Archive for the ‘Windows’ Category
Best way to clean malware, rootkits, trojans and virusses (I call it malware from now on) is to backup your data, scan your data with another computer, remove your partition, reinstall Windows, install a virusscanner, update your Windows and put you data back. This is the safest method and I allways recommend this to people.
But if you don’t want to reinstall everything you can follow this steps to get a infected pc clean.
- Go to http://support.kaspersky.com/viruses/rescuedisk/main?qid=208286083 and download the USB util and the Kaspersky Rescue Disk 10 image
- Create a bootable USB disk with the USB util. You also can burn the ISO to a CD
- Boot from the USB/CD
- Make a network connection (I recommend using a network cable)
- Update the virus definitions
- Select all options and do a full system scan. This can take about 1,5 hour. Maybe longer if you use a slow disk/pc
- Clean all the malware
- Exit the rescue disk and boot windows
- Now download Kaspersky TDSSKiller @ http://support.kaspersky.com/faq/?qid=208283363
- Install the TDSSKiller software, scan the pc and remove the rootkits. It is almost impossible to clean a rootkit with a standard virusscanner. And because of some rootkits you can’t install drivers so you can’t load an antivirus real time protection.
- Now install a virusscanner. I recommend MS Security Essentials. This is a free antivirus software.
- Update the antivirus (this can take 45 min the first time so please be patient) software and do a full scan.
- Now download and install Malwarebytes Anti-Malware and do a full system scan.
- Update your Windows true windows update (and turn automatic updates ON!), update your browser, update Java and Flash or remove it.
Now your pc is clean of almost any type of malware and ready to protect it for new malware. All steps together takes almost 6 hours of scanning. So maybe reinstall your operating system is always the best option
This steps helped me to clean a very bad infected laptop that had not any antivirus realtime protection installed. If this steps also helps you to fix a infected pc please leave a comment below or buy me a beer (see widget on the right).
By default the Roaming profile is only accessible for the owner (end-user) and the system account. I found a post on the internet with a workaround to access the profile without problems to the end user.
Using two tools, the first is SubInAcl.exe available from Microsoft (download), and the second is cacls.exe which you should already have by default in Windows.
These first two commands will give the local administrators group ownership of the user’s folder and everything underneath. NOTE: This will not change any existing permissions.
SubInAcl /subdirectories D:\Profile\User.Name /setowner=Administrators SubInAcl /subdirectories D:\Profile\User.Name\*.* /setowner=Administrators
This second command will give the local administrators group full access to the user’s foldercacls
D:\Profile\User.Name /T /E /C /G Administrators:F
Today I found a very nice cross platform Paint.NET program clone with the name Pinta.
Now I can edit images on every platform (OSX, Linux & Windows) and use always the same interface and hotkeys for the few times a year I need a simple paint prgram.
When you install the software under windows do not forget to install the “Gtk# for Windows“. Without the GTK the program don’t start and don’t give any error.
You can find the software here: http://pinta-project.com/
When you access the reporting services over SSL you can have the problem that the reporting services GUI under IE is very slow.
The solution is quite simple: Login with the servername or domain name. E.g: SERVERNAME\username
This problem exist under IE 8 and IE9 under Server 2008, 2008r2, Vista and Windows 7.
After a clean windows 7 installation with Novicorp WintoFlash of could not activate correctly. I’ll get error the error: 0x8007007B
The easiest way to fix this problem is re-register the Windows key with the following steps:
- Click on the Start Button and type: CMD (into the ‘Search programs and files’ field in the Start Menu)
- The Start Menu will show ‘CMD.exe’,
- Right-click the CMD.exe file and select Run As Administrator.
- In the CMD window, type: slmgr.vbs -ipk <type your product key here>
- To activate windows after changing the key, type: slmgr.vbs -ato
- A 1GB USB stick for Windows xp or 2GB for higher os
- A Windows OS to run the tool
- The tool Novicorp WintoFlash (tool is multilanguage)
- a Windows installation CD or extracted installation directory
- Extract the WintoFlash tool
- Start the tool
- Follow the wizard
- Set source (Windows installation files or CD)
- Now complete the wizard and your stick is ready for use
Now you NEVER need a stupid CD anymore for Windows installation purposes
Note: if you have some trouble with the windows activation try these steps
- USB Stick
- BartPE CD (or BartPE source)
- Download Bootable USB-Drive Utility @ http://www.911cd.net/forums//index.php?showtopic=21702
- Download WinUSB_FULL Patcher @ http://www.megaupload.com/?d=AEC0GAMM
1. Extract Bootable USB-Drive
2. Open Config_SourcePath.cmd
3. REM set SourcePath=”..\BartPE”
4. set SourceCD=G: where G: the cd-rom drive is with the BartPE CD
5. Start BOOTABLE_USB-DRIVE.cmd
6. Format and create the USB drive
7. Close the utillity en extract de WinUSB_FULL Patcher
8. Run the patcher on the USB drive (root)
The patcher patch the ntdetect.com file. When you don’t run the patcher you will get a 0x0000007b BSOD when you boot from the BartPE USB.
The default Windows defrag software isn’t really good. Here you can download a very nice alternative: http://www.auslogics.com/en/software/disk-defrag/download/