Windows 7 Search in Start Menu bar is broken

Posted on March 7th, 2010 in Microsoft, Server 2008, Windows 7 by Gil Kreslavsky

 

I got this after installing some update, can’t say exactly which.
The problem symptom is that when you type anything in search bar it looks like that
Search programs and files

To solve it.

Go to Run> type regedit.exe

Navigate to :HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Explorer\FolderTypes\{EF87B4CB-F2CE-4785-8658-4CA6C63E38C6}\TopViews\

You will see a key named {00000000-0000-0000-0000-000000000000}
Just rename it to anything else like {00000000-0000-0000-0000-000000000000}.Orig

After you rename the key , start Task manager and kill the explorer.exe process

Run the process again from file>New Task (Run..)

File new task Run

Type in bar explorer.exe

And Walla!

It works!

Microsoft published a hotfix that addresses the issue in Windows 7 and 2008R2

http://support.microsoft.com/kb/977380

Outlook 2007 free/busy works slow or could not be retrieved

Posted on January 19th, 2010 in Excahnge 2007, Outlook 2007 by Gil Kreslavsky

 

During migration from Exchange 2003 to 2007 we had the problem with Outlook 2007 client free busy response was slow , about 10 seconds to load .

To fix it .
Open registry editor on your Desktop(where outlook is installed)

Navigate to the following path : HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Outlook\Options\Calendar
Create new DWORD value named UseLegacyFB and set value to 1

Note:
0 or not set will use default outlook settings
1 will use Public Folder based Free/Busy information

 

Read KB958934 to get more information.

Vista Unable to send Fax – Error: Media is write protected

Posted on March 16th, 2009 in Microsoft, Vista by Gil Kreslavsky

To fix fax sending issue in Windows Vista:

  • Click Start >in search field type “regedit“  hit Enter
  • Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax
  • On the right pane find and click on ArchiveFolder
  • Check if  the value of the key is  C:\ProgramData\Microsoft\Windows NT\MSFax if not fill it
    note:The location can be D:\ or any other windows installation folder
  • Reboot your Vista

Change windows vista default program association via registry

Posted on March 5th, 2009 in Microsoft, Vista by Gil Kreslavsky

Windows Vista allows users to change and set default program association for most sort of file extension via Control Panel’s “Set Associations” and “Set Default Programs” under “Default Programs” link.

default-programs assotiation

However, there is no option  to reset or restore file extension association  back to original settings as in   freshly installed Windows Vista OS.

List of programs out there under “Set Default Programs” link, such as Internet Explorer,  Outlook, Calender, Windows Mail, Windows Media Player, winamp, winzip and Windows Photo Gallery have defined their own default file extensions, types and protocols.
And, user can clearly set the program as the default program to use to open all file sorts and protocols it can open.
Even so, it may not be the default file association such a configured in Windows Vista originally.

Unless user remembers and knows the original file association and change the default program for the kind of file type accordingly using the graphical user interface (GUI) in Control Panel, else here’s another workaround to restore and reset the file association to the default Windows Vista version of file association.

  1. Click Start Menu, and when that happens type regedit in the Start Search and press ENTER.
  2. Navigate to the following registry branch: HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Explorer\FileExts\[ext] Replace the [exe] with the actual file extension that you want to restore . If you unsure, coup browse through all the sub-key under FileExts.
  3. Delete the sub-key named UserChoice.
  4. Exit from Registry Editor.

Manual Remove of Winspywareprotectscan.exe

Posted on July 16th, 2008 in Malicious Software, Spyware, Virus by Gil Kreslavsky

Risk Level : Very High ( Dangerous )

Symptoms

Pop up balloon warning messages claiming that your PC is infected.

* “Critical System Error”,
* “Your computer is infected”,

Search and kill the following processes

* antivirus.v.1.0.0, WinSpywareProtect.EXE, WinSpywareProtectSetup.exe

Remove Scan.Winspywareprotectscan.com files & dlls files

* antivirus.v.1.0.0,
* WinSpywareProtect.EXE,
* WinSpywareProtectSetup.exe

Remove/Modify corrupt Registry Entries

HKEY_LOCAL_MACHINE\SOFTWARE\WinSpywareProtect
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Uninstall\WinSpywareProtect
HKEY_ALL_USERS\Software\Adsl Software Limited
HKEY_CLASSES_ROOT\TacOnlyOne

Use Shield Deluxe 2008 – Antivirus & Anti-Spyware to scan yor computer for other threats

Remove Virusheat.com trojan

Posted on February 17th, 2008 in Malicious Software, Spyware, Virus by Gil Kreslavsky

Virus Heat is a Trojan.Win32 . More or less, it does degrade performance of computers and generate annoying pop up witch send you to virusheat.com.

Virus Heat Manual Removal Process:

1. Go to Control Panel >Add or Remove Programs and uninstall Virus Heat

2. Close all programs.

3. Go to >Start>Run >regedit find and delete key

“HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\

Windows\CurrentVersion\Uninstall\Virus Heat”

4. Restart the computer.

5. Stop Virus Heat process

6. Find and delete the following infected files from your system. Don’t worry if you don’t find these files. Just proceed to next step. Virus Heat 3.9.exe, wuuawkz.dll , iinqyl.dll

7. Go to C:\Program Files\ folder and delete the “Virus Heat” folder (if you can’t delete it, reboot your computer to safe mode then delete the folder.

8. After all steps go to http://siri.geekstogo.com/SmitfraudFix.php and download last version of Smitfraudfix.exe

9. Reboot the computer in safe mode and run the utility.

W32.BAGLE virus – wintems.exe hldrrr.exe srosa.sys

Posted on February 9th, 2008 in Malicious Software, Spyware, Virus by Gil Kreslavsky

W32.BAGLE virus – wintems.exe hldrrr.exe srosa.sys

I must say that with all my of experience that one was one of the hardest to remove ..
It disables your current antivirus software, prohibit you from accessing system in safe mode , and changes names each time it starts.

So.. Here are the steps

Go to http://www.majorgeeks.com/GMER_d5198.html and download GMER
Run the tool and when it finds wintems.exe process kill him..

  1. Run regedit go to HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache and see all entries regarding “C:\WINDOWS\system32\drivers” .
  2. In Explorer window Go to> tools>folder options>view and select show hidden files
  3. Browse to your C:\WINDOWS\system32\drivers .. find drivers folder and try to delete all files listed in HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache
  4. Scan your system with panda online scanner (the only one that actually cleans , not only detects
  5. Install anti virus program, download last updates and do a full scan to your system

Of course there is always an option to reapply service pack or do a reinstall to your system.

The problem is solved !

Thanks to Eran Amir

Outlook Hyperlink Opening problem

Posted on December 20th, 2007 in Microsoft, Other, Outlook 2002 XP, Outlook 2003, Outlook 2007, Windows XP by Gil Kreslavsky

“The operation has been canceled due to restrictions in effect on this computer. Please contact your system administrator.”

They are few solutions:

Reset Web settings

  1. Start Internet Explorer
  2. On the Tools menu, click Internet Options .
  3. Click the Programs tab , and then click the Reset Web Settings button.
  4. Under Internet programs, verify that the correct e-mail program is selected
  5. Click to select the Internet Explorer should check to see whether it is the default browser check box.
  6. Click Apply, and then click OK.

Export the registry key from another computer

  1. Click Start, and then click Run
  2. In the Open box, type regedit, and then click OK
  3. Locate the following registry key: HKEY_Local_Machine\Software\Classes\htmlfile\shell\open\command
  4. Click the command folder.
  5. On the File or Registry menu (depending on your operating system), click Export
  6. Note the location of where the file will be saved. The registry file can be saved directly to the hard drive or floppy disk.
  7. Type a unique file name, and then click Save
  8. Quit the Registry Editor

Here is the Reg File

Other Possible Solutions

  1. Follow the instruction on the following KB articles:
    You receive an error message when you click a hyperlink in Outlook
    http://support.microsoft.com/kb/310049/en-us
  2. This issue may occur if there is a Group Policy object (GPO) that restricts what
    programs you can run. Programs can be restricted if either of the following
    policies in the domain organizational unit group policy or a local computer group
    policy have been applied:
    o Do not run specified Windows applications.
    o Run only the allowed Windows applications.
  3. In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\htmlfile\shell\open\command change
    “C:\Program Files\Internet Explorer\IEXPLORE.EXE” -nohome to
    “C:\Program Files\Internet Explorer\iexplore.exe” –nohome
    (and viseversa)
  4. Delete the DWORD value named DisallowRun. (or remove IEXPLORE.EXE) – To do so: Locate and then click the following registry key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
  5. to narrow the policy causing the issue to be:
    User Configuration \ Administrative Templates \ Windows Components \ Internet Explorer \ Browser menus\
    Disable Open in New Window Menu option — set this to DISABLE if it enable
  6. Disable the following Group Policy:
    User Configuration \ Administrative Templates \ Windows Components \ Internet Explorer \ Browser menusFile menu: Disable New Menu option
    File menu: Disable Open Menu option
    File menu: Disable closing the browser and Explorer Windows