Bienvenido! - Willkommen! - Welcome!

Bitácora Técnica de Tux&Cía., Santa Cruz de la Sierra, BO
Bitácora Central: Tux&Cía.
Bitácora de Información Avanzada: Tux&Cía.-Información
May the source be with you!
Showing posts with label tools. Show all posts
Showing posts with label tools. Show all posts

Saturday, October 15, 2011

Remote Server Administration Tools

Source
Microsoft released the Remote Server Administration Tools for Windows 7 with Service Pack 1 (SP1) now. Download and install the Update.

If you already applied my Workaround, you can install the Update, I tried it and can't find any issue with installing the new RSAT update.
This post was provided as a workaround. Don't use it any longer!!!!!!!!
Get the Remote Server Administration Tools for Windows 7 with Service Pack 1 (SP1) and use this new installer!

=====================

Remote Server Administration Tools for Windows® 7 with SP1 enables IT administrators to manage roles and features that are installed on computers that are running Windows Server® 2008 R2, Windows Server® 2008, or Windows Server® 2003, from a remote computer that is running Windows 7 or Windows 7 with SP1

Overview**Remote Server Administration Tools for Windows 7 with SP1 can be installed ONLY on computers that are running the Enterprise, Professional, or Ultimate editions of Windows 7 or Windows 7 with SP1.**
Remote Server Administration Tools for Windows 7 with SP1 enables IT administrators to manage roles and features that are installed on remote computers that are running Windows Server 2008 R2 with SP1 or Windows Server 2008 R2 (and, for some roles and features, Windows Server 2008 or Windows Server 2003) from a remote computer that is running Windows 7 or Windows 7 with SP1. It includes support for remote management of computers that are running either the Server Core or full installation options of Windows Server 2008 R2 with SP1, Windows Server 2008 R2, and for some roles and features, Windows Server 2008. Some roles and features on Windows Server 2003 can be managed remotely by using Remote Server Administration Tools for Windows 7 with SP1, although the Server Core installation option is not available with the Windows Server 2003 operating system.

This feature is comparable in functionality to the Windows Server 2003 Administrative Tools Pack and Remote Server Administration Tools for Windows Vista with Service Pack 1 (SP1).

Tuesday, November 16, 2010

JavE -free Ascii Editor

Source
JavE is a free Ascii Editor. Rather than for editing texts, it is intended for drawing simple diagrams by using Ascii characters.
It is like a graphics editor for editing texts instead of images.
JavE screenshot drawing a line Use your
mouse to
draw texts!
______________________________________
  ,' -> create Ascii art                  `.
 /  -> draw sketches for e-mails            \
|  -> comment source code of programs        |
| -> diagrams for visually handicaped people |
 \  -> ...                                  /
  `._______  _____________________________,'
          /,'
      O  /'
     /|-
     /|                                       
JavE is written in 100% pure Java and so should run on almost every operating system.
It is a standalone application and not available as applet.

Sunday, September 5, 2010

Rizone Tech BeepCodes

BeepCodes
The computer POST (Power On Self Test) tests the computer, insuring that it meets the necessary system requirements and that all hardware is working properly before starting the remainder of the boot process. If the computer passes the POST, the computer will have a single beep (with some computer BIOS manufacturers it may beep twice) as the computer starts and it will continue to start normally. However, if the computer fails the POST, the computer will either not beep at all or will generate a beep code, which tells the user the source of the problem. This little utility will help you to lookup these beep codes and figure out what they represent.

Download Information
File Name: BeepCodes.zip
Size: 423 KB
Version: 0.0.1.168
Portable: Yes (Run from USB drive)
OS Support: Windows 2000, XP, 2003, Vista, 2008, 7
Downloads: 23096 Satisfied users
Download Mirror 1: Rizone Technologies

Tuesday, August 31, 2010

hddguru Low-Level-Format-Tool & more

Thank you very much, Dimitry!
Firmware
files.hddguru.com/index.php 
files.hddguru.com/download/Software/
ultimatebootcd.com/
hdat2.com./
Atola Technology Archive Restoring Factory Hard Drive Capacity
HDDGURU: Software: HDD diagnostics and recovery
files.hddguru.com/download/Software/DiskInternals%20Recovery/
This utility, on the bootable CD, will then examine your system, detect all 2.5/1.8 inch hard drives installed, and then check the firmware revision of the drive. If required, it will prompt you to run the appropriate firmware update program for your drive. 
hddguru.com/content/en/software/2005.10.02-MHDD/
Utility for repairing HDD bad blocks, 0 sector, HDD bios settings
Restoring Factory Hard Drive Capacity to reduce hdd capacity
hddguru.com/software/2005.10.02-MHDD/ 
Partition Find and Mount allows you to recover deleted partitions. What's special in this program is that it allows you to mount lost partitions right into the system, so the operating system sees that lost partition like a good one. This software also has the possibility to create and mount images of the entire hard drive or separate partitions.
==================================
HDD Capacity Restore Tool allows you to restore factory capacity of any hard drive. A complete capacity restore guide is supplied with the application.
hdd-tools.com/products/cr/download/crsetup.exe 
this tool can NOT recognise USB Mass Storage devices
pull out an old PATA hard drive, install windows XP32bit on it, install SP3 and hdd capacity restore.
This utility has nothing to do with partitions or images of anything. It only works with the hard drive as a physical device. You certainly cannot alter (restore) capacity of a hard disk that you use to boot the Operating System… If this is the case, then you would have to boot from some other hard drive (or attach this hard drive to another working PC as a secondary drive).
If you’re looking to restore capacity on a notebook drive and you don’t have a desktop available, you can use Hitachi’s Feature Tool, which must be copied onto a bootable CD/DVD. Google Hitachi Feature Tool and follow the instructions. Good luck!
Unfortunately, it will not see hard drives on Promise or any similar additional cards; this is “normal”.
------------------------------------------------------
Samsung HD103UI 1TB:
hdd-tools.com/products/cr/download/crsetup.exe
==================================

This freeware Low Level Format utility will erase, Low-Level Format and re-certify a SATA, IDE or SCSI hard disk drive with any size of up to 281 474 976 710 655 bytes. Will work with USB and FIREWIRE external drive enclosures. Low-level formatting of Flash Cards is supported too. Low Level Format Tool will clear partitions, MBR, and every bit of user data. The program utilizes Ultra-DMA transfers when possibleFor use as portable application make sure that you put affhdd.sys into C:\Windows\System32
Also, the operating system has to be 32-bit only.

windows displays a yellow exclamation over dynamic disk in my diskmanagement. no partition. how can i get my data back?
http://www.computerbase.de/forum/archive/index.php/t-135480.html
Test the disk with ‘TestDisk’ and set the disk partition to primär and u get the data back
------------------------------------------
IBM/Hitachi Drive Feature Tool is a DOS-bootable tool for changing various ATA features. The Feature Tool allows you to control some of the features of IBM/Hitachi Deskstar and Travelstar high performance ATA hard disk drives and supports 48-bit addressing, so it will work with the new large capacity drives.
Seagate Technologies
The utilities of Seagate work for Western Digital hdd
Source 
System limitation: DiscWizard
older PCs may only recognize correctly drives under 32 GB.
Seagate has a piece of software that installs in the boot section of the drive and overrides the restrictive BIOS.
Seagate's capacity issues FAQ
Barracuda 5400.1 Installation Guide ST340015A and ST340015ACE ATA
And if the new ribbon does not fix it, then run the zero write program on that hdd a couple times.
SeaTools for DOS
Manual on how to do that

F. Set Capacity
Occasionally, a disc drive may be too large and its size needs to be reduced to a lower capacity. Similarly, a drive with a reduced capacity may need to be reset to its native maximum capacity. Three choices are available under this section:
S - Set 32GB Capacity. A common setting for older systems.
R - Reset to Drive Maximum. Full capacity is restored.
M - Set Manually. Allow you to set a specific size.
It's working! the SeaTools DOS program did the trick. I reset the drive and I now have full capacity.

Thursday, August 26, 2010

USB Drive Letter Manager

Source
USBDLM is a Windows service ( for Windows 2000, XP and Vista -7) that gives control over Window's drive letter assignment for USB drives. Running as service makes it independent of the logged on user's privileges, so there is no need to give the users the privilege to change drive letters.
It automatically solves conflicts between USB drives and network or subst drives of the currently logged on user.
Furthermore you can define new default letters for USB drives and much more.
When a removable drive (USB flash drive, flash card reader, portable hard drive) is attached for the first time, Windows mounts it to the first available 'local' drive letter. If there is a network share on this letter, Windows XP will use it anyway for the new USB drive because since XP network shares are specific to the current user and not visible in the context of the system where the letter is assigned. The USB drive then appears to be invisible. This is fixed by SP3 in most situations.
You can change the letter assignments in the Windows Disk Management Console with a lot of mouse clicks but you have to do it again for every new device.
And, for USB devices that have no serial number (in violation of the USB standards) you have to do it too when you attach it to a different USB port. 
  USBDLM isn't a wonder tool. If Windows has problems with USB drives then USBDLM cannot fix it. Here are some tips for solving problems with USB drives. 

Wednesday, August 25, 2010

CrystalDiskInfo

CrystalDiskInfo is a HDD/SSD utility software which supports S.M.A.R.T and a part of USB-HDD.

Open source disk cleaner

en.sourceforge.jp/projects/sfnet_dclean/
Disk Cleaner is a tool to quickly and easily free disk space that is used by temporary files like the system temporary folder, the Internet Explorer Cache and Cookies folder, and the Recycle Bin. It can be expanded with simple text-based plug-ins.

Monday, August 23, 2010

H2testw

Danke vielmals, Herald B.!
Ist der Stick, auf den man gerade Daten retten will, wirklich heile? Kommt das in die Jahre gekommene System wirklich mit großen Festplatten zurecht? Um dies und die Integrität von Datenträgern zu klären, hat c't das kleine Programm H2testw entwickelt. Es beschreibt den gewählten Datenträger mit Testdaten, liest diese anschließend wieder ein und überprüft sie. Treten dabei keine Fehler auf, ist nicht mit kapazitätsbedingten Problemen zu rechnen. Dadurch eignet sich H2testw auch zur Erkennung manipulierter USB-Sticks mit falscher Größenangabe, wie sie 2008 in großer Zahl auf den Markt kamen. Achtung: Wenden Sie dieses Tool nur an, wenn noch keine wichtigen Daten auf dem Laufwerk lagern und es sich nicht um die Bootplatte des Systems handelt. (mfi)
Source
H2testw 1.4 has proven itself to be the best of breed for detecting counterfeit Flash drives. It is extremely easy to use and proves detailed information. Created by Harald Bögeholz, the interface is in German but has the option to run in English. It is free and standalone. Nothing is installed into the operating system. Designed for Windows it can run under Linux if Wine is installed. It will not run under Macs. If your computer can not run the software – ask a colleague or friend who has a windows based computer to help you test.
To learn more and for download information

Sections covered:
  • Gold Standard rating for H2testw 1.4 Why do you give this software such a high rating?
  • Results for a 64GB USB drive purchased on eBay, using H2testw 1.4
  • Results from H2testw have been verified on drives detected as fakes
  • Acknowledgements
  • Download Links
  • Note To Flash Drive Sellers

Gold Standard rating for H2testw 1.4? Why do you give this software such a high rating?
We give H2testw 1.4 the highest rating and recommend it for testing counterfeit USB Flash Drives for the following reasons:

  1. Easy to Use
  2. While in German an English Execution is possible
  3. Stand alone executable file – no installation required to run it
  4. You do not need administrator privileges on a computer to run it
  5. Tested to work on 1.1 and 2.0 USB drives
  6. Tested to work on 1.1 and 2.0 USB Ports
  7. Tested to work to analyze drives advertised as 4GB, 8GB, 16GB, 32GB and yes …64 GB capacity.
  8. Reports seen capacity – what the operating system sees size to be.
  9. Will write 1 GB files up to the reported size – requiring no work on your part except patience if it is a large drive and a slow computer
  10. Will read all the files it wrote and verify them
  11. Will produce a report. a) short if all is well b) detailed if there issues found.
  12. The program is offered free
The readme.txt file provides:
  • Explanation of the program and what it does for general computer users
  • Information on how to interpret the results
  • Technical information for those who have a deeper understanding of data storage and file writing and for the skeptics out there. Output results can easily be copy pasted into notepad to be saved as a text file.

Test results for a 64GB USB drive purchased on eBay, using H2testw 1.4
Sample Output For A Fake 64 GB Drive

The media is likely to be defective.
3.8 GByte OK (8084847 sectors)
58.6 GByte DATA LOST (122921617 sectors)
Details:710.5 KByte overwritten (1421 sectors)
7.6 MByte slightly changed (< 8 bit/sector, 15630 sectors)
58.6 byte corrupted (122904566 sectors)
710.5 KByte aliased memory (1421 sectors)
First error at offset: 0x000000003cef8470
Expected: 0xeb7ac43a237c5170
Found: 0xeb7a843a237c5170
H2testw version 1.3
Writing speed: 9.24 MByte/s
Reading speed: 10.8 MByte/s
H2testw v1.4
This is 4GB USB flash drive not a 64GB USB flash drive. It is of poor quality. As 4GB drive it should be about 3.9 GB not 3.8 GB formatted. This indicates in low level formatting a lot of bad sectors had to be locked out. Usually flash chips like these are rejected for major brands and should be destroyed. Unfortunately instead of the furnace flames these chips are leaving the back door of factories to be resold. These chips are a favorite for counterfeiters to reprogramme. Low cost, big profit.
The results from H2testw have been verified on drives detected as fakes. How?
  1. Drives were dissembled
  2. Controller chips identified
  3. Flash chip identified
Searches on the actual flash drives using their identification number revealed their true capacity. These matched the output from the H2testw Program.
In a few cases, when drives were disassembled, epoxy glue removed holding the flash drive to the bottom casing, quality control stickers were found with a size circled. The size? Exactly what H2testw reported as the capacity it could write to. All drives autopsied for investigation and validation of this program were purchased on eBay.
We do not see any other program that can match these features. Therefore, H2testw has been adopted as the Gold – Standard to detect and test fakes.
eBayers use this program to PROVE they have received a fake from a seller. It is confirmed with more eBayers reporting the same results for the same drive model. We have been able to prove this repeatedly, to the point we have only one conclusion. If a drive model fails capacity testing with H2testw then any for that listing on eBay is a fake. Having more eBayers test the same model only confirms what H2testw reported. The autopsies on counterfeit drives have also proven the value of this program. The report is a God send for eBayers who must file disputes. It gives them evidence to submit with their case.
Acknowledgements
To Herald Bögeholz who wrote the Program H2testw, Thank You!
To c’t Magazin für Computertechnik, Thank You!
To www.heise.de for hosting the download of the programme, Thank You!
People around the world who have suffered the misfortune to receive a Counterfeit Flash drive are grateful for your contribution in the struggle against False Capacity USB Flash Drives and memory cards.
Linux users please read: Linux H2testw Alternative Program Called F3 By Michel Machado
Download links
Using Google translation into English
Article Manipulated data loss caused by USB sticks – Heise Online
H2testw 1.4 Website – English
Note: Using translation can slow down access speed of the web pages.
German
H2testw 1.4 Website – German – Direct Site Access
You may prefer to search with Google for the software. Type in H2testw 1.4 which is the current version at the time of listing on this page. To search all versions you can just type in H2testw.
Direct Download Of Software For version 1.4 of H2testw
Note To Flash Drive Sellers
Please test your merchandise using this software. Do not offer for sale unless the drives are able to pass testing. You do not want to face the consequences of angry buyers. If you have drives which fail, contact the source you acquired from. Submit the proof you have as evidence for receiving counterfeit merchandise.

If the drives you offer for sale are able to pass the testing of H2testw 1.4 – congratulations!
Please indicate this in your advertising or listings. Let prospective buyers know that you have tested. That your drives pass with the program and that you are able to guarantee the true advertised capacity (minus a small overhead for operating system file formatting.).

Wednesday, August 11, 2010

Windows XP registry tweaks & utilities


Registry Edits for Windows XP
"Tweaks and Tips"
 View by Category

To use the Regedits:  Save the REG File to your hard disk. Double click it and answer yes to the import prompt. REG files can be viewed in Notepad by right clicking on the file and selecting Edit.

To use the VBS Files: Download .vbs file and save it to your hard drive (you may want to right click and use Save Target As).  Double
click  the vbs file. You will be prompted when the script is done.
NOTE: If your anti-virus software warns you of  a "malicious" script, this is normal if you have "Script Safe" or similar technology enabled.  These scripts are not malicious, but they do make changes to the System Registry.

Source
Windows XP Utilities

The utilities presented here are recommended only for Windows XP.  They may run under Windows 2000, but have not been verified to do so. Win NT IP Config is the exception, as its a Win2K applet.  All files here require the Visual Basic 6 runtime libraries, which are included in Windows XP. Where noted, these utilities will run with Service Pack 1 installed.
If you find these utilities useful in making Windows XP work the way you want it to, repairing your system or recovering from a disaster, please consider making a contribution to support my continuing efforts.
Doug's Windows XP Security Console - Version 1.4 released 10/26/2003
TitleDate Added
Access BossN/A
Add Defrag to Explorer's Context Menu11/10/2002
Add MSN Messenger to the Internet Explorer Toolbar06/20/2004
Add Nero as an Autoplay Handler06/02/2002
Add TweakUI for Windows XP to Control Panel11/15/2004
Change Default Screen Saver12/22/2002
Change Internet Time Update Interval06/02/2002
Change Owner and Organization06/02/2002
Clear "Open With" Lists06/02/2002
Create Emergency Copies of Critical XP System Utilities(Regedit, MSConfig and Task Manager)08/17/2003
Disable/Enable the Windows Logo Keys02/23/2004
Disable/Remove Windows Messenger06/02/2002
Enable Administrator on the Welcome Screen11/11/2002
Enable/Disable Automatic Administrative Shares02/06/2004
Enable/Disable Start Menu Logoff5/24/2003
Enable Searching for Text in Files05/04/2003
Enable/Disable Task Manager9/12/2003
Fix Windows XP Logon11/15/2002
Fix Windows XP Help06/03/2002
Keep User Display Settings v2.006/02/2002
QuickRes for Windows® XP - v2.008/29/2003
Recover Deleted/Erased Files
Repair Blank System Restore Calendar06/02/2002
Repair Missing Toolbars in Explorer/IE11/24/2002
Remove Hotfix Backup Files v2.1.6 - Updated 5/29/200404/06/2003
Remove Registry entries for Winlogin.exe08/29/03
Rename System (Desktop) Icons04/19/2003
Restore CD/DVD Drives to Windows Explorer11/11/2002
Restore OE to E-Mail Clients List11/15/2002
Restore Show Desktop Icon06/02/2002
Set the Numlock Key On/Off at User Logon11/25/2002
Single Click System Restore Point06/19/2008
Startup Programs Tracker v3.8 - Updated 10/31/200310/31/2003
Surf the Internet Anonymously8/31/2007
System Up Time v2.012/15/2002
Taskbar Repair Tool Plus!MVP Kelly Theriot
View More File and Folder Information

Tweaks and Fixes for Windows® XP
If you need Windows® XP support for anything other than what is provided on my site, click HERE.  Clicking on a link will open a new window with the description of the file and its usage. Click on theDOWNLOAD link on the new page to download the file. Some of these files are in VB Script format, and some are in Visual Basic 6 EXE format. The VB6 Runtimes are installed with Windows XP, so no further software installation is necessary.  In the rare case that a control is required, that isn't shipped with XP, the program will have an installer.  Note: Some of these items are User specific settings. It may be necessary to run each VBS/EXE file while logged into to that User's desktop.  If your anti-virus software warns you of a "malicious" script, this is normal if you have "Script Safe" or similar technology enabled.  These scripts are not malicious, but they do make changes to the System Registry.
NEW!! - Windows XP Security Console - Version 1.4 released 10/26/2003

Install Windows 2000 After XP is Installed
Add Defrag to Explorer's Context MenuOpenme.exe Fix

My Documents Opens at Logon
Add TweakUI to Control PanelPrevent Messenger from starting with Outlook Express
Adjust Internet Time Update IntervalRemove Common Tasks from Desktop
Bypass Regedit's "Last State"Remove Home Page Setting Restriction
Cannot Create Toolbar For..... error messageRemove Mi.Mail.C Worm - NEW
CD-Rom Autoplay Tab MissingRemove W32.Sobig.E Worm from XP
Change Registered Owner and OrganizationRemove TweakUI v1.33 (and earlier) from XP
Change Taskbar Grouping ThresholdRestore CD/DVD Drives to Explorer
Clean KWBot.Worm Registry EntriesReset Inactive Tray Icon Information
Clear Media Player's Recent Files listRestore Default File Associations Easily
Clear XP's Search HistoryRestore Missing Tabs in Internet Options
Defrag All Hard Disks - (Can run as a Scheduled Task)Restore OE to E-mail Clients list
Disable/Enable Log Off on Start MenuRestore Open/Save dialog Sort Order
Disable CD Autorun - Home EditionRestore Recycle Bin Desktop Icon
Disable CD Autorun - PRO EditionRestore Toolbars in IE and Windows® Explorer
Disable MSConfig Selective Startup ScreenRestore XP's Welcome/Logon Screen
Disable/Enable Recent Documents HistoryRun As Dialog Opens When Double Clicking a Shortcut
Disable Media Player's Recent Files ListSearch/Command Prompt Opens When Double Clicking a Folder
Disable/Enable Unread Mail NotificationsSend To Desktop Shortcut - FIX
Disable Windows® XP Balloon TipsSet Numlock State On at Startup
Enable Administrator account on Welcome ScreenSingle Click System Restore Point
Enable CD Burning for Limited UsersWindows Messenger - Disable/Remove
File Association FixesWindows Update - Prompts to Install Hotfix KB823980
Find and Open the OE Mail StoreWindows Update - Cryptographic Service Error
Find and Open the Windows Address Book Folder 
Fix Internet Options RestrictionWindows Update - Prompts to Install Hotfix Q811493
Fix Windows® XP HelpWindows Update - Prompts to Install Hotfix - Manual Entry
Hide Users on the Welcome ScreenWindows Update Disabled (Network Policy)
Install 98/Me After XP is InstalledWindows XP Doesn't Save User Settings
 Windows XP Search Problems

Information on VB and Java Scripting 
All material © Doug Knox

Monday, August 2, 2010

Securable

Source
SecurAble probes the system's processor to determine the presence, absence and operational status of three modern processor features:
  • 64-bit instruction extensions,
  • Hardware support for detecting and preventing
    the execution of code in program data areas, ... and
  • Hardware support for system resource “virtualization.”
Hardware D.E.P., NX, XD & EVP
Modern processor hardware can be instructed to designate regions of memory as non-executable. This means that the memory can be used to store reference data to be read and written, but that the processor cannot treat the contents of the memory as program code to be directly executed. Intel calls this capability in their newer processors XD for “eXecute Disable” and AMD refers to it as NX for “No eXecute.” AMD's marketing materials also sometimes refer to this capability by the annoying marketing term EVP for Enhanced Virus Protection. 

As a hardware capability of modern processors this addition is important, but its use depends entirely upon support from the operating system. So when Microsoft introduced support for this into their operating systems, they termed it Hardware DEP for Data Execution Prevention. Support for hardware DEP was introduced into the 32-bit versions of Windows XP with Service Pack 2, into Windows 2003 Server with Service Pack 1, and has always been present in Windows Vista. Unfortunately, however, in every case, hardware DEP support is disabled for all or most of the system's software by default. It does no one any good unless it's turned on. 

When hardware DEP support is active, an XD/NX-aware operating system running on an XD/NX-capable and enabled processor will mark all memory regions not explicitly containing executable code as non-executable. This protects the system's “heaps”, “stacks”, data and communications buffers from inadvertently running any executable code they might contain. 

Why would data or communications buffers ever contain executable code? . . . because so-called “Buffer Overrun” attacks are the predominant way Internet-connected computers have historically been remotely hacked and compromised. Hackers locate obscure software vulnerabilities which allow them to “overrun” the buffers with their own data. This tricks the computer into executing the hacker's supplied data (which is actually code) contained within that buffer. But if the operating system has marked that Internet communications buffer region of memory as only being valid for containing data and NOT code, the hacker's attack will never get started. Instead, the operating system will display a notice to the user that the vulnerable program is being terminated BEFORE any of the hacker's code has the chance to run. 

DEPdialog

The real beauty of this system is that it provides strong protection
from UNKNOWN vulnerabilities in the system and user programs.

Anti-Virus and anti-malware software is useful, but as we know, virus signature files must be continually updated to keep A/V software aware of new threats. Significantly, A/V software is unable to protect against unknown viruses and malware intrusions because it searches for known malicious code rather than detecting and blocking potentially malicious behavior. Hardware DEP, on the other hand, when properly configured, hardens the entire system against both known and unknown vulnerabilities by detecting and preventing the behavior of code execution in data buffers. 

Buffer overrun vulnerabilities are so difficult to prevent that scores of them are being found and exploited in operating system and application software every day. Taking advantage of modern processor XD/NX capabilities is a powerful way to fight back and prevent this most common class of Internet vulnerabilities.
“DEPuty” – our next security freeware
“SecurAble” concerns itself with the capabilities and current state of the system's processor. So in the case of support for hardware DEP, SecurAble informs its user whether their system has the capability of enabling and supporting this most significant and important capability. But that's all SecurAble was designed to do. Our follow-on security freeware “DEPuty” will focus on helping users whose machines are hardware DEP capable to choose and configure among Windows several modes of DEP support, then to test and verify their system's operation and support of hardware DEP. This is important because, by default, Windows operating systems do NOT take advantage of hardware DEP capabilities due to the likelihood of false alarms caused by non-malicious programs and drivers that are not “DEP friendly.” 

If you wish to explore the use of hardware DEP with your Windows XP/SP2 or Vista system immediately, without waiting for our hand-holding DEPuty utility, Microsoft's article Knowledge base article 875352: “A detailed description of the Data Execution Prevention (DEP) feature in Windows XP Service Pack 2, Windows XP Tablet PC Edition 2005, and Windows Server 2003” explains hardware DEP's various modes and provides guidelines for enabling it on your system:

Saturday, June 19, 2010

download.systernals.com

systernals.com

The Machine SID Duplication Myth

You can use the Sysinternals PsGetSid tool to view a machine’s SID by running it with no command-line arguments:
image
Here, the revision number is 1, the authority is 5, and there are four subauthority values. At one point during the design of Windows NT, the machine SID might have been used for network identification, so in order to assure uniqueness, the SID that Setup generates has one fixed subauthority value (21) and three randomly-generated subauthority values (the numbers following “S-1-5-21” in the output). 
Even before you create the first user account on a system, Windows defines several built-in users and groups, including the Administrator and Guest accounts. Instead of generating new random SIDs for these accounts, Windows ensures their uniqueness by simply appending a per-account unique number, called a Relative Identifier (RID), to the machine SID. The RIDs for these initial accounts are predefined, so the Administrator user always has a RID of 500:
image
After installation, Windows assigns new local user and group accounts with RIDs starting at 1000. You can use PsGetSid to view the name of the account for a specified SID, and here you can see that the local SID that has a RID of 1000 is for the Abby account, the name of the administrator account Windows prompted me to name during setup:
image
In addition to these dynamically created SIDs, Windows defines a number of accounts that always have predefined SIDs, not just RIDs. One example is the Everyone group, which has the SID S-1-1-0 on every Windows system:
image
Another example, is the Local System account (System), which is the account in which several system processes like Session Manager (Smss.exe), the Service Control Manager (Services.exe) and Winlogon (Winlogon.exe) run:
image

...
...
===========================

The New Best Practice

It’s a little surprising that the SID duplication issue has gone unquestioned for so long, but everyone has assumed that someone else knew exactly why it was a problem. To my chagrin, NewSID has never really done anything useful and there’s no reason to miss it now that it’s retired. Note that Sysprep resets other machine-specific state that, if duplicated, can cause problems for certain applications like Windows Server Update Services (WSUS), so Microsoft’s support policy will still require cloned systems to be made unique with Sysprep
===================================
Source
We knew it was bound to happen. M$ has started to "mess" with the original Systernals files. The following was posted in Exetools today by MarkusO:
http://www.exetools.com/forum/showthread.php?t=10401
"Today I checked if there where any updates for one or several of my Sysinternals tools. To my suprise, all Sysinternals tools have been rebuilt on November 1st, 2006.
I compared what was changed. It seems like most code is just a recompile with different compiler settings. Microsoft has also placed a giantic new EULA in each and every executable. (all *.EXE have about the 2x - 4x the size they had before)
When Microsoft took over Sysinternals, they just packed the old executables together with new licenses. Now it seems they are messing around.
If you still want to get the latest "Sysinternals" version of your beloved tools, you should do it quickly, since nobody knows how long the old links will be working."
MarkusO then pointed out that:
"Just go to the new Sysinternals homepage, grab a link (like http://download.sysinternals.com/Files/.zip) and replace "download" with "www". This way you can still get the old (working... ) versions of the tools."
To make this process somewhat easier for those of you who might not have the patience to complie a list of the available files, here is one I put together from what others posted there and my additions to the list, comparing it to my own download of the Systernals site in August before they went M$ing. If you put this list in your favorite download manager, you can grab the files while they still remain available.
Code:
AccesChk v2.0.zip http://www.sysinternals.com/Files/accesschk.zip

AccessEnum v1.32 (SRC).zip http://www.sysinternals.com/Files/AccessEnumSource.zip

AccessEnum v1.32.zip http://www.sysinternals.com/Files/AccessEnum.zip

Accvio.zip - http://www.sysinternals.com/Files/Accvio.zip

AdRestore v1.1 (SRC).zip http://www.sysinternals.com/Files/AdRestoreSource.zip

AdRestore v1.1.zip http://www.sysinternals.com/Files/AdRestore.zip

Autologon v2.1 (SRC).zip http://www.sysinternals.com/Files/AutologonSource.zip

Autologon v2.1.zip http://www.sysinternals.com/Files/Autologon.zip

Autoruns v8.53.zip http://www.sysinternals.com/Files/Autoruns.zip

BgInfo v4.07.zip http://www.sysinternals.com/Files/BgInfo.zip

BlueScreen Screen Saver v3.2.zip  http://www.sysinternals.com/Files/BlueScreen.zip

CacheSet v1.0 (SRC).zip http://www.sysinternals.com/Files/CacheSetSource.zip

CacheSet v1.0.zip http://www.sysinternals.com/Files/CacheSet.zip

ClockRes v1.0.zip http://www.sysinternals.com/Files/ClockRes.zip

Contig v1.53.zip http://www.sysinternals.com/Files/Contig.zip

CPUMon v2.0.zip http://www.sysinternals.com/Files/CpuMon.zip

Ctrl2Cap v3.0 (SRC).zip http://www.sysinternals.com/Files/Ctrl2CapSource.zip

Ctrl2Cap v3.0.zip http://www.sysinternals.com/Files/Ctrl2Cap.zip

DebugView v4.62.zip http://www.sysinternals.com/Files/DebugViewNt.zip

DebugView9x  http://www.sysinternals.com/Files/DebugView9x.zip

DebugViewNt  http://www.sysinternals.com/Files/DebugViewNT.zip

Defrag.zip  http://www.sysinternals.com/Files/Defrag.zip

Diskkey.zip   http://www.sysinternals.com/Files/Diskkey.zip

DiskExt v1.0 (with SRC).zip http://www.sysinternals.com/Files/DiskExt.zip

Diskmon v2.01 for Win2KXP.zip  http://www.sysinternals.com/Files/DiskMon.zip

Diskmon v2.01 for WinNT.zip http://www.sysinternals.com/Files/DiskMonNt.zip

DiskView v2.21.zip http://www.sysinternals.com/Files/DiskView.zip

Du v1.3.zip http://www.sysinternals.com/Files/Du.zip

EFSDump v1.02.zip http://www.sysinternals.com/Files/EfsDump.zip

FAT32 for Windows NT 4.0 v1.06.zip http://www.sysinternals.com/Files/Fat32.exe

Filemon v7.03 for Win32.zip http://www.sysinternals.com/Files/FilemonNt.zip

Filemon v7.03 for Win64.zip http://www.sysinternals.com/Files/Filemonamd64.zip

FilemonAmd64  http://www.sysinternals.com/Files/Filemonamd64.zip

Fmifs.zip  http://www.sysinternals.com/Files/fmifs.zip

Frob v1.6a.zip http://www.sysinternals.com/Files/Frob.zip

Fundelete v2.02 (SRC).zip http://www.sysinternals.com/Files/FundeleteSource.zip

Fundelete v2.02.exe http://www.sysinternals.com/Files/Fundelete.exe

gpdisable.zip - http://www.sysinternals.com/Files/gpdisable.zip

Handle v3.2.zip http://www.sysinternals.com/Files/Handle.zip

Hex2dec v1.0.zip http://www.sysinternals.com/Files/Hex2dec.zip

Hostname v1.0.zip http://www.sysinternals.com/Files/Hostname.zip

Junction v1.04 (SRC).zip http://www.sysinternals.com/Files/JunctionSource.zip

Junction v1.04.zip http://www.sysinternals.com/Files/Junction.zip

LDMDump v1.02.zip http://www.sysinternals.com/Files/LdmDump.zip

ListDLLs v2.25.zip http://www.sysinternals.com/Files/ListDlls.zip

LiveKd v3.0.zip http://www.sysinternals.com/Files/LiveKd.zip

LoadOrder v1.0.zip http://www.sysinternals.com/Files/LoadOrder.zip

LogonSessions v1.1.zip http://www.sysinternals.com/Files/LogonSessions.zip

Native.zip   http://www.sysinternals.com/Files/Native.zip

Netstatp (SRC).zip http://www.sysinternals.com/Files/NetstatpSource.zip

NewSID v4.10.zip http://www.sysinternals.com/Files/NewSid.zip

newsidsource.zip - http://www.sysinternals.com/Files/newsidsource.zip

notmyfault.zip - http://www.sysinternals.com/Files/notmyfault.zip

NTFS for Windows 98 v2.0 (Read-Only).exe  http://www.sysinternals.com/Files/NtfsWindows98.exe

NTFSCHK v1.0.exe http://www.sysinternals.com/Files/NtfsChk.exe

NTFSDOS Professional v4.01 (Read-Only).zip http://www.sysinternals.com/Files/NtfsDosProfessional.exe

NTFSDOS v3.02R+.zip http://www.sysinternals.com/Files/NtfsDos.zip

NTFSFlp v1.0.zip http://www.sysinternals.com/Files/NtfsFlp.zip

NTFSInfo v1.0 (SRC).zip http://www.sysinternals.com/Files/NtfsInfoSource.zip

NTFSInfo v1.0.zip http://www.sysinternals.com/Files/NtfsInfo.zip

NTRecover v1.0 (Read-Only).exe http://www.sysinternals.com/Files/NtRecover.exe

PageDefrag v2.32.zip http://www.sysinternals.com/Files/PageDefrag.zip

PendMoves and MoveFile v1.1.zip http://www.sysinternals.com/Files/PendMoves.zip

physmem.zip   http://www.sysinternals.com/Files/physmem.zip

pipelist.zip   http://www.sysinternals.com/Files/pipelist.zip

PMon v1.0.zip http://www.sysinternals.com/Files/PMon.zip

Portmon v3.02.zip http://www.sysinternals.com/Files/PortMonNt.zip

Process Explorer v10.2 for Win32.zip http://www.sysinternals.com/Files/ProcessExplorerNt.zip

ProcFeatures v1.1 (with SRC).zip http://www.sysinternals.com/Files/procfeatures.zip

PsExec v1.72.zip http://www.sysinternals.com/Files/PsExec.zip

PsFile v1.01.zip http://www.sysinternals.com/Files/PsFile.zip

PsGetSid v1.42.zip http://www.sysinternals.com/Files/PsGetSid.zip

PsInfo v1.73.zip http://www.sysinternals.com/Files/PsInfo.zip

PsKill v1.11.zip http://www.sysinternals.com/Files/PsKill.zip

PsList v1.27.zip http://www.sysinternals.com/Files/PsList.zip

PsLoggedOn v1.32 (SRC).zip   http://www.sysinternals.com/Files/PsLoggedOnSource.zip

PsLoggedOn v1.32.zip http://www.sysinternals.com/Files/PsLoggedOn.zip

PsLogList v2.63.zip http://www.sysinternals.com/Files/PsLogList.zip

PsPasswd v1.21.zip http://www.sysinternals.com/Files/PsPasswd.zip

PsService v2.2.zip http://www.sysinternals.com/Files/PsService.zip

PsShutdown v2.51.zip http://www.sysinternals.com/Files/PsShutdown.zip

PsSuspend v1.05.zip http://www.sysinternals.com/Files/PsSuspend.zip

PsTools v2.34.zip http://www.sysinternals.com/Files/PsTools.zip

RegDelNull v1.1.zip http://www.sysinternals.com/Files/Regdellnull.zip

Reghide.zip    http://www.sysinternals.com/Files/reghide.zip

Regjump v1.01.zip http://www.sysinternals.com/Files/Regjump.zip

Regmon v7.03.zip http://www.sysinternals.com/Files/RegmonNt.zip

Remote Recover v2.0 (Read-Only).exe http://www.sysinternals.com/Files/RemoteRecover.exe

RootkitRevealer v1.7.zip http://www.sysinternals.com/Files/RootkitRevealer.zip

SDelete v1.51 (SRC).zip http://www.sysinternals.com/Files/SDeleteSource.zip

SDelete v1.51.zip http://www.sysinternals.com/Files/SDelete.zip

Secdemosource.zip  http://www.sysinternals.com/Files/secdemosource.zip

Secdemo.zip   http://www.sysinternals.com/Files/secdemo.zip

ShareEnum v1.6 (SRC).zip http://www.sysinternals.com/Files/ShareEnumSource.zip

ShareEnum v1.6.zip http://www.sysinternals.com/Files/ShareEnum.zip

Sigcheck v1.3.zip http://www.sysinternals.com/Files/Sigcheck.zip

Streams v1.53.zip http://www.sysinternals.com/Files/Streams.zip

Strings v2.3.zip http://www.sysinternals.com/Files/Strings.zip

Sync v2.2.zip  http://www.sysinternals.com/Files/Sync.zip

TCPView v2.4.zip http://www.sysinternals.com/Files/TcpView.zip

TDIMon v1.01.zip http://www.sysinternals.com/Files/TdiMonNt.zip

testlimit.zip    http://www.sysinternals.com/Files/testlimit.zip

Tokenmon v1.01 (SRC).zip http://www.sysinternals.com/Files/TokenmonSource.zip

Tokenmon v1.01.zip http://www.sysinternals.com/Files/Tokenmon.zip

TVCache.zip  http://www.sysinternals.com/Files/TVCache.zip

VCMon.zip   http://www.sysinternals.com/Files/VCMon.zip

VCMonsource.zip  http://www.sysinternals.com/Files/VCMonsource.zip

VXDMon.zip   http://www.sysinternals.com/Files/VXDMon.zip

VXDMonsource.zip http://www.sysinternals.com/Files/VxDMonsource.zip

VolumeId v2.0.zip http://www.sysinternals.com/Files/VolumeId.zip

Whois v1.01.zip http://www.sysinternals.com/Files/Whois.zip

Winobj v2.15.zip http://www.sysinternals.com/Files/WinObj.zip

ZoomIt v1.15.zip http://www.sysinternals.com/Files/ZoomIt.zip
Copy this list to your favorite text editor and copy all the URL's you want to a download manager and get them all (or all you want).
Some of these files are outdated by updates which apparently work on multiple systems, such a Debugview, Filemon, and Regmon, but they are included for the sake of completion of potential files still available.
By the way, M$ is offering a packed zip file of the "New" versions of these tools. This file contains all the individual (New Compiled, bloated) tools and help files:
http://download.sysinternals.com/Files/SysinternalsSuite.zip
(notice the "download" where the "www" is/should be to get the "original" files) The "download.systernals.com" link is now part of M$ technet.

Tuesday, June 15, 2010

More free tools

http://www.foundstone.com/us/resources-free-tools.asp

Top 100 Network Security Tools

Source

Insecure.Org is delighted to release this 2006 survey. I (Fyodor) asked users from the nmap-hackers mailing list to share their favorite tools, and 3,243 people responded. This allowed me to expand the list to 100 tools, and even subdivide them into categories. Anyone in the security field would be well advised to go over the list and investigate tools they are unfamiliar with. I discovered several powerful new tools this way. I also point newbies to this site whenever they write me saying “I don't know where to start”.

Respondents were allowed to list open source or commercial tools on any platform. Commercial tools are noted as such in the list below. No votes for the Nmap Security Scanner were counted because the survey was taken on a Nmap mailing list. This audience also biases the list slightly toward “attack” hacking tools rather than defensive ones.
Each tool is described by one ore more attributes:
newDid not appear on the 2003 list
/Popularity ranking rose / fell the given number since the 2003 survey
  TITLE=Generally costs money. A free limited/demo/trial version may be available.
LinuxWorks natively on Linux
*BSDWorks natively on OpenBSD, FreeBSD, Solaris, and/or other UNIX variants
OS XWorks natively on Apple Mac OS X
WindowsWorks natively on Microsoft Windows
Command-line interfaceFeatures a command-line interface
GUI InterfaceOffers a GUI (point and click) interface
Source codeSource code available for inspection.          

Wednesday, July 15, 2009

Aerofoil

Source
Aerofoil extends your Vista and Windows 7 notebook battery life by

- Allowing you to manually disable Aero Glass.
- Optionally managing Aero Glass user interface.
- Optionally managing the best two power plans.
- Optionally managing Windows Vista Sidebar.
- Optionally showing a quick hibernate button
- hibernate and power management were greatly improved in Vista.

Monday, July 13, 2009

Herramientas prohibidas para alemanes

Verbotene Tools:
AnyDVD & AnyDVD HD
SpyAgent
John the Ripper
Asterisk Logger
FairUse4WM
Advanced Office Password Recovery (Elcomsoft Co. Ltd)
WirelessKeyView
Legale Tools
No23Live
No23 Recorder
QT Lite
Tor & Privoxy & Vidalia-Paket
User Agent Switcher
TVAnts
Miro
PPMate
SopCast
PeerGuardian
CryptLoad
Secunia Personal Software Inspector
Network Share Browser
Wlandscape
Wireshark
Vorsicht, Hackerparagraph: Diese Tools sind für Admins verboten
Von Jörg Geiger und Manuel Masiero 23. Juni 2008
Vor einem Jahr verabschiedete der Bundestag mit großer Mehrheit den Paragraphen 202c des Strafgesetzbuches, unter IT-Verantwortlichen besser bekannt als Hackerparagraph. Seitdem herrscht Chaos bei Administratoren, die die betroffenen Tools für Sicherheitstests der eigenen Systeme einsetzen. CHIP Online klärt über die aktuelle Situation auf und sagt, was erlaubt und was verboten ist.
Fotostrecke: Gut oder böse - die verbotenen Tools
In IT-Unternehmen und bei Strafverfolgern herrscht seit der Einführung des so genannten Hackerparagraphen Unsicherheit (§ 202c StGB: Vorbereiten des Ausspähens und Abfangens von Daten). Der Grund:
Der Gesetzgeber stellt Herstellung, Beschaffung und Verbreitung von "Computerprogrammen, deren Zweck die Begehung einer Straftat" nach § 202a und § 202b StGB ist, unter Strafe.
In diesen beiden Paragraphen geht es um die Überwindung von Zugangssicherungen zu gespeicherten Daten und das Abfangen von Daten. Das Problem dabei: Der Gesetzestext ist an dieser Stelle sehr schwammig formuliert.
Sicherheitsexperten wie Lutz Neugebauer, Bereichsleiter Sicherheit beim Bitkom, sprechen von einer Dual-Use-Problematik. Denn einerseits werden Tools wie Passwort-Knacker oder Portscanner für Hackerangriffe eingesetzt, andererseits nutzen aber auch Administratoren, Sicherheitsforscher und Qualitätsprüfer diese Tools, um IT-Systeme sicherer zu machen. "Man sieht einem Computerprogramm leider nicht an, ob sein Zweck die Begehung einer Straftat ist", erklärt Neugebauer.
Pikant dabei: Schon beim Verdacht einer Straftat nach § 202c StGB muss die Staatsanwaltschaft ermitteln. Doch erste Anzeigen sind im Sande verlaufen, es gibt keine spektakulären Urteile. Was bleibt, ist Unsicherheit - vor allem bei den Sicherheitsverantwortlichen in Unternehmen. Was ist jetzt noch erlaubt, was strafbar und was führt sogar direkt in den Knast? CHIP Online kennt die Antworten.
...

John the Ripper (Download, 11.09.2007)
"John the Ripper" knackt gesperrte Windows-Rechner,
falls Sie mal Ihr Passwort vergessen haben.