Wapnet Blog

Archive for the ‘Windows’ Category

Best way to clean malware, rootkits, trojans and virusses (I call it malware from now on) is to backup your data, scan your data with another computer, remove your partition, reinstall Windows, install a virusscanner, update your Windows and put you data back. This is the safest method and I allways recommend this to people.

But if you don’t want to reinstall everything you can follow this steps to get a infected pc clean.

1. Go to http://support.kaspersky.com/viruses/rescuedisk/main?qid=208286083 and download the USB util and the Kaspersky Rescue Disk 10 image
2. Create a bootable USB disk with the USB util. You also can burn the ISO to a CD
3. Boot from the USB/CD
4. Make a network connection (I recommend using a network cable)
5. Update the virus definitions
6. Select all options and  do a full system scan. This can take about 1,5 hour. Maybe longer if you use a slow disk/pc
   
7. Clean all the malware
8. Exit the rescue disk and boot windows
9. Now download Kaspersky TDSSKiller @ http://support.kaspersky.com/faq/?qid=208283363
10. Install the TDSSKiller software, scan the pc and remove the rootkits. It is almost impossible to clean a rootkit with a standard virusscanner. And because of some rootkits you can’t install drivers so you can’t load an antivirus real time protection.
11. Now install a virusscanner. I recommend MS Security Essentials. This is a free antivirus software.
12. Update the antivirus (this can take 45 min the first time so please be patient) software and do a full scan.
13. Now download and install Malwarebytes Anti-Malware and do a full system scan.
14. Update your Windows true windows update (and turn automatic updates ON!), update your browser, update Java and Flash or remove it.

Now your pc is clean of almost any type of malware and ready to protect it for new malware. All steps together takes almost 6 hours of scanning. So maybe reinstall your operating system is always the best option

This steps helped me to clean a very bad infected laptop that had not any antivirus realtime protection installed. If this steps also helps you to fix a infected pc please leave a comment below or buy me a beer (see widget on the right).

By default the Roaming profile is only accessible for the owner (end-user) and the system account. I found a post on the internet with a workaround to access the profile without problems to the end user.

Using two tools, the first is SubInAcl.exe available from Microsoft (download), and the second is cacls.exe which you should already have by default in Windows.

These first two commands will give the local administrators group ownership of the user’s folder and everything underneath. NOTE: This will not change any existing permissions.

SubInAcl /subdirectories D:\Profile\User.Name /setowner=Administrators
SubInAcl /subdirectories D:\Profile\User.Name\*.* /setowner=Administrators

This second command will give the local administrators group full access to the user’s foldercacls

D:\Profile\User.Name /T /E /C /G Administrators:F

Source Article

Today I found a very nice cross platform Paint.NET program clone with the name Pinta.

Now I can edit images on every platform (OSX, Linux & Windows) and use always the same interface and hotkeys for the few times a year I need a simple paint prgram.

When you install the software under windows do not forget to install the “Gtk# for Windows“. Without the GTK the program don’t start and don’t give any error.

You can find the software here: http://pinta-project.com/

When you access the reporting services over SSL you can have the problem that the reporting services GUI under IE is very slow.

The solution is quite simple: Login with the servername or domain name. E.g: SERVERNAME\username

This problem exist under IE 8 and IE9 under Server 2008, 2008r2, Vista and Windows 7.

OSX Lion Transformation Pack @ http://www.winxsoft.com/ltp/

Custopack tools @ http://www.custopack.com/

After a clean windows 7 installation with Novicorp WintoFlash of  could not activate correctly. I’ll get error the error: 0x8007007B

The easiest way to fix this problem is re-register the Windows key with the following steps:

1. Click on the Start Button and type: CMD (into the ‘Search programs and files’ field in the Start Menu)
2. The Start Menu will show ‘CMD.exe’,
3. Right-click the CMD.exe file and select Run As Administrator.
4. In the CMD window, type: slmgr.vbs -ipk <type your product key here>
5. To activate windows after changing the key, type: slmgr.vbs -ato

You need:

• A 1GB USB stick  for Windows xp or 2GB for higher os
• A Windows OS to run the tool
• The tool Novicorp WintoFlash (tool is multilanguage)
• a Windows installation CD or extracted installation directory

Steps:

1. Extract the WintoFlash tool
2. Start the tool
3. Follow the wizard
4. 
5. Set source (Windows installation files or CD)
6. 
7. Now complete the wizard and your stick is ready for use

Now you NEVER need a stupid CD anymore for Windows installation purposes

Note: if you have some trouble with the windows activation try these steps

Requirements:
- USB Stick
- BartPE CD (or BartPE source)
- Download Bootable USB-Drive Utility @ http://www.911cd.net/forums//index.php?showtopic=21702
- Download WinUSB_FULL Patcher @ http://www.megaupload.com/?d=AEC0GAMM

Steps:
1. Extract Bootable USB-Drive
2. Open Config_SourcePath.cmd
3. REM set SourcePath=”..\BartPE”
4. set SourceCD=G: where G: the cd-rom drive is with the BartPE CD
5. Start BOOTABLE_USB-DRIVE.cmd
6. Format and create the USB drive
7. Close the utillity en extract de WinUSB_FULL Patcher
8. Run the patcher on the USB drive (root)

The patcher patch the ntdetect.com file. When you don’t run the patcher you will get a 0x0000007b BSOD when you boot from the BartPE USB.

Sometimes you need a proxy server and you don’t want to install some software. Then you can download and run Proxomitron (zip package). The only thing you must change is the IP address who can connect the proxy.

The default Windows defrag software isn’t really good. Here you can download a very nice alternative: http://www.auslogics.com/en/software/disk-defrag/download/

Screenshot: