Wednesday, December 20, 2006

NEWS Update - Opera 9.1 released, adds real-time phishing protection

Opera has just released the latest upgrade to their critically-acclaimed web browser, version 9.1. While a .1 upgrade is not normally an event worthy of a news post, the new version adds an interesting and important feature: real-time phishing protection for web sites.

Phishing is rapidly becoming the malware of choice for the Internet's motley gang of spamming scammers. As it relies on social engineering rather than any technical vulnerability to do its dirty work , no amount of downloading security updates or switching operating systems can protect against it.

The automatic site checking tool makes loading new sites slightly slower, as it runs the site through the database, and for this reason it is turned off by default. However, even with the feature turned off, a black question mark icon appears on the right hand side of the address bar for every site. When clicked, this question mark allows the user to check the site manually, as well as turn on automatic checking for all future sites. When a site is verified as being safe, the black question mark turns into a black lower-case "i" to indicate that the site has been identified.

Even if the user turns off the automatic fraud protection, sites that have been previously verified as being safe will still display as such. Sites flagged as unsafe get a red warning label and a popup dialog box to inform the user.

The fraud protection has also been redesigned to prevent reverse cross-site request scams, such as the ones that recently affected MySpace and caused problems for both Firefox 2 and Internet Explorer 7.

Opera 9.1 also contains some non-phishing updates, such as fixes to the Windows Media plugin player, as well as several memory leak and crash fixes. It remains the fastest web browser in many speed comparisons and has many handy features such as the ability to put browser tabs on any side of the screen.

Tuesday, December 19, 2006

The Windows XP Page File

Performance is always an issue when dealing with computers. We tend to think of major items such as processor speed, amount of installed RAM and the graphics card when talking about how fast a computer performs. It's true those components do play a large role in performance, but one item that can substantially impact overall performance that doesn't get nearly the amount of attention as the more well known components is the paging file. The paging file is very closely related to the physical RAM installed in the computer. Its purpose is to extend the amount of physical RAM and make it available to the system. Both services and installed applications can benefit from this 'extra' RAM, even though it is substantially different from the sticks that plug into the motherboard.

Not all that long ago 32 to 64 megabytes (MB) of RAM was considered a huge amount for a personal computer. Today, amounts of 128MB to 256MB are common with many machines sporting 512MB or even 1GB of RAM. It might seem that with such a huge jump in installed RAM that the paging file would be unnecessary. There must be some sort of law or correlation that I don't know about, but operating systems and applications keep finding ways to suck up all that memory so the page file remains with us. There have been a number of schemes for extending the installed amounts of RAM but basically they are all paging files. When the load imposed by applications and services running on the computer nears the amount of installed RAM it calls out for more. Since there isn't any additional RAM to be found, it looks for a substitute; in this case virtual memory which is also known as the page file.

We now have two types of memory; random access memory (RAM) and virtual memory, or the page file. The page file is created during the Windows XP installation and resides on the hard drive. Page files are measured in megabytes. The size of the page file is based on how much RAM is installed in the computer. By default, XP creates a page file which is 1.5 times the amount of installed RAM and places it on the hard drive where XP is installed. Other than plugging the RAM into the motherboard, there is little than can be done to alter its performance characteristics. The page file is a different story. Because it's located on a hard drive, it's subject to a number of factors that can hinder its performance.

Sunday, December 17, 2006

How to Remove Windows Messenger on Windows XP

What is Windows Messenger?

Windows XP and Windows 2000 both have a software program called Windows Messenger installed and loaded by default. This software allows you to send and receive messages directly from one computer to another. Advertisers have now discovered how to abuse this option to send advertisements direct to a users screen.


How do I disable Windows Messenger?
In Windows XP:
(1) Select "Start"
(2) Choose "Control Panel"
(3) Choose "Administrative Tools"** note in Windows XP Home edition, Admistrative Tools is in Performance and Maintence
(4) Choose "Services"
(5) Right-click on "Messenger"
(6) Select "Stop"To permanently disable Messenger:
(7) Right click "Messenger"
(8) Select "Properties"
(9) Change "Startup Type" to "Disabled" and click "OK"

In Windows 2000:
(1) Select "Start"
(2) Choose "Settings"
(3) Choose "Control Panel"
(4) Choose "Administrative Tools"
(5) Choose "Services"
(6) Right-click "Messenger"
(7) Select "Properties"
(8) Click "Stop" To permanently disable Messenger:
(9) Change "Startup Type" to "Disabled" and click "OK"

In Windows NT:
(1) Select "Start"
(2) Choose "Control Panel"
(3) Choose "Services"
(4) Right-click "Messenger"
(5) Select "Properties"
(6) Click "Stop" To permanently disable Messenger:
(7) Click "Startup"
(8) Change "Startup Type" to "Disabled" and click "OK"

What about Windows 95 or Windows 98 IP Messaging?
Although the technology for this type of IP Messaging is available in Win95/98, it was in the form of a program called WinPopUp. It can be installed or uninstalled from Add/Remove Programs. In Windows 95, it is found in the Accessories section, while in Windows 98 it is installed through System Tools.

Although the version in Win95/98 and the version in Win2K/XP are not compatible with each other, they do offer an interesting way to communicate between computers (as long as its not abused). For more information on how to use WinPopUp or Windows Messenger to send and receive emails, you may want to visit the World of Windows Networking article on PopUp Messages.

Saturday, December 16, 2006

How to Delete Undeleteable File

Many times when trying to remove an unwanted program, especially a piece of adware or spyware, you may run across a file that is undeletable by any normal method. When you try to remove it you'll receive the error message shown below telling you "access denied" and explaining the file may be in use. You may also receive one of the following messages.

Cannot delete file: Access is deniedThere has been a sharing violation.The source or destination file may be in use.The file is in use by another program or user.Make sure the disk is not full or write-protected and that the file is not currently in use.

So if the file is in use, how do you delete it?I'll show you several ways of removing these types of files and even some freeware programs that help you remove these pesky undeletable files.

Windows XP
In Windows XP, there are a couple ways to remove an undeleteable file, a manual way, and a couple automated ways using some freeware programs.

1. Click on Start, Search, All Files and Folders
2. Type the name of the undeletable file in the box shown
3. Make sure the Look In box shows the correct drive letter
4. Click Search and let the computer find the file
5. Once the file is located, right-click on it and choose properties, make a note of the file location. Usually this is something similar to

c:\windows\system32\undeleteablefilesname.exe

6. Close the search box
7. Click on Start, Run, and type CMD and Press Enter to open a Command Prompt window
8. Leave the Command Prompt window open, but proceed to close all other open programs
9. Click on Start, Run and type TASKMGR.EXE and press Enter to start Task Manager
10. Click on the Processes tab, click on the process named Explorer.exe and click on End Process.
11. Minimize Task Manager but leave it open
12. Go back to the Command Prompt window and change to the directory where the file is located. To do this, use the CD command. You can follow the example below.

Example: to change to the Windows\System32 directory you would enter the following command and Press Enter

cd \windows\system32

13. Now use the DEL command to delete the offending file. Type DEL where is the file you wish to delete. Example: del undeletable.exe
14. Use ALT-TAB to go back to Task Manager
15. In Task Manager, click File, New Task and enter EXPLORER.EXE to restart the Windows shell.
16. Close Task Manager

Listed below are the Programs to automatically delete a file that you may can use.

Remove on Reboot Shell Extension
This is a nice extension that loads into the right click menu. All you have to do is right-click on a file and choose "Remove on Next Reboot" and the file will be deleted the next time the computer restarts. Although it probably should only be used by more advanced computer users since it may be TOO easy to delete files using this program.

Pocket Killbox
A simple .exe file that you can use to delete undeleteable files, although the program will also delete temporary files, edit the HOSTS file, and more. A definite must have program when you are fighting an annoying spyware or adware program that won't remove.

Unlocker
Unlocker is another program that runs from the right click menu. Its simple and very effective. The website even has a side by side comparision of other programs that accomplish this task.
Using one of the three tools shown above, you should be able to remove those annoying undeleteable files once and for all.

Friday, December 15, 2006

Windows Update Problem?

Many users of Windows XP, Windows 2000 and Windows Server 2003 have had problems when trying to access the Windows Update site.
BTW, this error is not the only error message one might receive while trying to scan, download or install Hotfixes from the Windows Update site. Here is my current list of other Windows Update error codes and their respective solutions:

0x8007007E Error - Possible solutions
When you try to use Microsoft Internet Explorer to update Windows from the Microsoft Windows Update Web site you may receive the following error message:
Error 0x8007007e
To resolve this problem, follow these steps:

1. Click Start, click Run, type :
regsvr32 Inseng.dll

in the Open box, and then click OK. When you receive the RegSvr32 confirmation that the DllRegisterServer function succeeded, click OK.

2. Do the same with the following files:
regsvr32 Oleaut32.dll
regsvr32 Ole32.dll
regsvr32 Urlmon.dll
regsvr32 Mssip32.dll

3. Start Internet Explorer, and then update Windows from the Windows Update Web site (http://windowsupdate.microsoft.com).

If you still experience the problem, remove the Windows Update Setup Files folder.
1. To do so, locate the following folder:
2. Drive:\Windows Update Setup Files
3. Right-click the Windows Update Setup Files folder, click Delete, and then click Yes.
4. Install the latest version of Internet Explorer.

Windows Update Problems - Error 0x800A138F

Windows Update has encountered an error and cannot display the requested page.0x800A138F

The 0x800A138F error is actually a general error message, and many people get it when they visit Windows Update. But after the the MSBlast virus was unleashed a few months ago, Microsoft changed a few things at the main update website. This worm was expected to attack windowsupdate.com on the 16th of August 2003 by using a distributed denial of service attack (DDOS). To prevent this attack Microsoft made a few changes on the WU site. One of them was to use Akamai for additional bandwidth and this connectivity is exclusively using HTTPS (SSL) for the downloading of the update catalogue. It is since then that an escalation in the number of 0x800A138F error messages was reported.

As stated in the previous paragraph, the 0x800A138F error is in fact a general error message. To get a clearer picture of the real error message you'd need to go to the "Windows Update Log" and look for any "Errors". This gives a clearer indication as to the exact nature of the problem.

The windows update log is in the following places:
C:\Windows\Windows Update.log (XP/2003/Win98/Me)
or
C:\WINNT\Windows Update.log (Windows 2000)

Besides the changes in the WU site, many users of Windows 2000 reported similar problems in accessing the WU site. After installing to SP3, when trying to use Windows Update. Windows Update works fine scanning for updates, but when you choose to download and install them the page displays the 0x800A138F error message.

I've searched all over the Internet for solutions to these problems and came up with the following list of possible solutions. These solutions are not arranged by any specific order, although I do recommend trying each one from top to bottom till you reach the one that helped the most.

0x800A138F Error - Solution #1:
The number one reason for this error is related to your computer's date and/or time settings. If the date on your computer isn't correct, it may prevent you from connecting to secure sites. To fix the problem make sure your computer time and date are correct, and go to Windows Update and try again.
If you're on a network that has Active Directory configured you should try the following command:
w32tm /config /update /syncfromflags:DOMHIER

If will force your computer to update the time from the PDC Emulator in the domain.

Solution #2:
If that didn't work, the next solution might:
1. Delete c:\program files\windowsupdate
2. Delete the %systemroot%\system32\windowsupdate (this is a hidden directory)
3. Try windows update again.

Solution #3:
If the previous solutions didn't work for you, you might need to clear the problematic WU files from your computer. Some of these files are hidden files, please enable "Show Hidden Files and Folders" from your Folder options.

To delete Windows Update files:

1. Double click on My Computer, double click on C:\
2. Open the "WUTEMP" folder and delete the contents of the folder (If any files exist).
3. Double click the Program Files folder, then the 'Windows Update' folder. We will then need to delete all files & folders within this directory except the "V4" folder.
4. To do so, highlight the "V4" folder, then click Edit from the menu bar at top of the window and choose Invert Selection. If you cannot locate the "V4" folder, please skip this step, and then continue to delete the rest of the files by choosing Select All instead of Invert Selection.
5. Once all of the other files are highlighted, simply hit the Delete key on your keyboard to delete these files.
6. Next we need to delete all the files & folders within the V4 directory except the "iuhist.xml" file. To do so, perform the same steps as above by highlighting the "iuhist.xml" file, then clicking Edit from the menu bar at top of the window and choose Invert Selection.
7. Once these other files are highlighted, again hit the Delete key on your keyboard to delete the files.

Next delete all the contents of the WUTemp folder (if it exists, if not skip this step).

Next Unregister old control:

Go to Start > run
1.Type: regsvr32 /u C:\WINNT\System32\IUCTL.dll
2. You should get a unregistered successfully message.

Find your old site controls:
1. Go to Start > Search
2. Type "IUCTL.DLL" (Without Quotes)
3. Click on the Search button.
4. When the search result is displayed, delete delete any trace of the file IUCTL.DLL.
5. Next Search for the "IUEngine.dll" file.
6. Delete any trace of the file IUENGINE.DLL.
7. Reboot and try to access Windows Update again.

Thursday, December 14, 2006

How To Launching remote desktop from the command line in Windows XP Pro

Remote desktop allows you to configure and connect to another computer running Windows XP Pro. Here's what you need to know about the remote desktop connection dialog box, including a few parameters you're most likely to encounter.

The Windows XP remote desktop connection dialog box provides you with everything that you need to configure and connect to another computer running Windows XP Pro. You can use the Save As button on the Connection Settings panel to save all your connection settings as an RDP file. Then, you can launch and connect to a remote computer simply by double-clicking the RDP file.

You can also script a remote desktop connection, as Windows XP's remote desktop connection has an executable file that can accept command line parameters and be run from a batch file. The remote desktop connection executable file is MSTSC.EXE, and the following are some of the most common parameters

  • /v:--specifies the name of the computer to connect to.
  • /f--starts the connection in a full screen.
  • /w:<width>--specifies the width of the remote desktop screen.
  • /h:<height>--specifies the height of the remote desktop screen.

For example, to remotely connect to a computer named Gampang in a 640 x 480 remote desktop screen, you would use the following command:
  • mstsc /v: Gampang /w:640 /h:480

You can type this command line in the Run dialog box, as well as use it in a batch file.

Note: This tip applies only to Windows XP Professional.