Freeware - Blue Screen View tool #Nirsoft

Blue screen view è un’utile strumento che permette di consultare i report generati dagli errori delle BSOD (Sleep of Death), cioè le famose schermate blu di blocco tipiche dei computer Windows che compaiono quando il sistema operativo va in crash per qualche motivo. 

Con l’ausilio di questo programma sarà possibile capire la natura del problema e successivamente di porvi rimedio se possibile. 

BlueScreenView Nirsoft 

https://www.nirsoft.net/utils/blue_screen_view.html 

 ------------------- 

 Blue screen view is an useful tool that allows you to browse reports, generated by BSOD, that is O.S. windows typical screen appearing when computer crashes. 

This tool will give you an aid determining root problem cause (and fix it) 

BlueScreenView Nirsoft 

https://www.nirsoft.net/utils/blue_screen_view.html

Tool - Blue screen of death (Nirsoft tool)

If you face blue screen of death on your pc Nirsoft tool could be useful to open mini dump files created and identify root causes.

https://www.nirsoft.net/utils/blue_screen_view.html

Other nirsoft tool and blog mentions are here indicated.

Hacker - NirSoft Tool

Segno a titolo di promemoria diversi tool della NirSoft:


MessenPass v1.42 - Instant Messenger Password Recovery
MessenPass is a password recovery tool that reveals the passwords of the following instant messenger applications: MSN Messenger, Windows Messenger (In Windows XP), Windows Live Messenger (In Windows XP And Vista), Yahoo Messenger (Version 5.x/6.x), ICQ Lite 4.x/5.x/2003, AOL Instant Messenger, AIM 6.x, AIM Pro, Trillian, Miranda, and GAIM.

Tool - DNS Query Sniffer di Nirsoft

Today I would like to mention this NirSoft Tool (DNS Query Sniffer) that shows DNS queries sent from your PC/Server.

For each query several information are available (Host Name, Port Number, Query ID, Request Type (A, AAAA, NS, MX, and so on), Request Time, Response Time, Duration, Response Code, Number of records, and the content of the returned DNS records).

It is possible to export DNS queries in csv format.

These information are useful for troubleshooting purpose too.

REMARK: On some systems, capturing packets with the 'Raw Sockets' method may not work properly, and thus you'll need to install the WinPcap capture driver or the Network Monitor driver. 
Even if the 'Raw Sockets' method works properly on your system, it's recommended to install the WinPcap capture driver or Microsoft Network Monitor driver (version 3.4 or later) in order to get more accurate date/time information ('Request Time', 'Response Time', and 'Duration' columns).

Wireless Network Watcher

Here is an useful utility that help you to view user that are using the same Wireless connection that you are using.


You will get:
- Ip
- Mac Address
- Lan product vendor
- Pc Name

Homepage: http://www.nirsoft.net/utils/wireless_network_watcher.html

Download: http://www.nirsoft.net/utils/wnetwatcher_setup.exe

---------------------------------------------------------------------------------------------

Wireless Network Watcher è una piccola utility che analizza la vostra rete wireless e visualizza l’elenco di tutti i computer e dispositivi che sono attualmente connessi alla rete.

Questa utility può solo eseguire la scansione di una rete wireless che si sta utilizzando. Non è possibile eseguire la scansione di altre reti wireless.

Per ogni computer o dispositivo che è collegato alla rete vengono visualizzate le seguenti informazioni:

• indirizzo IP
• MAC address
• l’azienda che ha prodotto la scheda di rete
• il nome del computer

Backup - Fare il backup delle connessioni di rete e VPN

Già in altro post avevo indicato come fare il backup delle connessioni di rete.

In windows 7/8 come in Windows XP è necessario trovare il file rasphone.pbk di cui  fare il backup.

Questo si trova in:

Windows XP

c:\Documents and Settings\All Users\Dati applicazioni\Microsoft\Network\Connections\Pbk

Windows 7/8

%userprofile%\AppData\Roaming\Microsoft\Network\Connections\Pbk

Purtroppo non si salvano l'utente e password ma questo può essere sanato utilizzando i tool nirsoft indicati in questo post:

http://alessandromazzanti.blogspot.it/2011/08/hacker-nirsoft-tool.html

Se uno ha fatica nel leggere il precedente post estrapolo due utility che fanno al caso nostro:

LSASecretsView v1.21
LSASecretsView is a small utility that displays the list of all LSA secrets stored in the Registry on your computer. The LSA secrets key is located under HKEY_LOCAL_MACHINE\Security\Policy\Secrets and may contain your RAS/VPN passwords, Autologon password, and other system passwords/keys.


LSASecretsDump v1.21
LSASecretsDump is a small console application that extract the LSA secrets from the Registry, decrypt them, and dump them into the console window. The LSA secrets key is located under HKEY_LOCAL_MACHINE\Security\Policy\Secrets and may contain your RAS/VPN passwords, Autologon password, and other system passwords/keys.
This utility is the console version of LSASecretsView.

...

<------other -----="" articles="" blogs="" related="">

...

SCCM 2012 - How to install AnyConnect VPN with SCCM 2012

http://www.alessandromazzanti.com/2015/01/sccm-2012-how-to-install-anyconnect-vpn.html

Tips - Locating the Cisco AnyConnect Profiles

http://www.alessandromazzanti.com/2015/01/tips-locating-cisco-anyconnect-profiles.html

Linux - Creare un Gateway Server

http://www.alessandromazzanti.com/2011/09/linux-creare-un-gateway-server.html

Backup - Fare il backup delle connessioni di rete e VPN

http://www.alessandromazzanti.com/2012/09/backup-fare-il-backup-delle-connessioni.html

Tips - Cisco VPN e Vodafone Connect Card

http://www.alessandromazzanti.com/2013/01/tips-cisco-vpn-e-vodafone-connect-card.html

Tips - Cisco errore Secure VPN Connection terminated locally by the Client. Reason 440: Driver Failure.

http://www.alessandromazzanti.com/2013/01/tips-cisco-errore-secure-vpn-connection.html

Tips - Cisco VPN 5.0 e Windows 8

http://www.alessandromazzanti.com/2013/07/tips-cisco-vpn-50-e-windows-8.html

Tools - EventLogChannelsView Nirsoft tool to view all event channels in your pc/server

EventLogChannelsView is a simple tool for Windows 10/8/7/Vista that shows the list of all event log channels on your system, including the channel name, event log filename, enabled/disabled status, current number of events in the channel, and more... 
It also allows you to easily make some actions on multiple channels at once: enable/disable channels, set their maximum file size, and clear all events stored in the channels.

http://www.nirsoft.net/utils/event_log_channels_view.html

Tips - Modificare il product key di Office XP/2003/2007 e Windows 7/2008R2

Segno a titolo di promemoria il seguente articolo Microsoft che mostra come modificare il product key di office  XP e 2003:


http://support.microsoft.com/default.aspx?scid=kb;en-us;895456


Se invece vogliamo che ci venga richiesto nuovamente il product key per Office XP/2003/2007 la procedura è la seguente:

Office - Downgrade da Office 2010 ad Office 2003

Downgrade da Outlook 2010 ad Outlook 2007:

1. Bisogna tenere a mente che il profilo Exchange Outlook 2010 non è compatibile con Outlook 2007.

2. Con Outlook 2010 il file .NK2 dell'autocomplete viene memorizzato direttamente nella cassetta postale di Exchange.

3. Ho dunque testato un utente che aveva centinaia di mail di autocomplete facendo il downgrade da Outlook 2010 ad Outlook 2007.

4. Una volta migrato il profilo Outlook l'ho dovuto ricreare (vedi articolo MS: https://support.microsoft.com/kb/2464597/it) visto che Outlook 2007 va in crash con profilo 2010.

5. Una volta ricreato il profilo Outlook 2007 l'autocomplete era vuoto e non funzionava piu' (anche se presente su Exchange 2003)

6. Ho risolto eseguendo la seguente utility: http://www.nirsoft.net/utils/outlook_nk2_edit.html che visualizza dell'utente loggato tutti i file di autocomplete memorizzati su Exchange.

7. Si selezionano tutte le mail e si esportano su file .nk2.

8. Il file nk2 va copiato (con lo stesso nome del profilo Outlook dell'utente) in C:\Users\%utente%\AppData\Roaming\Microsoft\Outlook\profilo.nk2

9. Dopo tale operazione Outlook 2007 visualizzava l'autocomplete di Outlook 2010.

<------>

Downgrade from Outlook 2010 to Outlook 2007:
1 . Keep in mind that the Exchange profile Outlook 2010 is not compatible with Outlook 2007.2 . With Outlook 2010, the file. NK2 dell'autocomplete is stored directly in the Exchange mailbox .3 . So I tested a user who had hundreds of emails from autocomplete doing the downgrade from Outlook 2010 to Outlook 2007.4 . After you migrate your Outlook profile I had to recreate (see MS article : https://support.microsoft.com/kb/2464597/en) since Outlook 2007 crashes profile with 2010.5 . Once you have recreated the profile Outlook 2007 autocomplete was empty and did not work more ' (even if it is present on Exchange 2003)6 . I solved it by running the following utility : http://www.nirsoft.net/utils/outlook_nk2_edit.html that displays the user logged in all the files stored on the Exchange autocomplete .7 . You select all the emails and exporting of files . Nk2 .
8 . The nk2 file to be copied (with the same Outlook profile name of the user) in C: \ Users \% user% \ AppData \ Roaming \ Microsoft \ Outlook \ profilo.nk2

 9 . After this operation, Outlook 2007 displayed the autocomplete in Outlook 2010 .

Freeware - ControlMyMonitor v1.05 Monitor change setting tool

I would like to mention this Nirsoft Software that permit to change, at lower level, several monitor settings. 

http://www.nirsoft.net/utils/control_my_monitor.html

USB - Usb deview Tool

It might happen that an USB device is no longer recognized and driver reinstall procedure end with error.

There is an interesting tool, in my experience, that permit you to clean any driver reference  and permitting you to start a clean driver installation.

Tool name is USBDeview provided by Nirsoft

https://www.nirsoft.net/utils/usb_devices_view.html

Other tool features are:

• All USB devices that are and was connected/used on your device are show with full  devices information.
• USB devices uninstallation, disconnection and driver cleanup (both used and old connected devices as well)

Here they are two blog articles that mentioned USBDeview.

Tips - Problema Windows 7 64 Bit vs HUAWEI E172

https://www.alessandromazzanti.com/2013/05/tips-problema-windows-7-64-bit-vs.html

Manutenzione - Programmi utili da Hiren's Boot CD

https://www.alessandromazzanti.com/2013/01/manutenzione-programmi-utili-da-hirens.html

Software - MMCSnapInsView

 MMCSnapInsView is a simple tool for Windows that displays the details of all MMC snap-ins installed on your system, including name, description, CLSID, dll file, product name, company name, file version, and more... 
You can also select multiple MMC snap-ins and then open them in MMC application.



More details and download link:

http://www.nirsoft.net/utils/mmc_snapins_view.html

Tips - Windows 7 explorer crashes when copying files

If you got problems from coping files on Windows 7 and Explorer continue to crash you could try this options:

The program Explorer.EXE version 6.1.7600.16450 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

 Process ID: 98c

 Start Time: 01ced605f3f95e5c

 Termination Time: 60000

 Application Path: C:\Windows\Explorer.EXE

 Report Id: 

Here is a Microsoft KB2694911 Base Article full dedicated to this issue:

https://support.microsoft.com/en-us/kb/2694911

Method 1: Run the SFC scan and check if it fixes the issue:

http://support.microsoft.com/kb/929833

Method 2:  Boot into safe mode and check if issue persists:

http://windows.microsoft.com/en-US/windows7/Start-your-computer-in-safe-mode

If issue does not persist in safe mode then, I would suggest you place the computer in clean boot and check for the conflicting drivers or software:

http://support.microsoft.com/kb/929135

Note: place the computer to usual startup by following the step 7 from the above link.

Method 3: I would also suggest you create a new user account and check if it helps:

http://windows.microsoft.com/en-US/windows7/Create-a-user-account

If issue does not persist from new user account then I would suggest you fix the corrupted profile by following the below link.

http://windows.microsoft.com/en-US/windows7/Fix-a-corrupted-user-profile

Also refer: http://support.microsoft.com/kb/976972

Method 4: There could be some spyware and virus and in this case utilize some antivirus/tools that you find on this blog

http://www.alessandromazzanti.com/search/label/Anti%20Virus

Method 5: You installed some software that creates some problems, please restore you system to a precedent system restore point

Method 6: Disable some plugin or dll that creates problem in Explorer, you can read this blog article:

http://www.alessandromazzanti.com/2014/02/tips-explorer-crash-how-to-solve.html

Method 7: 

Sometimes faulty RAM (Random-Access Memory) can cause intermittent problems within Windows. Use the Windows Memory Diagnostics Tool by clicking Start, type Memory Diagnostics and select the result in the list. When the Windows Memory Diagnostics Tool window appears, choose Restart now and check for problems (recommended).

Method 7: Perform a clean Boot :

https://support.microsoft.com/en-us/kb/929135

Method 8: This problem could be related to video card drivers/software problem, in this case it would be fine to reinstall them or change GPU that is used in this moment (internally or GPU)

Outdated or corrupt video drivers can cause Windows Explorer to stop working. Downloading and installing the latest video driver can solve many of these issues. You can do this from using Windows Update or by visiting your system manufacturer’s website or by contacting them directly.
For more information on updating your drivers, see the following content on the Microsoft website:

Update a driver for hardware that isn't working properly

Update drivers: recommended links

[update 2016.06.07]

You can use ShellExView program to disable dll or plugin in Internet Explorer that causes problems:

http://www.nirsoft.net/utils/shexview.html

Backup - ShadowCopyView tool that lists snapshots

ShadowCopyView is new tool for Windows 10/8/7/Vista that lists the snapshots of your hard drive created by the 'Volume Shadow Copy' service of Windows. Every snapshot contains an older versions of your files and folders from the date that the snapshot was created, you can browse the older version of your files and folders, and optionally copy them into a folder on your disk.

You can download it from here:

http://www.nirsoft.net/utils/shadow_copy_view.html

Driver - Visualizzare tutti i driver installati sul proprio pc

L'utility DriverView di Nir Sofer permette tutte le informazioni necessarie per i driver installati sul sistema,  Per ogni device driver caricato il programma visualizza molte informazioni utili, l’indirizzo di caricamento, la descrizione, la versione, il produttore e molte altre.

Una volta scaricato l’eseguibile, disponibile in versione x32 e x64, basta lanciarlo senza necessità di installazione.

Il programma può essere scaricato da questo link:

http://www.nirsoft.net/utils/driverview.html

Programs - AdvancedRun v1.00 - New utility that runs a program with different settings you choose.

AdvancedRun is a simple tool for Windows that allows you to run a program with different settings that you choose, including - low or high priority, start directory, main window state (Minimized/Maximized), run the program with different user or permissions, Operating system compatibility settings, and environment variables. You can also save the desired settings into a configuration file and then run the program automatically from command-line with the desired settings.



Examples:

• Run the RegEdit of Windows as normal user on Windows 10/8/7/Vista, without elevation. In this mode, you'll not be able to access or modify Registry keys that require admin rights.
• Run the RegEdit of Windows as SYSTEM user on Windows 10/8/7/Vista. In this mode, you'll be able to access the HKEY_LOCAL_MACHINE\SECURITY key.
• Run a program with a user of another running process.
• Run a program in high priority.
• Run a specific instance of program in Windows XP compatibility mode, without making global changes in the Registry.
• Run a specific instance of program with different PATH environment string, but without modifying the PATH string of the entire system and without using batch files or command prompt window.
• Run a program with a full set of environment variables you choose, ignoring the system environment variables completely.

http://www.nirsoft.net/utils/advanced_run.html

Programma – Ottenere la chiave Wireless del proprio PC utilizzando

Per ottenere la chiave memorizzata sul proprio pc della connessione Wireless possiamo utilizzare il seguente prodotto di Nirsoft:

Ecco una breve descrizione:

WirelessKeyView recovers all wireless network security keys/passwords (WEP/WPA) stored in your computer by the 'Wireless Zero Configuration' service of Windows XP or by the 'WLAN AutoConfig' service of Windows Vista, Windows 7, Windows 8, and Windows Server 2008. It allows you to easily save all keys to text/html/xml file, or copy a single key to the clipboard. You can also export your wireless keys into a file and import these keys into another computer.

Notare che:

Windows XP: The wireless keys are stored in the Registry under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WZCSVC\Parameters\Interfaces\[Interface Guid].

Windows Vista: The wireless keys are stored in the file system, under c:\ProgramData\Microsoft\Wlansvc\Profiles\Interfaces\[Interface Guid]. The encrypted keys are stored in .xml file.

Download WirelessKeyView

Download WirelessKeyView for x64

Software - NK2Edit Edit Autocomplete Outlook

Every time that you type an email address or name in the message window of MS-Outlook, it automatically offer you a list of users and email address that you can choose. This feature is known as 'AutoComplete' and Outlook automatically build this emails list according to user activity and save it into a file with .NK2 extension.


In some circumstances, you may need to repair or modify the values appeared in the AutoComplete list, or you may want to remove unwanted email addresses and/or to add new email addresses. MS-Outlook doesn't provide any ability to edit this AutoComplete list, so this is where NK2Edit software can help you.

NK2Edit Features

• Easily modify or fix all information stored in the NK2 file, including the display name, the email address, the exchange string, the Drop-Down display name, and the search string.
• Easily remove unwanted single quote characters from the display name and from the Drop-Down list.
• Delete unwanted emails, as well as add new emails, by typing them manually, or by choosing them from the address book of Outlook.
• Copy NK2 records from one NK2 file to another - simply by copy and paste !
• Build a completely new NK2 file and add the desired emails into it, by typing them manually, by adding them from your address book, or by copying records from another NK2 file.
• Extract data from corrupted NK2 files that Outlook cannot read anymore (When Outlook AutoComplete stopped working) and even repair them so Outlook will be able to read them again.
• Export all data stored in the NK2 file into a special Unicode text file in a structure similar to .ini file of Windows. You can open it any text editor you like, make the changes you need, and then convert it back into NK2 file that Outlook can use.
• Export the emails information stored inside NK2 file into HTML/Text/csv/xml file.
• Export the emails information stored inside NK2 file directly into the contacts of Outlook.
• Copy the selected NK2 records in tab-delimited format and then paste the information into Excel.
• Change the order of the records in the NK2 file, which also affects the order they appear in the drop-down. You can also sort the list in alphabetical order of the Drop-Down display names. (However, be aware that Outlook change the order again when the user send emails)
• Command-Line Support: Write simple scripts that can add, remove, or modify records inside the NK2 file, without displaying any user interface.
• NK2Edit is a portable application that can be used from any computer with Windows operating system (Starting from Windows 2000) without need of any installation process, and without making changes in the Registry.
• NK2 Control Center - Allows you to watch to location and the status of all NK2 files in your organization.

http://www.nirsoft.net/utils/outlook_nk2_edit.html

Freeware - UninstallView from NirSoft

Today I would like to highlight UninstallView is a new tool for Windows that collects information about all programs installed on your system and displays the details of the installed programs in one table. 
You can use it to get installed programs information for your local system, for remote computer on your network, and for external hard-drive plugged to your computer. It also allows you to easily uninstall a software on your local computer and remote computer (Including quiet uninstall if the installer supports it).