Your best source of information and news about secrets, BIOS and vista on the internet

May 8th, 2009

You are currently browsing the articles from MS Windows Vista Compatible Software written on May 8th, 2009.

Virtualization - Microsoft or VMware?

This video compares Microsoft Virtualization to VMware and outlines the additional costs... Microsoft Virtualization If you enjoyed this post...

[[ This is a content summary only. Visit my website for full links, other content, and more! ]]


Written by magakos on May 8th, 2009 with no comments.
Read more articles on Microsoft Virtualization and Hyper-V and otherSoftware and vmware.

ActiveWin.com is now on Twitter

Popular Windows Community ActiveWin.com where I write reviews and post news articles is now on popular Micro-blogging site Twitter, you can find us by going to http://twitter.com/ActiveWin. So be sure to follow us!

Technorati tags: , , , ,

Written by Andre's space on May 8th, 2009 with no comments.
Read more articles on Computers and Internet and otherSoftware.

Manual Removal of W32/MarketScore.F Trojan

Manual Removal of W32/MarketScore.F Trojan
W32/MarketScore.F is a trojan. The trojan will infect Windows systems.
This trojan Copies its files to Windows, Windows\System Folder as hidden files.
This trojan information updated on May 4, 2009.
Other names of W32/MarketScore.F Trojan:
This trojan is also known as Spyware.Marketscore, Trojan.Win32.Malware.1, Trojan.MulDrop.4313.
Damage Level : Medium/High
Distribution Level:
Medium
W32/MarketScore.F Trojan Manual Removal Instructions
Recommend Removal from Safe Mode:

How to Start in Safe mode:
Restart your Computer, Press F8 Repeatedly, when your Screen turns on, Select Safe mode, press enter.
The Infected Files Can be Seen in these folders and names also Running in Tasks
End the Following Active Process Before Removal
  • [ Kill the Process, Use Killbox if your Access Denied ]
Download W32/MarketScore.F Trojan Known File Removal Tool

[In Windows Vista Run As Administrator, After Execution System Will Restart]

  • %Windows\invite1.exe
  • %Windows\runos.exe
  • %Windows\uninstall.exe
  • %Windows\System\dp.exe [ More info on Prevx.com ]
  • %Windows\System\j3ewro.exe
    [ No Exact Information about Files, search above related files in Program files Folder ]
    If you have any of these files in running process from task manger, end the process before removal.
    Note: if task manager is disabled, Download the following file, Click to Download - Enable Registry.reg [ Right Click - Save Target As/Linked Content As ]
    Open it with Regedit.exe [%system32\regedit.exe], then it Confirms Add to registry Yes or No, Confirm Yes, then click Ok.
W32/MarketScore.F Trojan Entries Manual Removal From Registry
Click Start, Run,Type regedit,Click OK.

Note: If the registry editor fails to open the threat may have modified the registry to prevent access to the registry editor.
  • Download this UnHookExec.inf, [ Right Click - Save Target As/Linked Content As ]
    and then continue with the removal. Save it to your Windows desktop. Do not run it at this time, download it only.
  • After booting into the Safe Mode or VGA Mode
  • Right-click the UnHookExec.inf file and click Install. [This is a small file. It does not display any notice or boxes when you run it.]
W32/MarketScore.F Trojan modifies registry at the following locations to ensure its automatic execution at every system startup:
Delete The Entries
HKEY_USERS\S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXX-XXXX\SOFTWARE\Microsoft\Windows\ShellNoRoam
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
Delete :
jvsoft C:\WINDOWS\system32\j3ewro.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
Delete : Hidden value:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
Delete : ShowSuperHidden value:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
Delete : NoDriveTypeAutoRun [REG_DWORD, value: 00000091]

Delete file entries from right side

Search Registry For W32/MarketScore.F Trojan File Names listed above to remove completely,
Edit Menu - Find
, enter Keyword and remove all value that find in search.

Exit the Registry Editor,
Restart your Computer.

Recommended Removal Tools:
Kaspersky Antivirus or Internet Security (Shareware)
Spyware Doctor (Shareware)
AVG Antivirus (Freeware)
Killbox (Freeware)
Ultimate Links PC Tips

Written by FireFly on May 8th, 2009 with no comments.
Read more articles on dp.exe and W32/MarketScore.F and manual removal and removal of trojan and otherSoftware and Windows.

Test Updates Coming for the Windows 7 RC May 12

Get ready for a series of test updates the Windows Team is planning to release to test the Windows Update functionality in the Windows 7 Release Candidate. Brandon Leblanc provides the details:

Starting this Tuesday (May 12th) we will release up to ten test updates to PCs running the Windows 7 RC in order to verify our ability to deliver and manage updating of Windows 7 in certain real-life scenarios. These updates do not deliver any new features or fixes. This is the second set of test updates we’ve released to test the updating mechanism for Windows 7 - the first set were released on February 24. For more information, see this post on the Microsoft Update Blog.

Windows 7 Blog

Windows Live Tags: clubhouse, story, Announcement, Windows Update, Test Updates, Microsoft Update, Windows 7 RC

Written by Andre's space on May 8th, 2009 with no comments.
Read more articles on otherSoftware and windows 7.

Test Updates Coming for the Windows 7 RC

Starting this Tuesday (May 12th) we will release up to ten test updates to PCs running the Windows 7 RC in order to verify our ability to deliver and manage updating of Windows 7 in certain real-life scenarios. These updates do not deliver any new features or fixes. This is the second set of test updates we’ve released to test the updating mechanism for Windows 7 - the first set were released on February 24. For more information, see this post on the Microsoft Update Blog.

Digg This

Written by Brandon LeBlanc on May 8th, 2009 with no comments.
Read more articles on Test Updates and Windows 7 RC and otherSoftware and microsoft update and Windows Update and Announcement.

Windows 7 Libraries Helpers

After two weeks break, we are back to our normal technical posts, covering Windows 7 Libraries. This is the sixth post about Windows 7 Libraries. By now, you should be familiar with Windows 7 Libraries (Understanding Windows 7 Libraries) and understand the internal structure of Libraries and how they integrate into the Windows Shell (Libraries Under The Hood). You know the different programming models that are available to choose from (Light Up with Windows 7 Libraries), and you know how to use Windows Shell APIs to consume the contents of a library (Consuming the Contents of Windows 7 Libraries). In this post, we focus on the Windows 7 Libraries helper functions.

The IShellLibrary COM object presents a Windows 7 Library. This interface defines methods for creating and managing Libraries. You can work directly with the COM interface, but it's easier to use a higher abstraction layer of functions. Shobjidl.h provides the following library helper functions:

  • SHAddFolderPathToLibrary - Adds a folder to a library
  • SHCreateLibrary - Creates an IShellLibrary object
  • SHLoadLibraryFromItem - Creates and loads an IShellLibrary object from a specified library definition file
  • SHLoadLibraryFromKnownFolder - Creates and loads an IShellLibrary object for a specified KNOWNFOLDERID
  • SHLoadLibraryFromParsingName - Creates and loads an IShellLibrary object for a specified path
  • SHRemoveFolderPathFromLibrary - Removes a folder from a library
  • SHResolveFolderPathInLibrary - Attempts to resolve the target location of a library folder that has been moved or renamed
  • SHSaveLibraryInFolderPath - Saves an IShellLibrary object to disk

Note: if you are really interested in how these helper functions are implemented, simply go to the Shobjidl.h h file and search for these functions.

Using these help functions, you can perform most of the management operations on a Library without using the lower level APIs. For example, you can add a folder to a Library using SHAddFolderPathToLibrary without calling ISHellLibrary::Commit(). Since the IShellLibrary is a COM-based API, you will need to CoInitialize the COM objects. After doing so, all you need to do is use the helper functions. The following code snippet creates a new Library, adds a folder to it, and saves the Library definition file in the Libraries folder.

IShellLibrary *pLib; 
IShellItem *pSi;
SHCreateLibrary(IID_PPV_ARGS(&pLib));
SHAddFolderPathToLibrary( pLib, L"C:\\temp ");
pLib ->SaveInKnownFolder(
FOLDERID_Libraries,
L"Test 1 Lib",
LSF_MAKEUNIQUENAME,
& pSi);
 
The helper functions don’t provide all the functionality in the IShellLibrary interface. By working directly with the IShellLibrary interface, you can get or set the Library icon using the GetIcon, and SetIcon. But more importantly, you can get the contents of a library by using the IShellLibrary:: GetFolders() as shown in the next code snippet

IShellLibrary *pslLibrary;
SHLoadLibraryFromKnownFolder(
FOLDERID_PicturesLibrary,
STGM_READ,
IID_PPV_ARGS(&pslLibrary));

IShellItemArray *psiaFolders;
pslLibrary->GetFolders(
LFF_FORCEFILESYSTEM,
IID_PPV_ARGS(&psiaFolders));
 
In the next post we will walk through some techniques of staying in sync with the library contents.

Written by Yochay Kiriaty on May 8th, 2009 with no comments.
Read more articles on otherSoftware.

« Older articles

No newer articles