Your best source of information and news about windows vista, Vista hardware and secrets on the internet

July 6th, 2009

You are currently browsing the articles from MS Windows Vista Compatible Software written on July 6th, 2009.

Manual Removal of W32/AutoIt.DN Worm

Manual Removal of W32/AutoIt.DN Worm
W32/Agent.AJXM is a trojan. The trojan will infect Windows systems.
This Worm Copies its files to Windows\system32 and windows Folder as hidden files or active non-hidden files.
The worm disables the following Windows Applications:
Registry Editor
Task Manager
It also disables Folder Options.

This worm information updated on June 22, 2009.
Other names of W32/AutoIt.DN Worm:
This worm is also known as Worm/Autoit.VQV, Worm.Win32.AutoIt.dn, Worm:AutoIt/Sohanad.AQ.

Damage Level : Medium/High
Distribution Level:
Medium
Download Registry, Taskmanager and Folder Options Repair Tool
W32/AutoIt.DN Worm Manual Removal Instructions
Recommend Removal from Safe Mode:

How to Start in Safe mode:
Restart your Computer, Press F8 Repeatedly, when your Screen turns on, Select Safe mode, press enter.

The Infected Files Can be Seen in these folders and names also Running in Tasks
End the Following Active Process Before Removal
  • [ Kill the Process, Use Killbox if your Access Denied ]
Download W32/AutoIt.DN Worm Known File Removal Tool

[In Windows Vista Run As Administrator, After Execution System Will Restart]

  • %Windows\chrome.exe
  • %Windows\system32\chrome.exe
    [ No Exact Information about Files, search above related files in Program files Folder ]

    If you have any of these files in running process from task manger, end the process before removal.
    Note: if task manager is disabled, Download the following file, Click to Download - Enable Registry.reg [ Right Click - Save Target As/Linked Content As ]
    Open it with Regedit.exe [%system32\regedit.exe], then it Confirms Add to registry Yes or No, Confirm Yes, then click Ok.
W32/AutoIt.DN Worm Entries Manual Removal From Registry
Click Start, Run,Type regedit,Click OK.

Note: If the registry editor fails to open the threat may have modified the registry to prevent access to the registry editor.
  • Download this UnHookExec.inf, [ Right Click - Save Target As/Linked Content As ]
    and then continue with the removal. Save it to your Windows desktop. Do not run it at this time, download it only.
  • After booting into the Safe Mode or VGA Mode
  • Right-click the UnHookExec.inf file and click Install. [This is a small file. It does not display any notice or boxes when you run it.]
W32/AutoIt.DN Worm modifies registry at the following locations to ensure its automatic execution at every system startup:
Delete The Entries

 HKEY_USERS\S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXX-XXXX\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
HKEY_USERS\S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXX-XXXX\Software\Microsoft\Windows\CurrentVersion\Policies\System
HKEY_USERS\S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXX-XXXX\Software\Microsoft\Windows\CurrentVersion\Run
Delete file entries from right side
Search Registry For W32/AutoIt.DN Worm File Names listed above to remove completely,
Edit Menu - Find
, enter Keyword and remove all value that find in search.

Exit the Registry Editor,
Restart your Computer.

Recommended Removal Tools:
Kaspersky Antivirus or Internet Security (Shareware)
Spyware Doctor (Shareware)
AVG Antivirus (Freeware)
Killbox (Freeware)
Ultimate Links PC Tips

Written by FireFly on July 6th, 2009 with no comments.
Read more articles on W32/AutoIt.AA Trojan and chrome.exe and manual removal and removal of trojan and otherSoftware and Windows.

Quick look at Credential Manager in Windows 7

Windows 7 is more than ever integrated with the web and one of the key improvements to this experience is the prominence of Credential Manager also known as your Windows Vault. Its not new, you can currently access a similar feature in Windows Vista and XP today through the User Accounts dialog (Windows key + R > control userpasswords2 > Advanced (tab) > Manage Passwords).

Windows Vault Image

Stored User Names and Passwords in Windows XP today

One of the things I love about Windows Vault in Windows 7 is; its easy to access from within the Control Panel and it features a pleasant interface for management and storage of credentials such as user names and passwords in vaults so you can automatically log on to computers or websites.

Vault 1

Credential Manager interface

The Credential Manager explorer stores a users collection of credentials that are either Windows based, Certificate based or Generic. Credentials are saved in special folders on your computer called vaults. Windows Vault makes it surprisingly easy to backup all the critical credentials in an encrypted file so you can easily restore on another Windows 7 based system. This takes the effort out of having to write down important user names and passwords and re-entering them on a new computer. As you can see in the above screenshot, Credential Manager is well thought out with different user information stored within appropriate categories.

Adding Credential Edit Credential

Adding and Editing a Credential

 Vault 2

You can find out more about each credential by expanding the chevron which will allow you to Edit or remove it from the Vault. The Backup and Restore experience is what I particularly like about Windows Vault, a simple wizard provides easy way to secure your credentials. Backing up the logon credentials that you have requested Windows to remember. Web browser credentials are not saved. Personally, I believe a checkbox should have been added here as an option. The next step in backing up requires invoking the CTRL+ALT-DELETE keyboard command. What does this is creates a sand boxed session preventing, malicious programs or keyboard loggers from stealing your information during the backup process.

Backup Backup 2

Backing up my Usernames and Passwords

You will be asked to protect your Vault with a password that you must confirm. If you decide to restore your vault, its just as simple. Simply click the 'Restore vault' link in the Credential Manager explorer. Browse to where you stored the .crd file. Please note, I stored my vault on a partition, do not follow this procedure. You want to keep your vault data secure just in case something catastrophic were to happen to your PC. So always store on an external hard disk or thumb drive. After you have located your .crd file, select it and click open, click 'Next', you will be asked to invoke the CTRL+ALT-DELETE keyboard command, enter your password and that's it.

Restore Restore 2

Credential Manager in Windows 7 is a great example of some of the small improvements that the Windows Team has included to make experiences such as this a powerful one. Windows Vault makes it exceptionally to move personal data from computer to computer. If you are running the Windows 7 RC and have not checked out this small gem, here is your chance.

Resources

Quick Look: Windows 7 in the workplace - Joining a Domain
A Quick Look: Customizing your Windows 7 Installation
Improved Recovery Options in Windows 7
Interacting with the Windows 7 Desktop – Fun Time Savers

Windows Live Tags: Clubhouse, Story, How-to, Credential Manager, Windows Vault, Windows 7, Features, Control Panel, Item, Applet, User name, Password, Security, Backup, Logon, Online ID Provider, CardSpace

Written by Teching It Easy: Windows Vista, Live & 7 on July 6th, 2009 with no comments.
Read more articles on 7 Journal and otherSoftware.

Blade Updates

HP Onboard Administrator for c-Class Blades is at rev 2.51 (May 28 2009) HP ILO is at revision 1.7.8 (June 16th 2009) HP Power Management Controller...

[[ This is a content summary only. Visit my website for full links, other content, and more! ]]


Written by magakos on July 6th, 2009 with no comments.
Read more articles on Blade Updates and HP Blade and otherSoftware.

Windows 7 ISO Verifier, for your downloading pleasure

win7isoverifier

Just between you and me, I’ve heard that one could obtain copies of Windows 7, including builds newer than the public betas, from some not-so-sanctioned sources. Of course I would know very little about how this works, but I understand that there is a process of verifying the integrity of files to ensure files are as described and have not been tampered with, however not everyone does this.

Leading up to the inevitable leak of the Windows 7 RTM build like a bottle of champagne shaken once too many times, I wanted to make this process of verifying file hashes even simpler by making it easy and convenient to generate and compare the hashes. With the help of Sven Groot, we came up with this little applet for your Windows 7 ISO verifying pleasure.

It couldn’t be any easier to use. Simple drag and drop an .ISO file onto this EXE, or double click on it and navigate to the file, then sit back and relax whilst it crunches the numbers. Once it generates a hash, it’ll compare it with a list of known and trustworthy hashes of ISOs to tell you exactly which build version and architecture it is known to be. This list will be updated live over the web so you won’t have to redownload the app.

Download the Windows 7 ISO Verifier (EXE, 253KB)

Disclaimer: Like most entrepreneurs, I take no responsibility for the consequence of using this application. The information is provided only as a guide and cannot be used as evidence in an internet argument.

Update: As a few users have noted, this only works for English versions of Windows 7 ISOs so far.


Written by Long Zheng on July 6th, 2009 with no comments.
Read more articles on otherSoftware and blog.