The Wiert Corner – irregular stream of stuff

Jeroen W. Pluimers on .NET, C#, Delphi, databases, and personal interests

  • My badges

  • Twitter Updates

  • My Flickr Stream

  • Pages

  • All categories

  • Enter your email address to subscribe to this blog and receive notifications of new posts by email.

    Join 1,861 other subscribers

Archive for the ‘Windows’ Category

Research notes on Diffie Hellman over WebSockets over a MittM http proxy to setup an encapsulated secure channel

Posted by jpluimers on 2015/06/17

Inspired by CloudFlare Keyless SSL, I have this idea of using Diffie Hellman over WebSockets over a MittM based http proxy (which intercepts and decrypts HTTPS traffic) like mitmproxy (but them from a commercial vendor to inspect web traffic) to setup an encapsulated secure channel.

I know SSH uses Diffie Hellman to setup a secure channel over a binary TCP connection.

Binary communication over HTTP usually means WebSocket.

I don’t want WebSSH (which does use WebSockets, but is probably filtered by the MitM proxy anyway).

Maybe either of these open source tools will work:

If these don’t work, I need to do more research.

Since I use C# and .NET for much of my work, I started the WebSocket over HTTP C# query.

c# – How to use proxies with the WebSocket4Net library – Stack Overflow.

–jeroen

Posted in *nix, *nix-tools, Communications Development, Development, HTTP, Internet protocol suite, Linux, Power User, SSH, SuSE Linux, TCP, WebSockets, Windows, Windows-Http-Proxy | Leave a Comment »

Microsoft Defender (aka Antimalware) using lots of CPU when machine becomes idle (via: MsMpEng.exe ISSUES! Using very high amounts of CPU, during scans – Microsoft Community)

Posted by jpluimers on 2015/06/08

When using Windows VMs on my MacBook Retina, often they’d start using excessive CPU after I switched back to my OS X screen.

This is very distracting, for instance during presentations, as it also starts humming the fans at close to 100 Hz (for non techies: nearly 6000 rpm).

When switching back to the VM, and going to Task Manager soon enough, I observed a MsMpEng+high+cpu+usage.

Since I knew this was caused by Windows Defender, I first tried to “Excluded files and locations” MsMpEng.exe, but that did not help.

My second thought was that it was caused by idle behaviour. Disabling that was indeed the cause. Since doing that was kind of hard to circumvent, here is how:

Read the rest of this entry »

Posted in Microsoft Security Essentials, Power User, Uncategorized, Windows, Windows 8, Windows 8.1, Windows Defender | Leave a Comment »

When Windows 8 will not boot: the Automatic Repair disaster | Gadget Writing

Posted by jpluimers on 2015/06/05

The Automatic Repair Wizard is very limited and – worse – sometimes plain wrong.

So, this important tip from Tim Anderson can be a real life saver:

if this happens to you, I recommend looking at the logs. It is the only way to get real information about what it going wrong. In some cases you may need to boot into the recovery console from installation media, but if your hard drive is working at all, it should be possible to view those files.

I had the same happening with Windows 81., and I asseume other Windows versions react the same way.

–jeroen

via: When Windows 8 will not boot: the Automatic Repair disaster | Gadget Writing.

Posted in Power User, Windows, Windows 8, Windows 8.1 | Leave a Comment »

Error 13EC when installing The .NET Framework 4.5.2 means you need to free more disk space. 3GB that is.

Posted by jpluimers on 2015/05/23

About a year and a half ago, I wrote:

My conclusion is that various Microsoft updates now require 3 gigabytes of disk space.

This seems to be the case with the .NET Framework 4.5.1 KB 2858725 update, and probably more future updates. I tried installing the KB 2858725 update with slightly less than 3 gigabytes of space (and after the 3 gigabyte reserve.tmp appeared), and I was still getting error 13EC. But with slightly more than 3 gigabyte the update would install.

That is quite difficult when you run loads of VMs on SSDs: they usually don’t have an awful lot of disk space left.

The same issue holds for Microsoft .NET Framework 4.5.2 for Windows 7 x64-based Systems (KB2901983) which got released earlier this week:

Read the rest of this entry »

Posted in Power User, Windows, Windows 7, Windows 8, Windows 8.1, Windows 9, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, Windows Vista | 1 Comment »

Error during: git svn clone “RA layer request failed: PROPFIND request failed on” means fix your proxy configuration

Posted by jpluimers on 2015/05/22

When during a git svn clone you get an error message starting with “RA layer request failed: PROPFIND request failed on” it means you have to set your git svn proxy.

This is in a different location than the git proxy setting (it would be too easy if these were the same, right?).

So you do not get/set it through commands like these:

git config --global --get http.proxy
git config --global http.proxy localhost:3128

Via Cannot do git-svn fetch behind proxy and  git svn clone died of signal 11 under cygwin (thanks janosFredrik Pihl and User Pavel, I found out that you need to change these files (create the .subversion directory and servers file when they do not exist):

  • Windows:
    • %HomeShare%\.subversion\servers
    • %UserProfile%\.subversion\serverssour
  • Linux:
    • ~/.subversion/servers

If you ever run in the same problem with the regular SVN client, then you need to change yet different files (why have 1 standard when you can have many?):

  • Windows:
    • %AppData%\Roaming\Subversion\servers
  • Linux:
    • ~/Subversion/servers

Ensure a section like this exists and fill in the blanks:

[global]
# http-proxy-exceptions = *.exception.com, www.internal-site.org
http-proxy-host = YOURPROXY.com
http-proxy-port = YOURPORT
# http-proxy-username = defaultusername
# http-proxy-password = defaultpassword
# http-compression = no
# http-auth-types = basic;digest;negotiate
# No http-timeout, so just use the builtin default.
# No neon-debug-mask, so neon debugging is disabled.
# ssl-authority-files = /path/to/CAcert.pem;/path/to/CAcert2.pem<

Notes:

In some poorly managed networked environments, the %AppData% environment variable can be wrong, so make sure your Windows profile is not somewhere on a network share.

TortoiseGit seems to use yet another directory for GIT SVN server configuration.

–jeroen

via:

Posted in Cntlm, DVCS - Distributed Version Control, git, Power User, Source Code Management, SourceTree, Windows, Windows-Http-Proxy | Leave a Comment »

From batch file or shortcut: start Windows Update (via: Windows 7 Help Forums)

Posted by jpluimers on 2015/05/15

Call either of these from a batch file or Windows shortcut to end up at the Windows Update screen in the Control Panel:

%windir%\System32\rundll32.exe url.dll,FileProtocolHandler wuapp.exe
%windir%\explorer.exe shell:::{36eef7db-88ad-4e81-ad49-0e313f0c35f8}

Notes:

  • I’ve tested this in Windows 7, 8.x and 9 and it works fine in all these.
  • Unlike Control Printers calling Control Updates does not work.
  • I suspect there are many more magic GUID values you could use for other functions because the built-in syntax has been there for a long time.

–jeroen

via: Windows Update Shortcut – Create in Windows 7 – Windows 7 Help Forums.

Posted in Power User, Windows, Windows 7, Windows 8, Windows 8.1, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2 | Leave a Comment »

Debugging problems with the network proxy (via: The Chromium Projects)

Posted by jpluimers on 2015/05/08

In this case, another tool didn’t obtain the right Proxy settings.

Chrome to the rescue as chrome://net-internals/#proxy shows you the system proxy settings:

When browsers are experiencing network problems, generally the first thing to test is your network proxy settings. Misconfigured settings, or misbehaving settings, can have a profound impact on your network traffic possibly resulting in pages not loading at all.

Main take aways: chrome://net-internals/#proxy

Since then, I created this small batch file:

reg query "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings" | findstr proxy

And this one to edit the settings:

"C:\Windows\system32\rundll32.exe" shell32.dll,Control_RunDLL inetcpl.cpl,,4

It will open the same Window that your Control Panel or Internet Explorer uses to manage connection and proxy settings.
From there click the “LAN Settings” button to edit the proxy configuration.

–jeroen

via: Debugging problems with the network proxy – The Chromium Projects.

Posted in Power User, Windows, Windows 7, Windows 8, Windows 8.1, Windows Server 2003, Windows Server 2003 R2, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, Windows Vista, Windows XP, Windows-Http-Proxy | Leave a Comment »

P2V of an existing XP machine to Hyper-V to have an emergency fallback when retiring old XP physical machines

Posted by jpluimers on 2015/04/27

Edit 20210727:

  • A lot of the links below have died due to link rot (sometimes even the domains have gone), but most of the WayBack machine links marked [Wayback] still work.
  • The same stop [Wayback] stop 0x0000007B can happen when converting a physical machine to VMware (I will schedule a separate post about this):

    Windows XP Virtual Machine failing with stop 0x0000007B

    Windows XP Virtual Machine failing with stop 0x0000007B

Steps:

  1. Put the SATA disk of the XP machine in a different one.
  2. Disk2Vhd on the new machine to create a VHDX of the XP hard disk.
  3. Install Hyper-V on the target Windows 8.1 machine (you need at least Pro for that).
  4. Setup the base VM directory.
  5. Setup a virtual network switch (decide if you want it to be internal, external or private, then bind it to a network adapter if needed).
  6. Add a new VM.
  7. Assign a new directory to it.
  8. Assign memory to it.
  9. Assign the virtual network switch to it.
  10. Save it.
  11. Edit the settings, then bind the DVD drive on the IDE controller 1 to C:\Windows\System32\vmguest.iso.
  12. Connect to the VM.
  13. Start it.
  14. If you get a stop 0x0000007B (usually because of SATA/AHCI/IDE or other MassStorage controller driver issues), then read [Wayback] Jon’s Project Blog » disk2vhd using [WaybackUBCD for Windows to solve the issue as there is no BIOS screen in Hyper-V that allows you to switch from AHCI to SATA and back.
  15. Note: you cannot perform UBCD4Win when you access the Hyper-V host through Microsoft Remote Desktop (the mouse will not work at all, and most keyboard shortcuts will not work either; [WaybackVirtual Machine Connection Key Combinations with Hyper-V – Ben Armstrong – Site Home – MSDN Blogs does not apply).
  16. Boot.
  17. Register Windows (you might need to do extra work to go from OEM to Retail here).
  18. Remove hidden devices that are not used any more and their drivers.
  19. Setup a backup schedule.

Some links that helped me get at these steps:

–jeroen

Posted in BIOS, Boot, Hyper-V, Internet, link rot, Power User, Virtualization, Windows, Windows 8, Windows 8.1, Windows XP, WWW - the World Wide Web of information | Leave a Comment »

Batch file that finds and starts Cntlm.exe in verbose mode.

Posted by jpluimers on 2015/04/13

As a follow up on the Cntlm configuration post last week, here is a small batch file that will find Cntlm.exe (on x86 and x64 systems) then start it in verbose mode.


call :start %ProgramFiles%
call :start %ProgramFiles(x86)%
goto :end
:start
startlocal
set cntlm="%*\Cntlm\Cntlm.exe"
echo %cntlm%
if exist %cntlm% start "Cntlm verbose" %cntlm% -v
endlocal
goto :end
:end

–jeroen

Posted in Cntlm, Development, Fiddler, NTLM, Power User, Web Development, Windows, Windows 7, Windows 8, Windows 8.1, Windows Server 2003, Windows Server 2003 R2, Windows Server 2008, Windows Server 2008 R2, Windows Vista, Windows XP, Windows-Http-Proxy | Leave a Comment »

How to fill proxy information in cntlm config file (via: Stack Overflow)

Posted by jpluimers on 2015/04/10

This is an elaboration of How to fill proxy information in cntlm config file – Stack Overflow.

When digging around how to get authentication stuff going, I want as much information, so this was the command-line I used:

cntlm.exe -v -c cntlm.ini -I -M http://www.bbc.co.uk

The -v is important: it shows you why things fail, and where: It also shows you the NTLM headers sent back/forth over the wire.

These are the switches used:

  • -v verbose
  • -c configuration file
  • -I interactive (prompt for password)
  • -M magically detect the NTLM level used by the proxy

Since it is unsafe to store plain text passwords in configuration files, cntlm allows you to store the hashes.

Storing hashes not passwords locally is safer, but not much safer. See for instance Still Passing the Hash 15 Years Later: Guest Post: Let’s talk about Pass-the-Hash by Scriptjunkie the video How to own a Windows Domain or search for Mark Russinovich video windows hash ntlm hack.

Anyway: you can generate the password hashes using either     Read the rest of this entry »

Posted in Development, DVCS - Distributed Version Control, Fiddler, git, HTTP, Internet protocol suite, Mercurial/Hg, NTLM, Power User, Software Development, Source Code Management, TCP, Web Development, Windows, Windows 7, Windows 8, Windows 8.1, Windows Server 2008, Windows Server 2008 R2, Windows Vista | 1 Comment »