I recently came across a few workstations infected with Cryptowall. CryptoWall in essence is a new variant of Cyptodefense. We all know how dangerous these viruses can be, and the irreparable damage they can cause in an organization. While searching for a solution, I came across this blog article from Wyatt Roersma where he talks about possible methods of recovering files encrypted by Cryptowall. I have not personally tried this myself yet, but will be giving it a shot on the next Cryptowall infection I come across.

cryptocat
Good Luck!

Written By: Amardeep Juneja

 

Cryptowall – Block These IP’s and Domains!

Posted: 23rd June 2014 by TheGeekPost in Tips & Tricks

Cryptolocker is back and with a new name! I’ve compiled a list of domains that I found on-line that were found to be spreading the Cryptowall ransomware. Block these domains at your firewall or web filter!

146.185.220.0/23
yoyosasa.com
wawamediana.com
qoweiuwea.com
khalisimilisi.com
dominikanabestplace.com
nofbiatdominicana.com
dominicanajoker.com
likeyoudominicana.com
newsbrontima.com
yaroshwelcome.com
F7fc2938.pw
Primerollessando.shoe-uk.com
Statcounter.me
602ef0b0.pw
Defie-guret.com
Newsbrontima.com
Intendisseque.poolresurfacingaz.info
Niceshinesirius.pw
1044043.pw
1729c026.pw

Tips: 3 Things To Try To Fix A Broken iPhone/iPod/iPad

Posted: 19th June 2014 by TheGeekPost in Apple iOS

As an Apple device owner, at some time you’ve probably pressed the POWER button on your iPhone – and nothing happens. Usually, this can be resolved easily. Either your battery has run down, or iOS has “crashed” and needs to be rebooted. On rare occasion the firmware has been corrupted, but let’s save that as a last option before you break down and pray to the apple gods to miraculously revive your device. The following steps will usually get your iPhone/iPad/iPod working again in a few seconds.

ipad

 

Unless you are absolutely certain that there is plenty of charge left on the battery, connect the phone to a wall charger for at least 15 minutes. If it was just a low battery the phone will come on by itself. If it doesn’t go to step 2.

Hold the HOME and POWER (aka SLEEP) at the same time. An Apple logo should appear in 10 – 20 seconds. Release both buttons, wait about a minute, and your phone should be back to normal.

Occasionally it may be necessary to toggle the Mute switch a couple of times before Step 2. No one is sure why, but sometimes it helps if just holding the 2 buttons doesn’t work.

If absolutely nothing happens after step 3. either your phone is broken, your cable is defective, or your charger has failed. Try different chargers and cables to isolate the problem. Or take all of them to an Apple store for diagnosis (make a genius bar appointment before going).

If you get an error message, or you see a picture of a USB plug and iTunes, you will need to restore your phone with iTunes.

 

After a rash of bad updates, we have another one. This one for Windows 8.1! Users who have installed KB 2919355 are reporting they are no longer able to receive updates via WSUS if the WSUS Server is running Windows Server 2003 SP2, 2003 R2 SP2, 2008 SP2, or 2008 R2 Sp1.

This issue mainly occurs if HTTPS and SSL are enabled on the WSUS Server and TLS is not enabled. As a workaround, Microsoft has advised to either Enable TLS 1.2 on the WSUS server or disable HTTPS in WSUS.

Microsoft has planned a fix to restore functionality without making these changes. Once the fix has been released you can then roll back these changes. You can find more information on this issue on Microsoft’s site here

Written By: Amardeep Juneja

How To Pin A Folder To Start Menu

Posted: 12th May 2014 by TheGeekPost in Tips & Tricks

Ever needed to pin a specific folder to the start menu? Microsoft really didn’t make this a simple task in Windows 7 and WIndows 8. Today I’ll show you how!

In this example I’ll show you how to pin the folder C:\temp to the start menu. “User Name” is the name of the user account that you wish to create this setup for.

Browse to C:\users\USER NAME\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch

Right click and select New, Shortcut

In the location box type: explorer C:\temp

Click Next, Create a name for the shortcut, in this case I called it Temp. Click Finish

Then right-click your new shortcut and click “Pin To Start Menu”

You will now see the folder in your list of Pinned items on the Start Menu!

Written By: Amardeep Juneja

F5 Default Passwords

Posted: 6th May 2014 by TheGeekPost in Enterprise Software, Tips & Tricks

We’ve started a collection of F5 default passwords today. Check back for updates. Feel free to leave a comment if you would like to add to this list!

Product Version User Name Password
Big-IP 540 root default
Big-IP 9.12 admin admin

Windows 7 – Windows Update Folder Location

Posted: 6th May 2014 by TheGeekPost in Tips & Tricks, Windows 7

Ever wondered where Windows 7 stores Windows update installer files downloaded from the internet? Or maybe you’re running low on space and want to clear it out. Take a look at the folder below. This is where WindowsUpdate files are stored.

C:\Windows\SoftwareDistribution\Download

 

If you’re coming across the error “The source files could not be found” when trying to install .NET framework 2.0 or 3.5 on Server 2012 you’re not alone! Fortunately there is a quick fix that can help you out with this error, use DISM and the 2012 ISO or DVD instead of Server Manager.

Insert or mount the Windows 2012 ISO file

Run the following command in an elevated command prompt:

dism.exe /online /enable-feature /featurename:NetFX3 /Source:D:\sources\sxs /LimitAccess

Voila! If that doesn’t work you can also this the following workaround in Server Manager

1. Insert Windows Server 2012 DVD or iso to D drive.

2. Open Add Roles and Features Wizard

3. Select .NET Framework 3.5 Features and then click next,

4. Select Specify an alternate source path link in the Confirm installation selection screen.

5. Path: D:\Sources\SxS and then click OK.

6. Click Install button.

Written By: Amardeep Juneja

If you’re trying to setup external access to your published Apps on Citrix XenApp 7.5 installation, you may receive the following message “There is no Citrix XenApp server configured on the specified address

I came across this message while browsing some forums today. It appears that you need to purchase an external NetScaler gateway now if you want to publish XenApp applications externally. You now need a NetScaler appliance with NetScaler Gateway configured on it. Apparently this is the only supported method for remote connections to the Storefront.

There are 2 options for the Netscaler Gateway. The physical appliance, and the VM which is called the NetScaler Gateway VPX.

Written By: Amardeep Juneja

How To Output Folder Security using ICACLS

Posted: 30th April 2014 by TheGeekPost in Tips & Tricks

If you’re looking for an easy way to export a list of permissions for a certain folder, try using the ICACLS command.

In the example below, we ask icacls to list the permissions for all files and sub folders under the C:\myfolder directory and output the information to the myfolder_log.csv file under C:\temp:

icacls c:\myfolder\* /T > C:\temp\myfolder_log.csv

More detailed information on icacls can be found here

Written By: Amardeep Juneja