What to do when your computer gets infected with Malware?

*Here's SBIT's recipe for spyware removal. I should mention that once compromised--one can never be 100% sure that your system is completely free from hidden ghosts that will one day wake up silently "all your base are belong to us". but if you're willing to assume the risk, here's the recipe we use for 'cleanups'.

Install, get the signature updates, & perform a scan using all of these (they are all free btw):

1) Malwarebytes

2) SuperAntispyware

3) ComboFix

How to Install Windows 7 on a Dell XPS M2010

First, I would like to pass on some knowledge about this Unit from the Dell gentleman.

1) this video card in these units suffer from the manufacturing defects that affected those NVIDIA GPUs

2) if and when these cards go out, dell is sending out the same defective units as there was never a replacement

3) when the unit will not POST. dell support will send a replacement motherboard, but it is not the motherboard--its the video card, so expect a second trip from your repair guy.

With that said. Some nice fellow posted a step by step guide on installing most of the drivers for Win7 on this unit. Dell's website has no Win7 specific drivers listed nor do they plan on ever releasing them as I understand it.

Here's info on how to get it done. Specifically look for at northernlights.me.uk

Cheers

Get some good out of your Passwords

"I'm good enough, I'm smart enough, and doggone it, people like me." - Stuart Smiley

If you're like me and required to enter passwords all day--why not get something out of it? For example, if you made a new year's resolution to work out--entering something like:

quitB3ingaFatass

MustStayTheCourse

25x a day might give you the extra push you need to stick with it.

Perhaps you've just found Jesus:

JesusL0vesMe

Thou5haltNotCovet

Or, if you're a member of the Bildeberg Group:

ToH3llWith3very0n3Else

Why the S2000 is the best value sports car for $20K

1. it's rear wheel drive w/ a limited slip differential
2. it has a shifter that is talked about in car magazines
3. the hood is aluminum
4. it was built from the ground up as a roadster (minimal vibrations in the cabin aka cowl shake)
5. it does 0-60 in under 6 seconds
6. the car is classified SCCA Solo II "A Stock" along with the NSX, M3, 911, Supra Turbo.
7. the exhaust note is thrilling, especially when revved to 8250
8. Honda reliability along with a tastefully designed interior
9. it makes 240 horsepower
10. the power train is warrantied for 3 more years of 100K miles.

Honda went all out with the S2000--so much so that typical performance mods (intake, exhaust, etc) provide no gains. In other words, this car was tuned at the factory. I think this alone says volumes about what the S2000 is all about.

Before I test drove it, I had made up my mind that I would never own a high-strung VTEC car again after owning a Honda prelude. But, in hindsight--I feel very good about my choice. It is literally a track car you can drive on the public streets. In other words--its a go-kart with a stereo, and A/C

Criticisms:

1. tweater position - i wish honda would have spent a little more time and positioned the tweaters for a proper sound stage. the audio is imbalanced, and its rather annoying to know why.
2. rear view mirror - since the car sits so low to the ground, it seems as if everyone has their high beams on you all of the time. a proper auto-dimming rear view mirror would seem appropriate
3. key - there is no option for an integrated key/remote
4. smart headlights - i wish the car would turn off the headlights by themselves when the vehicle is locked.

tools every smb it consultant should own

4 in 1 screwdriver http://ep.yimg.com/ca/I/yhst-28355172338643_2085_150382211

Windows 7 XP Mode deployment

the problem:

client has a program that is only XP compatible. they require all users (9 of them) to be able to login to any computer (9 computers) and run this app. all of the workstations are running Windows 7

considerations:

setting up windows xp mode, their line of business application, and the printer takes about 15 minutes per user.

9 users x 9 computers = 81 'setups'. (calculates to roughly 20 hours)

the journey:

originally the client stated that only certain users would be logging into certain computers, this amounted to ~15 setups. of course, the next day, i learn that they want all users to be able to logon to any computer and have access the XP-only app--this is after i had spent about 3-4 hours manually setting the original 15 profiles up.

after getting up from the mental blow--i gathered my self and went to work on a GPO. to make a long story short--i came up with this gameplan:

1. customize one of the Win7 XP Mode images (install the LOB app, printer)

2. use a GPO to copy this file out when a user logs on

3. create a shortcut on the users' desktop to launch the VM

to that end, i setup the following GPOs

1. copy image file to the machine upon login

2. copy over CreateVirtualMachine.wsf script to the workstation

3. bind the image file from step1 to the user profile using the script copied over in step2. i used a login script for this.

4. create a shortcut on the desktop that will launch the newly provisioned Image.

this seemed to do the trick, however--i did not account for the fact that since all the VMs would have the same NETBIOS name, the images would play havoc on the Win7 Host. we encountered "duplicate name exists on the network" messages, and "duplicate ip address.." messages. this effectively shutdown the network on the host OS.

so--that night, i went back to work. i needed a way for all the VMs to have a different NETBIOS names (all 81 of them). after much consternation i did some research and tried netdom.exe to no avail since these workstations were not joined to a domain. upon more digging, i found a utility that not only renames the computer, but has the ability to specify the new name using randomly generated characters--perfect!.

the batch file looked something like this:

splash.rtf

comprename.exe 234398-XPM ?1?2?3?4-xp2

shutdown -r -t 1

i edited the RUNONCE registry key so my batch file would--well run once. the splash.rtf message basically tells the user that the computer is going to reboot, and instructs them to close the splash.rtf window once read. otherwise, the rest of the script will not process.

i found this method to work nicely. installing the driver and local printer for the tcp/ip network printer works around the flaky VPC print redirection.

the only downside to this solution is that your workstations will take about 3-4 minutes while the 1.5GB image file gets transferred over (my switch is 10/100). users will only have to wait once per machine, as subsequent logins will not require the file copy.

other things worth mentioning:

running the VM's in "Shared Networking" would obviate the need to rename all the VMs, but for whatever reason--when I deployed the and binded them to user profiles--it defaulted to natively using the host's NIC.

if you look at the settings of the default "Windows XP Mode" and click on the hard disk 1, you will notice there is a parent disk located @

C:\Program Files\Windows XP Mode\Windows XP Mode base.vhd

it took a while for this to sink into my mind. the 1.5GB image that i customized is actually a differencing disk! this means that not only does one need to install windows virtual pc, you need to also install the Windows XP Mode as well.

in terms of authentication--these users are just going to have to deal with inconvenience of manually entering in their credentials. the splash.rtm page will come in handy when i have to instruct them on how to do this down the road. since the VMs will usually be hibernated, i don't think this will be that big of a deal.

relevant links:

CompRename

http://www.willowhayes.co.uk/

RunOnce Registry Key

http://msdn.microsoft.com/en-us/library/aa376977%28VS.85%29.aspx

Deploying Windows XP Mode

http://www.microsoft.com/downloads/details.aspx?FamilyID=9f142a1a-a7b7-4d0b-bd56-d9627f39c14f&displaylang=en

Windows XP Mode IT Pro Deployment Overview

http://www.microsoft.com/downloads/details.aspx?familyid=7BF4316D-34D2-4976-8F44-23C792CA78EC&displaylang=en

Virtual PC Guy's Blog

http://blogs.msdn.com/Virtual_PC_Guy/