Acer Aspire 4520 vs Compaq Presario V3000AU : A wifi comparison

Intro
This is a first hand comparison between the wireless adapter performance between the Compaq Presario V3000/3155AU and an Acer Aspire 4520.

The test

The test I did is to ping the local wireless router / access point.

ping 10.0.0.1 -n 100

These is the result of Acer Aspire

Reply from 10.0.0.1: bytes=32 time=1ms TTL=64
Reply from 10.0.0.1: bytes=32 time=1ms TTL=64
Reply from 10.0.0.1: bytes=32 time=1ms TTL=64
Reply from 10.0.0.1: bytes=32 time=3ms TTL=64
Reply from 10.0.0.1: bytes=32 time=1ms TTL=64
Reply from 10.0.0.1: bytes=32 time=2ms TTL=64
Reply from 10.0.0.1: bytes=32 time=1ms TTL=64
Reply from 10.0.0.1: bytes=32 time=2ms TTL=64
Reply from 10.0.0.1: bytes=32 time=1ms TTL=64
Reply from 10.0.0.1: bytes=32 time=2ms TTL=64

Ping statistics for 10.0.0.1:
   Packets: Sent = 100, Received = 100, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
   Minimum = 1ms, Maximum = 84ms, Average = 2ms

This is the result for Compaq Presario

Reply from 10.0.0.1: bytes=32 time=1424ms TTL=64
Reply from 10.0.0.1: bytes=32 time=16ms TTL=64
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Reply from 10.0.0.1: bytes=32 time=2899ms TTL=64
Reply from 10.0.0.1: bytes=32 time=2ms TTL=64
Reply from 10.0.0.1: bytes=32 time=3672ms TTL=64
Reply from 10.0.0.1: bytes=32 time=2ms TTL=64
Reply from 10.0.0.1: bytes=32 time=6ms TTL=64

Ping statistics for 10.0.0.1:
   Packets: Sent = 100, Received = 45, Lost = 55 (55% loss),
Approximate round trip times in milli-seconds:
   Minimum = 2ms, Maximum = 4236ms, Average = 801ms

Apparently the connection was too poor in Compaq, I had to use a pen drive to copy the statistics and post it here.

Do you have a Compaq Presario??
Do let me know ...

cURL PHP Error on Windows

Fatal error: Call to undefined function curl_init() in D:/webs/php.php on line 284

This problem arises because of not including the lib_curl.dll to PHP. To solve this uncomment the line as shown below

;extension=php_bz2.dll
extension=php_curl.dll
;extension=php_dba.dll

Now restart apache server.
If you get an error "Unable to Load X:/path/php/ext/php_curl.dll", copy

• SSLEAY32.PHP
• libEAY32.dll

(OpenSSL) Libraries to the System32 folder.

Now restart apache server and you are good to go.

jwgkvsq.vmx - Conficker virus manual removal

Intro
Well this is one of the new emerging popular virus. It has spread rapidly, and most of your computers are infected. Conficker spreads via the USB pendrive along with the autorun.inf
or via network by exploiting bugs in the Network Stack on Windows systems.
Skip to Manual Removal steps.

Spreading via USB Drives
Conficker spreads on USB Drives by creating an autorun.inf,
A folder structure

RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\

with

jwgkvsq.vmx

The file is a DLL file, which is executed by the obfuscated autorun.inf.
The DLL file is loaded with RunDLL

[AUTorUN
icon=%syStEmrOot%\sySTEM32\sHELL32.Dll,4
shelLExECUte=RuNdLl32.EXE.\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn
useAuTopLAY=1

The presence of conficker can be detected by looking at the ICON of the USB Pen drive. If it is a folder icon, then its almost sure that the drive is infected with "conficker".

Manual Detection and Removal

Conficker disables the Background Intelligent Transfer Service (BITS) and Windows Automatic Updates. So If you find these services disabled, be alert. (To checkout what services are running and their statuses Run > services.msc.

Follow these steps to detect and remove Conficker virus:

• 
  Run regedit.exe registry editor
  Goto HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\SvcHost\netsvcs
  Double click the key to see if there is a random value at its end.
  
  
  
  
  
  Note the "zbtthjd" at the end, this is the virus. A list of valid entries in the field (from Microsoft) is given below to help you find the random string. (Usually at the end).
  

  AppMgmt
  AudioSrv
  Browser
  CryptSvc
  DMServer
  EventSystem
  HidServ
  Ias
  Iprip
  Irmon
  LanmanServer
  LanmanWorkstation
  Messenger
  Netman
  Nla
  Ntmssvc
  NWCWorkstation
  Nwsapagent
  Rasauto
  Rasman
  Remoteaccess
  Sacsvr
  Schedule
  Seclogon
  SENS
  Sharedaccess
  Themes
  TrkWks
  TrkSvr
  W32Time
  WZCSVC
  Wmi
  WmdmPmSp
  winmgmt
  wuauserv
  BITS
  ShellHWDetection
  uploadmgr
  WmdmPmSN
  xmlprov
  AeLookupSvc
  helpsvc

  
  
• Note the random string. (in this case "zbtthjd")


• Now goto HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zbtthjd\Parameters, note the ServiceDLL Parameter, It would be something like c:\windows\system32\<randomstring>.dll


• Take a Command prompt and run

  svchost -k netsvcs

  . This should stop the netsvcs and the virus.


• Try deleting the DLL file or else rename the DLL file to something else


• Restart the System.


• Renable Services Automatic Updates and BITS.

Note if you find these methods not applicable in your case, the virus must have morphed to some other form.
Hope it works :)

Earth Hour March 28th 0830-0930

Switch off the lights for one hour from 0830-0930.

Its time for us to act and reflect upon. Global Warming vs Earth.

Reset the root password on a linux box

Intro
The following steps were used to successfully reset the root password of a "Fedora 10" machine. In general, can be applied to any linux machine.

1. GRUBWhile booting, after the initial splash and POST screen of the bios, the control transfers to GRUB. If there is just one linux operating system installed, the GRUB screen is bypassed to the booting screen, in that case just keep on pressing or tapping the ESC Button until you see the GRUB Menu.
   
2. Edit Choose the OS you want to boot into and press "e" to edit.
   
3. Edit Find the line that corresponds to kernel, and again press "e". Add the following line to the end of the line.

   single init=/bin/bash

   
   Then press enter, and then "b" to boot the OS. After booting you will get a root shell.


4. Mounting the filesystem in readwrite mode: Type in the following command to remount the filesystem in read write mode.

   mount -o remount,rw / 


Not doing this step might give the following error when running passwd, passwd: Authentication token lock busy.

5. passwd Next just use the passwd command, and give a new root password, Now that's simple.


6. Reboot or init 5

That's really all I did.

OR from the root shell, you can also edit the /etc/shadow file to remove the password.
OR copy the /etc/shadow /etc/passwd file and use John-The-Ripper software to try cracking the password.

Stuck? Let me know...

              .___.__       .__  __         .__        ___.    __    
            __| _/|__| ____ |__|/  |______  |  | ______\_ |__ |  | __
           / __ | |  |/ ___\|  \   __\__  \ |  | \____ \| __ \|  |/ /
          / /_/ | |  / /_/  >  ||  |  / __ \|  |_|  |_> > \_\ \    < 
          \____ | |__\___  /|__||__| (____  /____/   __/|___  /__|_ \
               \/   /_____/               \/     |__|       \/     \/
                                
              a8888b.   
             d888888b. 
             8P"YP"Y88 
             8|o||o|88                
             8'    .88 
             8`._.' Y8.                      
            d/      `8b. 
           dP   .    Y8b. 
          d8:'  "  `::88b 
         d8"         'Y88b                                   
        :8P    '      :888                            
         8a.   :     _a88P                              
       ._/"Yaa_:   .| 88P| 
  jgs  \    YP"    `| 8P  `.
  a:f  /     \.___.d|    .' 
       `--..__)8888P`._.'