Thursday, January 28, 2010

Windows 7 MCP

Simply create a folder named the following.
MCP.{ED7BA470-8E54-465E-825C-99712043E01C}

Wednesday, January 20, 2010

Auto log in and out Virus FIX!

1.Insert the BartPE or tools CD into the drive, and boot the system from the CD. Once the file loading phase is over, the Bart PE desktop will be visible, as shown in Figure 1.
2.Type Regedit.exe in the prompt, and press Enter. Select the HKEY_USERS hive
3.From the File menu, choose the Load Hive option. Browse to your Windows installation drive, for example the following location:
C:\Windows\System32\Config\

4.Select the file named SOFTWARE (the file without any extensions), and click Open
5.Type a name for the hive that you've loaded now. (Example: MyXPHive)
6.Now the SOFTWARE hive is loaded, and present under the HKEY_USERS base hive.
7.In order to fix the Userinit value in the loaded hive, navigate to the following location:
HKEY_USERS \ MyXPHive \ Microsoft \ Windows NT \ CurrentVersion \ Winlogon

8.Double-click Userinit and set it's value correctly. Example: Set it's data as follows:
C:\Windows\System32\Userinit.exe,

(Include the trailing comma also. The above assumes that Windows is installed in C:\Windows, and Userinit.exe file is actually present in the System32 folder. You may want to verify that as well.)

9.After entering the correct data, you MUST unload the Hive. To do so, select MyXPHive branch, and then in the File menu, choose Unload Hive. It's important to note that you'll need to select the MyXPHive branch first, before unloading it.
10.Quit BartPE and restart Windows. See if you're able to logon to your profile

Saturday, January 9, 2010

Powerful malware process stopper

Rkill
You can stop most MW or Virues and scan with MWB.This Tool allows you to clean up even the worst Virues at desktop. you may want to read the instructions here

Tuesday, December 29, 2009

DVD ROM FIX

UPDATE


HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E965-E325-11­CE-BFC1-08002BE10318}


Apparently it seems that this is an age old fix for even XP systems. If you venture to the registry key above by doing the following steps:

1.Click on the start menu.
2.If this is a Vista machine in the search box type in “regedit” without the quotation marks.
3.Maximize the HKLM and then go ahead and browse until you reach the key listed above.
4.In the right panel you’ll see something along the lines of “UpperFilter” and “LowerFilter” you want to click on each “filter” key and hit delete. Click yes when it asks to confirm if you wish to delete the key.
5.Restart Windows.
6.Let me know if this works.

Tuesday, December 8, 2009

Rember it 's almost always the PSU!

Even tho you tested it with a tester, it was not under load so swap away!

Wednesday, December 2, 2009

Windows File Protection

Start>Run>CMD>sfc /scannow

Checks to make sure the files all match up.

Friday, November 20, 2009

Windows 7

Will use a 64 key on a 32 bit install and vice versa.