Skip to main content

Posts

Showing posts from May, 2010

How do you remove the Mebroot/Sinowal Boot Sector Trojan also called the HelpAssistant Virus?

Blog Post Update: Mebroot can now be removed using Kaspersky TDSSKiller.  For complete steps, please read this remove virus blog post. The Mebroot Boot Sector Trojan also called Sinowal or the HelpAssistant Virus is a stealth infection that is not normally detected by antivirus/antimalware applications including Malwarebytes  It is a "banking trojan" which attaches itself to the boot sector of a device.  The trojan secretly captures and transmits user banking information without user intervention to outside parties.  The user of the computer is unaware of this process being performed by the trojan. According to Cisco, "Trojan.Mebroot is reported to have infected nearly 300,000 machines and successfully stolen 270,000 bank account numbers and details for 240,000 credit and debit cards.  Trojan.Mebroot does not contain a method of self-propagation and requires some type of user interaction to spread. Users may download this trojan over P2P networks, IRC servers, ...

Outlook Express Spell Check - MSN Email Spell Check in French

When installing Microsoft Office 2007, the English Proofing Tools (Spell Check) are upgraded to the included Microsoft Office 2007 version.  In Microsoft Windows XP, the 2007 version of the English Proofing Tools are incompatible with both the MSN Email Client and Microsoft Outlook Express.  Typically, Microsoft Office 2003 is installed in Microsoft Windows XP.  Microsoft Office 2007 is installed in Microsoft Windows Vista.  Microsoft Office 2010 is installed in Microsoft Windows 7. The MSN Email Client and Microsoft Outlook Express rely upon the earlier version of the English Proofing Tools in order for Spell Check to function properly.  The official statement on Microsoft's website states that users of MSN and Outlook Express should switch to Windows Live Mail.  However, many people do not wish to switch.  Following are a variety of solutions that may resolve this issue: Solution #1: Microsoft Office Updates Install all Microsoft Updates for Microsof...

This is a multi part message in MIME format

Any email beyond 60k is sent in the Multipurpose Internet Mail Extensions (MIME) format. The receiving email client then decodes the email so that it is properly displayed. When the message header of the email is malformed, the words "This Is A Multi Part Message In MIME format" are displayed at the top of the email. A malformed message header can arise due to: The sending and/or receiving party's antivirus application. The sending and/or receiving party's email client. The sending and/or receiving party's mail server. Possible solutions to resolve this issue: The sending and/or receiving party's antivirus application may not be properly installed. This can be caused by a previous antivirus application that has not been fully uninstalled. The Windows Operating System supports only one antivirus application. You cannot have two or more antivirus applications running at the same time. The sending and/or receiving party may need to fully uninstall their cu...

HP All In One Wireless Printer - Offline

When the HP Update application is installed, it may occasionally prompt you to perform an HP Update.  If you do not allow the HP Update process to complete, the Microsoft Windows Registry may become corrupt resulting in a wireless printer that is now Offline.  However, you may find that the Microsoft Add Printer Wizard is able to access the device placing the printer Online - but upon reboot the computer reverts to being Offline.  The root cause of this issue is registry corruption related to the HP All In One Wireless Printer Driver.  Following are the steps to resolve this issue: Disable User Account Control. Reboot. Remove the HP All In One Wireless Printer Driver and all associated software items. Reboot. Install and run Wise Registry Cleaner and Advanced System Care Free to repair the registry. Reboot. Create a Windows Firewall exception of UDP Port 427. Enable Microsoft Windows Network Discovery. Downloaded and install the latest Full Driver for your HP All In ...

Microsoft Outlook - One Or More Parameter Values Are Not Valid

When sending and receiving email using Microsoft Outlook, you may encounter the error message: One Or More Parameter Values Are Not Valid.  One of two issues may be occurring. Issue #1: You may have typed the email address wrong possibly using a capital letter.  Email addresses are case-sensitive.  Microsoft Outlook AutoComplete then continues to type the email address incorrectly.  You will need to delete the Microsoft Outlook AutoComplete file so that a new one can be automatically created. Close Microsoft Outlook. Click Start - Run. Type: %APPDATA%\Microsoft\Outlook Hit Enter. Click Tools. Click Folder Options. Click the View tab. Uncheck Hide Extensions For Known File Types. Click OK. Delete the file with the extension of .nk2. Issue #2: You may have also typed the email address incorrectly within a Microsoft Outlook Contact.  Locate the contact in question and type the email address correctly. With both a new Microsoft Outlook AutoComplete file and a correc...

Activesync Error 86000107 and 86000104

The Activesync Errors of 86000107 and 86000104 are normally caused by changes to your Outlook folder structure which Activesync is unable to synchronize.  The following steps will recreate your Microsoft Outlook Mail Profile as well as your ActiveSync Profile.  Once you have recreated these two profiles, ActiveSync will regain its functionality. Remove and Recreate Microsoft Outlook Mail Profile Click Start - Control Panel - Mail Control Panel. Click the Show Profiles button. Select Outlook. Click Remove. Click OK. Open Microsoft Outlook and follow the prompts on screen. Import Existing Outlook PST File Into New Microsoft Outlook Mail Profile  From within Microsoft Outlook, click File. Click Import and Export. Select Import From Another Program Or File. Click Next. Select Personal Folder File. Click Next. Click Browse. Browse to the location of C:\Documents and Settings\[Your Username]\AppData\Local\Microsoft\Outlook. Click Open. Click Next. Select Import Items Into Curr...

Windows XP Slow Boot - Event 7022 - Windows Image Acquisition Service Hung On Startup

Symptom: The computer takes a long time to boot up and  Event 7022 - Windows Image Acquisition Service Hung On Startup is listed in the Event Viewer. Solution: The computer is slow to boot because the Windows Image Acquisition Service has been changed from the default setting of Manual to Automatic.  The computer is looking for an Image Acquisition device such as a digital camera or scanner to be connected to the computer and the associated drivers for the device.  To resolve the slow boot process, please perform the following steps: Click Start -Control Panel - Administrative Tools - Services. Double-click the Windows Image Acquisition Service. From the Start Up Type drop-down list, change the startup from Automatic to Manual. Click Apply. Click OK. Reboot. http://www.smartnetadmin.com

How do you delete files or folders that produce the error message Access Denied?

The following script will reset file permissions to factory defaults.  All members of the Administrators Group and System Account will be granted full rights to all files and folders on the SystemDrive and the ownership of all files and folders will be set to the Administrators Group.  Using a User Account with Administrative privileges, you will then be able to delete any file on the hard disc as you would normally.  System File Protection is still in place and functions properly.  (Please Note: If you only have a small number of files and/or files to delete, you may wish to use the Unlocker utility.) Windows XP Download and then install the Subinacl.exe file. Start Notepad. Copy and then paste the following text into Notepad. cd /d "%ProgramFiles%\Windows Resource Kits\Tools" subinacl /subdirectories %SystemDrive%\*.* /setowner=administrators subinacl /subdirectories %SystemDrive%\*.* /grant=administrators=f /grant=system=f Save this Notepad file as ResetFil...

What are the minimum builds for a stable version of Microsoft Windows?

A fully stable version of Windows requires the appropriate Minimum Build version: Windows XP Build 2600 (RTM) Windows 7 Build 7600 (RTM) Windows Vista Build 6000 (RTM) All versions below the Minimum Build are a Pre-Release, Trial, Beta or other version that is known by Microsoft to contain bugs.  The RTM (Release To Manufacture) is the minimum build for a stable operating system. http://www.smartnetadmin.com

How do you notify a domain that you no longer wish to receive spam?

If you are receiving spam from an identified domain, I recommend sending the following email to the abuse@ email address associated with that domain. Example: abuse@yahoo.com Example Email: Subjet: Domain Suppression File Re: Spam Abuse, Possible RBL Notification We no longer wish to receive any email from your domain, sub-domains or affiliate domains.  We have repeatedly unsubscribed from your emails.  Can you please add the following domains to your domain suppression file?  If you would please also add these domains to the domain suppression file for all of your affiliates? domain.com Can you also add the individual email address of example@domain.com? Thank you. http://www.smartnetadmin.com

How do you remove Microsoft Office 97 when prompted for the CDROM?

When you wish to uninstall Microsoft Office 97 and do not have access to the installation media, you can still completely uninstall the software using the Microsoft Office 2003 Resource Kit - Office Removal Wizard. Install the Microsoft Office 2003 Resource Kit. Click Start - All Programs - Microsoft Office. Click Resource Kit. Click Removal Wizard. Follow the prompts on screen. http://www.smartnetadmin.com