Windows: Difference between revisions

From DWIKI
 
(9 intermediate revisions by the same user not shown)
Line 3: Line 3:


*[[Cloning Windows/XP]]
*[[Cloning Windows/XP]]
*[http://www.mvps.org/winhelp2002/ A Troubleshooting Guide to Windows XP]


==Tools and commands==
==Tools and commands==
Line 13: Line 14:


===netsh===
===netsh===
===Third party tools===
*[http://www.filehippo.com/download_ccleaner/ ccleaner]


==Viruses and spyware==
==Viruses and spyware==
Hitman


AVG
*[http://www.livecdlist.com/purpose/windows-antivirus The liveCD list]
*[http://www.surfright.nl/en/hitmanpro Hitman Pro]
 
*http://www.malwarebytes.org/
*http://www.combofix.org/
*crapcleaner
 
First let the scanners fetch their updates, disconnect system from network and then run malwarebytes before combofix
 
===virus scanners===
*AVG
*avira
*avast


avoid Norton :)
avoid Norton :)


==FAQs==
==FAQs==
Line 26: Line 40:
Boot a linux rescue CD containing chntpw and use that, or boot sysrescuecd and select 'ntpasss'
Boot a linux rescue CD containing chntpw and use that, or boot sysrescuecd and select 'ntpasss'


===collect passwords===
http://www.maxfreeware.com/cain-and-abel-4920-microsoft-password-recovery.html


===Recovery console===
===Recovery console===
Line 41: Line 58:


seems related to "prf*tmp" files on stored profile
seems related to "prf*tmp" files on stored profile
===Get hardware info===
[http://www.cpuid.com/softwares/cpu-z.html cpu-z]

Latest revision as of 19:51, 15 December 2013

Links

Tools and commands

mmc

wmi

Windows Management Instrumentation

mmi

setacl

netsh

Third party tools

Viruses and spyware

First let the scanners fetch their updates, disconnect system from network and then run malwarebytes before combofix

virus scanners

  • AVG
  • avira
  • avast

avoid Norton :)

FAQs

change NT password

Boot a linux rescue CD containing chntpw and use that, or boot sysrescuecd and select 'ntpasss'


collect passwords

http://www.maxfreeware.com/cain-and-abel-4920-microsoft-password-recovery.html

Recovery console

Boot from CD, press R for recovery console

recovery console commands

Error logs

Problem access rights profile

(exact message???)

seems related to "prf*tmp" files on stored profile


Get hardware info

cpu-z