Your best source of information and news about BIOS, secrets and drivers on the internet

July 27th, 2009

You are currently browsing the articles from MS Windows Vista Compatible Software written on July 27th, 2009.

Manual Removal of W32/AutoRun.QMI Worm

Manual Removal of W32/AutoRun.QMI Worm
W32/AutoRun.QMI is a worm. The worm will infect Windows system.
This Worm Copies its files to windows\system32 and Temp folder and windows root folder as hidden files or active non-hidden files.
This worm information updated on July 7, 2009.
Other names of W32/AutoRun.QMI Worm:
This worm is also known as Win32.AutoRun.qmi, Worm.Win32.AutoRun.qmi, Worm.Autorun.BSQ.

Damage Level : Medium/High
Distribution Level:
Medium
Download Registry, Taskmanager and Folder Options Repair Tool
W32/AutoRun.QMI Worm Manual Removal Instructions
Recommend Removal from Safe Mode:

How to Start in Safe mode:
Restart your Computer, Press F8 Repeatedly, when your Screen turns on, Select Safe mode, press enter.

The Infected Files Can be Seen in these folders and names also Running in Tasks
End the Following Active Process Before Removal
  • [ Kill the Process, Use Killbox if your Access Denied ]
Download W32/AutoRun.QMI Worm Known File Removal Tool

[In Windows Vista Run As Administrator, After Execution System Will Restart]

  • %Windows\System32\ckvo.exe
  • %Windows\System32\dllcache\cdaudio.sys
  • %Windows\System32\ckvo0.dll
  • %Documents and Settings\Default User\Local Settings\Temp\olhrwef.exe
  • %Documents and Settings\Default User\Local Settings\Temp\nmdfgds0.dll
  • %Root of Windows Installed Drive\86l2qw.bat
  • %Root of Windows Installed Drive\08dgu.com
    [ No Exact Information about Files, search above related files in Program files Folder ]
    If you have any of these files in running process from task manger, end the process before removal.
    Note: if task manager is disabled, Download the following file, Click to Download - Enable Registry.reg [ Right Click - Save Target As/Linked Content As ]
    Open it with Regedit.exe [%system32\regedit.exe], then it Confirms Add to registry Yes or No, Confirm Yes, then click Ok.
W32/AutoRun.QMI Worm Entries Manual Removal From Registry
Click Start, Run,Type regedit,Click OK.

Note: If the registry editor fails to open the threat may have modified the registry to prevent access to the registry editor.
  • Download this UnHookExec.inf, [ Right Click - Save Target As/Linked Content As ]
    and then continue with the removal. Save it to your Windows desktop. Do not run it at this time, download it only.
  • After booting into the Safe Mode or VGA Mode
  • Right-click the UnHookExec.inf file and click Install. [This is a small file. It does not display any notice or boxes when you run it.]
  • Or Download Regfile to enable Registry editor
  • Download Registry Enabler [ Right click - Save Target As ]
  • Open it with Registry editor
W32/AutoRun.QMI Worm modifies registry at the following locations to ensure its automatic execution at every system startup:
Delete The Entries

HKEY_USERS\S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXX-XXXX\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
Delete file entries from right side
Search Registry For W32/AutoRun.QMI Worm File Names listed above to remove completely,
Edit Menu - Find
, enter Keyword and remove all value that find in search.

Exit the Registry Editor,
Restart your Computer.

Recommended Removal Tools:
Kaspersky Antivirus or Internet Security (Shareware)
Spyware Doctor (Shareware)
AVG Antivirus (Freeware)
Killbox (Freeware)
Ultimate Links PC Tips

Written by FireFly on July 27th, 2009 with no comments.
Read more articles on Autorun and W32/AutoRun.QMI and worm removal and manual removal and otherSoftware and Windows.

How to use VMConnect and get access directly to your VMs

VMConnect, which is the name of the application that you use to connect to the console session of a Hyper-V Virtual Machine, has few command line...

[[ This is a content summary only. Visit my website for full links, other content, and more! ]]


Written by magakos on July 27th, 2009 with no comments.
Read more articles on VMConnect and Hyper-V and vm and otherSoftware.

Say Goodbye to Reboots with Ksplice

Tired of rebooting for kernel updates?
Good news—now you don’t have to, thanks to Ksplice Uptrack.

Everyone hates rebooting for updates. When system administrators reboot their servers, they have to manage an inconvenient outage window—quite possibly during the middle of the night—and they have to deal with the lost productivity and annoyed users that result from the disruption. Similarly, rebooting your desktop means losing all of your valuable state—your favorite editor with the 35 open files you were working on, your 14 terminals, and, of course, your paused game of Frozen Bubble. But the alternative—not installing updates right away— is even more unpleasant. If your parents were anything like mine, they insisted that you do two things: eat your vegetables and install your software updates. Why? Well, first, vegetables provide your body with much-needed nutrients.

Second, most exploits take advantage of well-known software vulnerabilities—vulnerabilities that do not exist on patched systems. So staying up to date goes a long way in keeping your systems secure and reliable. So is this it? Will we forever be forced to choose between security and availability? Fortunately, the answer is no. Ksplice, a startup company founded by MIT alumni, has developed technology that can install software updates, without requiring a reboot. Using this technology, they are offering Ksplice Uptrack, a service that keeps your Linux systems up to date and secure without any hassle. Additionally, experienced kernel developers also can use the Ksplice tools to create their own rebootless updates.


Getting Started with Ksplice Uptrack
You can start using Ksplice Uptrack without any advance preparation. Follow the directions on the Ksplice Uptrack Web site, which allows you to install the software using your package manager. Once you’ve done this, a K icon appears in your notification area. When you see the K, you know that you have the latest security fixes for your Linux kernel. When new updates are available, a warning sign appears over the K.

When this happens, click on the K to view a list of the available updates. Install the updates by clicking the green Install all updates button. The listed updates will be installed on your running system in seconds, as your applications continue to run without interruption.

Like any good Linux tool, Ksplice Uptrack also can be controlled from the command line, with four simple commands. Each update has an ID associated with it, which you use to name it. You can install or remove individual updates, just like with any package manager. Here are the Ksplice Uptrack Commands:

- uptrack-upgrade: downloads and installs the latest kernel updates available for your system.

- uptrack-install id: installs the update named id.

- uptrack-remove id: removes the update named id.

- uptrack-show id: shows more detail about the update named id.

What about when you actually do reboot? Well, you can boot in to your brand-new kernel that you’ve installed the traditional way, using your package manager. Everything will continue to work nicely, and when Ksplice Uptrack detects new updates for this kernel, it will notify you, just like before.

Alternatively, you can reboot into your old kernel. In this case, Ksplice Uptrack will re apply the rebootless updates early in the boot process. This approach may be more desirable for some system administrators, because it ensures that the machine is in the exact same configuration both before and after the reboot.

Source of Information : Linux Journal Issue 184 August 2009

Written by magakos on July 27th, 2009 with no comments.
Read more articles on otherSoftware and Linux.

Native live font previews in Windows 7

changefontwin7

Image credit Windows 95 “Choose Font” dialog: GUIdebookgallery.org

I’m not sure how many people have noticed this before today, but I think someone at Microsoft deserves some recognition and geek credit for updating the “Choose Font” dialog window for the first time since Windows 95 almost 15 years ago. In Windows 7, this system dialog now presents live previews of the fonts using the actual typeface, similar to what Microsoft Office has done for sometime now.

Although I admit this isn’t a very commonly used user interface item – I’m even surprised I noticed it at all whilst changing the color of my text in Windows Live Messenger, I think it’s pretty cool someone put in the effort to modernize this feature when there was not much incentives to do so – one of many contributing factors to why there are so many UI quirks in Windows. A trend I hope continues for future Windows releases to come.

Speaking of fonts, the typography group at Microsoft also launched this neat mini-site dedicated to fonts in Windows 7. Most notably they point out there are over 40 new fonts in Windows 7 many of which are dedicated to non-English languages. Particular, two new fonts which I think deserve more attention are “Segoe UI Light” and “Segoe UI Semibold” which are excellent variants of Segoe UI.


Written by Long Zheng on July 27th, 2009 with no comments.
Read more articles on otherSoftware and blog.