Wednesday, May 23, 2012

How to disable security certificate warning on windows XP

 Instructions :
1) Start menu -> Run gpedit.msc
2) Go to Local Computer Policy -> User Configuration
3) Administrative Templates -> Windows Components
4) Attachment Manager and enable "Default risk level for file attachments"
5) Enable "Inclusion list for low file types" and add to this list the file extensions that you want to open without triggering this message.

How to restore missing: regedit and/or msconfig files

sometimes malwares rename/delete : regedit/msconfig.

Make sure you still have the executable files:

C:\WINDOWS\regedit.exe
and
C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe


If you dont have then restore it in the given way:-

put the xp cd and type (where X is the CD drive name):

EXPAND -R X:\I386\MSCONFIG.EX_ C:\WINDOWS\PCHEALTH\HELPCTR\BINARIES

That should restore MSConfig.exe to your Windows. IF MSConfig.exe is already there and you still can’t launch MSCONFIG from Run command, then the reference to the path within the registry may be wrong. Check this location in the registry:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MSCONFIG.EXE

In the right pane, next to Default, it should show:

C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe

How to remove: Windows Script Host Settings Window pop up's after restart of computer.

1.) In run type regedit
2.) Navigate to Hkey_local_machine \software \microsoft \windowsNT \currentversion \winlogon
3.) Here there is a userinit registry double click on that
4.) In the Value data field there will b something like C:\WINDOWS\system32\userinit.exe, C:\WINDOWS\system32\wscript.exe
5.) Delete the C:\WINDOWS\system32\wscript.exe part so that the field only has C:\WINDOWS\system32\userinit.exe,
6.) Click ok and close the registry editor and then restart windows

"ipconfig is not recognized as an internal or external command" or "sfc /scannow is not recognized as an internal or external command"

cause ::

ipconfig.exe should be residing in C:\WINDOWS\SYSTEM32 folder

Either the file doesn't exist or it's not in the required path i.e.there's may be a copy of ipconfig.exe sitting in the dllcache folder, if the original got deleted, in C:\WINDOWS\SYSTEM32\DLLCACHE

Solution ::

go to: Computer -> Properties -> Advanced -> Environment variables and replacing the PATH command (that somehow had been replaced) with C:\Windows;C:\Windows\System32

or

%SystemRoot%\\system32;%SystemRoot%;%SystemRoot%\\System32\\dllcache


This basically tells your PC to look in the Windows system32 folder for the file first

"The Windows Installer Service Could Not Be Accessed"


Description:

The Windows Installer Service that is included with Windows is used to install the Isabel Security Components. If this service is not working correctly, the installation of the Isabel Security Components will fail.

Cause:

This issue may occur when:
  • The Windows Installer Service that is included with Windows XP is unregistered or damaged.

Error messages:

The Windows Installer Service Could Not Be Accessed

Resolution :

Method 1:

To resolve this issue, follow these steps:
  1. Log on to your computer as an administrator.
  2. Click Start, and then click Run.
  3. In the Open box, type cmd, and then click OK.
  4. At the command prompt, type msiexec.exe /unregister, and then press ENTER.
  5. Type msiexec /regserver, and then press ENTER.
Verify that the SYSTEM account has full control access permissions to the HKEY_CLASSES_ROOT hive in the Windows registry. In some cases, you may also have to add Administrator accounts.
  
To do so:

Note - This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:

322756  (http://support.microsoft.com/kb/322756/ ) How to back up and restore the registry in Windows
a.       Click Start, click Run, type regedit in the Open box, and then click OK.
b.      Click the following registry hive:
HKEY_CLASSES_ROOT
c.       On the Edit menu, click Permissions.
d.      If SYSTEM is not listed in the Group or user names list, click Add, make sure that the local computer name appears in the From this location box, type system in the Enter the object names to select box, click Check Names, and then click OK.
e.       Click SYSTEM in the Group or user names list, and then select the Full Control check box under Allow in the Permissions for SYSTEM box.
f.       Click Apply, click OK, and then quit Registry Editor.
                        Restart the computer. If the problem is not resolved, repair Windows XP. 


Method 2 (if above doesn't work):

1. Under Control Panel ->  Administrative Tools -> Services
2. Right click on the Remote Procedure Call (RPC) Service
3. Select Log In Tab
4. Select Log As "Local System account" and tick "Allow service to interact with desktop

5. Reboot.

After reboot installer service should work normally.

Method 3 via registry edit:

1. Download msiserver.zip and save it to Desktop.
http://www.winhelponline.com/blog/wp-content/uploads/msiserv­er.zip
2. Unzip the file and extract msiserver.reg to the Desktop.
3. Right-click msiserver.reg and choose Merge.
4. Click Yes when asked for confirmation.
5. Restart Windows.

Method 4:


 1.  Open Run, and type in services.msc then press Enter. Alternatively, go to Control Panel -> Administrator Tools -> Services.
 2.  Locate Windows Installer in the all install services listing.
 3.  Verify that the Status is Started. If the Status column is blank, right click on Windows Installer and select Start.
 4.  If you get error trying to force start the Windows Installer service, try to change the Startup Type to Automatic (default is Manual), and then restart the computer.

Final Notes:


if get the error message like:

Could not start the windows installer service on local computer
Error 3 : the system cannot find the path specified

 

You will not be able to start the Windows Installer service if "msiexec" exists twice in your C:\Windows\System32 folder (one with .exe extension and one with no extension). Be sure it only exists as "msiexec.exe".

Tuesday, March 10, 2009

ERROR : "Registry Editing has been disabled by your administrator"

Cause: This error occurs if the DisableRegistryTools Policy is enabled (mostly due to an accidental modification or a virus present in your system).

You can perform the steps in any of below methods to remove the registry editing restrictions.

Method 1: Using the REG.EXE console tool

1. Click Start → Run and type this command:

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools /t REG_DWORD /d 0 /f

Now, you should be able to launch the Registry Editor.

Method 2: Using the Group Policy Editor

  • Click Start → Run and type gpedit.msc and press ENTER

  • Go to the following location:

User Configuration → Administrative Templates → System

  • Double-click “Prevent access to registry editing tools”. It will probably be not configured or enabled.

  • If it’s enabled, disable it and if it’s not configured, first enable it, apply settings and then disable it.

  • Exit the Group Policy Editor

  • Run gpupdate in command prompt to apply the group policies.

Note: If the setting already reads Not Configured, set it to Enabled, and click Apply. Then revert it back to Not Configured. This ensures that the DisableRegistryTools registry value is removed successfully.

Method 3 : Copy the following code in a notepad and save it as "reg.vbs". Then double click on it to run it. The registry should be enabled.

'Enable/Disable Registry Editing tools

Option Explicit

'Declare variables
Dim WSHShell, n, MyBox, p, t, mustboot, errnum, vers
Dim enab, disab, jobfunc, itemtype

Set WSHShell = WScript.CreateObject("WScript.Shell")
p = "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\"
p = p & "DisableRegistryTools"
itemtype = "REG_DWORD"
mustboot = "Log off and back on, or restart your pc to" & vbCR & "effect the changes"
enab = "ENABLED"
disab = "DISABLED"
jobfunc = "Registry Editing Tools are now "

'This section tries to read the registry key value. If not present an
'error is generated. Normal error return should be 0 if value is
'present
t = "Confirmation"
Err.Clear
On Error Resume Next
n = WSHShell.RegRead (p)
On Error Goto 0
errnum = Err.Number

if errnum <> 0 then
'Create the registry key value for DisableRegistryTools with value 0
WSHShell.RegWrite p, 0, itemtype
End If

'If the key is present, or was created, it is toggled
'Confirmations can be disabled by commenting out
'the two MyBox lines below

If n = 0 Then
n = 1
WSHShell.RegWrite p, n, itemtype
Mybox = MsgBox(jobfunc & disab & vbCR & mustboot, 4096, t)
ElseIf n = 1 then
n = 0
WSHShell.RegWrite p, n, itemtype
Mybox = MsgBox(jobfunc & enab & vbCR & mustboot, 4096, t)
End If

Method 4 : Heres the script given in italics below. Just copy and paste in a notepad. Name the file as "editregenable.reg". After you get the file just right click and select merege. Then restart the computer:

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableRegistryTools"=dword:00000000

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"**.del.DisableRegistryTools"=-

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\LocalUser\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableRegistryTools"=dword:00000000

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\LocalUser\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"**del.DisableRegistryTools"=-

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoSaveSettings"=dword:00000000

The effects are usually instant, else it works after restarting your computer .

Now try to open the registry editor and see if it works.

Note: If none of the above methods works or your registry editor again gets automatically disabled say after restart, then it is highly likely that there is a virus present in your system. Hence it is recommended that the virus is first removed and then the above steps are performed.

Friday, March 6, 2009

ERROR MESSAGE: “DATA EXECUTION PREVENTION”


If you click Close Message, the program quits, and Windows Error Reporting gives you the option to send an error report.

Causes:

There can be many like:-

  • Due to some issues in a program/software e.g. drivers, applications, etc.

  • If you have used a crack against Windows OS executables, DLL files, etc.

  • Some malicious software might have harmed your system files or changed the security settings.

What is Data Execution Prevention?

Data Execution Prevention (DEP) is a security feature that can help prevent damage to your computer from viruses and other security threats. Harmful programs can try to attack Windows by attempting to run (also known as execute) code from system memory locations reserved for Windows and other authorized programs. These types of attacks can harm your programs and files.

DEP was introduced in Windows XP Service Pack 2 and is included in Windows XP Tablet PC Edition 2005, Windows Server 2003 Service Pack 1 and later, Windows Vista, and Windows Server 2008. It is also included in beta versions of Windows 7.

DEP can help protect your computer by monitoring your programs to make sure that they use system memory safely. If DEP notices a program on your computer using memory incorrectly, it closes the program and notifies you.

It's a feature that can be turned on or off, or be configured.

Turning Off DEP

You can turn off DEP completely by doing this:-

  • Right click on My Computer

  • Click on Properties

  • Click on the Advanced tab

  • Click on the Settings button in the Performance section

  • Click on the Data Execution Prevention tab and make necessary settings.

Alternatively you can also do the following:-

  1. Click Start, click Run, type sysdm.cpl, and then click OK.

  2. On the Advanced tab, under Performance, click Settings.

  3. On the Data Execution Prevention tab, use one of the following procedures:

    • Click Turn on DEP for essential Windows programs and services only to select the OptIn policy.

    • Click Turn on DEP for all programs and services except those I select to select the OptOut policy, and then click Add to add the programs that you do not want to use the DEP feature.

  4. Click OK two times.


Configure Exceptions to DEP

If you have a program you know is genuine and that happens to cause DEP errors you can add it to the list of exceptions.

To do so, click on the Add button. And locate the software or program's ".exe" file. Let’s take “Foxit PDF reader” as an example.




In this example the program is located in "C:\Program Files\Foxit Software\Foxit Reader\Foxit Reader.exe". The final result should look something like this:


Now, the program has been added to the list of exceptions. It will not be protected by DEP, but everything else in your system will be.



However, if you get the following message while turning off the DEP for a program:-

"This program must run with data execution prevention (DEP) enabled.
You cannot turn off DEP for this program."

Then the most likely reason can be that the program is cracked or it’s not in its original form. In such a situation reinstall or replace that program with its original version. And then you can turn off the DEP for the same.

Note: In general scenario it is suggested NOT to turn off the DEP.

How to disable security certificate warning on windows XP

 Instructions : 1) Start menu -> Run gpedit.msc 2) Go to Local Computer Policy -> User Configuration 3) Administrative Templates ->...