Saturday, February 21, 2009
Monday, February 9, 2009
Winlogon using 99% resources
Virus.
Run Procexp.exe to identify the process, kill it. Then without restarting the computer run combofix.exe. That it'll do it.
Run Procexp.exe to identify the process, kill it. Then without restarting the computer run combofix.exe. That it'll do it.
Thursday, January 29, 2009
Explorer.exe corrupted or infected by virus
When loading windows, after welcome screen, nothing shows up.
First of all, it is recommended to perform full scan on infected HDD, you can do it connecting the Hd to another computer then do the scanning.
1. Use a virtual disk to access the infected partition, search for any file called explorer.exe and remove all of them.
2. Restart the computer in normal mode, open task manager, go to c:\windows folder, find explorer.exe and rename it. (example: lapiz.exe)
3. Open registry, goto HKLM\software\microsoft\windowsnt\winlogon. Highlight winlogon and identify on the right pane: shell, right click modify, enter lapiz.exe (as in the example)
4. Close registry, then restart the computer.
That should do it
First of all, it is recommended to perform full scan on infected HDD, you can do it connecting the Hd to another computer then do the scanning.
1. Use a virtual disk to access the infected partition, search for any file called explorer.exe and remove all of them.
2. Restart the computer in normal mode, open task manager, go to c:\windows folder, find explorer.exe and rename it. (example: lapiz.exe)
3. Open registry, goto HKLM\software\microsoft\windowsnt\winlogon. Highlight winlogon and identify on the right pane: shell, right click modify, enter lapiz.exe (as in the example)
4. Close registry, then restart the computer.
That should do it
Thursday, January 8, 2009
Can't Install .NET Framework 2.0
- Download the .NET Framework cleanup tool and choose to cleanup the version of the .NET Framework that is causing problems on your system
- Download and install the version of the .NET Framework that you cleaned up in step 1 (such as the .NET Framework 1.0, .NET Framework 1.1 or .NET Framework 2.0)
- (optional) Download and run the .NET Framework verification tool to double-check that all .NET Framework files are correctly installed
- Download and install the desired .NET Framework service pack (such as .NET Framework 1.0 SP3 or .NET Framework 1.1 SP1) by running the setup package directly instead of using Windows Update. Running it directly will allow the service pack setup to display error dialogs instead of having Windows Update suppress them
Error: "QuickBooks has a problem in reading this registration file: qbregistration.dat" after installing an update to Symantec Norton 360
What is happening
When starting QuickBooks, the "Loading QuickBooks..." screen appears temporarily, and then the following error message appears:
QuickBooks has a problem in reading this registration file. You need to ask your system administrator to REMOVE this file and re-install QuickBooks
C:\Documents and Settings\All Users\Application Data\Common Files\Intuit\QuickBooks\QBRegistration.dat
Why is this happeningThis error usually occurs if there has been damage to the MSXML component of Windows.
Note: This has been known to occur after installing an update to Symantec's Norton 360 security software suite.
https://support.quickbooks.intuit.com/support/Pages/KnowledgeBaseArticle/1009799
This error may also occur even if Norton 360 is not installed on the computer.
In the Open field, type msiexec.exe /fvaum D:\Qbooks\msxml.msi (replace D with the letter assigned to your CD drive) and click OK
Tuesday, October 28, 2008
Thursday, October 16, 2008
ERROR: Unable to create Cab Installer Object (when updating Total Protection for Small Business
Step 1 - Obtain the values stored in szDownloadServer and szXMLDataServer to use in Step 2:
- Click Start, Run, type: regedit and click OK.
- Navigate to the following location:
[HKLM\Software\McAfee\Managed Services\Agent] - Locate the keys szDownloadServer and szXMLDataServer.
NOTE: The Domain name specified is being used for regional Network Centre (NOC).
Example
Key values for Germany would be:
- szDownloadServer: http://vs.mcafeeasap.com/MC/DEU/VS40
- szXMLDataServer: http://vs.mcafeeasap.com
Step 2 - Check the correct Network Centre Domain is also listed in the SecureObjectSites section
The aim in this step is to verify the following locations are both specified:
- https://vs.mcafeeasap.com (Secure Socket layer (SSL) reference)
- Navigate to the following location:
[HKEY_LOCAL_MACHINE\Software\McAfee\ManagedServices\SecureObjectSites]
Example registry key:
"http://mcafeeasap.com"=dword:00000000
"https://mcafeeasap.com"=dword:00000000
"https://mycio.com"=dword:00000000
"http://mycio.com"=dword:00000000
"https://nai.com"=dword:00000000
"http://nai.com"=dword:00000000
"https://mcafee.com"=dword:00000000
"http://mcafee.com"=dword:00000000
"file://dontcare"=dword:00000000
"myui://dontcare"=dword:00000000
"myrm://dontcare"=dword:00000000
NOTE: In this example both keys values are populated but with this issue the keys will be missing. - While in the SecureObjectSites section, in the right pane right-click and select New then DWORD Value.
- For the DWORD, enter the http Domain name extracted from the SzDownloadServer entry in Step 1.
Example: http://mcafeeasap.com
NOTE: Ensure to remove the vs from the Domain name obtained in Step 1 (http://vs.mcafeeasap.com) - Remaining in the SecureObjectSites section, in the right pane again, right-click and select New then DWORD Value.
- For the DWORD, enter the https Domain name extracted from the SzDownloadServer entry in Step 1.
Example: https://mcafeeasap.com
NOTE: Ensure to remove the vs from the Domain name obtained in Step 1 (https://vs.mcafeeasap.com)
Subscribe to:
Posts (Atom)