Windows Tips & Tricks UPDATE, September 29, 2003, —brought to you by the Windows & .NET Magazine Network and the Windows 2000 FAQ site
http://www.windows2000faq.com


This Issue Sponsored By

Argent Software
http://www.argent.com/products/download_whitepaper.cgi?product=mom&&Source=WNT

NetIQ
http://www.netiq.com/f/form/form.asp?id=2382&origin=NS_WinNetMag_tipstrks_092903


1. Commentary

2. FAQs

  • Q. How can I use Microsoft Internet Explorer (IE) to pass a username and password to an FTP site?
  • Q. I've upgraded or repaired my Windows XP installation, but now data is missing from the All Users folder. What caused this to happen, and how can I retrieve this information?
  • Q. How can I remove the Properties item from the Recycle Bin's context menu?
  • Q. What's the Google Toolbar 2.0?
  • Q. How can I clear the Google Toolbar search history in the registry?
  • Q. Why does my PC keep rebooting with the message "This system is being shut down in 60 seconds by NT Authority/System due to an interrupted Remote Procedure Call (RPC)"?

3. Announcements

  • Check Out Our 2 New Web Seminars!
  • Active Directory eBook Chapter 4 Published!

4. Event

  • The Mobile & Wireless Road Show Is Coming to Tampa and Atlanta!

5. Contact Us

  • See this section for a list of ways to contact us.

Sponsor: Argent Software

NETWORK TESTING LABS COMPARES MOM TO THE ARGENT GUARDIAN Network Testing Labs, one of the world's leading independent research companies, put together a comprehensive Comparison Paper on two leading enterprise monitoring solutions. Their conclusion: "The Argent Guardian easily beats out MOM in all our tests... The Argent Guardian will cost far less than MOM and yet provide significantly more functionality." Find out for yourself why organizations like Major League Baseball, GE Capital, AT&T, Harley Davidson, and Nokia all rely on The Argent Guardian for their enterprise monitoring and alerting needs. Download this Comparison Paper now:
http://www.argent.com/products/download_whitepaper.cgi?product=mom&&Source=WNT


1. Commentary
by John Savill, FAQ Editor, jsavill@winnetmag.com

This week, I explain how to use Microsoft Internet Explorer (IE) to pass a username and password to an FTP site, why some data might be missing after you upgrade or repair a Windows XP installation, and how to remove the Properties item from the Recycle Bin's context menu. I also tell you about Google Toolbar 2.0, how to clear the Google Toolbar search history in the registry, and what steps you can take to get rid of the MSBlaster (LoveSan) worm and protect your computer from becoming reinfected.

Around the industry this week, GFI Software announced a freeware version of its GFI DownloadSecurity for ISA Server (version 6) product, which uses an antivirus scan engine to scan downloads as they're received. The software is available on the company's Web site. Microsoft has announced that August 15, 2005, will be the release date of Longhorn, the successor to XP. Only 2 years to wait.


Sponsor: NetIQ

Migration Best Practices Guide
Do you need the tips and techniques to help you plan for a successful migration? Register now for NetIQ's FREE guide, "Migration Best Practices." You'll get an overview of the issues and strategies to consider for the various migration techniques and a step-by-step migration workflow. Discover how NetIQ's Migration Suite can help you accelerate the transition between platforms while minimizing the impact on your IT resources. Register now.
http://www.netiq.com/f/form/form.asp?id=2382&origin=NS_WinNetMag_tipstrks_092903


2. FAQs

Q. How can I use Microsoft Internet Explorer (IE) to pass a username and password to an FTP site?

A. If you access an FTP site that doesn't allow anonymous access, you must provide a username and password. To access an FTP site anonymously from IE, use the syntax

ftp://ftp.<site name>.com</site>

To pass a username and password, the syntax is

ftp://<username>:<password>@<ftp site></ftp></password></username>

For example, to access the Internet Software Consortium (ISC) ftp site, you might type

ftp://john:john@ibm.com@ftp.isc.org

where "john" is the username and "john@ibm.com" is the password.

Similarly, to pass just a username, you can use the syntax

ftp://<username>@<ftp site></ftp></username>

Q. I've upgraded or repaired my Windows XP installation, but now data is missing from the All Users folder. What caused this to happen, and how can I retrieve this information?

A. Data can disappear from the All Users folder if you've performed an in-place upgrade of XP (i.e., installed XP over an existing XP installation), used the XP installation CD-ROM and selected R to repair the XP installation, or upgraded XP Home Edition to XP Professional Edition. To recover the missing data, you must restore the information from a backup copy.

To prevent this problem from happening in the future, look for and delete a file named undo_guimode.txt. This file is typically in the \%windir%\system32 folder. The undo_guimode.txt file often appears on systems in which the manufacturer has preinstalled XP. The first time you start such a system, the system often calls a wizard that creates the file.

Q. How can I remove the Properties item from the Recycle Bin's context menu?

A. To remove the Recycle Bin's Properties context menu item and restrict users from changing the configuration, perform the following steps:

  1. Start a registry editor (e.g., regedit.exe).
  2. Navigate to the HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer registry subkey.
  3. From the Edit menu, select New, DWORD Value.
  4. Enter the name NoPropertiesRecycleBin, then press Enter.
  5. Double-click the new value, set it to 1, then click OK.
  6. Close the registry editor.
  7. Log off and log on for the change to take effect.

You can set this registry entry for all users of a machine by navigating to the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer registry subkey and following Steps 3 through 7.

Q. What's the Google Toolbar 2.0?

A. Google has released an add-on for Microsoft Internet Explorer (IE) that provides fast access for performing Google searches and enhances your browser functionality. Some of the toolbar's features include

  • blocking pop-up advertising
  • automatically completing Web forms according to information you provide
  • performing searches within a specified site
  • highlighting search terms on matching pages

The toolbar is free and is available at http://toolbar.google.com. The pop-up suppression alone is well worth the download.

Q. How can I clear the Google Toolbar search history in the registry?

A. The Google Toolbar is an add-on search tool for Microsoft Internet Explorer (IE). To clear the toolbar's search history, perform the following steps:

  1. Start a registry editor (e.g., regedit.exe).
  2. Navigate to the HKEY_CURRENT_USER\Software\Google\NavClient\1.1 registry subkey (yes, the registry subkey is 1.1, even though you might have installed version 2.0 of the toolbar).
  3. Select the History subkey, press the Del key on your keyboard, then click Yes to the confirmation.
  4. Close the registry editor.

You'll need to log off and log on to clear the cache of previous searches within IE.

Q. Why does my PC keep rebooting with the message "This system is being shut down in 60 seconds by NT Authority/System due to an interrupted Remote Procedure Call (RPC)"?

A. The error you've encountered is a symptom of the MSBlaster (LoveSan) worm, which has been around since August 2003. To resolve this error, you first need to use the command

shutdown -a

to stop the system from shutting down so that you can patch the computer and remove the virus. Next, download and install the patch, which is available on Microsoft's Web site.

To remove running versions of the virus from your PC, open Task Manager, select the Processes tab, then click End Process for all of the following processes:

  • MSBLAST.EXE
  • PENIS32.EXE
  • TEEKIDS.EXE
  • MSPATCH.EXE
  • MSLAUGH.EXE
  • ENBIEI.EXE

To prevent the virus from starting again, perform the following steps:

  1. Start a registry editor (e.g., regedit.exe).
  2. Navigate to the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run registry subkey.
  3. Remove any value that mentions any of the executables listed above.
  4. Close the registry editor.
  5. Open Windows Explorer, search your Windows folder for any of the executables listed above, then remove those files.
  6. If you're running Windows XP, enable the Internet Connection Firewall (ICF) and use Windows Update to keep your system up-to-date.

An automated virus-removal tool that replaces the steps above is available at the Symantec Web site. (If you use this tool, you'll still need to download and install the patch from the Microsoft Web site.)

3. Announcements
(from Windows & .NET Magazine and its partners)

  • Check Out Our 2 New Web Seminars!

  • "Plan, Migrate, Manage: Shifting Seamlessly from NT4 to Windows 2003" will help you discover tips and tricks to maximize planning, administration, and performance. "The Hidden Costs of Spam ... What You Don't Know Can Hurt You" will show you how to quantify costs and find antispam solutions. Register today!
    http://www.winnetmag.com/seminars

  • Active Directory eBook Chapter 4 Published!

  • The fourth chapter of Windows & .NET Magazine's popular eBook "Windows 2003: Active Directory Administration Essentials" is now available at no charge! Chapter 4 looks at what's inside Windows Server 2003 forests and DNS. Download it now!
    http://www.WindowsITlibrary.com/ebooks/administeringad/index.cfm?pc=adupd

    4. Event
    (brought to you by Windows & .NET Magazine)

  • The Mobile & Wireless Road Show Is Coming to Tampa and Atlanta!

  • Learn more about the wireless and mobility solutions that are available today, plus discover how going wireless can offer low risk, proven performance, and compatibility with existing and emerging industry standards. Register now for this free, 12-city event!
    http://www.winnetmag.com/roadshows/wireless

    5. Contact Us
    Here's how to reach us with your comments and questions:

    This weekly email newsletter is brought to you by Windows & .NET Magazine, the leading publication for Windows professionals who want to learn more and perform better. Subscribe today.
    http://www.winnetmag.com/sub.cfm?code=wswi201x1z

    Receive the latest information about the Windows and .NET topics of your choice. Subscribe to our other FREE email newsletters.
    http://www.winnetmag.net/email