Latest posts of: rsatrioadi - DonationCoder.com
Welcome Guest.   Make a donation to an author on the site May 22, 2015, 09:36:56 AM  *

Please login or register.
Or did you miss your validation email?


Login with username and password (forgot your password?)
Why not become a lifetime supporting member of the site with a one-time donation of any amount? Your donation entitles you to a ton of additional benefits, including access to exclusive discounts and downloads, the ability to enter monthly free software drawings, and a single non-expiring license key for all of our programs.


You must sign up here before you can post and access some areas of the site. Registration is totally free and confidential.
 
Learn about the DonationCoder.com microdonation system (DonationCredits).
   
  Forum Home Thread Marks Chat! Downloads Search Login Register  
  Show Posts
      View this member's profile 
      donate to someone Donate to this member 
Pages: [1] 2 3 Next
1  Main Area and Open Discussion / General Software Discussion / Re: Need help cleaning virus inside HTML files on: March 17, 2015, 12:40:49 PM
Hello!

tl;dr: I used 4wd's script and it did it! My HTML files are clean now! Thank you so much 4wd, you saved my life files! (But also probably life!) And also thank you for getting me to learn AutoIt scripting a bit because of your laziness. tongue

More:

I hope it is okay that I made a few modifications to the script like so: at first I used the script on a two small directories (say C:\a\a1 and C:\a\a2) and it worked, so I used it again on their parent directory (C:\a) that contains more directories other than a1 and a2. When I ran it there, it made backups of already cleaned files in a1 and a2, and made backups of the previous backups! Since I was going to use the script again on a larger scale (C:\), I didn't want it to make more and more duplicate backups, so I studied the script, downloaded AutoIt, tinkered around, and finally made it so that uninfected files wouldn't be backed up.

In the end I ran the script on C:\ and it repaired all but those in C:\Program Files. But there are not so many HTML files there, only some help files that can be fixed by reinstalling the software so it's all great. Thmbsup

The modified script:

Formatted for AutoIt with the GeSHI Syntax Highlighter [copy or print]
  1. #Region ;**** Directives created by AutoIt3Wrapper_GUI ****
  2. #AutoIt3Wrapper_Change2CUI=y
  3. #EndRegion ;**** Directives created by AutoIt3Wrapper_GUI ****
  4.  
  5. $sTempFile = @TempDir & "\RemVBSfHTM.txt"
  6. $sTest = "<SCRIPT Language=VBScript>"
  7.  
  8. If $CmdLine[0] = 0 Then
  9. Exit (1)
  10. $sFile = $CmdLine[1]
  11.  
  12. $hFile = FileOpen($sFile, 0)
  13. If $hFile = -1 Then
  14. ConsoleWrite("Unable to open '" & $sFile & "' for reading." & @CRLF)
  15. _Exit()
  16. $hTempFile = FileOpen($sTempFile, 2)
  17. If $hTempFile = -1 Then
  18. ConsoleWrite("Unable to open '" & $sTempFile & "' for writing." & @CRLF)
  19. _Exit()
  20.  
  21. $found = False
  22. $sLine = FileReadLine($hFile)
  23. If StringInStr($sLine, $sTest) > 0 Then
  24. $found = True
  25. $sLine = StringLeft($sLine, StringInStr($sLine, $sTest) - 1)
  26. FileWriteLine($hTempFile, $sLine)
  27. FileWriteLine($hTempFile, $sLine)
  28.  
  29. FileClose($hTempFile)
  30. FileClose($hFile)
  31.  
  32. If $found Then
  33. If FileMove($sFile, $sFile & "-old+vbs") = 0 Then
  34. ConsoleWrite("Unable to rename '" & $sFile & "' prior to replacement." & @CRLF)
  35. _Exit()
  36. FileMove($sTempFile, $sFile)
  37.  
  38. Func _Exit()
  39. EndFunc   ;==>_Exit

So again, thank you very much 4wd and donationcoder, and I apologize for modifying the script without asking for your permission first.
2  Main Area and Open Discussion / General Software Discussion / Re: Need help cleaning virus inside HTML files on: March 17, 2015, 08:38:57 AM
Thanks so much 4wd, I will try running the program in a small directory first to see the result. I'll let you know if it works well with my set of files.

Thanks MilesAhead, I'll look into it and try around, but I think and hope 4wd's script is enough for this task.

I really appreciate your helps and suggestions.
3  Main Area and Open Discussion / General Software Discussion / Re: Need help cleaning virus inside HTML files on: March 16, 2015, 07:34:11 PM
Hi all, thanks for the replies.

@Curt
Thank you for the recommendations, but the links you provided helps with shortcuts and .vbs files, which were already handled by Avast. My biggest problem now are embedded vbscripts inside HTML files.

@mouser and @MilesAhead
Unfortunately part of my work deals with a collection of HTML files, most of which were synced over Dropbox (for team projects) and Copy (for my personal projects). I realized the existence of the virus when Dropbox on my other computer reported changes in HTML files when no one's working on them, so I installed antivirus, and the rest is history. So while I probably will do fresh install anyway, there are still infected files that I have to deal with. I know that both Dropbox and Copy keep backups of older versions, but since there are so many files across different directories I think it's more feasible to have a script that cleans the files rather than restoring backups one by one. But if you have any other suggestions I'm all ears.

@4wd
I need to clarify something: after looking at some of the infected files it seems that the <SCRIPT..>'s were appended at the end of each files, so for example if there's a HTML file with only

[copy or print]
<p>blahblah</p>

in it it would be modified to

[copy or print]
<p>blahblah</p><SCRIPT Language=..>

. So I think the correct approach should be looking for a SCRIPT element with Language=VBScript. If you can write the batch file I'd be very thankful.
4  Main Area and Open Discussion / General Software Discussion / Need help cleaning virus inside HTML files on: March 16, 2015, 09:54:31 AM
Hello folks, long time no see.

tl;dr: some virus infected many (I hope not all...yet) HTML files inside my hard drive. It embedded nasty vbscript at the end of each file (after </html> tag). My antivirus detected but cannot repair them. What next?

Longer story:

After years of not using Windows, I got my hand on a Windows machine. Silly me didn't install antivirus at the first chance, so circa day 2 I got it infected with viruses from an infected flash drive. I installed Avast and ran a scan. Most .exe and .dll files were repaired but many HTML files are left unfixed (see tl;dr above). Here's a screenshot of the vbscript inside a file:

[attachimg=1]

The <SCRIPT..> parts are the same in each infected HTML files, but the "gibberish" HTML comment after the closing </SCRIPT> differs from file to file. I don't know if this comment part does any harm, though.

So, any suggestions on how to clean them? If there's no ready-made solution maybe somebody can write me a script that reads all HTML files inside a directory and remove any vbscripts inside it? Pretty please? Wink

Thanks beforehand for any help.
5  Main Area and Open Discussion / Living Room / Re: Current web-based RSS readers - What is your pick? on: August 11, 2014, 12:24:24 AM
I'm one of the Google Reader refugee who have found shelter in The Old Reader. Made by fellow 'victims' of Google Reader shutdown, it looks and behaves almost exactly like Google Reader.

I also tried Digg Reader but I find The Old Reader suits me better.
6  Main Area and Open Discussion / General Software Discussion / Re: Running Windows XP Professional in Windows 8 (Not Pro) on: November 25, 2013, 04:29:26 AM
By VMPlayer I assume you mean VMWare Player?

In VMWare (and probably all recent computer virtualization programs) you don't need to delete and recreate the virtual machine to change virtual hardware configurations, including RAM or hard drive size, networking, and even number of processor cores. In older versions of VMWare Player you'd need to use the Command Prompt to resize virtual hard drives, but since version 3 it can also be done easily from the Virtual Machine Settings window.

It is probably necessary to note that some settings can only be changed while the VM is turned off, so if you find some disabled text box or combo box you just need to turn the VM off first and they will be enabled.

I hope this helps.
7  Main Area and Open Discussion / General Software Discussion / Re: software recommendations - photo/graphics editors on: September 16, 2013, 11:19:13 PM
No one mentioned Photoscape yet? It's a freeware mainly for fixing & enhancing photos instead of painting/editing, so it is richer in tools for color adjustment, back light correction, red eye removal etc rather than 'micro' tools like paint brushes etc. This is probably what you need.

Here's the feature list from the website:
  • Viewer: View photos in your folder, create a slideshow
  • Editor: resizing, brightness and color adjustment, white balance, backlight correction, frames, balloons, mosaic mode, adding text, drawing pictures, cropping, filters, red eye removal, blooming, paint brush, clone stamp, effect brush
  • Batch editor: Batch edit multiple photos
  • Page: Merge multiple photos on the page frame to create one final photo
  • Combine: Attach multiple photos vertically or horizontally to create one final photo
  • Animated GIF: Use multiple photos to create a final animated photo
  • Print: Print portrait shots, carte de visites(CDV), passport photos
  • Splitter: Slice a photo into several pieces
  • Screen Capture: Capture your screenshot and save it
  • Color Picker: Zoom in on images, search and pick a color
  • Rename: Change photo file names in batch mode
  • Raw Converter: Convert RAW to JPG
  • Paper Print: Print lined, graph, music and calendar paper
  • Face Search: Find similar faces on the Internet

Hope this helps. cheesy
8  Main Area and Open Discussion / Non-Windows Software / Re: Screenshot thread! on: August 31, 2013, 03:04:38 AM
I'm Mr. Boring! tongue

I believe I can be even more boring. tongue

Behold:

[attachthumb=1]

Ubuntu 13.04 with GNOME 3.8. I like clean desktop and starry wallpaper.

[attachthumb=2]

Mac OS X 10.6.8 Snow Leopard. Yes, I know it's (very) outdated but hey, I got this old MacBook for free, gotta make the most out of it. tongue
9  Main Area and Open Discussion / Non-Windows Software / Re: A new section for Linux, cross-platform code, embedded, mac, android, ios, etc. on: August 31, 2013, 02:43:55 AM
This is great news! cheesy

I've been a DC lurker for years, but since I fully switched to Linux a couple years ago (plus a Mac just about a month ago), most software discussions and coding snacks here no longer apply to me. This new section will definitely change that. Thmbsup

(Interestingly my phone is a Lumia. Talk about diversity. tongue)
10  Main Area and Open Discussion / Living Room / Re: The effort in xkcd comics on: August 26, 2013, 08:14:11 PM
How long that one took? How about Time ("play" it here) or Click and Drag? cheesy
11  Main Area and Open Discussion / General Software Discussion / Re: Deleting 0 Ko pdf files in windows 7 64bits ? on: July 04, 2013, 09:28:05 AM
Quote
search in the big folder + keyword ".pdf" and rank by size. then delete all the zero ko files at once

I'm totally sure that it can be done using Windows' own Windows Explorer.

By the way, what does "Ko" stand for? I've never seen anyone using that unit.
12  Main Area and Open Discussion / General Software Discussion / Re: Remove empty lines on: June 30, 2013, 09:34:19 PM
Use sed? tongue
13  Main Area and Open Discussion / General Software Discussion / Re: browse without hands on: June 21, 2013, 02:47:25 AM
Thanks to tsaint, I tried a similar program: eViacam, and now I have a sore neck. tongue

It works well, accurate, has two click modes (dwell click and gesture click), and allows left, middle, and right mouse click as well as left mouse dragging and left mouse double click. It messes up if/while there's someone else in the camera's line of vision, though.

It was fun overall, just don't use it for more than an hour. tongue
14  Main Area and Open Discussion / General Software Discussion / Re: browse without hands on: June 17, 2013, 07:26:00 PM
Whoa... Now I recall that I've heard about foot controller many years ago, but I thought it was just a concept. Nice share! Thmbsup
15  Main Area and Open Discussion / General Software Discussion / Re: browse without hands on: June 16, 2013, 11:32:50 PM
If you're like me, you'll find talking to your computer more tiring than typing with your hands (I don't talk much).

Anyway, Windows since Vista includes built-in voice command program. You might want to try that; just open the Start Menu and search for Windows Speech Recognition. It's probably enough, but I think the best speech recognition/voice command program for Windows I've ever tried is DragonNaturallySpeaking, if you're willing to spend some money.

Another way to browse without using your hands that I can think of is by using your feet, but I doubt it's accurate or fast. tongue
16  Main Area and Open Discussion / General Software Discussion / Re: Copy (a new Dropbox-like service) on: May 31, 2013, 06:02:52 AM
Same here, still happy with Dropbox but whatever, right? tongue
17  Main Area and Open Discussion / General Software Discussion / Re: Copy (a new Dropbox-like service) on: May 30, 2013, 11:11:09 PM
Thanks! Let's enjoy our free 5GB! tongue
18  Main Area and Open Discussion / Living Room / Re: What are Your Favorite YouTube Channels? Here are Mine for Board Games on: May 18, 2013, 10:55:02 PM
Ze Frank's videos never fail to make me laugh (or sometimes cringe), especially the "True Facts About ..." series.

On an educational side, I subscribe to the obligatory MinutePhysics (and its sister MinuteEarth), PBS Idea Channel, Vsauce, and AsapSCIENCE.
19  Main Area and Open Discussion / General Software Discussion / Re: Software to control Wallpaper? on: March 15, 2013, 11:25:22 AM
Correct me if I'm wrong, but doesn't the Fill option does exactly what you want?
20  Special User Sections / N.A.N.Y. 2013 / Re: N.A.N.Y. 2013 - RAT - Renegade Audio Transcoder on: December 22, 2012, 04:11:34 AM
Just exactly what I need! Thank you very much!  cheesy
21  Main Area and Open Discussion / Living Room / Re: Facebook seems to be erased from existence? on: December 10, 2012, 05:49:35 PM
Jesus, it was only down for less than 4 minutes...stop panicking people...I didn't even lose connection to it.

I wasn't panicking, I was just very curious. tongue
22  Main Area and Open Discussion / Living Room / Re: Facebook seems to be erased from existence? on: December 10, 2012, 05:36:40 PM
I noticed that certain things disappeared and broken links are everywhere.  Have you tried https?  I get most of the site that way...

I always use https whenever I can.

Anyway FB's up again from here, and here's Mashable's coverage.
23  Main Area and Open Discussion / Living Room / Re: Facebook seems to be erased from existence? on: December 10, 2012, 05:27:05 PM
Wait, I can open the mobile site from my phone but not from PC. And isup.me says the mobile site is up. How's that even possible?

Damn Mayans, it was supposed to happen on 21st.

 Grin
24  Main Area and Open Discussion / Living Room / Facebook seems to be erased from existence? on: December 10, 2012, 05:15:47 PM
Anyone here can open facebook.com?

I tried to open facebook.com just now and Firefox says "Firefox can't find the server at www.facebook.com." I entered facebook.com into isup.me and it says "Huh? http://www.facebook.com doesn't look like a site on the interwho."

It's like facebook vanished just like that, and I haven't found any news related to it. How can it happen to such a big name?
25  Other Software / Found Deals and Discounts / Re: Stop Zombie Mouth - Free Plants vs Zombies game giveaway codes for everybody! on: October 30, 2012, 01:01:31 AM
No love for non-US residents?  Sad
Pages: [1] 2 3 Next
DonationCoder.com | About Us
DonationCoder.com Forum | Powered by SMF
[ Page time: 0.128s | Server load: 0.07 ]


Share on Facebook
submit to reddit