WHU Technology

A couple of days ago we were trouble shooting remote desktop for our client.  We could not figure out why we would get disconnected once we have entered in the username and password.  We were able to access her system when we used webex, logmein, and pcanywhere with no problem.  But when we use Windows Remote Desktop either get disconnected right away or get a “connection was ended because of network error.”

Here are the specs of the system:
Dell Precision T3400
Intel Core 2 Duo 2.80 GHz
nVidia NVS 290 256MB
250 GB Hard Drive

 We would log into their Windows 2003 Server then to their Windows XP workstation.  Seems easy enough.  We have checked all settings for remote desktop on both the Server and Workstation.  These settings are exactly what is needed. 

So then we tried to login again and still get kicked out.  We remember reading somewhere online that this may be caused by an nVidia Video Driver.  After 3-4 hours of troubleshooting this system, we went to nVidia’s website and looked up the date of their driver and compared it to the Workstations driver, the workstation driver is older.  Therefore, we updated the driver and rebooted the system and remote desktop from the server to the workstation, and BAM worked perfectly.

So here are the steps you will fix this issue:

1. Download the nVidia Driver from their website, and save

2. Run the file you just saved

3.  This should automatically update your driver

4. Reboot your Workstation

5. and Try Remote desktop again

The Role of the F5 Key and Shutdown Problems
When I first put this page together I meant to include this information. Unfortunately it totally slipped my mind. One of the hazards of being an Elder(ly) Geek, but better late than never. Thanks to reader Glen M. for jogging my memory.

When XP is first installed it tries to determine what type of BIOS is available on the computer Newer systems have what is known as Advanced Configuration and Power Interface (ACPI) capability. Unfortunately, XP doesn’t always recognize a computer BIOS is ACPI capable and doesn’t install the support for ACPI. Even more unfortunate is the fact that if ACPI support isn’t determined at the initial install it’s virtually impossible to correct this at a later time short of reinstalling XP over the top of the previous XP installation. To do so requires changing the Hardware Abstraction Layer (HAL). The chances of successfully changing a HAL after XP has been installed is pretty close to zilch.

Once you drop the CD in the tray and fire up the computer to install XP, the first thing you’ll see at the bottom of the screen is the option to press F6 if you need to install a SCSI or RAID controller. Don’t press F6. Press F5 instead. This will take you to a separate menu of Hardware Abstraction Layer’s where you can choose an appropriate HAL that supports ACPI. The choices will be:

• ACPI Multiprocessor PC
• ACPI Uniprocessor PC
• Advanced Configuration and Power Interface (ACPI) PC
• Compaq SystemPro Multiprocessor or 100% Compatible PC
• MPS Uniprocessor PC
• MPS Multiprocessor PC
• Standard PC
• Standard PC with C-Step i486
• Other

Many users have written to say the only visible options they have are the last two listed above. This is an interface glitch that defaults the list to the bottom. Just use the up and down arrows to scroll through all the options.
In the majority of installations the ‘Advanced Configuration and Power Interface (ACPI) PC’ HAL is the one you will want to use. A few cautions are also in order:

• Obtain and install the latest BIOS for your motherboard before you begin the XP installation.
• Equally as important as using the proper HAL on ACPI capable systems, is NOT using it on systems that are not ACPI compatible. The install may complete but the system will almost surely fail to start when it reboots.
• There are situations where it is definitely not desirable to use an ACPI HAL even if it is supported by the BIOS. This predominately applies to servers, but to ensure that an ACPI HAL will not be used or automatically detected and used, press F7 instead of F5 as discussed previously.

Considering the number of problems that users have with systems not shutting down completely I wonder why this feature is not prominently mentioned and documented. It could save many headaches, but now you know. A good piece of knowledge to have tucked away for your next XP install.
As a final note, to determine if your computer was detected as being ACPI enabled:

Right click My Computer then click Properties > Hardware > Device Manager.
Expand the entry called Computer.
If the entry is ‘Advanced Configuration and Power Interface (ACPI) PC’ you’re all set. If it says ‘Standard PC’ the computer BIOS was not detected as being ACPI capable.

Today I tried installing windows xp on a Toshiba L455-S5000.  This system comes  with Windows 7, but I wanted to downgrade to Windows XP.  And I got the blue screen and I recalled that windows xp does not detect most SATA controllers.  Therefore, I looked up on Toshiba’s support website and found that they do have an Intel Matrix Storage SATA HDD Driver.  You will need another computer with network connection, floppy disk, and a floppy drive.  YES, I did say floppy drive.  Windows XP will only recognize a floppy drive for this portion of the installation (I will explain further below).  I’ve downloaded the file and extracted the .exe file.  To do this you can extracted with any zip files.  I used winrar or winzip to extract this file.  After you have extracted the file you can put it on a floppy drive.  For additional downloads go to this link: http://laptopforums.toshiba.com/t5/Windows-Vista-Windows-XP/Downgrading-L455-S5975-from-7-to-XP-driver-issues/m-p/66429 Jamesbond2010 has these files under rapidshare.com to download and for additonal help.

The “Blue Screen of Death” can occur virtually at any time.  Issues with drivers, a hard drive issue, viruses and so on.  But this is a very specific type of blue screen error, bsod 

• STOP: 0×0000007B (parameter1, parameter2, parameter3, parameter4)
  INACCESSIBLE_BOOT_DEVICE
• Setup has encountered a fatal error that prevents it from continuing.
  Contact your product support representative for assistance. The following status will assist them in diagnosing the problem.
  (0×4, 0×1, 0, 0)
  Setup cannot continue. Power down or reboot your computer now.
• You may also receive a “Stop 0×0000007B” error message during Windows XP Setup when the Setup program restarts during the installation process. When you receive a Stop error while the Setup program is running, you receive the second error message. To troubleshoot this issue, read the following four sections to determine if any one of the issues applies to you. If none of the issues apply to you, use the following general troubleshooting steps at the end of the article.

http://support.microsoft.com/kb/324103 you can get more information on this error with microsoft.

This is a very common issue with SATA hard drives if you do not have the correct drivers.  Normally, when you install Windows XP you will go through the process and before it reaches the repair or install windows options you will receive the blue screen. 

Here are the steps to have the correct driver:

1. First you will need to have a floppy drive, you don’t have one you can buy a usb floppy drive at any electronic store.  These normally will run you about $40-$80. 

2. Now place your disk in the floppy drive plug usb end to your computer.

3.  Place your Windows XP cd in your cd rom and start your computer.

4.  Make sure you have the cd boot first.

5.  During the start up of windows setup keep pressing F6 and soon you will have the option to select a SCSI or RAID driver.

6. You will need to press “S” to specify driver, after doing so you are given the option to choose your driver.  Normally you want to choose the one with AHCI if you are not using RAID or SCSI.

7.  after that you will need to just follow the steps and complete your installation.

and that is it, let me know if this is useful.

Ok, I know alot of our clients are getting the Blue and White Shield Virus or also known as Personal Security Virus.  

Personal Security

Personal Security is a very aggressive fake anti-virus application infe

cting computers connected over the Internet. Personal Security virus frequently propagates via malicious  websites and sneak into computer without showing any signs and bypassing installed antivirus programs. Actually, Personal Security virus will alter system configuration to have itself run during Windows start-up process.

This bogus application can disable antivirus programs on victims computer and blocked Internet access by redirecting it to a fake “Register your computer’s software” web page.  Once inside the PC, Personal Security virus can overpower any anti-virus software installed by connecting to a remote computer to upgrade itself or download another malicious files. Affected computers will continue to experienced extreme pop-up alerts and warning messages from Personal Security virus that encourage users to register the program.

Please DO NOT PURCHASE THIS SOFTWARE!

SYMTOPMS:

The blue and white shield is on your desktop, and on your task tray.  You will notice once in a while that your computer will have a yellow window with an red X telling you that some programs have been blocked because it is a virus.  There is no internet access.

RESOLUTION:

Automated Removal Instructions for Personal Security using Malwarebytes’ Anti-Malware:

1. Print out these instructions as we may need to close every window that is open later in the fix.
2. It is possible that the infection you are trying to remove will not allow you to download files on the infected computer. If this is the case, then you will need to download the files requested in this guide on another computer and then transfer them to the infected computer. You can transfer the files via a CD/DVD, external drive, or USB flash drive.
3. Before we can do anything we must first end the processes that belong to Personal Security so that it does not interfere with the cleaning procedure. To do this, download the following file to your desktop.rkill.com Download Link
4. Once it is downloaded, double-click on the rkill.com in order to automatically attempt to stop any processes associated with Personal Security and other Rogue programs. Please be patient while the program looks for various malware programs and ends them. When it has finished, the black window will automatically close and you can continue with the next step. If you get a message that rkill is an infection, do not be concerned. This message is just a fake warning given by Personal Security when it terminates programs that may potentially remove it. If you run into these infections warnings that close Rkill, a trick is to leave the warning on the screen and then run Rkill again. By not closing the warning, this typically will allow you to bypass the malware trying to protect itself so that rkill can terminate Personal Security . So, please try running Rkill until malware is no longer running. You will then be able to proceed with the rest of the guide.Do not reboot your computer after running rkill as the malware programs will start again.�

5. Now you should download Malwarebytes’ Anti-Malware, or MBAM, from the following location and save it to your desktop:Malwarebytes’ Anti-Malware Download Link
6. Once downloaded, close all programs and Windows on your computer, including this one.
7. Double-click on the icon on your desktop named mbam-setup.exe. This will start the installation of MBAM onto your computer.
8. When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure you leave both the Update Malwarebytes’ Anti-Malware and  Launch Malwarebytes’ Anti-Malware checked. Then click on the Finish button. If MalwareBytes’ prompts you to reboot, please do not do so.
9. MBAM will now automatically start and you will see a message stating that you should update the program before performing a scan. As MBAM will automatically update itself after the install, you can press the OK button to close that box and you will now be at the main program as shown below.

Personal Security Virus, had evolved rapidly…we have seen different versions and infections.  So if you need to know more about this virus you can contact us or go to the link below.

For additional information you can find it at BleepingComputer.com

Windows XP gives you the ability to store user names and passwords on your local computer so you do not have to enter in your credentials each time you access different sites or resources. Of course this provides some simplicity for users that have to remember more than one user name and password. However, in terms of security, any one who sits down at your computer while you are logged on can then access sites and resources using your cached credentials.

You can view and remove the stored credentials on your computer using the following steps:

1. Click Start and select Run. 
2. Type in rundll32.exe keymgr.dll, KRShowKeyMgr and click OK.
3. The Stored User Names and Passwords dialog box will appear.
4. You can remove an entry by selecting it from the list and clicking the Remove button.
5. Click Close.