USB mouse cannot be installed in Vista

I got the following error while trying to install a new usb optical mouse to my Laptop with Vista Home P.

Windows found driver software for your device but encountered an error whileattempting to install it.
USB Browser Mouse
An error occurred during the installation of the device.
The driver installation file for this device is missing a necessary entry.
This may be because the INF was written for Windows 95 or later. Contact yourhardware vendor.If you know the manufacturer of your device, you can visit its website andcheck the support section for driver software.

Following solution was found:

1. Open start menu click search >advance search >put this word in the name : msmouse and don't forget to check mark Include non-index..etc. The files should be found in x:\Windows\System32DriverStore\FileRepository\msmouse.inf_*
2. Copy the folder and paste it on desktop or where ever you want then
3. open the device manger then look under unknown devices. There is the USB Receiver
4. Right click on it then choose updat driver > Browse my computer for driver software > Let me pick > Have Disk > Browse >open the folder you copy it to the
   desktop earlier. Then choose msmouse file inside it >open> ok.
5. Then it will show HID-compliant mouse. Choose it and click next. If any warning pop-up, click install or ok or next .. etc

Then the USB mouse driver was installed and works fine.

Source: http://forums.techarena.in/vista-hardware-devices/704610.htm

CHKDSK runs every time the PC boots! D: is Dirty

Every time when the PC boot, the check disk (CHKDSK) runs and states that "D: is Dirty".

To fix the problem:
1. Click on the Start menu and open the run dialog.
2. Type "cmd" and return (without quotes)
3. Next type "fsutil dirty query " (for example, C:)
4. If the returned message indicates that the volume is dirty, go to step 5
5. Next type "chkdsk /f /x"
6. After that finishes, repeat step 3.
7. If the volume is no longer dirty, reboot and chkdsk should not reappear.

- The "fsutil dirty query" reports the current state of the flag.
- "Chkdsk /f" forces Chkdsk to run whether or not the flag is dirty--- it's a way to ensure that errors are fixed, regardless of what the flag says.
- "Chkdsk /x" goes a little further and helps ensure that any files that were left open get closed; it actually implies "/f" so you don't need the /f if you're using /x .
- With either /f or /x, at the end of the run, Chkdsk should set the flag to clean.

Reference:
http://www.bleepingcomputer.com/forums/topic80849.html
http://www.pcreview.co.uk/forums/thread-72388.php

Restore missing tabs to the Display properties dialog

Some Trojan was found in a user's PC and was removed. However, some normal setting was also removed altogether.

Blue screens appeared recurrently with error message such as "bogus driver" problem, page_fault_in_nonpaged_area, unexpected_kernel_mode_trap, partort.sys error, serenum.sys error, etc.

Moreover, the tabs of "Desktop" and "Screen Saver" in the Display Properies were missing.

The following tools helps to fix the missing tabs:

• showalldisplaytabs-xp.vbs

Reference site: http://www.winhelponline.com/articles/38/1/Restore-missing-tabs-to-the-Display-properties-dialog.html

Good Web Bible Site

http://www.visionteamfellowship.com/biblenew.aspx?Site=1

There are various Chi & Eng versions and some useful maps and tools.

Very Good.

Virus Again - 62D4F8F5DDAC.exe

One of the PC in the office count down for 60 seconds to reboot a few minutes after logon. Again, a trojan from entering the site www. b l o g o. t w !!
Exactly as described in http://phorum.study-area.org/index.php?PHPSESSID=6d340836b5b3737986eb9441f581132a&topic=48640.msg246549#msg246549

It was managed to stop the reboot with:
Start > Run --> enter "shutdonw -a"

A process with the name "62D4F8F5DDAC.exe" was found.
Just like what is described in McAfee's site for a virus called PWS-JU.
http://tw.mcafee.com/virusInfo/default.asp?id=description&virus_k=143551

All the 3files were found at the exact location:

c:\WINNT\Debug\62D4F8F5DDAC.dll , filesize: 156.672 bytes
c:\WINNT\Debug\62D4F8F5DDAC.exe , filesize: 81.920 bytes
c:\WINNT\system32\od3mdi.dll , filesize: 259.584 bytes

So the 3 files were deleted.

However, just as the event in last time, the Winsock crashed. TCP/IP stack is corrupted. When the trojon melware installed, it changed some Registry Keys. The PC cannot connect to the internet.

Again, it was fixed with winsockxpfix.

The colleague said she has not installed anything...
Maybe casued by internet surfing, receivinig a jpg file, etc.

"premature EOM: unexpected close" & DNSBL in SendMail

Mails from some of the accounts (but not all) from a site (a business partner in S'pore of my office) were not received since yesterday.
Then I checked the sendmail log. Following lines showing the error was found:

Oct 24 10:14:57 server sendmail [11672]: l9O2EM2Q011672: collect: premature EOM: unexpected close
Oct 24 10:14:57 server sendmail [11672]: l9O2EM2Q011672: collect: unexpected close on connection from dmzxxx.yyy.com, sender=<zzz@yyy.com>
Oct 24 10:14:57 server sendmail [11672]: l9O2EM2Q011672: from=<zzz@yyy.com>, size=0, class=0, nrcpts=3, proto=ESMTP, daemon=MTA, relay=dmzxxx.yyy.com [111.222.333.444]

Lookup the problem from google and finally, thanks God, found lights to the solution. (http://www.outofcontrol.ca/2007/02/28/sendmail-collect-premature-eom-unexpected-close-solution/)
It is found to be something wrong with the DNS Black List being used in the sendmail configuration file.
--> One of the open DNSBL, relays.ordb.org, was no longer responding.

According to DNS Blacklist ORDB.org is shutting down the relays.ordb.org DNSBL has been shut down since 18 December 2006.

By removinig that DNSBL, mails from those accounts are received correctly.

Now we use 3 DNSBL in the sendmail:

• zen.spamhaus.org
• list.dsbl.org
• dnsbl.sorbs.net

I think checking the DNSBL sites from time to time to ensure they are working properly is necessary.

Don't really understand the connection between the error and the DNSBL terminations. The questions are:

• Not all mails from the same site cannot arrive. One of the account from that site can arrive successfully.
• The error only found these 2 days but the DNSBL of ordb.org has been stop working since 18 Dec 2006!! ??

Anyway, the problem solved.

Cannot connect to the internet after removing trojan

A colleague receive an MSN message with a linkage to the site: www. blogo .tw (intentionally add the space to avoid the auto hyperlinkage). Once clicked, a trojan is installed to the PC. (Actually, 2 files added, 1 is the C:\WINDOWS\system32\od3mdi.dll and the other is C:\DOCUMENT AND SETTINGS\USER's PROFILE\LOCAL SETTINGS\Temp\RarSFX0\z.exe). Both files are detected by the anti-virus program and were quarantineed.

However, the headache does not finish. the user's PC cannot connect to the internet.
The other symptom is when trying to use the "ping" command, it replies with a ? and a loud "bit" sound.
Pinging ? with 32 bytes of data:
Reply from 192.168.1.89: bytes=32 time=15ms TTL=247

Finally, it is found that something wrong with the Winsock. TCP/IP stack is corrupted. When the trojon melware installed, it changed some Registry Keys. Antivirus programs, adaware or spybot removed the melware but not correcting the registry keys.

Solution: fix the winsock with winsockxpfix.

The tool works fine for the PC. The problem solved after launching the tool and reboot the PC!

Reference: http://www.iup.edu/house/resnet/winfix.shtm
http://272586.blogspot.com/2007/07/winsockxpfixie.html