TweakHound

Computer stuff...

Main navigation

Wednesday Random Stuff…

By Leave a Comment

CCleaner Updated
v5.30.6065 (23 May 2017)
– Improved Edge Cookie cleaning
– Updated Internet Explorer 10 and 11 History cleaning
– Updated Thunderbird 52 History cleaning
– Updated Windows Explorer MRU Cache cleaning
– Improved SSD detection algorithm
– Optimized Update Checking process
– Minor GUI improvements
– Minor bug fixes
Download

VMware Player 12.5.6
– Day 0 support of the Windows 10 Creators Update (version 1703).
– Bug fixes and security updates.
Download

Latest Video Drivers
AMD Crimson ReLive Edition 17.5.2 (5/18/2017)
Nvidia Ceforce Game Ready Driver 382.33 WHQL (5/22/2017)

MediaMonkey 4.1.16.1836
“It’s a significant update with over 30 fixes and improvements to music syncing, tagging, UPnP, podcasting, playback and more.”
Download & Info

Get Rid Of SMB1 In Windows 7

By 9 Comments

A reader was confused by all the steps in Microsoft’s How to enable and disable SMBv1, SMBv2, and SMBv3 in Windows and Windows Server.
Should he use PowerShell, Registry Editor, Group Policy? Should he disable it on Client or Server or both?
Because it is a security risk, it is important to ditch SMB1 on all platforms.
You should get rid of both the client and server.
In Windows 7 I do this via PowerShell. It is fast and easy.
You must run PowerShell as Admin.

Press the Windows + R keys > type powershell (press the Enter key)
> copy and paste the following command:
Set-ItemProperty -Path “HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters” SMB1 -Type DWORD -Value 0 -Force
> now press the Enter key
> copy and paste the following command: sc.exe config lanmanworkstation depend= bowser/mrxsmb20/nsi
> now press the Enter key
> copy and paste the following command: sc.exe config mrxsmb10 start= disabled
> now press the Enter key > Reboot

———-
Windows PowerShell
Copyright (C) 2009 Microsoft Corporation. All rights reserved.

PS C:\Users\Eric> Set-ItemProperty -Path “HKLM:\SYSTEM\CurrentControlSet\Service
s\LanmanServer\Parameters” SMB1 -Type DWORD -Value 0 -Force
PS C:\Users\Eric> sc.exe config lanmanworkstation depend= bowser/mrxsmb20/nsi
[SC] ChangeServiceConfig SUCCESS
PS C:\Users\Eric> sc.exe config mrxsmb10 start= disabled
[SC] ChangeServiceConfig SUCCESS
PS C:\Users\Eric>
———-

A Few Cool Tools Updated

By 1 Comment

Sysinternals Tools Updated
Among the ones updated are TweakHound favs:
Autoruns v13.71
This update to Autoruns, a comprehensive autostart execution point manager, adds Microsoft HTML Application Host (mshta.exe) as hosting image so it displays the hosted image details, and now doesn’t apply filters to hosting images.
Process Monitor v3.33
Procmon v3.33 includes bug fixes for destructive event filtering and is signed with certificate installed in the Win7 trusted roots store.
Process Explorer v16.21
This Process Explorer release includes a fix for an intermittent bug in the Virus Total scanning logic, and is signed with Win7 RTM-compatible certificate.

CCleaner 5.30
v5.30.6063 (16 May 2017)
– Improved Edge Cookie cleaning
– Updated Internet Explorer 10 and 11 History cleaning
– Updated Thunderbird 52 History cleaning
– Updated Windows Explorer MRU Cache cleaning
– Improved SSD detection algorithm
– Optimized Update Checking process
– Minor GUI improvements
– Minor bug fixes

More On Wanna Cry Attacks

By 2 Comments

I’d Rather Be Lucky Than Good
Some Geek registered the domain name involved in the attacks and slowed the attacks to a crawl. Despite the articles claim, it did not “put out the fire”. The attack is still alive.

But I’ll repeat myself
At the risk of being crude
There must be fifty ways
To leave your lover…
Get rid of SMB1 dammit!
(Paul Simon – 50 Ways to Leave Your Lover)

***Microsoft – Customer Guidance for WannaCrypt attacks***

XP Patched Too
Hit the link above. Downloads at the bottom of the article.
Below is my XP Pro Virtual Machine.
As you can see I normally have the network connection disabled.
Other steps you can take.
– Disable all Exceptions on the firewall
– Disable the Server service
– Unbind file and printer sharing
There are other steps but XP is supposed to be dead. If you care about security you are only using it in a VM with no internet connection, if at all.

SMB1 Attacks Out There

By Leave a Comment

A few weeks ago I mentioned how you could remove SMB1 from your computer. There is a serious vulnerability that is now involved in ransom-ware attacks.
1 – Patch all your Windows boxes. ( Microsoft Security Bulletin MS17-010 – Critical )
2 – Get rid of SMB1. Follow the instructions on the following page. ONLY remove SMB1:
How to enable and disable SMBv1, SMBv2, and SMBv3 in Windows and Windows Server