August 25th, 2009

You are currently browsing the articles from MS Windows Vista Compatible Software written on August 25th, 2009.

Manual Removal of W32/FlyStudio.BF Worm

Manual Removal of W32/Flystudio.BF Worm
W32/FlyStudio.BF is a worm. The worm will infect Windows system.

This Trojan Copies its files to Windows\system32 and temp folder as hidden files or active non-hidden files.
This worm information updated on July 29, 2009.
Other names of W32/FlyStudio.BF Worm:
This worm is also known as Win32/AutoRun.FlyStudio.AG, Worm:Win32/Regul.A, W32/Lineage.BWDR

Damage Level : Medium/High
Distribution Level: Medium
Download Registry, Taskmanager and Folder Options Repair Tool
W32/FlyStudio.BF Worm Manual Removal Instructions
Recommend Removal from Safe Mode:
How to Start in Safe mode:
Restart your Computer, Press F8 Repeatedly, when your Screen turns on, Select Safe mode, press enter.

The Infected Files Can be Seen in these folders and names also Running in Tasks
End the Following Active Process Before Removal

[ Kill the Process, Use Killbox if your Access Denied ]

Download W32/FlyStudio.BF Worm Known File Removal Tool

[In Windows Vista Run As Administrator, After Execution System Will Restart]

%Windows\System32\XP-C9A0D416.EXE
%Windows\System32\ul.dll
%Windows\System32\com.run
%Documents and Settings\Default User\Local Settings\Temp\shell.fne
%Documents and Settings\Default User\Local Settings\Temp\com.run
[ No Exact Information about Files, search above related files in Program files Folder ]
If you have any of these files in running process from task manger, end the process before removal.
Note: if task manager is disabled, Download the following file, Click to Download - Enable Registry.reg [ Right Click - Save Target As/Linked Content As ]
Open it with Regedit.exe [%system32\regedit.exe], then it Confirms Add to registry Yes or No, Confirm Yes, then click Ok.

W32/FlyStudio.BF Worm Entries Manual Removal From Registry

Click Start, Run,Type regedit,Click OK.

Note: If the registry editor fails to open the threat may have modified the registry to prevent access to the registry editor.

Download this UnHookExec.inf, [ Right Click - Save Target As/Linked Content As ]
and then continue with the removal. Save it to your Windows desktop. Do not run it at this time, download it only.
After booting into the Safe Mode or VGA Mode
Right-click the UnHookExec.inf file and click Install. [This is a small file. It does not display any notice or boxes when you run it.]
Or Download Regfile to enable Registry editor
Download Registry Enabler [ Right click - Save Target As ]
Open it with Registry editor

W32/FlyStudio.BF Worm modifies registry at the following locations to ensure its automatic execution at every system Startup:
Delete The Entries

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Delete file entries from right side

Search Registry For W32/FlyStudio.BF Worm File Names listed above to remove completely,
Edit Menu - Find, enter Keyword and remove all value that find in search.

Exit the Registry Editor,

Restart your Computer.

Recommended Removal Tools:

Kaspersky Antivirus or Internet Security (Shareware)
Spyware Doctor (Shareware)
AVG Antivirus (Freeware)

Killbox (Freeware)

Ultimate Links PC Tips™

Written by FireFly on August 25th, 2009 with no comments.
Read more articles on W32/FlyStudio.BF and XP-C9A0D416.EXE and worm removal and manual removal and otherSoftware.

Remove Windows Protection Suite - WindowsProtectionSuite Removal Information

Windows Protection Suite is successor of such infamous rogues as Windows System Suite, Windows Security Suite, MalwareCatcher, Extra Antivirus, Ultra Antivir 2009, Virusdoctor, VirusAlarm. At first sight Windows Protection Suite look like legitimate antispyware application with useful features, low CPU load, fast updates and others. But in reality Windows Protection Suite is another representative of bogus security applications with one purpose – to steal money from simple-hearted computer users. Windows Protection Suite is promoted via misleading online scanners and Trojan horses. Once Windows Protection Suite gets in touch with your system it will be configured to start automatically every boot up. While running, parasite will flood your system with fake security alerts appearing from your Windows Taskbar. Moreover, Windows Protection Suite will constantly perform full system scans and list you exaggerated scan results in order to mislead you and push into purchasing this useless piece of software. We recommend you to remove Windows Protection Suite manually or using automatic removal tool.

Type: Rogue Anti-Spyware
Malware Author: Unknown
Threat Level: Critical
Screenshot:

Windows Protection Suite Automatical Removal Tool

How to remove Windows Protection Suite manually:

It's possible to remove Windows Protection Suite manually, but you have to be very experienced in dealing with registry entries, program files and .dll files.

The files to be deleted:

c:\ADWARE_LOG
c:\Documents and Settings\All Users\Application Data\345d567
c:\Documents and Settings\All Users\Application Data\345d567\285.mof
c:\Documents and Settings\All Users\Application Data\345d567\mozcrt19.dll
c:\Documents and Settings\All Users\Application Data\345d567\sqlite3.dll
c:\Documents and Settings\All Users\Application Data\345d567\WI345d.exe
c:\Documents and Settings\All Users\Application Data\345d567\WINPS.ico
c:\Documents and Settings\All Users\Application Data\345d567\working.log
c:\Documents and Settings\All Users\Application Data\345d567\WINSPSys
c:\Documents and Settings\All Users\Application Data\345d567\WINSPSys\vd952342.bd
c:\Documents and Settings\All Users\Application Data\WINSPSys
c:\Documents and Settings\All Users\Application Data\WINSPSys\winps.cfg
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Protection Suite.lnk
%UserProfile%\Application Data\Windows Protection Suite
%UserProfile%\Application Data\Windows Protection Suite\cookies.sqlite
%UserProfile%\Application Data\Windows Protection Suite\Instructions.ini
%UserProfile%\Desktop\Windows Protection Suite.lnk
%UserProfile%\Recent\cb.sys
%UserProfile%\Recent\cid.dll
%UserProfile%\Recent\cid.tmp
%UserProfile%\Recent\CLSV.dll
%UserProfile%\Recent\CLSV.tmp
%UserProfile%\Recent\DBOLE.sys
%UserProfile%\Recent\ddv.dll
%UserProfile%\Recent\eb.sys
%UserProfile%\Recent\eb.tmp
%UserProfile%\Recent\energy.drv
%UserProfile%\Recent\energy.sys
%UserProfile%\Recent\exec.tmp
%UserProfile%\Recent\kernel32.drv
%UserProfile%\Recent\PE.drv
%UserProfile%\Recent\PE.tmp
%UserProfile%\Recent\ppal.exe
%UserProfile%\Recent\runddlkey.drv
%UserProfile%\Recent\snl2w.sys
%UserProfile%\Recent\tempdoc.dll
%UserProfile%\Start Menu\Windows Protection Suite.lnk
%UserProfile%\Start Menu\Programs\Windows Protection Suite.lnk
c:\Program Files\Mozilla Firefox\searchplugins\search.xml

Remove registry entries:

HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\WI345d.DocHostUIHandler
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://search-gala.com/?&uid=7&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "9877034603"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Windows Protection Suite"

Please be careful because manual removal of Windows Protection Suite may seriously damage operational system and sensitive data. Also there is a big possibility of incomplete removal, because some files could be hidden and program could re-install itself after you delete files and registry entries. So we strongly recommend you to use automatical removal tool.

Written by admin on August 25th, 2009 with no comments.
Read more articles on rogue antispyware and AntiSpyware and fake warnings and removal tool and commander and spyware and Adware and Privacy and antivirus and malware and otherSoftware and Security.

Language Packs for Windows 7 Ultimate and Enterprise now Available

With Windows Vista, Microsoft introduced two SKU's called Ultimate and Enterprise which included unique functionality for enterprise customers and power users. One the features was Worldwide interfaces languages which included the ability for IT Professionals to configure a disk image that includes all Microsoft user interface languages. Today, Microsoft announced the availability of 35 languages Packs for Windows 7 Ultimate and Enterprise, here is what Microsoft SpringBoard Series Blog author Stephen L. Rose had to say:

As of this morning, August 25^th, the following language packs are available for download from Windows Update. Please note Traditional Chinese –Taiwan will be released at a later date.
These language packs are available to our enterprise customers running Windows 7 Enterprise and Windows 7 Ultimate RTM versions only. Customers on the Windows 7 Release Candidate are not eligible for these language packs.

Learn more here

You can download these language packs from within Windows Update Control Panel on Windows 7 Ultimate or Enterprise. What are some of the benefits of Multi-lingual User Interfaces?

A single, multi-lingual disk image enables worldwide deployment to all PC form factors (desktop, laptop, tablet, etc).
Significant cost savings by reducing the number of images an IT department needs to deploy and maintain.
End users can toggle between languages installed on the PC - great for multi-lingual homes if you are running Windows 7 Ultimate.

Windows Live Tags: Clubhouse, Story, Stephen L. Rose, SpringBoard Series Blog, Windows 7, Windows 7 Enterprise, Windows 7 Ultimate, Language Pack, MUI, Multi Lingual User Interface, Operating Systems, SKU, Editions

Written by Teching It Easy: Windows Vista, Live & 7 on August 25th, 2009 with no comments.
Read more articles on 7 Journal and otherSoftware.

Windows 7 Language Packs Available

As of this morning, August 25^th, the following language packs are available for download from Windows Update. Please note Traditional Chinese –Taiwan will be released at a later date.

These language packs are available to our enterprise customers running Windows 7 Enterprise and Windows 7 Ultimate RTM versions only. Customers on the Windows 7 Release Candidate are not eligible for these language packs.

For information on the general availability of Windows 7 Ultimate and all other version, please refer to Brandon’s post here.

Languages:

Arabic
Brazilian Portuguese
Bulgarian
Chinese – Simplified
Chinese – Traditional – Hong Kong
Croatian
Czech
Danish
Dutch
English
Estonian
Finnish
French
German
Greek
Hebrew
Hindi
Hungarian
Italian
Japanese
Korean
Lithuanian
Norwegian
Polish
Portuguese
Romanian
Russian
Serbian Latin
Slovak
Slovenian
Spanish
Swedish
Thai
Turkish
Ukrainian

Written by Stephen L Rose on August 25th, 2009 with no comments.
Read more articles on Windows 7 Enterprise and windows 7 ultimate and otherSoftware and windows 7 and language pack.

How to Remove Add-Ins in Microsoft Outlook

Add-ins are small programs used for a specific purpose in different Microsoft applications. For example, there are add-ins for Microsoft Outlook that allow users to send text messages to cell phones or customize the Outlook calendar. However, if an add-in becomes corrupted, it can cause the program using it to experience problems. In addition, add-ins that are not frequently used occupy precious system space. Removing these can help Outlook and the system run more smoothly.

Remove Add-Ins From Outlook 2000--2003

Step 1 : Start Microsoft Outlook. Remain in the main Outlook window. If you are using Outlook 2003 or earlier, select "Options" from the "Tools" menu. The "Options" dialog will open.

Step 2 : Go to the "Other" tab.

Step 3 : Click the "Advanced Options" button. The "Advanced Options" dialog box will open.

Step 4 : Click the "Add-in Manager" button and look for the add-in you want to remove. If it is not listed, go back and click the "COM Add-ins" button.

Step 5 : Clear the check box next to the add-in you want to remove in the "Add-in Manager and then click "OK" to remove it. In "COM Add-ins," click to select the add-in and then click the "Remove" button.

Remove Add-Ins From Outlook 2007

Step 1 : Go to the "Tools" menu in Outlook 2007 and click on "Trust Center." The "Trust Center Settings" window will open.

Step 2 : Go to the "Add-ins" tab of the "Trust Center." A list of all of the current Outlook add-ins will appear.

Step 3 : In the list of add-ins, look to see what type the add-in is that you want to remove.

Step 4 : Select the type of add-in you want to remove from the "Manage" box and then click the "Go" button.

Step 5 : Click to clear the check box of the add-in you want to remove and then click "OK" to remove it. If it is a "COM" add-in, click to select it and then click the "Remove" button.

Written by magakos on August 25th, 2009 with no comments.
Read more articles on Outlook Tech Support and Microsoft Outlook Support and Online Outlook Support and Outlook Support and otherSoftware.

NON-LINUX FOSS - ReactOS Remote Desktop

If you’re a Linux fan, there’s a bit of a tendency to think that Linux and open source are two ways of saying the same thing. However, plenty of FOSS projects exist that don’t have anything to do with Linux, and plenty of projects originated on Linux that now are available on other systems. Because a fair share of our readers also use one of those other operating systems, willingly or unwillingly, we thought we’d highlight here in the coming months some of the FOSS projects that fall into the above categories. We probably all know about our BSD brethren: FreeBSD, OpenBSD, NetBSD and so on, but how many of us know about ReactOS? ReactOS is an open-source replacement for Windows XP/2003. Don’t confuse this with something like Wine, which allows you to run Windows programs on Linux. ReactOS is a full-up replacement for Windows XP/2003. Assuming you consider that good news (a FOSS replacement for Windows), the bad news is that it’s still only alpha software. However, the further good news is that it still is under active development; the most recent release at the time of this writing is 0.3.8, dated February 4, 2009. For more information, visit www.reactos.org.

ReactOS Remote Desktop (from www.reactos.org)