Annoying explorer.exe taking up CPU fix

We come across the most annoying issues all the time and have to use a combination of experience and other resources to find a fix. We’ll do our best to post as much of them as the_annoying_thingpossible, but here’s one that we solved just today with the help of a few nifty programs and some flexing of the brain.
Here are the symptoms.

Computer running sluggish, opening task manager you’re seeing explorer.exe taking up 30+% of the CPU, even when you first turn on the machine. Small hint, even if you’re seeing explorer at 20% and the machine is idle, there’s a problem.

So here are some steps that should fix it, remember we’re fixing a general problem – NOT THAT RELATED TO .AVI FILES

1) Grab Process Monitor here

2) Open it up, right click on any explorer.exe line and choose Include ‘explorer.exe’ that should clear the list up a little bit

3) Open up task manager, click processes, click explorer.exe and end the task

3.5) This part you have to do quickly, within task manager, click File>run and type in explorer.exe and quickly switch to process monitor!

4) Look for repeat tasks where the result column has something other than SUCCESS
Right click on that line and click jump to.
Now, make sure you have a backup before you do the next step

Open Task Manager, click Processes, find explorer and end the process.

Now, in Task Manager click File>Run

Type in CMD

Now navigate to the folder of that file and either remove or rename it.

Now click File>Run and type in explorer
Explorer should come up and run without draining that poor CPU.
Enjoy using your computer again!

Share:
  • Print
  • RSS
  • Digg
  • del.icio.us
  • Facebook
  • Twitter
  • Google Bookmarks
  • Technorati
  • StumbleUpon
  • Reddit

Biggest Mistakes Companies Make in Selecting an IT Provider or IT Company

The scenario is all too common. Your current IT vendor just messed up your network for the last time. Not only that, he was days late in gettingLaptop_959_18439673_0_0_7003925_300 back to you to mess up that network, undermining your entire operation. Now, you will find someone who is a professional, like this guy was supposed to be.  You can’t just pick someone out of the sea of “IT Professionals,” this time you will find an IT professional through a referral. Except there is one problem, the IT provider that you’re about to fire came to you through a referral.

What are you to do? Your IT Infrastructure is the backbone of your business, yet you can not find people who can give you a consistent peace of mind. On top of that, the referral approach does not work because every single person you know has a cousin, a brother, a friend, or a third cousin’s niece’s college roommate’s uncle, who they swear is “Great.”

The problem is that it simply does not take anything to call yourself an IT Guy, IT Provider, IT Supplier, IT Professional, or any of the other synonyms for helping people take care of their computer issues. It starts with tinkering with computers since childhood, then progresses to helping Mom’s friends, then charging a couple of bucks for quick fixes. The problem, however, is that the IT vendors that develop in this manner and then stop progressing are constrained to being able to only solve things that they were able to solve before you or can figuire out on the spot. The constraint in most of these cases, is that they lack the foundation to understand what they are doing. So, they end up pocking in the dark. Sometimes they find the solution and sometime not. A lot of times they find the solution that is not the optimum resolution and it takes them to arrive at this solution a lot longer than for a person who really understands the complete logic of the endeavor and has experience solving this issue.

Very good. We have understood what we need a person who has a many years of general multi-field IT experience, a Computer Science degree from a real four year university, and has specific accredited IT certifications, such as MCSE, MCSA, MCP, A+, and CCNA. At this point of our refined search, we hit another roadblock. The problem is that out of the enormous pool of all the referrals that we can have from our circle of friends, non of referrals will qualify. The reason is that people with such qualifications usually have very very nice jobs working for companies that really value them. Another issue to really consider, is that if for whatever reason you happen to find such a person free-lancing, there will still be only 24 hours in his/her day. That means that this person can not possibly provide you with responsive service. Thereby mandating the pontential that when something terrible happens to your infrastructure he/she will not be there for you when you need it.

The alternative, using someone less qualified means that in addition to the potential lack of availability, you now have the potential of being overcharged for his/her time while this technician tries to solve something he/she has never seen before, which obviously would take longer. Of course, the possibility of being stuck with mis-configured, insecure, and dysfunctional network is much higher in such a scenario.

What is the alternative then? The answer is that if you are a company that does not need to spend tens of thousands of dollars per month on an internal IT Department, you need to hire an external IT Department and pay only for services that you use. This approach is more economical because you have access to a company who ensures that it has enough staff to provide timely service to you, while giving you access to a large knowledge base and experience inherent in external IT companies that have depth and breadth in terms of qualified staff. Another aspect of using an external IT help desk company is that it is supposed to have a quality assusrance system, standardization of ticket resolution system, standardization of billing system, knowledge sharing system, and an overall supervision of the entire ticket process and delivery.

To recap, let’s go over important points that will help you to select an IT service provider that will let you sleep at night:

  • Has an organization of several trained technicians with response time guarantee
  • Has customers who you can talk to and receive direct recommendation and description of their work
  • Does not charge monthly fees up front or make you sign yearly contracts for support, you are supposed to pay only for what you use
  • Has a Quality Assurance system that can be demonstrated
  • Has documented standardized billing practices
  • Has standardized ticket resolution process that can be demonstrated
  • Has a robust knowledge sharing tool
  • Has trained staff
  • Has effective management structure of operational oversight over ticket resolution process
  • Has experienced operational managers in all the significant fields of IT: Corporate Networking, Data Recovery and Storage, IT Security, Web Development, Server Management in Windows and Linux Environments, and Desktop Troubleshooting in Windows and Mac.

Such an approach to your next service provider will ensure that you are: 1) Not overpaying for extra time spent on undue research, 2) Receive expedient service, 3) Not stuck high and dry because IT vendor don’t know what to do, 4) Not overpaying for some locked-in monthly service that you might not even use.

Enjoy Your Search! This Should Help!

Share:
  • Print
  • RSS
  • Digg
  • del.icio.us
  • Facebook
  • Twitter
  • Google Bookmarks
  • Technorati
  • StumbleUpon
  • Reddit

Google Chrome Is Fast and Now Has Bookmark Sync and Extensions

In just a bit over a year of being in existence in the public domain, Google Chrome has released four stable versions and has rapidly gained Google-Chrome-Blue-Editionmarket share, coming close to 5%. Most importantly it has pushed the existing browsers to be faster, sleeker, and more stable. Yesterday’s release of Chrome 4 Stable marks a big leap forward for Google and everyone who wants speed, sleek looks, stable platform, and a lot of extensions to use as productivity tools or just to play with. While Chrome 4 was available with some of these features in the developer and beta channels, the stable release means that the end users can now have a solid and reliable browser.  It performs at a blazing speed, according to most benchmarks, and now has synchronization between multiple computers and over 1500 extensions.

Sync - Chrome 4 Stable allows you to synchronize all of your bookmarks across all of your computers, at work, at home, in your Caribbean vacation home, and of course your nifty netbook. All you need to do is to go to Chrome’s Control drop-down, select Bookmarks Sync and sign in with your gmail account. The rest is an easy walk through to complete the sync. Repeat this on all of your machines and presto, all of your bookmarks are synced.

Extensions - Mozilla Firefox has been at the forefront of the extension revolution. It enabled you to install program right into your browser that can enhance the browsing experience substantially. From having ball game scores always in front of you to helping you find the best deals on anything, extensions are there to help. Now, Chrome 4 brings these powerful tools to us in a faster and more modern platform.

Share:
  • Print
  • RSS
  • Digg
  • del.icio.us
  • Facebook
  • Twitter
  • Google Bookmarks
  • Technorati
  • StumbleUpon
  • Reddit

Cyber Warfare Is Here – What Does That Mean For You?

On January 25th, 2010, United States Air Force announced that 24th Air Force, a fully fledged division of the USAF, has reached its Initial382568-FB Operational Capability. The 24th does not have any planes, it is a Cyber Warfare unit, with a mission to defend the interests of the United States in both defensive and offensive roles. This is one of the major operating components of the future US Cyber Command. The writing is no longer on the wall, it is on the billboards: “All future conflicts will involve extensive internet-based attacks”, as it already happened during the Russian-Georgian war in 2008. Governments from around the glob are tripping over themselves to establish advanced defensive and more importantly offensive capability. The top contenders in the field are US, China, France, Russia, and Israel.

While the national level maneuvers might not concern most private citizens, it should be read as an indication of the status of current technology, positioning of threat capabilities from around the world, and what impact all that could have on your enterprise. Since the capability exists, it can be employed against undefended targets, such as most private enterprise, without detection or consequence. Therefore, individuals and enterprises who do not pay attention to the threat billboards in front of them, will be the first to suffer the consequences of whatever risk lies ahead. More importantly, undefended sites will and do fall victim to attacks of all sorts from the cyber space with all sorts of consequences, even without open hostilities among governments. This is simply because the capability is out there and the consequences for the professionals are non-existent.

The good news is that there are professionals on the other side of the fight. There are effective and proven detection and prevention tools that are available to the private sector. These tools are almost a no-brainer when the potential consequences are evaluated and the probabilities are calculated. Some solutions come in the form of separation of connectivity to the internet for highly sensitive data, while others in the form of hardware firewalls. It can be argued that the most efficient prevention method is a hybrid solution of software based detection agents installed on each network component and a human management system. This approach allows for detection of anomalies and the flexibility of a timely human investigation, which prevents most attacks at much more reasonable cost than more severe methods of detection and/or prevention. Find out more at http://www.thetechinfogroup.com/services/managed-host-based-security.html

Share:
  • Print
  • RSS
  • Digg
  • del.icio.us
  • Facebook
  • Twitter
  • Google Bookmarks
  • Technorati
  • StumbleUpon
  • Reddit

Web Remote Workplace Doesn’t Work with Internet Explorer – IE 8

As of now, there is no way to fix this issue through a setting or an update. The fix that will solve is to remove the registry key.

Web Remote Workplace Doesn't Work With IE 8

Web Remote Workplace Doesn't Work With IE 8

We recommend the following process to set your machine right.

Go to Manage Add-ons in the tools drop down in Internet Explorer to enable Terminal Services ActiveX Control. However, ActiveX control will not be found in the list.  So, this will help:

  1. Go to Start menu in Windows, select Run, and type Regedit
  2. Find registry key: HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Ext \ Settings
  3. Find{7584c670-2274-4efb-b00b-d6aaba6d3850} and then remove it.
  4. Close Internet Explorer
  5. Run Remote Desktop Web Connection

You should feel a ray of light shining on you now.

Share:
  • Print
  • RSS
  • Digg
  • del.icio.us
  • Facebook
  • Twitter
  • Google Bookmarks
  • Technorati
  • StumbleUpon
  • Reddit

Funny Windows 7 and Chrome Interaction

Turns out you won’t be able to install Google Chrome, you’ll get a nifty litte error: google update installation failed with error 0×8004071c

Good news is that there’s a quick fix floating around, just erase the value in the ‘ImageState’ key in:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\State

And it will install like a charm

You’re welcome

Share:
  • Print
  • RSS
  • Digg
  • del.icio.us
  • Facebook
  • Twitter
  • Google Bookmarks
  • Technorati
  • StumbleUpon
  • Reddit

Tags: , , ,

IE6 and IE7 vulnerable to latest flaw; IE8 immune

Microsoft has confirmed reports of a new vulnerability that affects both Internet Explorer 6 and Internet Explorer 7, but not Internet Explorer 8.

Microsoft has issued Security Advisory 977981 in regard to public reports of a vulnerability that exists as an invalid pointer reference of Internet Explorer. Under certain conditions, it is possible for a CSS/Style object to be accessed after the object is deleted, and thus, if Internet Explorer attempts to access the supposedly freed object, it can end up running attacker-supplied code. IE6 SP1 on Windows 2000 SP4, as well as IE6 and IE7 on supported editions of Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008 are affected. Microsoft notes that IE 5.01 SP4 and IE8 on all supported versions of Windows are not affected, but of course IE6 and IE7 still account for over 40 percent of the browser market.

Exploit code for the flaw was first posted late last week on the BugTraq mailing list (see either securityfocus.com or seclists.org). Microsoft noted its concern that this new report of the vulnerability was not responsibly disclosed, potentially putting computer users at risk, but that it is not aware of any attacks that try to use the reported vulnerability against IE6 and IE7. Redmond says it is actively monitoring the situation and may provide a security update on an upcoming Patch Tuesday or an out-of-cycle patch once it is ready. The next Patch Tuesday is scheduled for December 8, 2009, but we’re not likely to see a patch out that soon.

In addition to the latest version being unaffected by this vulnerability, Microsoft offered four other mitigating factors:

  • Protected Mode in IE7 on Windows Vista limits the impact of the vulnerability.
  • By default, Internet Explorer on Windows Server 2003 and Windows Server 2008 runs in a restricted mode that is known as Enhanced Security Configuration. This mode sets the security level for the Internet zone to High and so is a mitigating factor for websites that you have not added to the Internet Explorer Trusted sites zone.
  • An attacker who successfully exploited this vulnerability could gain the same user rights as the local user. Users whose accounts are configured to have fewer user rights on the system could be less affected than users who operate with administrative user rights.
  • By default, all supported versions of Microsoft Outlook, Microsoft Outlook Express, and Windows Mail open HTML e-mail messages in the Restricted sites zone, which should mitigate attacks trying to exploit this vulnerability by preventing Active Scripting and ActiveX controls from being used when reading HTML e-mail messages. However, if a user clicks a link in an e-mail message, the user could still be vulnerable to exploitation of this vulnerability through the Web-based attack scenario.

Microsoft also offered three workarounds for the new IE flaw. The first one explains how to set the Internet and Local intranet security zone settings to “High” so that the browser prompts the user before running ActiveX Controls and Active Scripting in these zones. The second one details how to configure Internet Explorer to prompt before running Active Scripting or to disable Active Scripting in the Internet and Local intranet security zone. Finally, the last one suggests enabling Data Execution Prevention (DEP) for IE6 SP2 or IE7. All three are explained with step-by-step instructions in the security advisory and can be done by simply changing settings in Internet Explorer.

In December 2008, Microsoft released an out-of-band security update for Internet Explorer and encouraged all users to run Windows Update or Microsoft Update to download the fix.

Share:
  • Print
  • RSS
  • Digg
  • del.icio.us
  • Facebook
  • Twitter
  • Google Bookmarks
  • Technorati
  • StumbleUpon
  • Reddit

Tags: , , ,

New Microsoft Vulnerability Blacklisted by Firefox

An interesting new vulnerability has popped up in Firefox browsers, leaving many users open to attack.  The vulnerability is actually a plug in for Firefox browsers designed by……(drumroll, please)….. You guessed it.. Microsoft

The vulnerability can be exploited when users visit malicious Web pages that contain specially crafted XAML-Coded content.

On Tuesday, Microsoft sent out an Internet Explorer patch to fix the vulnerability, by way of Windows Automatic updates. Although the IE patch is said to fix the problem with both Firefox and Internet Explorer browsers, many Firefox users are still reporting unresolved issues.

In order to protect people who are not yet patched, Firefox has added Microsoft’s plugin to its add-on blocklist, causing it to be automatically disabled by the browser, until a Universal fix can resolve the vulnerabilities of the plugin.

Mike Shaver, Firefox’s vice president of engineering, described the security problem in a blog entry posted Friday in the official Firefox security blog.

“Because of the difficulties some users have had entirely removing the add-on, and because of the severity of the risk it represents if not disabled, we contacted Microsoft today to indicate that we were looking to disable the  plugin for all users via our blocklisting mechanism,” he wrote. “Microsoft agreed with the plan, and we put the blocklist entry live immediately.”

Plugin security vulnerabilities are a major problem for corporations, small businesses, and family users, due to their nature. These bugs are especially tempting to hackers because they often are a great way to affect multiple browsers and provide a larger audience of potential victims.

Our clients who are enjoying ongoing maintenance services are up to date,  and as always clients on the Managed Protection plans were protected considerably before the vulnerability was ever publicly disclosed.

Share:
  • Print
  • RSS
  • Digg
  • del.icio.us
  • Facebook
  • Twitter
  • Google Bookmarks
  • Technorati
  • StumbleUpon
  • Reddit

Tags: , ,

New Vulnerabilities That Concern YOU!

Some interesting new vulnerabilities have been released in the past few weeks, today’s post is regarding the most widespread issues effecting almost all users.

The news to typical users is the fact that you are in harms way in more ways than you thought.

Image Files can actually infect and make your machine susceptible

  • Any application that parses TIFF, PNG, *MF – could potentially be an attack vector
  • Viewing images that are infected gets opens you up – its that simple
  • Do not open suspicious email attachments as they may contain one of these potential attacks

What does this mean to you?

That by not downloading the most current security updates for your Windows XP machine, you are putting your computer at risk for potentially huge Virus infections and system – leaving you and your system wide open.

Apply Patches ASAP – workarounds that limit GDIplus.dll could cause headaches, to say the least.

Fire up Internet Explorer and head over to: http://windowsupdate.microsoft.com/

Our clients who are enjoying ongoing maintenance services are up to date,  and as always clients on the Managed Protection plans were protected considerably before the vulnerability was ever publicly disclosed.

Technobabble bellow – if you need to be sure you’re getting the right updates.

Listed below are the Critical Security Updates provided by Microsoft

  • GDI+ WMF Integer Overflow Vulnerability – CVE-2009-2500
  • GDI+ PNG Heap Overflow Vulnerability – CVE-2009-2501
  • GDI+ TIFF Buffer Overflow Vulnerability – CVE-2009-2502
  • GDI+ TIFF Memory Corruption Vulnerability – CVE-2009-2503
  • GDI+ .NET API Vulnerability – CVE-2009-2504
  • GDI+ PNG Integer Overflow Vulnerability – CVE-2009-3126
  • Memory Corruption Vulnerability – CVE-2009-2528
  • Office BMP Integer Overflow Vulnerability – CVE-2009-2518

Shoot us an email with any questions.

Share:
  • Print
  • RSS
  • Digg
  • del.icio.us
  • Facebook
  • Twitter
  • Google Bookmarks
  • Technorati
  • StumbleUpon
  • Reddit

Tags: , , ,

Adobe Product Fixes Available Now

Some positive news from Adobe last night. Fixes for those nasty vulnerabilities are finally available.

Quick refresher the programs affected are:

  • Adobe Flash Player 9.0.159.0 and 10.0.22.87 and earlier 9.x and 10.x versions
  • Adobe AIR 1.5.1 and earlier versions
  • Adobe Reader and Acrobat 9.1.2 and earlier 9.x versions

The recommendations provided by adobe is that any users of prior versions upgrade them asap.

Linkies to the updates are as follows:

Update for AIR: http://get.adobe.com/air

Update for Reader: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows

Reader will also allow you to update through its own updater

Update for Acrobat: http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows

Just keep in mind that its always a good idea to install updates – reason we’re paying special attention to this one is because it is a critical update which is receiving a lot of publicity. Popular vulnerabilities are more likely to be exploited.

Feel free to shoot us an email or comment with any issues/questions.

Share:
  • Print
  • RSS
  • Digg
  • del.icio.us
  • Facebook
  • Twitter
  • Google Bookmarks
  • Technorati
  • StumbleUpon
  • Reddit

Tags: , , , , ,