hit WIN+R key and type regedit followed by hitting the ENTER key. Navigate to the following path:

    HKEY_LOCAL_MACHINE\SOFTWARE\KasperskyLab\protected\AVP11\environment\

    10. Look for SkinSwitchDisabled name and double click on it. Change the value date from 1 to 0 (number zero).

    Change Kaspersky CBE 11 German to English

    Open Kaspersky Security Suite CBE 11, simultaneously press SHIFT+F12 and you will notice that the interface will switch to English. Do note that this change is only temporarily. Once you restart your computer or the software, the interface will be reverted back to German but you can of course change it back to English again by using the hotkey.

  • Extract ZIP Archives Online with Free PHP File Manager

    One of my client’s website that regularly requires updating is quite troublesome because it involves uploading at least 10,000 small files. What I normally do is compress all the files into one single ZIP file, upload and then use DirectAdmin’s built-in File Manager to extract it. I had to do that because when I try uploading a lot of small files, the FTP connection will timeout (TM Net, our Malaysian ISP is to be blamed) but weirdly when I upload a single big file, I can get a constant 40+KBps upload speed and never gets timeout.

    Recently I’ve been very busy and can hardly spend any time to update my client’s website. So I intend to hand over everything to my client so that I can have more free time to myself. Before that, I will have to make sure that everything is in order and the steps to update the website are all written properly in step-by-step order.

    One of the problem that I am facing is I cannot allow my client to use the DirectAdmin’s built-in File Manager because my webhosting subscription account is not a reseller type and I cannot create an account for him nor I can give him my existing username and password. A normal FTP client can do mostly what a PHP File Manager does except that it cannot command the server to extract an archive file that is already uploaded on the remote server. Fortunately I am able to install other third party PHP File Manager to replace the DirectAdmin’s File Manager.


    If you do a search on PHP File Manager, there are actually quite a lot that you will find. What I am currently using now and I can say that it works is eXtplorer. It is a free PHP and JavaScript based File Manager that is able to:

  • Copy & Move Files and Directories by Drag&Drop
  • Dynamic Directory Tree with on-demand loading of subdirectories
  • Edit Files (with Syntax-Highlighting thanks to EditArea)
  • Rename, Delete or Create new Files and Directories
  • Access Files through FTP or directly (using PHP) to totally overcome permission and file ownership issues
  • Upload or Download files just as you like
  • Create and Extract Archives (ZIP, Tar, Tar/GZ, Tar/BZ)
  • User Management with different permission levels like “View only” or “Edit” and “Admin”
  • free php file manager extplorer
    Installation is pretty simple. Just download, extract and then upload to your webserver. You will need to allow write access (chmod 777) to /extplorer/ftp_tmp/ folder and /extplorer/config/.htusers.php file. Then just login, right click on the ZIP file and select “Extract Archive”. eXtplorer needs at least PHP 4.3 on the server and an up-to-date browser with Javascript enabled to run. Do take note that eXtplorer can only extract ZIP, Tar, Tar/GZ and Tar/BZ archives only.

    [ Download eXtplorer ]