Idnaf.Office.Recover : Generic Recovery Tool for Infected M$ Office’s Documents

April 4, 2008 at 6:07 am | In Security, Software Development, Virus | 1 Comment
Tags: , ,

Several days ago, I came up to design a “simple” recovery tool for files infected by virus by embedding it to virus’ body. I call this software : Idnaf.Office.Recover.
The current software will detect the signature of *.DOC, *.XLS and *.PPT.

IMPORTANT
Don’t blame me if there is something wrong, see the source code to solve your problem!

NOTE
Version 0.2 beta 1 and 0.1 beta 1 have different algorithms. So, it may end up in different results.

Please tell me if there is bug or new suggestion. Please be aware that this application is in early development and yet free of charge.

Software Requirement :
.NET Framework 2.0
Microsoft Windows.

License :
Please see http://fandigunawan.wordpress.com/licensing or License.txt in the archive.

Version 0.2 beta 1
Binary :
Office.Recover02b1-bin.zip

Source Code (C#):
Office.Recover02b1-src.zip

Version 0.1 beta 1
Binary :
Office.Recover01b1-bin.zip

Source Code (C#):
Office.Recover01b1-src.zip

Screenshots :
Screenshot 0
Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5
Screenshot 6

Other resource :
preventing-microsoft-offices-document-from-virus-infection [English]
mencegah-infeksi-berkas-microsoft-office [Indonesian]

Important links:
Microsoft Office
http://www.microsoft.com/interop/docs/OfficeBinaryFormats.mspx

Preventing Microsoft Office’s Document from Virus Infection.

March 28, 2008 at 5:00 am | In Security, Virus | 1 Comment
Tags: , ,


This time I will discuss about tricks to prevent virus infection on Microsoft Office’s documents. The original article was published in Ilmukomputer.com and was translated into english.

The article describes the tricks to prevent viruses from scanning Microsoft Office’s documents.
For the details please download the folowing file:

PreventingMicrosoftOfficesDocumentfr.zip

Some Interesting Windows XP Secrets

March 28, 2008 at 4:50 am | In Misc, OS | No Comments
Tags: ,

Here is the interesting article about Windows Hidden Secrets. I used Windows XP SP2 and found some interesting images and forms within Windows’ program and DLL.
The things that I will exposed is some images that is belongs to “beta” version of Windows is not removed in final version of windows XP.
You can download it directly here :

SomeWindowsSecrets.zip

Mencegah Infeksi Berkas Microsoft Office

March 24, 2008 at 6:36 am | In Security, Tulisan | 4 Comments
Tags: , , , ,


Kali ini saya menyoroti persoalan tentang banyaknya dokumen buatan Microsoft Office yang terinfeksi oleh virus. Berikut tips dan trik dari saya untuk mencegah terinfeksinya berkas-berkas buatan Microsoft Office semisal : DOC (Word), XLS (Excel), PPT (PowerPoint) , MDB (Access) dan VSD (Visio).

Tautan untuk mengunduh secara langsung:
fandi-mencegahinfeksiberkasoffice-pre1.zip (Ilmukomputer.com)
atau
fandi-mencegahinfeksiberkasoffice-pre1.zip (Googlepages.com)

Tautan penting :
artikel-mencegah-virus-tanpa-anti-virus-untuk-win-xp-win2k-win2k3/
senjata-paling-ampuh-menyelamatkan-data-dari-komputer-yang-terinfeksi-virus/
fandi-cegahvirus-113.zip

Referensi :

Microsoft Office
Pelbagai Antivirus
Kaspersky Antivirus
Avira Antivirus
Symantec Norton Antivirus

Cek Memori Komputer Anda Dengan Memtest86

February 28, 2008 at 9:14 am | In Tulisan | No Comments
Tags: , ,

Berikut tulisan saya yang segera dipublikasikan di Ilmukomputer.com. Berikut abstrak tulisan saya

Beberapa waktu yang lalu penulis mengalami masalah di memori komputer yang menyebabkan komputer berhenti ditengah jalan dan masih banyak lagi permasalahan yang timbul ketika komputer dinyalakan. Setelah melakukan pengujian terhadap beberapa piranti keras, akhirnya penulis mengetahui bahwa memori komputernya bermasalah. Keadaan yang dialami penulis adalah seringnya muncul blue screen of death dengan pesan memori terkorupsi. Memtest86 hanya akan mengecek memori yang terdeteksi oleh BIOS/ sistem operasi. Memori yang tidak dikenali sama sekali oleh BIOS dapat dipastikan kemungkinan besar rusak…….

Berikut tautan langsung ke artikel saya :
http://fandigunawan.googlepages.com/fandi-cekmemorikomputerandadenganmem.zip
atau
http://ilmukomputer.com/wp-content/uploads/2008/02/fandi-cek-memori-komputer-anda-dengan-memtest-pre1.zip

Tautan penting :
http://www.memtest.org

Tautan lain :
Beli memori komputer
Beli di Bhinneka

Reversing Windows Live Writer and Removing Strong Name

February 22, 2008 at 7:31 am | In RE | No Comments
Tags: , , ,

This time I tried to reverse .NET application which is Windows Live Writer Beta version. The thing that I want to remove is expiration notification of beta version. This is a proof of concept of .NET reversing and Strong Name removal. This article is intended for educational purpose only. Please post some comment for any ideas or suggestion.

Article:
Removing Windows Live Writer Expiration Notification and removing Strong Name

Tools required :
Core.NET SN Remover
ILdasm + ILasm (1.1 and 2.0)

Explorer Suite (CFF Explorer)

Reference :
CIL opcode pocket reference

Search for reference:
ECMA CIL
ILasm
ILdasm
.NET Strong Name
Free Hex Editor
Portable Executable

Frequency Alocation Table in Indonesia

February 4, 2008 at 8:44 am | In Electronics, Misc | No Comments
Tags: , ,

It has been a hard time for me to find frequency allocation in Indonesia for my thesis. After searching on the net about several hours I finally found the material I need. The frequency allocation in Indonesia was assigned by Depkominfo (currently).

 

 

These are the direct links to download frequency allocation table in Indonesia:

Kep Men No.5 tahun 2001

Other countries frequency allocation table:
US, Canada and UK Band Plan
US Frequency Allocation

Search for reference:
Frequency Allocation Table

My Favorite Compiler and Programming Language for Microcontroller

January 16, 2008 at 9:10 am | In Microcontroller | No Comments
Tags: , , ,

This is the list of my favorite compilers and its language for microcontroller programming.

AT89×51 (8051 family)

C

Assembly

Microchip PIC

C

Pascal

Assembly

Atmel AVR

C

Pascal

Assembly

Since I don’t really like BASIC, so I did not mention any BASIC compiler for microcontroller.

My favorite microcontroller is Atmel AVR. It is pretty cheap for hobbyist like me and it has massive features.

Freeware   Freeware

Best choice  Fandi’s best choice

Search for reference:

Atmel AVR
AVR C Compiler
Buy Microchip PIC
Microchip PIC C Compiler
Microchip PIC Assembler
Atmel 8051
8051 C Compiler
8051 Assembler

Cryptography in Microcontroller

January 16, 2008 at 8:21 am | In Microcontroller, Security | No Comments
Tags: , ,

One of my junior at President University, Edi Permadi finally released his works on the net about en/decryption and hashing method for PIC16F84. I personally like cryptography as well as its implementation in hardware (microcontroller or IC design). His works which already published are :

 

 

Implementing Simplified DES using PIC16F84

Direct file download :

http://edipermadi.googlepages.com/sdes-pic16f84.7z

Implementing MD5 using PIC16F84

Direct download:

 http://edipermadi.googlepages.com/md5-pic16f84.7z

Implementing Simplified DES using EEPROM

Direct download

 http://edipermadi.googlepages.com/sdes-encryption-lookup.7z

 http://edipermadi.googlepages.com/sdes-decryption-lookup.7z

Simplified DES Simulator

Direct download :

 http://edipermadi.googlepages.com/sdes-simulator.7z

To open files above you will need WinRAR or  7-ZIP (recommended)

My comment :

It is a very interesting implementation, however NIST has chosen Rijndael to replace DES. I hope in the future he will be able to implement Rijndael in microcontroller or FPGA.

MD5 is no longer secure, it has collision. SHA1 is much better.

Links :

LinuxStroom : Linux for Electrical Engineering

January 12, 2008 at 12:51 pm | In OS, Project | 6 Comments
Tags: , ,

Last year I had a project from my lecturer to create Linux which will be deployed in Electrical Engineering of President University. At the time I really need to observe the behavior of Electrical Engineering students and lecturers while using operating system. Most of them use Windows :(. So our team decided to make a convenient interface which will be easily used by students and lecturer. The first step is by creating Live CD for them so that they can try and can fully migrate to Linux which is designed for Electrical (Electronics) field. Finally after several weeks gathering packages on the net, the first pre release version was released. A sad news is that since last year I could not put it in Indonesian distro mirror site or other place for mirroring.

LinuxStroom is remastered version of Knoppix 5.1 (CD version) which contains Windows like interface and electrical engineering software.

Please let me know if you want to help me providing file hosting server for LinuxStroom.

Screenshots:

Continue reading LinuxStroom : Linux for Electrical Engineering…

Next Page »

Blog at WordPress.com. | Theme: Pool by Borja Fernandez.
Entries and comments feeds.