• C:\WINDOWS\Driver Cache\i386\sp3.cab: Trojan.Rootkit-1835 FOUND
• C:\WINDOWS\system32\dllcache\atapi.sys: Trojan.Rootkit-1835 FOUND
• C:\WINDOWS\system32\drivers\atapi.sys: Trojan.Rootkit-1835 FOUND
• C:\WINDOWS\system32\ReinstallBackups\0001\DriverFiles\i386\atapi.sys: Trojan.Rootkit-1835 FOUND

This was interesting because lately I’ve been cleaning up computers that end up missing atapi.sys and need it replaced in order to boot without a BSOD. But upon looking into it and finding a note in a recent ClamAV database update I am confident that this was a false positive.

It appears that this happened back in 2005 as well but was taken care of and now it’s happened again. I went as far as to grab an SP3 XP Pro install disc and scan it with ClamWin and it found the same false positive Trojan.Rootkit-1835.

Luckily the false postive has been removed from the ClamAV database as of 15 Dec 2009 04-20 -0500 according to this daily.csv submission note:

ClamAV database updated (15 Dec 2009 04-20 -0500): daily.cvd
Version: 10173
...
Submission notes: Trojan.Rootkit-1835 dropped due to false positive

So just update your ClamWin Database and no more false positives. You may want to run the System File Checker before you reboot just in case ClamWin deleted your atapi.sys, otherwise you’ll probably get a Blue Screen Of Death.

Just run the following commands and insert the install CD when it asks for it:

sfc /purgecache
sfc /scannow

Sources:

http://lists.clamav.net/lurker/attach/1@20091215.092101.11505bd1.attach

http://forums.clamwin.com/viewtopic.php?p=11247

• Platform: Windows XP Pro SP3 + Java 1.6.0_13
• jEdit Version: 4.3pre16

Utilities -> Global Options -> jEdit -> Text Area:

Anti Aliased  smooth text: subpixel

UNCHECK: Fractal font metrics (for better smooth text display)

The combination of subpixel antialiasing (a must) and Fractal font metrics (makes little difference) causes the unbearably slow scolling.

Thanks to the jEdit Community Forums.

Source:

http://community.jedit.org/?q=node/view/4148

As root edit “/etc/ssh/sshd_config” and add the line “UseDNS no“.

This can also be done by running the following command:

sudo echo "UseDNS no" >> /etc/ssh/sshd_config

Sources:

This issue is documented at OpenSSH.org

Fix and more details available at: http://tech.waltco.biz/2008/02/02/ssh-slow-to-connect-in-ubuntu-710-gutsy-gibbon/

In order to stop the Administrator account from showing as a login option on the Welcome Screen in Windows Vista you need to set the Administrator account to not active with the net user command from an Administrative cmd prompt as follows:

net user Administrator /active:no

Some people report that the “/” causes the command to fail, try it without:

net user Administrator active:no

From then on the the Administrator account should no longer show on the Welcome Screen.

SOURCE:

http://www.mydigitallife.info/2007/08/10/activate-enable-and-show-administrator-account-in-vista-welcome-screen/

“configuring updates stage 3 of 3. 0% complete”

and then an automatic reboot and the same message over and over again in an endless loop.

Some people say to just let it sit while plugged in to the ‘net or to try a repair install but without any restore points you aren’t going to get anywhere.

For some odd reason they removed the Method 3 from this MS help article, here is a copy of it:
Method 3:

Rename the Pending.xml file, and then edit the registry.

To rename the Pending.xml file and to edit the registry, follow these steps.

Start Windows Vista and go to the System Recovery options:

1.       Insert the Windows Vista installation disc in the disc drive, and then restart the computer.

2.       When you are prompted to restart from the disc, press any key.

3.       When you are prompted, configure the Language to install, Time and currency format, and Keyboard or input method options that you want, and then click Next.

4.       On the Install Windows page, click Repair your computer.

5.       On the System Recovery Options page, click the version of the Windows Vista operating system that you want to repair, and then click Next.

Use the System Recovery options to rename the Pending.xml file and edit the registry:

1.       On the System Recovery Options page, click Command Prompt.

2.       Type cd C:\windows\winsxs, and then press ENTER.

3.       Type ren pending.xml pending.old, and then press ENTER.

4.       Type regedit, and then press ENTER.

5.       Select HKEY_LOCAL_MACHINE.

6.       On the File menu, click Load Hive.

7.       Locate the following folder: C:\windows\system32\config\components

8.       When you are prompted for a name, type Offline_Components.

9.       In Registry Editor, locate and then delete the following registry subkey:

HLKM\Offline Components\AdvancedInstallersNeedResolving

HKLM\Offline Components\PendingXmlIdentifier

Exit Registry Editor:

1.       At the command prompt, type exit to exit Registry Editor.

2.       Press ENTER.

3.       Click Restart.

When you can actually log in again, the following hotfixes are supposed to prevent the loop from returning – I haven’t had much luck in installing them (usually says I don’t need them) but maybe they will help you:

http://www.microsoft.com/downloads/details.aspx?FamilyID=5639710d-dfbf-4527-806e-9a1634d0cc8e&DisplayLang=en

http://www.microsoft.com/downloads/details.aspx?FamilyID=1adf1d6c-ad46-4d09-a99c-ba3b1d9bcf4f&displaylang=en

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon\SpecialAccounts\UserList

But they didn’t show up in the Accounts Control Panel or in Run > control userpasswords2.

But they do show up when you run the command:

net user

aaand each account is active.. BUT they had no groups assigned to them and since it was XP Home Edition we didn’t have access to the groups snap in.

So, thanks to Google we found the proper syntax for adding a user (“username”) to a group (“Administrators”) with the net command:

net localgroup Administrators username /add

Sources:

http://www.ss64.com/nt/net_useradmin.html

http://www.theeldergeek.com/create_hidden_user_account.htm

UPDATE:

I recently tried this method on a similar Acer laptop with Ubuntu 8.10 AMD64 with no results. After searching, I used another guide that makes compiling madwifi from source simple. If my method doesn’t work for you, remove the backports modules:

sudo apt-get remove linux-backports-modules-intrepid-generic

then reboot, and try out the below guide. Thank you Hyperandy.

Link: http://blog.hyperandy.com/2008/11/01/atheros-ar242x-ubuntu-810-ibex/

Hardware:

• Laptop: Acer Aspire 4520
• Wireless Card: Atheros AR242x Communications Inc. 802.11abg

lspci | grep "Atheros"
07:00.0 Ethernet controller: Atheros Communications Inc. AR242x 802.11abg Wireless PCI Express Adapter (rev 01)

Resolution:

sudo apt-get install linux-backports-modules-intrepid-generic

After above install completes, reboot, then open up the Hardware Drivers manager (jockey-gtk or jockey-kde) and disable “Support for Atheros 802.11 wireless LAN cards” and make sure that “Support for 5xxx series of Atheros 802.11 wireless LAN cards” is enabled then reboot. You may need to reboot to see both drivers in the Hardware Drivers manager.

This is at least a temporary fix, you’ll end up with the ath5k drivers- hopefully a stable universal method for Atheros card support will become available soon.

Source:
8.10 Release Notes | Ubuntu

Surprisingly enough there are no documented settings for Recent Documents, not even something in gconf-editor, so people have been going stone age to prevent this functionality. In the past you could change permissions for the file that stores the data in your home directory, but it seems in later versions of Gnome the following is the current method of choice.

METHOD:

Enter the following into a terminal:

rm ~/.recently-used.xbel
mkdir ~/.recently-used.xbel

When you’re done, go check your menu and Recent Documents should be grayed out.

This works because the data concerning your recent documents can’t be written to a directory and the Recent Documents menu item is simply disabled. (I played around with retaining the text file and changing its permissions, but they were eventually always overwritten.)

NOTES:

It has been mentioned that you may receive GTK related warnings in the console after applying this, since we did a sort of end-run that’s kind of expected.

There was another method that involved making the file immutable (sudo chattr +i ~/.recently-used.xbel) but this is only for ext2/ext3 filesystems (I prefer JFS whenever applicable).

There may also be a left over file, ~/.recently_used that you can also remove:

rm ~/.recently-used

SOURCES:

Arch Linux Forums /  Disable Gnome Recent Documents [solved]

Disable recent documents – Ubuntu Forums

I take no responsibility for coming up with this hack, I just wanted to clearly document it. BTW, this has been a problem since 2005 > Bug 30942 – Request to add option to disable ‘Recent Documents’ lists

Structure is as follows:

print_r $contents;

([Cutbacks.jpg] => Array
(
[time] => 1207637110
[hash] => 05dee882129fe1574bcc8379ad3a40ac
[size] => 43928
)
[matrix3.zip] => Array
(
[time] => 1208040588
[hash] => 5f317404880304b82e9502fb399f2737
[size] => 46790
)
)

Code:

foreach( $contents as $key => $list ) {
echo 'Filename: ' . $key . "\n";
echo 'Time: ' . $list['time'] . "\n";
echo 'Hash: ' . $list['hash'] . "\n";
echo 'Size: ' . $list['size'] . "\n";
echo '----Next File----' . "\n";
}

Outputs:

Filename: Cutbacks.jpg
Time: 1207637110Hash: 05dee882129fe1574bcc8379ad3a40ac
Size: 43928
----Next File----
Filename: matrix3.zip
Time: 1208040588
Hash: 5f317404880304b82e9502fb399f2737
Size: 46790
----Next File----