Worm Removal Tools - List

A tool to remove Blaster worm and Nachi worm infections from computers that are running Windows 2000 or Windows XP:

Mydoom (A, B) and Doomjuice (A, B) Worm Removal Tool (KB836528)

What You Should Know About the Mydoom and Doomjuice Worm VariantsA tool is available to remove the Mydoom and Doomjuice worm variants

Sasser.A and Sasser.B Worm Removal ToolW32.Blaster.Worm Removal Tool

Symantec Security Response - Removal Tools PageMcAfee Security - Stinger - Stinger, utility which detects many viruses

Free Online Virus Scanners and Security Tests

Troubleshooting missing network connection icons

Troubleshooting missing network connection icons

If the Network Connection icons are missing, try the following to get them back:NOTE Despite this issue, networking continues to function correctly, and the ipconfig command still shows all connection and all adapter information. However, dial-up users may not be able to initiate a connection due to missing icons.
You can still connect to (or disconnect from) the ISP using the RAS Phonebook. Follow these steps:
Click Start, Run and type:
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Connections\Pbk
Double-click the file named RASPHONE.PBK (Shows up as RASPHONE) and connect to the internet.
Click Start, Run and type CMD and press EnterRun the following commands one-by-one and press Enter after each command:regsvr32 netshell.dllregsvr32 netcfgx.dllregsvr32 netman.dll
If this does not help, try the steps listed in the Microsoft article: Q825826[How to troubleshoot missing network connections icons in Windows Server 2003 and in Windows XP]

How to remove the OEM link from XP Start Menu?

Introduction
Usually, OEMs add their logo and icon to the Start Menu which cannot be removed just like removing a normal shortcut. Clicking the OEM Link may launch a website, folder or a program.
Example.. Do More With Gateway link for Gateway computers, Presario info center link for Compaq Presario systems.
Removing the OEM Link
If you don't plan to use these shortcuts and want to hide the OEM Link from the Start Menu:
Right-click the New Start Menu and choose Properties
Click Start Menu tab, Customize, Advanced tab
In the Start Menu items list, uncheck Manufacturer Link
Click OK, and OK
The OEM Link should no longer appear in the New Start Menu. In case, the above option Manufacturer Link is unavailable in the list, you may need to edit the registry and enable the option to show in the dialog.
Open Registry Editor and navigate to this location:
HKEY_LOCAL_MACHINE \ Software\ Microsoft \ Windows\ CurrentVersion \ Explorer \ StartMenu \ StartPanel \ ShowOEMLink
In the right-pane, set NoOEMLinkInstalled Value to 0
Close Registry Editor and restart Windows.
The Manufacturer Link entry should now appear in the 'Start Menu Items' dialog. Uncheck it. This hides the OEM Link from Start Menu. If you wish to remove the registry reference to the OEM Link completely [Optional], you will need to delete the following key in the Registry:
HKEY_CLASSES_ROOT \ CLSID \ {2559a1f6-21d7-11d4-bdaf-00c04f60b9f0}
-and-
Set NoOEMLinkInstalled value to 1 in the following key:
HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ CurrentVersion \ Explorer \ Start Menu \ StartPanel \ ShowOEMLink
Automate this process using the REG files below
Hide the OEM Link from Start Menu
Remove the OEM Link completely

Unable to Start a Program with an .exe File Extension

Symptom
When you try to launch an application (.exe files), the following error message appears and the program does not run.
Cause
This problem occurs if the .exe file association in the registry is corrupt. This behavior is generally caused by viruses; one of which is SirCam virus, which modifies the .exe file association in registry.
Resolution
Method 1: Fixing the association settings automatically
Download exefix_xp.com utility and save to Desktop. Double-click the file to run it. This utility fixes the exefile association in the registry automatically.
Additional tip: To run the utility silently (without any prompts), use the -silent parameter. Open a Command window (Command.com) and type:
C:\Utilities\exefix_xp.com -silent
Assuming that the exefix_xp.com is placed in the C:\Utilities directory.
Method 2: Fixing the association settings using Registry editor
Click Start, Run and type Command
Type the following commands one by one:
cd\windowsregedit
If Registry Editor opens successfully, then navigate to the following key:
HKEY_CLASSES_ROOT \ exefile \ shell \ open \ command
Double-click the (Default) value in the right pane
Delete the current value data, and then type:
"%1" %*(ie., quote-percent-one-quote-space-percent-asterisk.)
Navigate to:
HKEY_CLASSES_ROOT\.exe
In the right-pane, set (default) to exefile
Exit the Registry Editor.
If you're unable to launch Regedit.exe even from Command Prompt, try this:
copy regedit.exe regedit.comregedit.com

Duplicate Icons in the Desktop - Windows 2000/XP

Symptom
Every time when you place a file or a shortcut on your Desktop, you get 2 icons. If one icon is deleted, other will also be deleted. This problem is caused by dragging the desktop folder about in the person's profile folder or All Users. Or, changed the User Shell Folders value in the registry incorrectly.
RESOLUTION
Open Registry Editor and navigate to the locations below
Backup the registry before modifying it. See here.
HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Explorer \ User Shell Folders
Double-click Desktop and set it to %USERPROFILE%\Desktop
Navigate to this location:
HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Explorer \ User Shell Folders
Set Common Desktop to %ALLUSERSPROFILE%\Desktop
Close Registry Editor and restart.
More Information
The desktop is composed of two folders, one for the User profile, and one for all users in common. This problem occurs if both are set to the same folder. The Desktop is a special folder which displays the icons from both the above locations.

"Administrative Tools folder is empty"

Symptom
When you open the Administrative Tools folder in the Start Menu, the shortcuts in the folder may be missing.
Cause
This happens due to one of these reasons:
The Administrative Tools shell folder path is incorrectly set.
The Administrative Tools shortcuts are deleted accidentally.
Solution for Case 1
Important: Backup the registry before modifying it. See here for more information.
Start Regedit.exe and navigate to the following locations one by one:
HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Explorer \ User Shell Folders
-and-
HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Explorer \ Shell Folders
Delete the value named Common Administrative Tools (if present).
Close Regedit.exe and restart Windows.
See if the shortcuts in the Administrative Tools folder are restored. If not, see Solution 2 below.
Solution for Case 2
Automate
The utility AdminTools (~8kb) restores the missing shortcuts to the Administrative Tools folder.
Creating the shortcuts manually
To re-create the shortcuts manually, refer this table. Re-create the shortcuts in the following folder:
C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools

Prevent the Program count from being displayed in the Welcome Screen

Prevent the Program count from being displayed in the Welcome Screen

Welcome screen - Program count information

When you open an application window, the ProgramCount status is updated in the registry instantly. If you want to prevent the Program count information from being displayed at Welcome Screen, edit the following registry value and deny Write permissions for the following key.
Preventing the Program count display
NOTE: By following this method, Windows can't update the ProgramCount in the registry. Any programs or custom scripts that depend on the ProgramCount registry value might fail if you deny write access to registry key below. Use this method at your own risk!
Open Registry Editor and navigate to:
HKEY_CURRENT_USER \ SessionInformation
In the right-pane, double-click ProgramCount and set it's value to 0
Right-click SessionInformation and click Permissions menu
Click Advanced, Add. Type your username in the Select User or Group Box
Deny Set Value permissions to your user account
Click OK and complete the process.

What is your Internet IP address?

What is your Internet IP address?

Click HERE - http://www.ipaddressworld.com
(Note: if you're using a router, the IP displayed will be that of the router's WAN IP address, not your actual LAN IP address)
You can download the Windows 2000 version of WINIPCFG here:
http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/wntipcfg-o.asp
If the network connection icon is in the System tray, right click it, select Status, then go to the Support tab.
See this page for a small VB Script that will list all IP addresses in use on your machine.
Last, open a Command Prompt window and type IPCONFIG /ALL
Note: This utility works with Service Pack 1

Recover Deleted Files/Folders

Recover Deleted Files/Folders

Ok, you've deleted a file or files, and sent them to the Recycle Bin. Then, being conscientious, you emptied the Recycle Bin to free up the disk space.
Oops! The first pictures of your new baby were in that folder! Or the pictures of your sister's wedding.
And those pictures are gone!
You'll need 3rd party software to recover these files. I use FileSaver, from http://www.file-saver.com
Of course, the less work you do with your computer, in the meantime, the better your chances of recovering your deleted files/folders intact.

Lock your Desktop

Lock your Desktop

Press the Windows key and the L key (WinKey+L) at the same time.
Additionally, you can create a new shortcut, with the following command line:
rundll32.exe user32.dll,LockWorkStation
Copy the new shortcut to your Quick Launch bar and you have one click access to locking the desktop.
Notes: If you are using the Welcome screen and Fast User Switching is enabled, other users will still have access to you computer, by selecting their Username and entering their password. Additionally, if you don't have a password on your account, then all that is required is to click on your Username on the Welcome screen.

How to prevent Blaster Worm attack?

How to prevent Blaster Worm attack?

Always, enable the Internet Connection Firewall in Windows XP.Download and apply the patch MS03-039 here: [A Buffer Overrun in RPCSS Could Allow an Attacker to Run Malicious Programs]http://support.microsoft.com/?kbid=824146
More Information - "Blaster" WormA tool is available to remove Blaster worm and Nachi worm infections from computers that are running Windows 2000 or Windows XP:http://support.microsoft.com/default.aspx?scid=833330Learn more about Firewalls - Windows XP ICF:http://windowsxp.mvps.org/firewall.htmVirus Alert About the Blaster Worm and Its Variants:http://support.microsoft.com/?kbid=826955
What You Should Know About the Blaster Wormhttp://www.microsoft.com/security/incident/blast.aspTCP and UDP Port Assignments in Windows 2000:http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/tcpip/part4/tcpappc.asp?frame=true

Windows XP Clean Installation - Partitioning and Formatting using Windows XP CD

Windows XP Clean Installation - Partitioning and Formatting using Windows XP CD

PARTITIONING
1. Insert the Windows XP CD-ROM into your CD-ROM drive.2. At the Welcome to Setup page, press ENTER to continue.3. Press F8 to accept the Windows XP Licensing Agreement.4. If an existing Windows XP installation is detected, you will be prompted to repair it. At this point hit the ESC key (do not repair).5. The screen will now list all existing partitions and un-partitioned space for each hard disk. Use the cursor/arrow keys to choose where to create the new partition. Press D to delete an existing partition or press C to create a new partition in un-partitioned space. If you press D to delete an existing partition, you must then press L (or press ENTER, and then press L if it is the System partition) to confirm that you want to delete that partition. Repeat this process for each of the existing partitions that you want to move (or remove) in order to create your new partition. When all necessary partitions are deleted, you can then select the remaining un-partitioned space and then press C to create new partitions.
Note: If you want to create a partition where at least one partition already exists, you must first delete the existing partition or partitions and then create the new partition. Type the size in megabytes (MB) that you want the new partition to be. Then press ENTER. Alternatively, you can just press ENTER to create the partition using all the available space (i.e. create the biggest possible partition).
If you want to install Windows XP, use the arrow keys to select the partition where you want to install Windows XP and then press ENTER.
Note: If you do not want to format the partition and install Windows XP, press F3 twice to quit Setup, and ignore the following section. If you do this, you must find another way to format the partition.
FORMATTING THE DRIVE
To format the partition, use the arrow keys to select the partition where you want to install Windows XP.
* Select the NTFS formatting option and press ENTER* Choose Quick Format or Full Format:Differences Between a Quick Format and Format During Windows XP Setuphttp://support.microsoft.com/?kbid=302686* Continue installing Windows. I

nstallation part is covered in detail by the site below (especially 1st two links).

Must visit.
michaelstevenstech.com/cleanxpinstall.htmltheeldergeek.com/xp_home_install_-_graphic.htm
microsoft.com/WindowsXP/expertzone/columns

How to backup the Windows XP Registry?

How to backup the Windows XP Registry?

Introduction

Registry Editor is an advanced tool for viewing and changing settings in your system registry, which contains information about how your computer runs. Almost the entire settings are stored in the registry. For example, when you resize an application window, the window position (x,y points) is stored in the registry so that the settings are retained permanently. This is just an example, there are much more data stored in the registry, right from your user account names and passwords (if configured to store in the registry).
Although Registry Editor enables you to inspect and modify the registry, it's advisable to use Registry Editor only if the GUI does not provide the option you're looking for. Making incorrect changes in the registry can break your system. It's highly advisable to backup the registry before editing any portion of it.

Backing up the XP Registry

Method 1: Using System Restore
One way to backup the registry is to create a System Restore snapshot. System Restore returns your computer to a previous snapshot without losing recent personal information, such as documents, history lists, favorites, or e-mail. It monitors the computer and many applications for changes and creates restore points. You restore these snapshots when your configuration isn't working. This method is unreliable in case you want to rollback the registry changes made a longtime ago, in which case the System Restore might have purged that particular restore point - due to space constraints or due to a recent system restore point or even a Restore point corruption. Please remember, System Restore points get deleted for many reasons, making it unreliable, especially in the long run.

Method 2: Backing up the selected branch of the registry by exporting (Reliable)
This method is preferred if you're making changes to a specific key/area of the registry. To backup a selected branch/key in the registry, try this:
Click Start, and then click Run.
In the Open box, type regedit, and then click OK
Locate and then click the key that contains the value that you want to edit
On the File menu, click Export.
In the Save in box, select a location where you want to save the Registration Entries (.reg)
In the File name box, type a file name, and then click Save.
(Backing up a selected branch/key of the registry)
Now that you've created a Registry backup for that particular key. Save the REG file in a safer location in case you want to undo the registry changes made. You can restore the settings by just double-clicking the REG file. It automatically merges the contents to the Registry.
Method 2 (a) : Export registry keys using a command-line (Console Registry Tool)
You can use the Console Registry Tool for Windows (Reg.exe) to edit the registry. For help with the Reg.exe tool, type reg /? at the Command Prompt, and then click OK.
Example: To export the key [HKEY_CURRENT_USER\Software\IOLO] and it's sub-keys, try this from Command Prompt:
REG EXPORT HKCU\Software\IOLO C:\IOLO.REG
To view the REG contents type notepad C:\iolo.reg in Start, Run dialog. Console Registry Tool is extremely handy for network admins and also for home users.
Method 3: Backing up the whole registry ("System state")
For backing up the whole registry, use the NTBackup utility to back up the System State. The System State includes the registry, the COM+ Class Registration Database, and your boot files.

Clear Past items from the Notification Area Customize Notifications

Clear Past items from the Notification Area [Customize Notifications....]

Open Registry Editor (regedit.exe)
Navigate to the following key:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\TrayNotify]
Backup the registry key
Delete IconStreams and PastIconsStream values
Restart the computer

HOW TO: Use Automatic Completion with a Command Prompt in Windows XP

HOW TO: Use Automatic Completion with a Command Prompt in Windows XP

To Activate Automatic CompletionFor example, to change to the Program Files folder, you can type cd \pro control_character. Or, to display the contents of the Myfile.txt file, you can type type myf control_character. If there are multiple folders or files that match the characters you type, typing the control character again displays the next matching instance. When the correct folder or file is displayed, press ENTER to complete the command. If no folder of file matches the characters that you type, you hear a beep. You can activate or deactivate this feature for a computer, for a user, or for only the current command session.

Disable Automatic Windows Update

Disable Automatic Windows Update

Windows XP is configured out of the box to routinely scan for and download updates to Windows XP automatically. While this can be somewhat convenient for those with very fast Internet connections and those who would otherwise forget to check for updates, it can be a nuisance for the rest of us, who are still using 56k or, even worse 33k modem connections.To control or disable automatic updating, open the System icon in Control Panel (or right-click My Computer and select Properties), and choose the Automatic Updating tab.To check for updates manually, open Internet Explorer and select Windows Update from the Tools menu.

Create a Password Reset Disk

Create a Password Reset Disk

Microsoft has enhanced security features in XP including the the ability to create a floppy diskette to recover your password incase it is forgotten.
Click Start
Click Control Panel
Click User Accounts
Click on the account which you want to create a password disk
Click Prevent a forgotten password which starts the Forgotten Password Wizard . This is found under Related Tasks
Insert a blank, formatted disk into drive A, and click Next
Enter the password in the Current user account password box To use the recovery disk, at the Welcome screen
Click the user name whose password is on the recovery disk
Click the question mark button
This causes the Did you forget your password message to appear.
Click use your password reset disk
This will start the Password Reset Wizard.

How to Create a Password Reset Disk for computers that are part of a domain

How to Create a Password Reset Disk for computers that are part of a domain

Note that this procedure requires one blank, formatted floppy disk. To create a password reset disk for your local user account:

Press CTRL+ALT+DELETE. The Windows Security dialog box appears.
Click Change Password . The Change Password dialog box appears.
In the Log on to box, click the local computer. For example, click Computer (this computer) .
Click Backup . The Forgotten Password Wizard starts.
On the "Welcome to the Forgotten Password Wizard" page, click Next .
Insert a blank, formatted disk in drive A, and then click Next .
In the Current user account password box, type your password, and then click Next . The Forgotten Password Wizard creates the disk.
When the progress bar reaches 100 percent complete, click Next , and then click Finish . The Forgotten Password Wizard quits and you return to the Change Password dialog box.
Remove, and then label the password reset disk. Store the disk in a safe place.
In the Change Password dialog box, click Cancel .
In the Windows Security dialog box, click Cancel.If you forget your password, you can log on to the computer with a new password that you create by using the Password Reset Wizard and your password reset disk. To gain access to your local user account on a computer that is a member of a domain, or has been disconnected from a domain:
In the Welcome to Windows dialog box, press CTRL+ALT+DELETE.
In the Log On to Windows dialog box, type an incorrect password in the Password box, and then click OK .
In the Logon Failed dialog box that appears, click Reset . The Password Reset Wizard starts. The Password Reset Wizard lets you create a new password for your local user account.
On the "Welcome to the Password Reset Wizard" page, click Next .
Insert the password reset disk in drive A, and then click Next .
On the "Reset the User Account Password" page, type a new password in the Type a new password box.
Type the same password in the Type the password again to confirm box.
In the Type a new password hint box, type a hint that will help you remember the password if you forget it. NOTE : This hint is visible to anyone who attempts to log on to the computer by using your user account.
Click Next , and then click Finish . The Password Reset Wizard quits and you return to the Log On to Windows dialog box. The password reset disk is automatically updated with the new password information. You do not have to create a new password reset disk.
In the Log On to Windows dialog box, type your new password in the Password box.
In the Log on to box, click the local computer. For example, click Computer (this computer) , and then click OK . You are logged on to the local computer with your local account information.