It’s been a while since I’ve been rambling about what I’ve been doing. I think I should do this kind of writing since it’s my own blog and I can do whatever I want with it. Of course I shouldn’t disclose anything that might jeopardize my career but as long as I don’t hurt anyone literally, it should be fun. Recently, my brother gave me his used 512MB laptop RAM since he got himself a bigger RAM. My previous laptop RAM was 768MB, one slot was used for a 512MB RAM and the other was 256MB of RAM. So all I needed to do is replace the smaller 256MB RAM with the 512MB RAM and I can now enjoy 1GB of RAM.

I was told that the new RAM had a slightly higher speed than my older one. I didn’t care about that much as long as I can do all my work on the laptop. Then again, it doesn’t hurt to get to know more about your own hardware and get fascinated by it, eventhough it is now considered old. I then used a freeware application that can track my hardware detail without me having to dig around dismantling all my hardware stuff. It’s called CPUID. Here’s how I know what my RAM type and the speed difference of both RAM I have:

My Old 512MB RAM

My New 512MB RAM

If you noticed, the software detects what kind of RAM you are using, what speed does it have, the manufacturer, the serial number and when the hardware was being manufactured. Not only that, it detects other stuff as well such as the mainboard, the chipset and the most important part of a computer, the CPU:

My Laptop’s CPU Details

I guess having a basic Celeron CPU laptop is not too bad after all.

Check out for information using this awesome freeware application.

In this post, I’m not going to insert any pictures or images. It has been a while since this problem occured. I’ve tried a number of those free anti-viruses (I’m stingy okay..hehe) and none of them work. I tried using a Ravmon Removal Tool (right click and save as here to download) but it didn’t cure my problem. I haven’t try the new version called the Smart Anti Virus 1.0 but I’m going to check it out soon.

Anyway, one of my colleague here at my office circulated an e-mail on how to remove RavMonLog virus. I’ve tried it myself, and it works:

THREAT NAME
Worm.RJump.A

CLEAN INSTRUCTIONS

1. Right click on an empty space from the taskbar (or right click on the clock from the right corner) and select Task Manager.
   – Select the Processes tab, locate ravmon.exe, right click on it and select End Process
   – Delete the following file: C:\Windows\ravmon.exe
2. To clean the removable storage device (USB stick, PEN drive etc.) right-click on your USB stick / PEN drive icon and select Explore.NB: Be careful NOT to double-click the icon because the malware will be reactivated.
   – Locate and delete the autorun.inf and ravmon.exe files
3. Click on Start, Run, type regedit and click on OK.

NB: Before you edit the registry, please export the keys that you plan to edit, or create a backup of the system before you proceed.

1. Navigate to HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
2. Delete the "RavAV" = "C:\windows\ravmon.exe"

SYMPTOMS

1. Presence of the autorun.inf and ravmon.exe files in the root of the storage device.
2. Presence of a copy of the ravmon.exe file in the windows system folder.
3. Presence of the RavMonLog file that contains the port number for the backdoor component.

DESCRIPTION

1. Worm.RJump.A spreads by creating a copy on removable storage devices or mapped drives.
2. It drops the following malicious files:
   • autorun.inf
   • ravmon.exe
3. Also it drops a clean msvcr71.dll file that is a part of Microsoft Visual Studio.
4. It opens a port for the backdoor component.

I believe that every one of us are promoters. If we feel good about the stuff that we use, we will always tell it to someone else whether directly or indirectly. Today I’m going to write about a new high tech tool that I’ve been using for the past 2 months. Being introduced to Remote Desktop Connection (RDC) during one of my visit to a Microsoft road show, it has truly changed the way I’ve been looking at computers. If you are using Windows XP like me, the application is already built inside START > All Programs > Accessories > Communications:

If you have never used RDC before, you need to find another PC for you to connect and try out. However, it is best if you are familiar with IP Address and networking configuration before you use this facility. This application when in use and connected, acts like your normal Windows but you are actually controlling another computer remotely. If you want a free web-based application that is easy to use, one more tool that I use is a web service called LogMeIn:

If you look at the screenshot above, that is my remote computer or specifically known as a Virtual Private Server (VPS) located half way across the globe in Pennsylvania, US. I pay USD19 per month to use this VPS which is always online 24/7. If you do the math, I save a lot by leasing this VPS instead of owning one simply because:

1. I don’t have to buy those expensive PC/Server stuff that will cost me thousands of dollars
2. The VPS is always online 24/7 and I don’t have to worry about high electricity bill because the extensive need of cooling system the computers/servers need to have
3. The download connection in the US is superb. At 1GB per second network connection, it is hundred times faster than my normal internet connection. Of course, getting that file to my PC requires FTP that is limited by my internet connection
4. I can use a unique static IP address for my website or web apps for a fraction of a price rather than leasing one from my local ISP

My only problem for using this VPS is it can be sometime slow just to access and because of the low price, I only get 256MB of RAM which is rather limited. Occasionally, I need to restart my VPS at least once a week to free up the RAM or the VPS will crashed. Well as usual, you get what you pay for right?

If you are interested to use a cheap VPS for your Windows remote development or even Linux powered one, check out SWVPS. I’ll write more of how and what I have use my VPS for in my next following post to come.

I just love the concept of virtualization. It’s like doing something dangerous but in a contained and controlled environment where it is basically safe. Before this, I’ve seen how a big corporate IT department utilizes VM Ware for their server virtualization, tried Virtual PC on my own computer and the latest, Virtual Private Server. If you’ve seen movies such as The Matrix or the 13th Floor or you’ve played Second Life, you might understand the concept of it. If might provoke some radical idea of how you live your life but I think it is natural of a human being to fantasize about something that they don’t have.

I found this free application a couple of weeks ago. It’s called SafeSpace. So, how does this virtual application works? Well, a picture describes a thousand words:

If you can’t understand the figure above, let me just brief you a little bit. See that red box surrounding the registry, file system and application. SafeSpace actually creates some kind of layer on top of what your windows system have. Basically it’s like a protective layer that protects you from getting something harmful. If that layer gets an infection, you just tossed away that layer and you’ll have a new one. Sounds like a condom to me. Anyway, based on my experience, my Internet Explorer version 6 has been hijacked by numerous toolbars that suddenly appears out of nowhere. There was one time, my Internet Explorer 6 just went unusable because it got corrupted by these malware stuff. In fact, even before I installed SafeSpace on my system, there was a pop up box that keeps on appearing whenever I launch IE6. I tried cleaning up my registry and boot up applications but it was still showing up. Luckily, after I’ve installed SafeSpace, that pop up kind of dissapear. My problem was solved.

There is however one issue that was quite significant. The installation of SafeSpace caused my boot up to become longer. I had to wait almost 5 minutes before I can launch any other of my other application. Then there is this annoying coloured box surrounding the application which I don’t like. Since I’m using Firefox for my browser and normally Firefox doesn’t get hijack like IE6, I removed Firefox from the default setting of SafeSpace where it includes every Instant Messenger and browser that you have. From what I heard, this application is still buggy so it’s not really recommended if you are the kind of person who just use a computer for basic need. Oh, there is one more issue concerning SafeSpace. When I tried to insert attachments in my e-mails, the files just went corrupted. Most probably because of the layer filtering the files you are trying to put in.

The plus point of SafeSpace is that it prevents your internet browser from being hijacked and most of all it’s FREE (for personal use of course). Some screenshots of SafeSpace in use:

Visit SafeSpace from Artificial Dynamics for more information.