Windows: Difference between revisions

From DWIKI
 
(8 intermediate revisions by the same user not shown)
Line 3: Line 3:


*[[Cloning Windows/XP]]
*[[Cloning Windows/XP]]
*[http://www.mvps.org/winhelp2002/ A Troubleshooting Guide to Windows XP]


==Tools and commands==
==Tools and commands==
Line 18: Line 19:


==Viruses and spyware==
==Viruses and spyware==
Hitman


AVG
*[http://www.livecdlist.com/purpose/windows-antivirus The liveCD list]
*[http://www.surfright.nl/en/hitmanpro Hitman Pro]
 
*http://www.malwarebytes.org/
*http://www.combofix.org/
*crapcleaner
 
First let the scanners fetch their updates, disconnect system from network and then run malwarebytes before combofix
 
===virus scanners===
*AVG
*avira
*avast


avoid Norton :)
avoid Norton :)


==FAQs==
==FAQs==
Line 29: Line 40:
Boot a linux rescue CD containing chntpw and use that, or boot sysrescuecd and select 'ntpasss'
Boot a linux rescue CD containing chntpw and use that, or boot sysrescuecd and select 'ntpasss'


===collect passwords===
http://www.maxfreeware.com/cain-and-abel-4920-microsoft-password-recovery.html


===Recovery console===
===Recovery console===
Line 44: Line 58:


seems related to "prf*tmp" files on stored profile
seems related to "prf*tmp" files on stored profile
===Get hardware info===
[http://www.cpuid.com/softwares/cpu-z.html cpu-z]

Latest revision as of 18:51, 15 December 2013

Links

Tools and commands

mmc

wmi

Windows Management Instrumentation

mmi

setacl

netsh

Third party tools

Viruses and spyware

First let the scanners fetch their updates, disconnect system from network and then run malwarebytes before combofix

virus scanners

  • AVG
  • avira
  • avast

avoid Norton :)

FAQs

change NT password

Boot a linux rescue CD containing chntpw and use that, or boot sysrescuecd and select 'ntpasss'


collect passwords

http://www.maxfreeware.com/cain-and-abel-4920-microsoft-password-recovery.html

Recovery console

Boot from CD, press R for recovery console

recovery console commands

Error logs

Problem access rights profile

(exact message???)

seems related to "prf*tmp" files on stored profile


Get hardware info

cpu-z