Wednesday, October 13, 2010

DhiFix - Dhivehi Dictionary & Affix file creation for Hunspell

DhiFix is an open source application to simplify the creation and editing of Dhivehi dictionary and affix files for Hunspell. DhiFix uses the GTK+ run time and is created in C. The current version of DhiFix has the following features:
  • Add/Remove words from the dictionary.
  • Add/Remove affixed forms of words. This removes the affix flag for the word and not the actual affix.
  • Automatically create new affix rules if the word cannot be converted to suggested affixed form using existing affix rules.
  • Suggest new affixed forms of a word based on existing affix rules and the pattern observed at the beginning or end of the word.
DhiFix source and windows binaries are available from http://code.google.com/p/dhifix/

Monday, September 6, 2010

Unhiding files hidden by viruses and malware

A common and annoying trick (for most) used by malware is to hide files and folders and replace them with copies of the malware executable file with common windows folder or file icons. By the time one figures out their system has been infected half the stuff on the hard disks and USBs seems to have vanished and cleaning the malware does not seem to do anything for the "missing" files. Some clueless Windows users assume that the malware had deleted all their personal files while the more fortunate ones do find out that changing two settings in Folder Options is all that is needed to get Windows to show them their precious files. Those two settings are:
  • Show Hidden Files (enable this)
  • Hide protected operating system files (disable this)
    For some odd reason Windows thinks that any files marked as System and Hidden should be a protected operating system file.
So here's a simple way to let you unhide the files hidden by malware:
  • Download unhide.zip
    MD5: 3A1961622326EB09EDE9EAAE43C2A728
    SHA-1: 86F89724525753D3473504D989168668780E9554
  • Extract unhide.bat
  • Copy unhide.bat to the folder whose contents disappeared after the malware unfection
  • Double-click unhide.bat to run it and all your missing files and folders would automagically appear (unless the malware did actually delete it).
Those familiar with Command Prompt can just use the following command instead of downloading the batch file:
  • attrib /d /s -h -s

Thursday, July 8, 2010

Changing MAC Address in Windows 7 & Vista

The MAC Address of Network Devices in Windows 7 & Vista can be changed by making a simple change to the registry. A possible step-wise approach to accomplish this is presented below.
  • Open Windows Registry Editor.
  • Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class from the tree view on the left hand side.
  • Open Command Prompt.
  • Type getmac in Command Prompt and press enter to get the MAC Address of Network Interfaces on your computer. You will see the MAC Addresses of all Network Interfaces you have on your computer including virtual ones.
  • Copy the GUID in Transport Name part of the device whose MAC Address you wish to change. The transport name is like \Device\Tcip_{XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX} where the GUID is the part highlighted in yellow.
    Note: The transport name will not be displayed for network devices which are disabled. So if you have a wireless network device and have it switched off you then will not be able to see the transport name of the wireless network device.
  • Go back to the registry editor and press Ctrl+F to display the search window.
  • Paste the GUID you found into the text box in the search window.
  • Next untick both Keys and Values under LookAt and tick Data.
  • Click Find Next to search the registry.
  • The Registry Editor will automatically take you to a Key similar to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\XXXXXXXX-XXXX-XXXX-XXXXXXXX\00## and a String Value with the name NetCfgInstanceId would be highlighted on the right hand side. This String Value would contain your GUID.
    Note: You may have to search a couple of times before you are able to find this key.
  • Right click on an empty space on the right hand pane in the Registry Editor windows and select New -> String Value
  • Type NetworkAddress for the name of this new String Value.
  • Double Click the new String Value you just created i.e. NetworkAddress and enter the new MAC Address you want for the interface. The MAC address should be in hexadecimal without any hyphens and should be exactly 12 characters long. Example: 00AA22BB44CC
  • Close the Registry Editor and restart your network device for the change to take affect.
  • To restart you network device you can either restart your computer or disable and re-enable your network device (using the Control Panel -> Network and Sharing Center).
  • To check whether the MAC Address of the device has changed you can open Command Prompt and enter getmac.

Tuesday, May 25, 2010

Hacking or Phishing?


During the past few weeks, some Maldivian blogs got hacked according to the blog authors or those close to them. How did all these blogs get hacked? Is GMail security that low that any script kiddie could take over your blog? Or is there something else to it? Was the bloggers phished?

As far as I know GMail is pretty secure and there is no known way of hacking into someone's GMail account unless you know their password or secret question answers. Therefore, the only reasonable explanation for the recent "hacking" of several Maldivian blogs can only be attributed to phishing (this seems to be what is suggested by a recent article on the dhiislam website).

If you want to learn more about phishing and how to protect yourself from phishing attacks please read my previous post on phishing attacks. You can also read more about phishing on howstuffworks.com

Sunday, May 23, 2010

Windows 7 & the freezing Windows Live Messenger

Symptoms:
  • Windows Live Messenger freezes randomly from a few seconds to a few minutes on a Windows 7 system. The problem occurs while you chat and gets worse when you try to select an emoticon or wink from the menu.
Cause:
  • Windows 7 has a service called WinHTTP Web Proxy Auto-Discovery Service  which gets called by Windows Live Messenger each time it wants an internet connection. This service fails to perform as expected under some circumstances.
Solution:
  • Windows Live Messenger uses Internet Explorer settings to determine the type of internet connection the user has.
  • Disabling Automatically detect settings under LAN Settings in Internet Explorer would prevent Windows Live Messenger from using the WinHTTP Web Proxy Auto-Discovery Service. To do this:
    • Open Internet Explorer.
    • Go to Tools => Internet Options.
    • Select Connections tab.
    • Click LAN Settings.
    • Uncheck Automatically detect settings.
    • Click OK.

Monday, May 17, 2010

Disable Automatic Virus Scanning in Firefox 3

By default, Firefox 3 runs anti-virus scans on downloaded files in Windows systems with anti-virus software installed. Depending on the type and size of the files downloaded Firefox can stop responding for a significant amount of time while the virus scan is being performed. Follow the steps below to disable automatic virus scanning in Firefox 3:
  • Type about:config in the Firefox location bar
  • Click the "I'll be careful, I promise!" button if the "This might void your warranty!" message is displayed.
  • Type browser.download.manager.scanWhenDone as the Filter. Alternatively you can just navigate to the setting browser.download.manager.scanWhenDone in the about:config page.
  • Change the value of browser.download.manager.scanWhenDone to false.
Note: Do not disable automatic virus scanning in Firefox if your anti-virus software does not support real-time protection.

Monday, May 10, 2010

Show close button on the last tab in Firefox 3.5+

In Firefox versions 3.5 and later the close button is not displayed on the last tab. If you try to close the last tab by pressing Ctrl+W then Firefox closes with the tab. Sometimes, this can be annoying, so here is a simple fix for the problem.
  • Open a new tab in Firefox and enter about:config as the URL.
  • Click "I'll be careful, I promise!" button to get to the config page.
  • Make the following changes in the config page:

    • browser.tabs.closeButtons = 1
    • browser.tabs.closeWindowWithLastTab = false
  • Close Firefox.
  • Goto folder %APPDATA%\Mozilla\Firefox\Profiles\xxxxxxxx.default\chrome

    •  %APPDATA% == C:\Documents and Settings\\Application Data\ folder in Windows XP
    • %APPDATA% == C:\Users\\AppData\Roaming\ folder in Windows Vista and 7
    • More details on where the Firefox Profiles folder is located in different Operating Systems can be found at http://support.mozilla.com/en-us/kb/Profiles
  • Open userChrome.css in a text editor such as Notepad++ or Windows Notepad.
  • Add the following code to userChrome.css

    /* Add tab-close-button to last tab*/
    .tabbrowser-tabs[closebuttons="alltabs"] > 
     .tabbrowser-tab > .tab-close-button {
      display: -moz-box !important;
     }
    .tabbrowser-tabs:not([closebuttons="noclose"]):not([closebuttons="closeatend"]) > 
     .tabbrowser-tab[selected="true"] > .tab-close-button {
      display: -moz-box !important;
     }
  • Save userChrome.css
  • Open Firefox and you should have a close button displayed on the last tab.