Tuesday, 3 December 2013

Debug Crash dump file (BSOD)

When you get a stop error (Blue Screen of Death), your system writes a small file called a minidump. This is a small write up on how to debug memory dumps. This becomes extremely useful when you are trying to figure out what caused a particular stop error, and no filename was mentioned and/or it is undocumented.

You could always let Microsoft do it for you, but there is no gurantee they will answer, and it takes a very long time (over a month in my case).

Your first step is to make certain your computer is setup to record memory dumps. The small dumps are most desirable, because they aren't the size of your amount of ram!

Right click My Computer, choose properties. Click on the advanced tab, and then choose startup and recovery 'settings.' From the screenshot attached at the bottom you will see the settings you want. By default, this is largely how it is already setup; I only unchecked automatically restart for XP. For Vista, there is an extra step involved, you must click start, right click computer. Then from the next screen, click Advanced system settings. Then, its in the same location as XP.

Note: Make certain that your pagefile still resides on the system partition, otherwise WIndows will not be able to save the debug files.



Your second step is to download and install the Microsoft Debugging Tools found here: http://www.microsoft.com/whdc/devtoo...nstallx86.mspx

Once you have downloaded and installed these tools, go to start, all programs, Debugging Tools For Windows, Windbg. Once you open Windbg, you will presented with a blank screen. Click on File, Symbol File Path. Here you will enter the symbols path. Symbols are needed to effectively debug. 

The path will be:

SRV*c:\symbols*http://msdl.microsoft.com/download/symbols

Enter in this path and click OK. Now, go to File, Save Workspace so that your symbols path is saved for future use. Now what you want to do is locate your memory dumps. They are usually located in %systemroot%/minidump (in my case C:/windows/minidump).

If you notice, they are usually named the date, and then a -*number* to indicate the order of minidumps that day. My example is called Mini061904-01.dmp).

Inside of Windbg, go to File, Open Crash Dump and load the file. You will get a message to save base workspace information. Choose no.

Now you will get a debugging screen. Now it takes a little bit to run it, as the symbols have to be downloaded as they are needed. Then you will see information such as:


Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols

Microsoft (R) Windows Debugger Version 6.3.0017.0
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini061904-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows XP Kernel Version 2600 (Service Pack 1) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp2.030422-1633
Kernel base = 0x804d4000 PsLoadedModuleList = 0x80543530
Debug session time: Sat Jun 19 19:06:57 2004
System Uptime: 0 days 1:03:36.951
Loading Kernel Symbols
....................................................................................................................................
Loading unloaded module list
..........
Loading User Symbols
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 86427532, {1db, 2, 3, b} <--This is your stop code

Unable to load image pavdrv51.sys, Win32 error 2
*** WARNING: Unable to verify timestamp for pavdrv51.sys
*** ERROR: Module load completed but symbols could not be loaded for pavdrv51.sys
Probably caused by : pavdrv51.sys ( pavdrv51+7fc0 )

Followup: MachineOwner
---------

Now, we can already see what it was most likely caused by, in my case it was pavdrv51.sys, which is a Panda AV file.

If we want to get further in depth, we can use the command, !analyze -v at the kd> prompt to delve more info about the error:

kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Unknown bugcheck code (86427532)
Unknown bugcheck description <--Its unknown, and not listed on the MS KB at all.
Arguments:
Arg1: 000001db
Arg2: 00000002
Arg3: 00000003
Arg4: 0000000b

Debugging Details:
------------------


CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x86427532

LAST_CONTROL_TRANSFER: from f4198fc0 to 804f4103

STACK_TEXT: 
f41f0964 f4198fc0 86427532 000001db 00000002 nt!KeBugCheckEx+0x19
WARNING: Stack unwind information not available. Following frames may be wrong.
f41f0ba0 f419920b 864db520 f419ccf0 00000000 pavdrv51+0x7fc0
f41f0c34 804ea221 865b8910 864a52c0 806ad190 pavdrv51+0x820b
f41f0c44 8055d0fe 864a5330 86305028 864a52c0 nt!IopfCallDriver+0x31
f41f0c58 8055de46 865b8910 864a52c0 86305028 nt!IopSynchronousServiceTail+0x5e
f41f0d00 80556cea 000000a4 00000000 00000000 nt!IopXxxControlFile+0x5c2
f41f0d34 8052d571 000000a4 00000000 00000000 nt!NtDeviceIoControlFile+0x28
f41f0d34 7ffe0304 000000a4 00000000 00000000 nt!KiSystemService+0xc4
00cdff70 00000000 00000000 00000000 00000000 SharedUserData!SystemCallStub+0x4


FOLLOWUP_IP: 
pavdrv51+7fc0
f4198fc0 ?? ???

SYMBOL_STACK_INDEX: 1

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: pavdrv51+7fc0

MODULE_NAME: pavdrv51

IMAGE_NAME: pavdrv51.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 3e8c072b

STACK_COMMAND: kb

BUCKET_ID: 0x86427532_pavdrv51+7fc0

Followup: MachineOwner
---------

Update: After the intial run of the debug process, you can use the command !analyze -v to gather more information.


Now that may be more info than you need. This tutorial only covers minidumps, however, if needed, you could change your memory dump options to do a complete dump. This is useful, however, very cumbersome, as the file generated will be the same size as your amount of ram.

Note: Make absolutely sure that your symbol path is correct. If it isn't, then you will get symbol errors and not likely be able to debug the dump to get the info you desire.


Wednesday, 20 November 2013

Guide to how to Troubleshooting "User Profile Service failed the logon problem



If there is another administrator account that you can log into, then jump to step 7 after logging into that account.
However, if you can't get to any accounts at all, then start at step 1.

1. Restart your computer and hit F8 multiples times until you see a menu-like screen, if you see the Windows splash screen then repeat this step
2. Highlight and hit enter on Safe Mode with Command Prompt. Try logging in there. If it still doesn't work, then go to step17
3. If you are able to login, once a command prompt pops up, type: net user administrator password /active:yes (you can specify whatever password you want for the administrator account.)
4. If you get a message saying "The command completed successfully", then restart your computer by typing: shutdown -r
5. Boot up again pressing F8, but this time choose just Safe Mode.
6. You will be able to login as Administrator with the password you set in Step 3
7. Hit (windows logo)+R
8. Type regedit
9. Once the registry editor opens up, look for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
10. In the left pane, find the one that starts with S-1-5..... and ends with .BAK; if you don't find one, skip to step 15
11. Right click it and click Rename, then change the .BAK to .BK
12. Right click the one with the same numbering but without the .BAK and add .BAK add the end
13. Right click the one that you renamed to .BK and clickRename, delete the .BK
14. Eventually, you have switched the .BAK from the end of the second entry to the first. That should probably fix your problem.
15. If you didn't find a .BAK then try this: Open Windows Explorer to C:\Users\Default\AppData\Local\Application Data
16. If you find another Application Data below the one you're on, then delete it. That should probably also fix your problem.
17. If you can't login in Safe Mode, then reboot and hit F8 until you see the menu again, then hit enter highlightingRepair Your Computer
18. Wait until all Windows Files finish loading, then hitNext when it asks keyboard language.
19. Try logging in here also, choose your user from the dropdown menu, and type the password, then jump to step 23
20. If that still doesn't work, then if you have your Windows Installation CD still, put it in and restart your computer.
21. Hit F12 until you see a menu of boot options, choose Boot from CD
22. Choose keyboard language then hit next. Find Repair Your Computer from a little below the center left.
23. Choose Open Command Prompt and type: net user administrator password /active:yes (here again you can specify a password)
24. Close the command prompt and click Restart and jump to step 5

To disable the administrator account, type this in an elevated command prompt: net user administrator /active:n

Wednesday, 30 October 2013

RFID Door Access SE-200 Programming Guide

RFID Door Access SE-200 Programming Guide


Wiring Guide


Programming Guide

Installer Programming Code
 *2525# (default)


Change Installer Programming Code
Press [0] + [New Installer Password 3-6 digits] + [#] + [Confirm New Installer Code] + [#]
Press [*] to exit from programming mode.

Add RFID Card With Index Code
Press [1] + [Index Code 001-200] + [#]
Scan continuously it will auto continue register the unused index code.
Press [*] when done to exit from programming mode.

Add RFID Card Without Index Code
Press [2] and scan card continuously max to 200 card.
Press [*] to exit from programming mode.

REMARK: It will automatically look for available index code to store a new card without deleting any stored card.

Add/Change RFID Card Pin Code
Press [3] follow by Scan Card + [New Password 3-6 digit] + [#] + [Confirm New Password] + [#] + Repeat for another card.
Or
Press [3] + [Index Code] + [#] + [New Password 3-6 Digit] + [#] + [Confirm New Password] + [#] Repeat for another card.
Press [*] to exit from programming mode.

Assign A Pin Code To All Cards
Press [4] + [Password 3-6 Digit] + [#] + [Confirm Password] + [#]
Press [*] to exit from programming mode.

Delete A Card(s) By Index Code/Scan
Press [5] followed by index code
+ [Index Code 1] + [#]
+ [Index Code 2] + [#]
And continuously using the same steps.
Or
Press [5] followed by scan card
+ [Scan Card 1] + [#]
+ [Scan Card 2] + [#]
Press [*] to exit from programming mode.

Delete Memory
Press [6] + [1] Wait for 2 beeps
Remark: Delete all card and pin codes (Reprogram)
or
Press [6] + [2] Wait for 2 beeps
Remark: Delete all pin codes

Change Lock Release Time
Press [7] + [Time 006-200 sec max]

How To Speed Up Your Computer?

Tired of low computer performance? even yours is brand new?
Here i got few solutions to solve the problem.

1. msconfig.exe

Go to Start Button > RUN > type, msconfig.exe

Choose Selective Startup and then go to Startup tab

 In the Startup tab, untick the not-related-to-os-program (Windows)
(example: printer software, bluetooth, and etc)


2. services.msc

Go to Start Button > RUN > type, services.msc

find the not-related-to-os-program (Windows)
here list of example;
1. telephony
2. fax
3. smart card
4. smart card removal policy
5. tablet pc

if you are not using these services, you can click on these item and right click go to it properties and choose startup type as "disabled"

3rd party application program
here list of example;
1. Printer
2. Antivirus
3. Bluetooth
4. or and application program update services (ex: adobe, google chrome, mozilla firefox)

you can select this services startup type as "Manual"
so everytime you want to use the services you need to run it manually.

REMARKS: PLEASE CHOOSE WISELY. WRONG SERVICES CHOSEN YOU MIGHT END UP CAUSING SYSTEM FAILURE

3. Clean up your desktop/notebook board especially cooling fan.
do regular checkup every 3 months for the best outcome.

Good Luck!

Friday, 25 October 2013

Change MS Outlook 2013 inbox (OST > PST)

Compared to old version of MS Outlook, MS Outlook 2013 seem bit difficult to setting.
Most of you must be wondered why the "Change Folder" button missing in the
Control Panel > Mail >  Email.

Most of MS Outlook 2013 user having this problem.
But don't worry i have solution in this case.

You just need to applied "RULES" in MS Outlook interface only.

Step 1: Click On Rule> New Rule/Manage Rules

Step 2 :  Create New Rule,
for the condition its up to you to do the setting. but from my opinion,
better leave condition 1 : Select Condition leave it empty.
then click Next.

Step 3 :  Tick the box named "Move it to the specific folder"
then go to "Specified folder" and select your PST files that has been add up into data files on mail options.

After done selecting new mail box(PST) click finish then done!
all your incoming mail will be moved into your PST files automatically if this rules is turned on.


Good Luck!

Thursday, 24 October 2013

Recover Old Mailbox in MS Outlook

Have you ever experienced losing mail server account?
and how to recover your mailbox? if you created new account with EMAIL & PASSWORD,
it still don't give you access to your old mailbox.
So now how your going to recover your old mail box?

There is 2 ways to recover old mail box in MS Outlook

1. If you already change the OST into PST

Firstly you need to setup new mail account.
After that, Go to Control Panel > Mail >Click on data files.
Choose Add...
choose your old PST file.
Then start the MS Outlook.
Your email recover done! you can view your old mailbox on other email account at your account

REMARKS: Do not forget to enter password if you ever set password on your old mailbox.
                       This setting applied to all MS Outlook version.



2. If you forgot or never change your mailbox OST(Online Mailbox) into PST (Offline Mailbox)

There is only one ways to do that. you need OST to PST converter.
because "Data File" setting only approved PST files and if you trying to setup new account using your old OST file it is futile because Outlook will never allowed you to do that. It is because OST file is a Online Mailbox which is recognize only one account its mean you cant add another account in the same OST file.

Mostly OST to PST converter software application will ask you to buy and free trial will not make you change that file even for 1 time.
so for the best OST to PST converter i recommend you to using "Kernel OST to PST Converter"

REMARKS: This Software free version only give you FREE VIEW only. if you want to convert it you need to buy the software.

Click Here To Download

Tuesday, 1 October 2013

Smadav REV. 9.3 (Best Antivirus for this time)

SmadAv REV 9.3
Most antivirus software can not be installed with other antivirus , it is because the antivirus is designed for primary protection on your computer . Unlike the SmadAV , is a type of antivirus SmadAV are designed as additional protection , so 100 % compatible and can work well although there has been another antivirus on your computer , in this case SmadAV serves as a second line of defense . SmadAV has its own way (behavior , heuristic , and whitelisting ) in detecting and cleaning viruses that will further enhance the security on your computer . Because the resource usage is very small SmadAV , SmadAV will not increase your computer's performance under heavy use. So , with a mix between SmadAV and antivirus protection that is installed on your computer will further strengthen the defense of your computer from virus infection .
 
 
2 ) Best USB Antivirus ( Total Protection USB stick )
USB stick is one of the largest media spread of the virus. SmadAV have special technology for total prevention of virus that spreads via USB stick . SmadAV mission is 100 % no virus infection of the flash . SmadAV have enough signatures of viruses that infect the flash , and has the special ability to detect new viruses in pendrive although not in the database SmadAV . Not only prevention , Smadav also able to clean up a virus that infects and restore virus hidden files on the USB stick
 
3 ) Best for offline use ( no need to update too often )
SmadAV very well be used for computers that rarely or even not connected to the internet . SmadAV do not need to update as often as other antivirus that usually do updates per week and even per day . SmadAV usually do updates only once a month (monthly ) . SmadAV not overly dependent on the signature / virus database , but much depends on the behavior detection techniques , heuristic , and whitelisting .
 
4 ) Cleaner and tools to clean the virus
SmadAV also able to clean the virus that has infected your computer and repair registry altered by the virus . Other antivirus usually not done cleaning the registry so that the computer has not returned to normal after cleaning the antivirus. Many supporting tools that are included in SmadAV as a weapon for cleaning the virus . Note : Not all types of viruses can be cleaned SmadAV , SmadAV is still not able to clean the virus type or types of rootkits penginfeksi program ( eg virus Ramnit , Sality , Alman , Virut , etc. . ) Because this strain has blown most of your program files . Our focus at this time is due to the type of virus clearance in addition to the two types ( eg : virus WormShortcut , Cervical , MSO , Brontok , etc. .
 

Adwcleaner


We all love freeware, but someone has to pay the bills. That means sponsors who want you to try their products. You can decline optional downloads, but every now and then, unwelcome programs appear. The answer? More freeware, of course! Xplode's AdwCleaner is portable freeware that targets and removes adware, toolbars, browser hijackers, and other potentially unwanted programs (PUPs). It's lightweight and fast, making it ideal for quick, regular preventative maintenance. It's Windows 8-ready, too.
We extracted and ran AdwCleaner on an ordinary Windows 7 PC with typical protection. AdwCleaner's logo-dominated user interface is small and generally easy to figure out. The controls are limited to Search and Delete buttons, though an unobtrusive Help feature in the upper-left corner accesses not only the program's options, which basically let you remove browsers and other items from the scan, but also the developer's site, where you'll find more information about AdwCleaner and PUPs, too. Clicking the Uninstall button completely removes this portable program from your system. That's a great feature if you're disinfecting a computer for a friend or relative since it leaves no traces behind, but it also deletes the executable file, so we suggest simply closing the window when you run AdwCleaner at home. When you're cleaning someone else's PC, simply copy AdwCleaner from your USB drive to the host machine and hit Uninstall when you're done.
We clicked Search, and a progress bar tracked AdwCleaner's scan. The scan finished quickly and turned up a small litter of PUPs whose pedigree AdwCleaner listed in a text file. While none was a serious threat, we were only too happy to send the whole bunch packing. AdwCleaner required a reboot to finish the job, which is usually a good sign, because a reboot is often required to thoroughly purge persistent PUPs, not to mention adware, toolbars, and other unwanted yet hard-to-eradicate software. But before and after we cleaned up after the PUPs, we also ran some similar freeware cleaners. AdwCleaner found things the others missed but also missed some minor items other tools found. That was more than enough reason to add AdwCleaner to our regularly scheduled maintenance.

Click Here To Download