Sunday, March 9, 2008

McAfee technical quarry-part 14

Your problem is finding a way for a logging program
to run anytime someone logs in. If you only want it
to run when the computer is rebooted, you could
reference your batch file in AUTOEXEC.BAT or
WINSTART.BAT. If you only want it to run when Windows
starts, you might add it to the "run=" line in WIN.INI
or put a shortcut to your batch file in the Startup
folder for every user. But if you want it to run for
every user (including new ones) at every login, you're
stuck going into the registry. Press the "Start"
button, select "Run...", type in regedit.exe, and
navigate your way to
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Select "Edit" / "New" / "String Value". Name it
whatever you want, and add the name of your batch
file for the value data.

Now then... Here is the batch file I use for similar
things. I call it BOOTLOG.BAT

----------------------------------------------------
call current.bat
echo Login occured at %date% %time% >> c:\bootlog.log
----------------------------------------------------

The call to CURRENT.BAT is used to set the time and
date into the environment. Here is what I use for CURRENT.BAT:

----------------------------------------------------
:: This batch file MUST be named CURRENT.BAT
:: DATE is %4, TIME is %3
:: Current date is Thu 01-22-1998
:: Current time is 8:52:28.07a
if "%3"=="" goto GETDATE
if "%4"=="" goto SETTIME
goto SETDATE
:SETTIME
set TIME=%3
goto DONE
:SETDATE
set DATE=%4
goto DONE
:GETDATE
echo.|date>temp.bat
call temp.bat
echo.|time>temp.bat
call temp.bat
if exist temp.bat del temp.bat
goto DONE
:DONE
----------------------------------------------------

Someone asked me about combining my batch
files that identify the user with this batch
file. Seemed like a natural! Then I started
thinking that all of these batch files create
environment variables. And some machines just
aren't set up to allow any more variables. So
here's code that will log the date and time,
will also get the user name three separate
ways, and does it all with no variables:

----------------------------------------------------
@echo off
echo ****************************** >> C:\login.log
echo. | date | find "Current" >> C:\login.log
echo. | time | find "Current" >> C:\login.log
net config | find "User" >> C:\login.log
start /w regedit /e C:\temp.txt HKEY_LOCAL_MACHINE\System\CurrentControlSet\control
type C:\temp.txt | find "Current User" >> d:\login\login.log
start /w regedit /e C:\temp.txt HKEY_LOCAL_MACHINE\Network\Logon
type C:\temp.txt | find "username" >> C:\login.log
del C:\temp.txt
echo ****************************** >> C:\login.log
cls
----------------------------------------------------

If you want your batch file to run "invisibly",
well, you have a small problem. Batch files can't
run invisibly by themselves. You have to have
some other program run start the batch file
invisibly. And you have to make sure the program
that starts the batch file is invisible itself!
sounds like a "Catch-22", but there IS a solution!
Windows scripting scripts (VBS files) run
invisibly when they are run by the "wscript.exe"
program (which is the default way to run them in
Windows). So instead of having your registry
entry point to your batch file, have it point to
a script. Have the script run the batch file.
Here's a simple one-line VBS script (give it any
name with a VBS file extension) that will run
your batch file invisibly. All you have to do is
replace the name of the batch file I show with
your batch file name:

----------------------------------------------------
CreateObject("Wscript.Shell").Run "C:\login.bat", 0, False
----------------------------------------------------


Miles Fenton in the UK pointed out that while
"net config" works under Win9x, you'll need to
use "net config server" or
"net config workstation" when running under NT.


http://www.ericphelps.com
----------------------------------------------------------

Issue: You receive an error message when you try to send or receive messages in Outlook 2000.

Resolution:

To troubleshoot this issue, follow these steps:

1. When you receive of the error messages that the "Symptoms" section of this article describes, make a note of the name of the server referenced in the error message.

2. Click Start, click Run, and then type TELNET servername, where servername is the name of your mail server.

3. Click OK. If you cannot connect to the server by using Telnet, there is a network connection problem to your mail server or to your Internet service provider (ISP). Contact your network administrator or ISP to help resolve the connection problem.

4. If Telnet is successful, click Start, point to All Programs, and then click Outlook Express.

5. Try to log on to Outlook Express with your Outlook 2000 mail account. If you cannot log on by using your Outlook 2000 account, the problem may be caused by a Winsock or MAPI issue. If you can log on using your Outlook 2000 e-mail account, continue to Step 6.

6. Quit Outlook Express, and then start Outlook 2000.

7. To remove the existing account, click E-mail Accounts on the Tools menu.

8. Click View or change existing e-mail accounts, and then click next.

9. Click to select the e-mail account, and then click Remove.

10. Click Finish to close the E-mail Accounts window.

11. On the File menu, click Import and Export..

12. Click to select the Import Internet Mail Account Settings check box, and then click Next.

Outlook finds and imports your account from Outlook Express.

13. Quit Outlook 2000, and then restart Outlook 2000.

-------------------------------------------------------

To remove the DELL Service Tag error, you need to run a file named MCDELTAG.exe. To search for that file please follow the instructions below.

1. Click on 'Start' button.

2. Highlight on 'Search' or 'Find'.

3. Click on 'Files or folders'.

4. In the Named field, type MCDELTAG.EXE

5. In the Look In field, type C:

6. Click on 'Search' or 'Find'

7. Once the file is found, double-click on the file to run it. NOTE: It may look like it didn't run since your screen will not change but just continue with the next step.

8. Search for another file, again click on 'Start' button.

9. Highlight on 'Search' or 'Find'. 10. Click on 'Files or folders'.

11. In the Named field, type MCREGWIZ.EXE and click on 'Search'.

12. In the Look In field, type C:

13. Click on 'Search' or 'Find'

14. Once the file is found, double-click on the file to run it.

15. The Product Setup will pop-up on the screen.

16. Continue with the Product Setup then click on 'Submit' once you have entered all the information needed.

------------------------------------------------------------------

There are three ways to check the authenticity of a site using certificates:

1. CRL

2. OCSP

3. Validation period

OCSP is online certificate status protocol. FireFox checks the certificate list against an online list server.

Sometimes the server, FireFox is trying to connect to, to verify the certificate was busy, down or blocked which is why it wouldn't work.

You can work around the problem temporarily by disabling CSP in your validation preferences:

1. Preferences > Advanced > Validation > click "Do Not Use OCSP..."

2. i) Tools > Options > Advanced > Encryption > Validation

ii) Uncheck "Validate a certificate if it specifies an OCSP server"

iii) Ok all the dialog boxes.

If the issue still persists, please start FireFox in Safe Mode and disable add-ons. You can find detailed information from this weblink:

http://kb.mozillazine.org/Safe_mode

----------------------------------------------------------------------------------------------

System Slow:-

To resolve this issue, please perform the following steps:

STEP 1: Delete User temporary files and folders.

1. Click Start- Run

2. Type %temp%

3. Click OK

4. Select all the files and press the Delete key.

STEP 2: Delete system temporary files and folders

1. Click Start- Run

2. Type temp

3. Click OK

4. Select all the files and press the Delete key.

STEP 3: Delete recently accessed files and folders shortcut

1. Click Start- Run

2. Type recent

3. Click OK

4. Select all the files and press the Delete key.

STEP 4: Delete recently accessed programs and applications shortcut

1. Click Start- Run

2. Type prefetch

3. Click OK

4. Select all the files and press the Delete key.

STEP 5: Run the Disk Cleanup utility to automatically clean unnecessary files

1. Click Start- Run

2. Type cleanmgr

3. Click OK

4. Select C: drive and click OK.

5. Select all check boxes except " Setup Log Files "

6. Click OK.

7. On the next pop up box, click " Yes "

STEP 6: Repair Internet Explorer

If you are using Internet Explorer 6.0, please run the following fix:

http://download.mcafee.com/products/licensed/cust_support_patches/IERegFix.bat

If you are using Internet Explorer 7.0, please run the following fix:

http://download.microsoft.com/download/2/1/0/21003a05-37c2-4f3a-acb8-22fc57b77648/Windows6.0-KB928089-x86.msu

NOTE: Please copy and paste the whole URL (http:// to .msu) in the address bar of the Internet Explorer and press Enter key incase clicking on the above URL does not open the download box.

STEP 7: Perform Windows update

1. Open Internet Explorer and type the following in the address bar and press the Enter key

windowsupdate.microsoft.com

NOTE: There is no www or http

2. Your computer will connect to Internet and try to update Windows automatically.

STEP 8: Run the MVT to check if McAfee products are working properly.

1. Download the McAfee Virtual Technician from this weblink:

https://us.mcafee.com/root/mvtapp.exe

2. If you receive a "File download security warning", click Yes.

3. Click Open to launch McAfee Virtual Technician.

Note: On some browsers, you must click Run.

4. Restart your computer after the installation is complete

STEP 9: Update McAfee products

1. Open McAfee Security Center and click on "Updates" button.

2. This will update your McAfee products.

STEP 10: Scan your computer for virus/trojans/spyware

1. Visit the following weblink:

https://us.mcafee.com/root/mfs/default.asp

2. Click "Yes" two times on any security warning pop up.

3. Click on the " Scan Now " button.

STEP 11: Uninstall and reinstall McAfee software

http://service.mcafee.com/FAQDocument.aspx?id=307114&lc=1033

Performing the above steps should resolve the issue.

------------------------------------------------------------------------------------------

No comments: