<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>WWWalter &#187; Troubleshoot</title>
	<atom:link href="http://www.walterdevos.be/category/troubleshoot/feed" rel="self" type="application/rss+xml" />
	<link>http://www.walterdevos.be</link>
	<description>Audio Video Computers and Technology</description>
	<lastBuildDate>Tue, 03 Jan 2012 13:41:16 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
		<item>
		<title>Windows 7 : Thumbnails folder.jpg not showing (on networked shared drive)</title>
		<link>http://www.walterdevos.be/windows-7-thumbnails-folder-jpg-not-showing-on-networked-shared-drive</link>
		<comments>http://www.walterdevos.be/windows-7-thumbnails-folder-jpg-not-showing-on-networked-shared-drive#comments</comments>
		<pubDate>Tue, 03 Jan 2012 13:32:07 +0000</pubDate>
		<dc:creator>walter</dc:creator>
				<category><![CDATA[Howto]]></category>
		<category><![CDATA[Software]]></category>
		<category><![CDATA[Troubleshoot]]></category>

		<guid isPermaLink="false">http://www.walterdevos.be/?p=824</guid>
		<description><![CDATA[I had this annoying problem where only some of the folders in windows (7) would show the thumbnail, which was present as a &#8220;folder.jpg&#8221; file inside it. Most of the folders would just show the default folder-icon. Nothing I did would change this, except when I would navigate into the folder and back, the thumbnail [...]]]></description>
			<content:encoded><![CDATA[<p>I had this annoying problem where only some of the folders in windows (7) would show the thumbnail, which was present as a &#8220;folder.jpg&#8221; file inside it. Most of the folders would just show the default folder-icon. Nothing I did would change this, except when I would navigate into the folder and back, the thumbnail would suddenly appear. This would typically happen on mapped network drives or network shares.</p>
<p><a href="http://www.walterdevos.be/wp-content/uploads/thmbs.jpg"><img src="http://www.walterdevos.be/wp-content/uploads/thmbs.jpg" alt="" title="thmbs" width="400" height="373" class="aligncenter size-full wp-image-826" /></a></p>
<p>I could narrow the problem down to the way windows uses cashing of thumbnails. As of windows vista, thumbnails are stored in cashing files that are stored in the users  application data folder: C:\Users\**username**\AppData\Local\Microsoft\Windows\Explorer . These files are protected however, and can&#8217;t be deleted. Cleaning the thumbnails can be done by the &#8220;disc cleanup&#8221; tool, located in Accesoires -> System Tools. Whenever I cleaned like that, all thumbnails would disappear and leave a blank spot. Not even the default folder icon would return. I could, however, remedy this by killing and restarting explorer in the task manager. (or simply by rebooting). <strong>But the missing thumbnails would still be missing!! </strong></p>
<p><strong>Solution:</strong> My solution my be harsh, but effective: Disable the cash completely.<br />
To go around disabling the cache, you need to use the &#8220;Local Group Policy Editor&#8221;. Run it by pressing the windows key + R and then typing &#8220;<strong>gpedit.msc</strong>&#8221; after the Open: field. Navigate to &#8220;User Configuration&#8221; -> &#8220;Administrative Templates&#8221; -> &#8220;Windows Components&#8221; -> &#8220;Windows Explorer&#8221;</p>
<p><a href="http://www.walterdevos.be/wp-content/uploads/gpedit.jpg"><img src="http://www.walterdevos.be/wp-content/uploads/gpedit.jpg" alt="" title="gpedit" width="500" height="321" class="aligncenter size-full wp-image-825" /></a></p>
<p>Find &#8220;Turn off caching of thumbnail pictured&#8221; and double click it. Choose &#8220;Enabled&#8221; from the three radio buttons and confirm with OK.</p>
<p><a href="http://www.walterdevos.be/wp-content/uploads/enablgp.jpg"><img src="http://www.walterdevos.be/wp-content/uploads/enablgp.jpg" alt="" title="enablgp" width="500" height="459" class="aligncenter size-full wp-image-829" /></a></p>
<p>Now restart explorer (by killing it in task manager. Restarting explorer using the &#8220;New Task&#8230;&#8221; button in Applications where you type &#8220;Explorer&#8221;). <strong>OR simply reboot windows.</strong></p>
<p>Now all thumbnails will be loaded every time you open the folder. This may be a bit slow, but at least you&#8217;ll have the thumbnails. </p>
]]></content:encoded>
			<wfw:commentRss>http://www.walterdevos.be/windows-7-thumbnails-folder-jpg-not-showing-on-networked-shared-drive/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Move file in use , who is blocking it or using it , force move delete</title>
		<link>http://www.walterdevos.be/move-file-in-use-who-is-blocking-it-or-using-it-force-move-delete</link>
		<comments>http://www.walterdevos.be/move-file-in-use-who-is-blocking-it-or-using-it-force-move-delete#comments</comments>
		<pubDate>Wed, 10 Aug 2011 09:22:15 +0000</pubDate>
		<dc:creator>walter</dc:creator>
				<category><![CDATA[Howto]]></category>
		<category><![CDATA[Software]]></category>
		<category><![CDATA[Troubleshoot]]></category>
		<category><![CDATA[app]]></category>
		<category><![CDATA[blocked]]></category>
		<category><![CDATA[blocking]]></category>
		<category><![CDATA[file]]></category>
		<category><![CDATA[folder]]></category>
		<category><![CDATA[handle]]></category>

		<guid isPermaLink="false">http://www.walterdevos.be/?p=787</guid>
		<description><![CDATA[We&#8217;ve all experienced it sometime: A file or folder is in use, and windows refuses to move or delete it. Even though it should, Windows rarely shows us what or who is blocking the file. Left in the dark, you&#8217;ll end up closing all sorts of apps, killing explorer, and what not. Then there are [...]]]></description>
			<content:encoded><![CDATA[<p>We&#8217;ve all experienced it sometime: A file or folder is in use, and windows refuses to move or delete it. Even though it should, Windows rarely shows us what or who is blocking the file. Left in the dark, you&#8217;ll end up closing all sorts of apps, killing explorer, and what not. Then there are those cheesy apps, like &#8220;who&#8217;s blocking&#8221;, that do all but free the file. So.. there we are.</p>
<p>A few days ago, I stumbled upon a small command line app from Mark Russinovich. Now, that sounds like a guy who knows how to kill a blocking app. <img src='http://www.walterdevos.be/wp-includes/images/smilies/icon_wink.gif' alt=';-)' class='wp-smiley' />  (just kiddin&#8217;). In fact, his app called &#8220;handle&#8221; is <a href="http://technet.microsoft.com/en-us/sysinternals/bb896655">featured at Windows Sysinternals</a>. Here is what it did for me.</p>
<p>I had this demo of Mixmeister and I wanted to &#8220;move&#8221; the downloaded install-file-folder to my backup drive. But somehow it was blocked. Windows, endlessly informative, told me nothing that I could use:</p>
<p><img src="http://www.walterdevos.be/wp-content/uploads/inuse1.jpg" alt="inuse1" title="inuse1" width="500" height="253" class="aligncenter size-full wp-image-788" /></p>
<p>So I fired up HANDLE. I asked it to tell me who&#8217;s blocking Mixmeister. </p>
<blockquote><p> Handle mixmeister</p></blockquote>
<p>I then got a list of &#8220;handles&#8221;, two of them were explorer and one of them was my browser chrome. To chase these apps away from my folder (file), I needed the PID of the app and the handle on the file. Handle provides both. In my case, explorer had pid 3796 and the handle on my folder had 1978. I could now get it off by entering:</p>
<blockquote><p> Handle -c 1978 -p 3796</p></blockquote>
<p><img src="http://www.walterdevos.be/wp-content/uploads/inuse2.jpg" alt="inuse2" title="inuse2" width="500" height="253" class="aligncenter size-full wp-image-789" /></p>
<p>I did the same for the other two handles, and see there: The folder was free and I could move it quite happily.</p>
<p>Just remember: <em>Killing handles &#8220;can&#8221; crash your machine</em>. When attempting this, always make sure any unsaved data is saved!</p>
<p><a href="http://technet.microsoft.com/en-us/sysinternals/bb896655">You can download HANDLE from here.</a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.walterdevos.be/move-file-in-use-who-is-blocking-it-or-using-it-force-move-delete/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>&#8220;apply security settings&#8221; mysql error 1364 ( server 5.5.9 )</title>
		<link>http://www.walterdevos.be/apply-security-settings-mysql-error-1364-server-5-5-9</link>
		<comments>http://www.walterdevos.be/apply-security-settings-mysql-error-1364-server-5-5-9#comments</comments>
		<pubDate>Sat, 05 Mar 2011 18:28:21 +0000</pubDate>
		<dc:creator>walter</dc:creator>
				<category><![CDATA[Troubleshoot]]></category>

		<guid isPermaLink="false">http://www.walterdevos.be/?p=761</guid>
		<description><![CDATA[Currently the &#8220;MySQL Community Server&#8221; (Release: 5.5.9) is broken an cannot be installed. You&#8217;ll get &#8220;apply security settings&#8221; mysql error 1364 There is no solution. Just install an older version, 5.0.1 works. more info: http://bugs.mysql.com/bug.php?id=58954]]></description>
			<content:encoded><![CDATA[<p>Currently the &#8220;MySQL Community Server&#8221; (Release: 5.5.9) is broken an cannot be installed.<br />
You&#8217;ll get &#8220;apply security settings&#8221; mysql error 1364<br />
<strong>There is no solution.</strong><br />
Just install an older version, 5.0.1 works.</p>
<p>more info: <a href="http://bugs.mysql.com/bug.php?id=58954">http://bugs.mysql.com/bug.php?id=58954 </a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.walterdevos.be/apply-security-settings-mysql-error-1364-server-5-5-9/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>The comments plugin requires an application id to properly namespace the provided xid</title>
		<link>http://www.walterdevos.be/the-comments-plugin-requires-an-application-id-to-properly-namespace-the-provided-xid</link>
		<comments>http://www.walterdevos.be/the-comments-plugin-requires-an-application-id-to-properly-namespace-the-provided-xid#comments</comments>
		<pubDate>Wed, 16 Feb 2011 18:09:27 +0000</pubDate>
		<dc:creator>walter</dc:creator>
				<category><![CDATA[Troubleshoot]]></category>

		<guid isPermaLink="false">http://www.walterdevos.be/?p=738</guid>
		<description><![CDATA[I recently got stuck while integrating a comments section into a webpage. The social plugin always threw a &#8220;The comments plugin requires an application id to properly namespace the provided xid.&#8221; at me. There&#8217;s was no solution in Google, so I will post my solution here. In my case I had called the script two [...]]]></description>
			<content:encoded><![CDATA[<p>I recently got stuck while integrating a comments section into a webpage. The social plugin always threw a &#8220;The comments plugin requires an application id to properly namespace the provided xid.&#8221; at me.<br />
<img src="http://www.walterdevos.be/wp-content/uploads/xiderror.jpg" alt="xiderror" title="xiderror" width="600" height="38" class="aligncenter size-full wp-image-739" /></p>
<p>There&#8217;s was no solution in Google, so I will post my solution here.</p>
<p>In my case I had called the script two times. Once in the header:</p>
<p><img src="http://www.walterdevos.be/wp-content/uploads/xiderror1.jpg" alt="xiderror1" title="xiderror1" width="500" height="151" class="aligncenter size-full wp-image-742" /></p>
<p>And then later in the sidebar (for a simple fan-box)</p>
<p><img src="http://www.walterdevos.be/wp-content/uploads/xiderror3.jpg" alt="xiderror3" title="xiderror3" width="500" height="45" class="aligncenter size-full wp-image-745" /></p>
<p>I don&#8217;t know what exactly caused the conflict. I believe the second call somehow erased my ap-id&#8230; Anyway, by removing <strong>&#8230;script src=&#8221;http://connect.facebook.net/en_US/all.js#xfbml=1&#8230;</strong> (red box) from the sidebar, both plugins worked fine.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.walterdevos.be/the-comments-plugin-requires-an-application-id-to-properly-namespace-the-provided-xid/feed</wfw:commentRss>
		<slash:comments>27</slash:comments>
		</item>
		<item>
		<title>Can&#8217;t turn on network discovery on windows 7</title>
		<link>http://www.walterdevos.be/cannot-cant-turn-on-network-discovery-on-windows-7</link>
		<comments>http://www.walterdevos.be/cannot-cant-turn-on-network-discovery-on-windows-7#comments</comments>
		<pubDate>Sun, 13 Feb 2011 15:12:24 +0000</pubDate>
		<dc:creator>walter</dc:creator>
				<category><![CDATA[Troubleshoot]]></category>

		<guid isPermaLink="false">http://www.walterdevos.be/?p=732</guid>
		<description><![CDATA[Symptoms: You can&#8217;t turn on network discovery in the Advanced Sharing Settings on Windows 7. When turned on, it reverts back to off ( it turns off ). Reason: One of the reasons ( and the scope of this solution ) could be that the UPnP service is not running. Solution: Start the service, here [...]]]></description>
			<content:encoded><![CDATA[<p><strong>Symptoms:</strong> You can&#8217;t turn on network discovery in the Advanced Sharing Settings on Windows 7. When turned on, it reverts back to off ( it turns off ).</p>
<p><img src="http://www.walterdevos.be/wp-content/uploads/tond1.jpg" alt="tond1" title="tond1" width="500" height="354" class="size-full wp-image-733" /></p>
<p><strong>Reason:</strong> One of the reasons ( and the scope of this solution ) could be that the UPnP service is not running.<br />
<strong>Solution:</strong> <em>Start the service</em>, here is how:<br />
Go to the service manager. Click start and type <strong>services.mmc</strong> in the &#8220;Search programs and files&#8221;-box. Press enter. ( Ignore the ActiveX error / just click the ok button ) On the bottom of the window that you now see, click on the <strong>standard</strong> tab. </p>
<p><img src="http://www.walterdevos.be/wp-content/uploads/tond2.jpg" alt="tond2" title="tond2" width="500" height="354" class="size-full wp-image-734" /></p>
<p>Make sure UPnP Device Host is started. If not start it by double clicking it. </p>
<p><img src="http://www.walterdevos.be/wp-content/uploads/tond3.jpg" alt="tond3" title="tond3" width="500" height="354" class="size-full wp-image-735" /></p>
<p>In this &#8220;UPnP Device Host Properties&#8221; windows, make sure Startup type is set to <strong>Automatic</strong>, if it&#8217;s not, change it. Then click <strong>Start</strong>. Now click ok and close the Services windows.</p>
<p>Try again to Turn on network discovery.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.walterdevos.be/cannot-cant-turn-on-network-discovery-on-windows-7/feed</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
		<item>
		<title>BBox2 Sagem Blocked &#8211; NAT out failed First packet in connection is not a SYN packet</title>
		<link>http://www.walterdevos.be/bbox2-sagem-blocked-nat-out-failed-first-packet-in-connection-is-not-a-syn-packet</link>
		<comments>http://www.walterdevos.be/bbox2-sagem-blocked-nat-out-failed-first-packet-in-connection-is-not-a-syn-packet#comments</comments>
		<pubDate>Sun, 24 Oct 2010 12:35:22 +0000</pubDate>
		<dc:creator>walter</dc:creator>
				<category><![CDATA[Devices]]></category>
		<category><![CDATA[Howto]]></category>
		<category><![CDATA[Troubleshoot]]></category>

		<guid isPermaLink="false">http://www.walterdevos.be/?p=646</guid>
		<description><![CDATA[Sometimes a Belgacom Modem Sagem 3464 ( BBox 2 ) may block all outgoing traffic on any port except for port 80. You&#8217;ll get all sorts of errors from VPN clients, Bittorrent clients, and non port 80 wibsites. Typicaly the errors complain about being unable to connect. Also, the router will block all NAT and [...]]]></description>
			<content:encoded><![CDATA[<p>Sometimes a Belgacom Modem Sagem 3464 ( BBox 2 ) may block all outgoing traffic on any port except for port 80. You&#8217;ll get all sorts of errors from VPN clients, Bittorrent clients, and non port 80 wibsites. Typicaly the errors complain about being unable to connect. Also, the router will block all NAT and Server incomming traffic as well. </p>
<p>In the security log ( firewal -> security log ) you&#8217;ll find entries like these:</p>
<div class="codecolorer-container text default" style="overflow:auto;white-space:nowrap;border:1px solid #9F9F9F;width:600px;"><table cellspacing="0" cellpadding="0"><tbody><tr><td style="padding:5px;text-align:center;color:#888888;background-color:#EEEEEE;border-right: 1px solid #9F9F9F;font: normal 12px/1.4em Monaco, Lucida Console, monospace;"><div>1<br />2<br />3<br />4<br />5<br />6<br /></div></td><td><div class="text codecolorer" style="padding:5px;font:normal 12px/1.4em Monaco, Lucida Console, monospace;white-space:nowrap">&lt;font size=-2&gt;Outbound Traffic&nbsp; Blocked - NAT out failed&nbsp; &nbsp; TCP 192.168.1.200:1230-&gt;81.240.173.98:2499 on ppp0<br />
Outbound Traffic&nbsp; &nbsp; Blocked - NAT out failed&nbsp; &nbsp; TCP 192.168.1.200:1229-&gt;84.105.73.50:12000 on ppp0<br />
Outbound Traffic&nbsp; &nbsp; Blocked - NAT out failed&nbsp; &nbsp; TCP 192.168.1.200:1228-&gt;95.7.96.189:17500 on ppp0<br />
Outbound Traffic&nbsp; &nbsp; Blocked - NAT out failed&nbsp; &nbsp; TCP 192.168.1.200:1227-&gt;82.170.211.77:12000 on ppp0<br />
Outbound Traffic&nbsp; &nbsp; Blocked - NAT out failed&nbsp; &nbsp; TCP 192.168.1.200:1226-&gt;88.66.131.23:3170 on ppp0<br />
Outbound Traffic&nbsp; &nbsp; Blocked - NAT out failed&nbsp; &nbsp; First packet in connection is not a SYN packet: TCP 192.168.1.50:60734-&gt;204.236.227.24:80 on ppp0&lt;/font&gt;</div></td></tr></tbody></table></div>
<p>According to many internet forum posts this can only be solved by rebooting the modem,<strong> but there is another, quicker and better solution</strong>, especially when you don&#8217;t want to reboot the modem.</p>
<p>To quickly resolve this issue without rebooting ( thus without disrupting services like streams, uploads, etc.  too long &#8212; rebooting takes minutes, while this solution takes less then a second) <strong>telnet to the Sagem modem</strong>, enter username: admin and password: BGCVDSL2<br />
at the command prompt type:</p>
<p><strong>fw_restart</strong></p>
<p><img src="http://www.walterdevos.be/wp-content/uploads/Add_New_Post_‹_WWWalter_—_WordPress_-_ChromePlus-2010-10-24_14.33.45.png" alt="Add_New_Post_‹_WWWalter_—_WordPress_-_ChromePlus-2010-10-24_14.33.45" title="Add_New_Post_‹_WWWalter_—_WordPress_-_ChromePlus-2010-10-24_14.33.45" width="705" height="455" class="aligncenter size-full wp-image-647" /></p>
<p>Close the telnet session. You&#8217;ll now be able to connect to other ports and NAT functionality will be restored. </p>
<p>There is no permanent fix. </p>
]]></content:encoded>
			<wfw:commentRss>http://www.walterdevos.be/bbox2-sagem-blocked-nat-out-failed-first-packet-in-connection-is-not-a-syn-packet/feed</wfw:commentRss>
		<slash:comments>15</slash:comments>
		</item>
		<item>
		<title>cannot connect to filesystem, incd service not running and Stop error 8E</title>
		<link>http://www.walterdevos.be/cannot-connect-to-filesystem-incd-service-not-running-and-stop-error-8e</link>
		<comments>http://www.walterdevos.be/cannot-connect-to-filesystem-incd-service-not-running-and-stop-error-8e#comments</comments>
		<pubDate>Fri, 16 Jul 2010 10:33:31 +0000</pubDate>
		<dc:creator>walter</dc:creator>
				<category><![CDATA[Troubleshoot]]></category>

		<guid isPermaLink="false">http://www.walterdevos.be/?p=601</guid>
		<description><![CDATA[Symptoms: After booting your PC a message says: &#8220;cannot connect to filesystem incd service not running&#8220;. Additionally, when you shut windows down, it pops a blue screen with a stop error: STOP: 0x0000008E (0xC0000005, &#8230; Some PC&#8217;s will automatically restart so you cannot shutdown the pc. Reason: You have installed a older version of Incd, [...]]]></description>
			<content:encoded><![CDATA[<p><strong>Symptoms:</strong> After booting your PC a message says: &#8220;<strong>cannot connect to filesystem incd service not running</strong>&#8220;. Additionally, when you shut windows down, it pops a blue screen with a stop error: <strong>STOP: 0x0000008E</strong> (0xC0000005, &#8230;  Some PC&#8217;s will automatically restart so you cannot shutdown the pc.</p>
<p><strong>Reason:</strong> You have installed a older version of <strong>Incd</strong>, probably part of an older install cd for Ahead Nero.</p>
<p><strong>Solution:</strong> Uninstall Incd from your PC. ( You most probably won&#8217;t need it. )</p>
<p>solution 1:<br />
- Go to your configuration panel to Software and uninstall Incd. It will be listed.</p>
<p>solution 2:<br />
- Sometimes Incd can&#8217;t be fully removed. In this case, use the special Incd clean-up tool. You can download it here: InCD-CleanTool.zip <a href="ftp://ftp9.nero.com/attach/InCD-CleanTool.zip" target="_blank">ftp://ftp9.nero.com/attach/InCD-CleanTool.zip</a> Extract it (zip) and run it, point it to your Ahead install directory (program files/ahead) and follow the instructions. </p>
<p>Restart and you should be ok.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.walterdevos.be/cannot-connect-to-filesystem-incd-service-not-running-and-stop-error-8e/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Sagem error Only one WAN connection can be enslaved by each bridge : Resolved</title>
		<link>http://www.walterdevos.be/sagem-error-only-one-wan-connection-can-be-enslaved-by-each-bridge-resolved</link>
		<comments>http://www.walterdevos.be/sagem-error-only-one-wan-connection-can-be-enslaved-by-each-bridge-resolved#comments</comments>
		<pubDate>Fri, 16 Jul 2010 10:13:45 +0000</pubDate>
		<dc:creator>walter</dc:creator>
				<category><![CDATA[Devices]]></category>
		<category><![CDATA[Hardware]]></category>
		<category><![CDATA[Howto]]></category>
		<category><![CDATA[Troubleshoot]]></category>
		<category><![CDATA[modem]]></category>
		<category><![CDATA[Sagem]]></category>
		<category><![CDATA[tricks]]></category>
		<category><![CDATA[vdsl2]]></category>

		<guid isPermaLink="false">http://www.walterdevos.be/?p=596</guid>
		<description><![CDATA[Symptoms: You want to change IP settings, change IP address ( local Ip address, default 192.168.1.1 ) but Sagem router returns a message: &#8220;Only one WAN connection can be enslaved by each bridge&#8221; Reason: Other VLAN interfaces are enabled and should be disabled when changing the LAN settings. Solution: You do not need VLAN , [...]]]></description>
			<content:encoded><![CDATA[<p><img src="http://www.walterdevos.be/wp-content/uploads/sgm.jpg" alt="sgm" title="sgm" width="200" height="124" class="alignleft size-full wp-image-599" /><strong>Symptoms:</strong> You want to change IP settings, change IP address ( local Ip address, default 192.168.1.1 ) but Sagem router returns a message: &#8220;<strong>Only one WAN connection can be enslaved by each bridge</strong>&#8221;</p>
<p><strong>Reason:</strong> Other VLAN interfaces are enabled and should be disabled when changing the LAN settings.</p>
<p><strong>Solution:</strong> You do not need VLAN , so disable the VLAN circuits</p>
<p>- Go to advanced settings<br />
- Choose Network Interfaces<br />
- Click on LAN Bridge<br />
- Click on settings (button)<br />
- Disable the Wan ethoa0 &#8230; 12  ( disable everything exept LAN Ethernet en LAN Wireless &#8211; first and last ).</p>
<p><img src="http://www.walterdevos.be/wp-content/uploads/sgm.png" alt="sgm" title="sgm" width="500" height="333" class="aligncenter size-full wp-image-597" /></p>
<p>- Now you can change your LAN IP settings.<br />
- Eventually return the state of the disabled interfaces ( only if required )</p>
<p>The Sagem 3464 is a (wireless) VDSL2 broadband internet router. It&#8217;s used by Belgacom, EDPNET, and maybe other providers using VDSL2 in Belgium. </p>
<p>Connect to the Sagem via a <strong>crossed</strong> UTP/STP cable into the Yellow port on the back of the unit (next to the power switch). The default IP is 192.168.1.1  Alternatively connect both router and PC to a hub or switch. ( Mind the unit&#8217;s DHCP server is active by default. )</p>
]]></content:encoded>
			<wfw:commentRss>http://www.walterdevos.be/sagem-error-only-one-wan-connection-can-be-enslaved-by-each-bridge-resolved/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Rootkit Kryptik.ABX in atapi.sys ( CsimPlayer.exe )</title>
		<link>http://www.walterdevos.be/rootkit-kryptik-abx-in-atapi-sys</link>
		<comments>http://www.walterdevos.be/rootkit-kryptik-abx-in-atapi-sys#comments</comments>
		<pubDate>Sat, 12 Dec 2009 01:04:33 +0000</pubDate>
		<dc:creator>walter</dc:creator>
				<category><![CDATA[Troubleshoot]]></category>

		<guid isPermaLink="false">http://www.walterdevos.be/?p=538</guid>
		<description><![CDATA[On Friday, December 11 a trojan horse got it&#8217;s way into my Windows. It all started with AVAST trowing these warnings: 11/12/2009 23:08:51 xxx 412 Sign of &#8220;Win32:Malware-gen&#8221; has been found in &#8220;C:\WINDOWS\TEMP\~TM1F1A.tmp&#8221; file. I told AVAST to delete ~TM1F1A.tmp, but avast apparently didn&#8217;t delete the file. Shortly after AVAST complained about a system file: [...]]]></description>
			<content:encoded><![CDATA[<p>On Friday, December 11 a trojan horse got it&#8217;s way into my Windows.</p>
<p>It all started with AVAST trowing these warnings:</p>
<blockquote><p>11/12/2009 23:08:51	xxx	412	Sign of &#8220;Win32:Malware-gen&#8221; has been found in &#8220;C:\WINDOWS\TEMP\~TM1F1A.tmp&#8221; file.  </p></blockquote>
<p>I told AVAST to delete ~TM1F1A.tmp, but avast apparently didn&#8217;t delete the file. Shortly after AVAST complained about a system file:</p>
<blockquote><p>11/12/2009 23:10:08	xxx	412	Sign of &#8220;Win32:Cutwail-AD [Trj]&#8221; has been found in &#8220;C:\WINDOWS\system32\drivers\atapi.sys&#8221; file.<br />
11/12/2009 23:10:37	xxx	412	Sign of &#8220;Win32:Cutwail-AD [Trj]&#8221; has been found in &#8220;C:\WINDOWS\system32\dllcache\atapi.sys&#8221; file.  </p></blockquote>
<p>Then I looked at the running processes. </p>
<p>A process called <strong>CsimPlayer.exe</strong> was running and had two child processes svchost.exe attached to it.</p>
<p>Running a SHA Hash comparison between CsimPlayer.exe and the tmp-file confirmed that CsimPlayer.exe was indeed ~TM1F1A.tmp, the file AVAST identified as malware. The same <strong>CsimPlayer</strong>  was added to the startup registry tree : HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ( C:\\WINDOWS\\system32\\CsimPlayer.exe&#8221; )</p>
<p>In the meantime a CMD (command prompt) process was eagerly active tunning a batch called <strong>fjhdyfhsn.bat</strong>. The batch command file contained following statements  (a loop trying to delete firefox&#8230; ):</p>
<blockquote>
<div class="codecolorer-container text default" style="overflow:auto;white-space:nowrap;border:1px solid #9F9F9F;width:600px;"><table cellspacing="0" cellpadding="0"><tbody><tr><td style="padding:5px;text-align:center;color:#888888;background-color:#EEEEEE;border-right: 1px solid #9F9F9F;font: normal 12px/1.4em Monaco, Lucida Console, monospace;"><div>1<br />2<br />3<br />4<br /></div></td><td><div class="text codecolorer" style="padding:5px;font:normal 12px/1.4em Monaco, Lucida Console, monospace;white-space:nowrap">@echo off<br />
:try<br />
@del /F /Q &quot;C:\Program Files\Mozilla Firefox\firefox.exe&quot;<br />
if exist &quot;C:\Program Files\Mozilla Firefox\firefox.exe&quot; goto try</div></td></tr></tbody></table></div>
</blockquote>
<p>The BAT file was dropped on my system at 11 december 23:08, moments before the ~temp files.<br />
<img src="http://www.walterdevos.be/wp-content/uploads/troj1.gif" alt="troj1" title="troj1" width="600" height="43" class="aligncenter size-full wp-image-539" /></p>
<p>Another file called <strong>siszyd32.exe</strong> was dropped in the StartUp folder. </p>
<p>I still don&#8217;t know what it was and why Avast isn&#8217;t detecting it. I will keep you posted if more info is available.</p>
<p>At the mean time try following:</p>
<ul>
<li>download process explorer: h<a href="http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx">ttp://technet.microsoft.com/en-us/sysinternals/bb896653.aspx</a></li>
<li>Run it then kill all CMDs, siszyd32.exe  and CsimPlayer.exe</li>
<li>remove all instances of siszyd32.exe and CsimPlayer.exe on your C:\drive</li>
<li>Remove it from the registry</li>
</ul>
<p><font color="red"><strong>Removal Instructions</strong></p>
<p>You&#8217;ve got this malware probably because java, flash or acrobat aren&#8217;t up to date. Older versions are  insecure and potentially exposes your system to security threats! Scan your system with <a href="http://secunia.com/vulnerability_scanning/online/">this online scanner</a>.</p>
<p><strong>Removal:</strong></p>
<p>Get <a href="http://www.malwarebytes.org/mbam.php">Malwarebytes&#8217; Anti-Malware </a></p>
<p></font></p>
]]></content:encoded>
			<wfw:commentRss>http://www.walterdevos.be/rootkit-kryptik-abx-in-atapi-sys/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Computer Shuts Off without any warning&#8230;.Why?</title>
		<link>http://www.walterdevos.be/computer-shuts-off-without-any-warning-why</link>
		<comments>http://www.walterdevos.be/computer-shuts-off-without-any-warning-why#comments</comments>
		<pubDate>Sun, 06 Dec 2009 07:42:35 +0000</pubDate>
		<dc:creator>walter</dc:creator>
				<category><![CDATA[Troubleshoot]]></category>
		<category><![CDATA[crash]]></category>
		<category><![CDATA[error]]></category>
		<category><![CDATA[reboot]]></category>
		<category><![CDATA[restart]]></category>
		<category><![CDATA[without warning]]></category>

		<guid isPermaLink="false">http://www.walterdevos.be/?p=535</guid>
		<description><![CDATA[Why does my computer just shut off without warning? Well, It&#8217;s having some major failure (soft or hardware) and reboots. You will need to figure out what error was involved. For that, you should tell you computer not to reboot, but to show you the error. Here is how: press Windows Key + Pause/Break Click [...]]]></description>
			<content:encoded><![CDATA[<p>Why does my computer just shut off without warning?</p>
<p>Well, It&#8217;s having some major failure (soft or hardware) and reboots. You will need to figure out what error was involved. For that, you should tell you computer not to reboot, but to show you the error. Here is how:</p>
<ol>
<li>press Windows Key + Pause/Break</li>
<li>Click the tab named ADVANCED</li>
<li>Click the SETTINGS button in the Startup and Recovery section</li>
<li>UN-check AUTOMATICALLY RESTART</li>
</ol>
<p>Now, next time your computer crashes, it will give you a &#8220;blue screen&#8221; telling you what&#8217;s wrong. Now.. sort of. Look here for a blue screen example:<br />
&nbsp;<br />
<img src="http://www.walterdevos.be/wp-content/uploads/bluescreen.gif" alt="bluescreen" title="bluescreen" width="512" height="384" class="aligncenter size-full wp-image-589" /><br />
&nbsp;<br />
Look for the STOP error, something like <strong>STOP 0x000000D1</strong> , forget the numbers between brackets. Go to google and look for &#8220;STOP 0x000000D1&#8243;. It may give you clues about what is happening.</p>
<p>Also note the filename (in the screenshot it is <strong>gv3.sys</strong>). Look in Google what that file does. It may reveal clues to what piece of hardware or software is failing.</p>
<p>If you find for example that your sound card is the culprit, go to the manufacturer site (of the card) and download the latest drivers. </p>
<p>And a last (but not least) tip. Try to remember when the problem began and what software you installed just before that. Uninstall that software. It may return your system to normal again.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.walterdevos.be/computer-shuts-off-without-any-warning-why/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

