(Fix) r3953724.cn Malware/Adware Redirections

Quick Fix: have a program named procmon.exe running (copy of notepad.exe) to disable malware temporarily. This should let you run searches & download fixes. This is only temporary while you clean the system. Read this post for more details and please let me know in comments if this does or does not work for you.

Update/Fix:

The system did indeed have a corrupted atapi.sys file as noted in the comments, though I did not end up using ComboFix to clean it – I was able to replace the file with the identically-sized but binary-different one from the most recent service pack (C:\Windows\ServicePackFiles\i386\atapi.sys) and have not seen the same problem recurring.

In addition, if you need to prevent it from redirecting while you download fixes, you may be able to simply copy notepad.exe (or another common executable) to the name procmon.exe and run that. Last night while I still had the infection active it did not seem to redirect while procmon was running under that name, possibly as a measure to avoid detection.

At this point (several days after initial infection, more than a week after initial reports in the wild) I suspect that many of the tools linked below are updated with definitions that cover this malware so you can probably get by with simply running updated versions of those.

Continue reading (Fix) r3953724.cn Malware/Adware Redirections

Obligatory Website Color Tools Post

An assortment of website color selection tools, including web-smart options. Web-smart color is a palette of 4096 colors that are likely to display well on almost all modern displays. It has largely supplanted the earlier “web-safe” colors, which were a set of 216 colors likely to display well on all displays running at 256 colors or higher.

This post will be revised as I go through my bookmarks and with future tools and may end up changed into a reference page. More useful items are likely to end up higher up within the content of this post, and suggestions are welcome in the comments.

Color Picker is a simple web application that lets you use web-safe or web-smart colors and see how they’ll look.

MoreCrayons Web-Smart Palette tools has both a color cube (view interior of cube by unchecking boxes to hide the “layers” of color on the blue/Z axis) and a slider tool that only operates in the web-safe color ranges.

Adobe has a very nifty color theme tool called Kuler.

Sharebrain has a nice collection of links to color resources.

Continue reading Obligatory Website Color Tools Post