| TinyApps.Org |
| Small is beautiful |
HOME0. Internet
1. Text
2. Graphics
3. System
4. File
5. Misc
6. Palm
7. OS X
BLOG
DOCS
FAQ
LINKS
CONTACT
Windows XP hanging after login #
Upon logging in to Windows XP, the Volume icon would appear in the system tray (yes, I like calling it "the system tray" - so does Microsoft - OK, well, not always) and then nothing else would happen for about two or three minutes. During this time, the System Properties and Network Connections windows would not open. Finally, the wireless and wired network icons would appear with a flurry of disk activity. This unhappy state of affairs was solved (after several frustrating hours) by simply disabling the Workstation service.
/windows | Jul 13, 2008
Convert Outlook Express DBX files to MBOX or EML #Ulrich Krebs' free and open source DbxConv can convert Outlook Express DBX files to both MBOX and EML formats.
/windows | Jun 06, 2008
Cleaning Microsoft Word HTML #Microsoft's Office 2000 HTML Filter 2.0 combined with TidyGUI has performed well for me in the past when converting MSWord-generated HTML. Sadly, the former does not work with Office 2003, so I tried half a dozen or so alternatives (including the latest version of Tidy) to no avail. At long last I stumbled upon CleanWordHtml, a 3k .NET console app that (along with TidyGUI and a little batch replace) did a wonderful job of cleaning up the mess.
/windows | May 24, 2008
Identifying suspicious executable files #Last year, the folks at Panda found that "79% of new malware is using some type of packing technique". Here are two apps to help you identify such suspicious executables:
- Red Curtain "examines multiple aspects of an executable, looking at things such as the entropy (in other words, randomness), indications of packing, compiler and packing signatures, the presence of digital signatures, and other characteristics to generate a threat 'score.'" (via Grand Stream Dreams)
- PEiD "detects most common packers, cryptors and compilers for PE files. It can currently detect more than 600 different signatures in PE files." Features include: heuristic scanning options, disassembler, hex viewer, and many more.
- It quickly pares down a group of executable files to the ones in which secure programming was not an objective of the software developers
- It can do in seconds what could take a security analyst days or weeks to do using hex editors and file dump utilities
- It knows what to look for and where to look for it in the PE format
- It knows when to stop looking when specific security vulnerability indicators are not present
/windows | May 11, 2008
ThreatExpert - Like your own automated malware testing sandbox #Yet another post on the aforementioned Offensive Computing has turned up an excellent resource: ThreatExpert (developed by PC Tools). You upload a threat, their system apparently runs and monitors the threat in a sandbox, and then spits out a report listing file system, memory, and registry modifications - very cool!
UPDATE 1: A similar submission service is available from Sunbelt: CWSandbox.
UPDATE 2: CastleCops has a list of these sandboxing scan services here.
/windows | May 11, 2008
A few anti-malware links #After reading Reverse Engineering Malware, I wanted to find a white hat malware sample site. Google turned up this post on Bugtraq from a few years ago announcing just such a site called Offensive Computing. It is still going strong, with almost 285,000 malware samples available. As an added bonus, a quick trip to the forums revealed OSAM, an autorun manager with a number of unique features for combatting malware (including rootkits). A portable version is available here; you may need the DLLs at the bottom of the page as well.
UPDATE: Just stumbled on this Offensive Computing presentation from DEFCON 15: Malware Secrets. A bit more digging has revealed a list of their videos.
/windows | May 11, 2008
Bmail - Like Blat on a Diet #
bmail [17k] + Lean command line SMTP mail sender 
(via Sun Kim)
/windows | Apr 30, 2008
Mount VMWare virtual disks and dd images under Windows #Virtual Disk Driver (VDK) 3.2 [100k] {S}+ Mount VMWare virtual disks and raw sector images (made with tools like ddrescue) under 32-bit versions of Windows NT/2000/XP/2003.
UPDATE: Jacopo Lazzari kindly informs us of his GUI for VDK as well as another one which he likes even more. Jacopo adds: "By default, VDK mounts RAW images with a Nx64x32 geometry, which can lead to incorrect data retrieving. To mount a RAW image with the correct Nx255x63 used under all NT based systems, you need to use the .pln descriptor file, see these:
http://forum.winimage.com/viewtopic.php?p=938
http://www.msfn.org/board/Help-Mount-physical-disk-image-virtual-HDD-t80281.html&st=1
http://www.forensicfocus.com/index.php?name=Forums&file=viewtopic&t=1489&postdays=0&postorder=asc&start=38
http://www.forensicfocus.com/index.php?name=Forums&file=viewtopic&t=1489&postdays=0&postorder=asc&start=42 "
/windows | Feb 23, 2008
Freeware alternative to Faronics' Deep Freeze #Looking for a "reboot to restore" app similar to Deep Freeze? Check out the freeware Returnil Virtual System Personal Edition. It is extremely easy to setup and use, and the installer weighs in just under 2MB! Review
/windows | Feb 10, 2008
Automatically Map Network Drives #Newly added to the Docs section: Automatically Map Network Drives on Domain Login for All Users, Certain Users, or Certain Groups
/windows | Jan 21, 2008
Categories
Blosxom Archive
2005: 10 11 12
2006: 1 2 3 4 5 6 7 8 9 10 11 12
2007: 1 2 3 4 5 6 7 8 9 10 11 12
2008: 1 2 3 4 5 6 7
2006: 1 2 3 4 5 6 7 8 9 10 11 12
2007: 1 2 3 4 5 6 7 8 9 10 11 12
2008: 1 2 3 4 5 6 7
Blogger Archive
Ezine Archive