tag:blogger.com,1999:blog-16246357513220381522011-11-20T02:23:23.957+05:30Debiprasad Sinhahttp://www.blogger.com/profile/15801108453499502389noreply@blogger.comBlogger21100tag:blogger.com,1999:blog-1624635751322038152.post-24127767460038169132009-08-08T22:41:00.002+05:302009-08-09T05:26:43.009+05:30Among ENGLISH Films : <br /><br />I adore sentimental; romantic ; historical movies such as : <br /><br />Big fish; Across the universe; The Notebook; The road to perdition; A beautiful life; The insider ; When Harry met sally ; Forrest gump ; Braveheart ; The Painted veil ; The kite runner ; My father romulus ; The pursuit of happyness , Dances with the wolves ; Australia ; The bridges of Madison county, The green mile, 50 first dates , Malena ; Before sunrise ; After Sunset ; November Rain; Notting Hill ; Summer of 42 ; One flew over the cuckoo's nest, Shawnshank redemption, Pretty woman ; Platoon; Saving private ryan ; Schindler's List and Rocky .<br /><br />Among Hindi films : <br /><br />Kati patang ; Amal; Aradhana , Anand ; Koshish ; Baton baton mein , Apne ; Koshish ; Hero ; Betaab ; Ghayal ; Golmaal (old one ), Dor ; Swades , Veer Zaraa and Munnabhai MBBS<br /><br />Other language films : <br /><br />Baran - (iranian film); Mungaru Male( Kannada)<div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/1624635751322038152-2412776746003816913?l=debiprasadsinha.blogspot.com' alt='' /></div>Debiprasad Sinhahttp://www.blogger.com/profile/15801108453499502389noreply@blogger.com7tag:blogger.com,1999:blog-1624635751322038152.post-64247859786374938942009-07-03T12:24:00.003+05:302009-08-08T22:28:15.953+05:30My Blog relates to the common problems faced by internet explorer users regarding their home page being redirected to some other website ..in this case the homepage was being redirected to " http://talk2namratha.com "<br /><br /><br />Followers of my blog can use the same steps mentioned in my blog for almost all such cases of website redirection and im sure you will get back your peace of mind within 30 minutes <br /><br /><br />The Problem i faced <br /><br />This involves the internet explorer home page hijacking and redirecting it to a shitty page bearing the url “ http://talk2namratha.com”<br /><br />How did i get infected ???<br /><br />My laptop got infected after I inserted a pendrive and like a fool I double clicked on the pen drive ( instead of right clicking on pen drive and choosing explore option). <br />The autorun file executed itself and infected my browser...and surprisingly AVG/ Spybot/ Anti hijacking softwares...nothing in the entire god damn internet ..was able to clean this browser hijacking virus.<br /><br />I tried the resetting option of internet explorer...tried resetting homepage option...then tried uninstalling and reinstalling Internet explorer 8 ..yet no luck <br />I realised ..that in order to clean it up...ive got just one option...formatting my C drive !!( whew...this was an option I always hate...)<br /><br />What Did I do ??<br /><br />these were the steps I took <br /><br />1). Task manager:<br /><br />I saw that in task manager ..there was a program called as “winscheduler”..it kept running...used very less memory..and seemed peculiar as I hadnt seen this program earlier.<br />I killed the winscheduler ...yet after some time it started again..and I was sure this surely has some relation with the virus.. moreover there were 2 files being created in C drive ..and one was called “sysdir”..when I opened it in notepad it just contained this line“ c://windows/system32 “<br /> so I first deleted this file<br /><br />2). REGISTRY changes :<br /><br />note that..all viruses make subtle changes to registry... so key to my salvation lay in the registry itself ! I typed regedit ( start...run .. press Enter)<br />Within regedit i searched for entries like "namratha" and "winscheduler"<br />I came across a setting in explorer which referred to "userinit.exe" and it was clubbed with"winscheduler"...now this was dangerous stuff !!....so i just deleted the winscheduler part letting the rest of entry remain...plz dont delete the entire entry or else your desktop will never open (remember this step..)<br />within regedit I came across an option regarding startpage...which was set to "talk2namratha"...this i manually edited to "www.google.co.in" <br /><br />...i kept deleting all other entries related to "talktonamratha".. and "winscheduler "...however i soon realised that every time i deleted entries they kept coming back...so i decided to repeat this entire procedure in safe mode again<br /><br />3). Reboot in Safe mode <br /><br />I repeated all the registry cleansing procedure in step2 ...yet same problem kept occurring . Then I realised that the bastard who wrote virus program has made it in such a way that it integrates itself into" userinit.exe " file which is in Windows/ System32 folder<br />The salvation lay in preventing windows getting access to "userinit.exe" while rebooting <br />SO whats did i Do ??<br /><br />4). In Safe mode cut the "userinit.exe" infected with the Bastard's code from system 32 and paste it in another drive<br /><br />the userinit.exe file is absolutely essential to starting internet explorer and also to view the desktop...becoz...everything in windows opens via explorer form..if i delete this file then even if system reboots i wont be able to see my desktop .<br />i went to system32 and searched for winscheduler.exe file...and surely enough it wasnt there...so i cut the "userinit.exe" file from system32 and pasted in into another drive ( D drive) (remember this step)<br /><br />5). Restart system in normal mode and via taskmanager browse to the "userinit.exe" which you pasted in step4<br /><br />after restarting windows successfully ..i wasnt able to see desktop( so im happy that windows couldnt access the "userinit.exe" file... I then pressed CTRL+ALT+DEl and started taskmanager<br /><br />I and used the option "opened new task " and typed regedit<br />again in registry I cleansed all entries referring to "namratha" and winscheduler" and changed homepage to "www.google.co.in" and closed taskmanager<br /><br />Again i started taskmanager..and used the option "opened new task " and browsed to the "userinit.exe" file which was in my D drive<br /><br />Lo and behold...the desktop reappeared..and all instances and entries of the fucking "talk2namratha" were deleted once and for all ..<br /><br />now..one last step..just repaste the "userinit.exe" file back into c:/winsows/system32 <br /><br />My system was clean...and i was overjoyed...becoz inspite of myself not being a computer engineer/progarmmer..i used my common sense and was able to repair my system...something which even the big softwares couldnt do..<br /><br /><br />i guess..the procedures i employed would be effective incase of other webpage redirections also ...so do try out my steps and post comments on my blog regarding it...and if you are benefitted ...at least post a thanks and thats the least you can do !<div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/1624635751322038152-6424785978637493894?l=debiprasadsinha.blogspot.com' alt='' /></div>Debiprasad Sinhahttp://www.blogger.com/profile/15801108453499502389noreply@blogger.com1