Over 1 million tech questions and answers.

Way to identify if a wmi is hogged with queries on remote windows machine

Q: Way to identify if a wmi is hogged with queries on remote windows machine

Hi,
We are monitoring remote windows machine using WMI queries and now we do not want to hog that machine with so many queries at a time.
So, I wanted to know if there is any way through which I can identify from client machine that remote windows machine is hogged or its WMI service is hogged with queries?

Read other answers
RELEVANCY SCORE 200
Preferred Solution: Way to identify if a wmi is hogged with queries on remote windows machine

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

RELEVANCY SCORE 62.8

Dear Friends,
We are facing a problem of RAM utilization increase(memory leak) on our system with 14 PCs.


4 PCs are working with Windows server 2008 R2 SP1 and 10 with Windows 7.

We released that the RAM rise is due the antivirus recent version ie. Symantec 12.1.5.


But when we searched on net we found similar problem being faced by other people please see the link:
https://www.symantec.com/connect/forums/does-sep-12-use-windows-wfp  

Solution for the same is given as a patch for Windows https://support.microsoft.com/en-us/kb/2885980 .

We have installed the patch on one of the Windows servers machine for trial purpose and found that the patch really worked in our case. RAM increase has stopped.

Then we installed the patch on Windows7 machine but the RAM is still increasing in these machines. The tag name we got from server machine is Fwpk.

But for Windows 7 machines we are unable to identify the exact file or drivers which is causing the RAM rise.
Could you help us on how to find out the exact root cause for this rise?


Thank you,
Shailendra.


Thanks and Regards, Shailendra:- Keep Smiling

Read other answers
RELEVANCY SCORE 58

Hi everyone, I am a brand new member of this site, I have a question about an idea I had regarding virtual machines.

I have a large selection of the free antivirus/spyware programs that are out there, which I would like to periodically run, as most people will know some will pick up what others do not.

I have one problem with this - these programs are so intrusive and resource hungry, and many refuse to co-operate with each other. For example AVG free will not put up with jsut being used as an antivirus, it wants to protect your computer real-time and these extra processes cannot be entirely disabled without uninstalling. I already have a satisfactory real-time protection set-up.

I thought that if I could run them all on a virtual machine that accesses my local HDD I would bypass this issue -- but is it possible??!
I have windows virtual machine, with XP mode, a normal XP image and Server 2003.

Any help will be much appreciated!!

Ben.
 

A:Solved: Virtual Machine antivirus queries..

Read other 8 answers
RELEVANCY SCORE 56

Thanks for looking into this! Here's what happened:
I have a SD and USB. I used these on another machine and scanned them using MBAM and Trend Micro right after I plugged them to mine and before opening any file/folder.

MBAM reported no infections whereas TM reported tons (kindly see attached). After TM cleaned the two, I noticed a prompt saying the Windows Security Center service has been turned off and can't turn it on even by using cmd prompt, "net start wscsvc."

I ran a quick and full scan of MBAM and TM in normal mode. MBAM only in safe mode. All negative for any infection.

Ran a search in Google and I found this solution and seemed to have fixed it, i.e. I installed her registry fix. Although after that, I received a prompt saying my protection has been turned off. TM won't turn on until I rebooted. I've attached the registry fix for your reference.


As of posting, I had installed and ran Avast. The quick scan and boot-time scan both returned negatives.


I am worried though that my machine has been compromised.



As per instructions, I'm running Win7 SP1 64-bit so I only ran dds. Here is the log:


DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 8.0.7601.17514
Run by admin at 10:38:57 on 2012-09-23
Microsoft Windows 7 Enterprise 6.1.7601.1.1252.1.1033.18.8075.5592 [GMT 8:00]
.
SP: Trend Micro OfficeScan Anti-spyware *Enabled/Updated* {CAF254AD-0555-5A60-A05C-CD200262D02F}
SP: Windows Defender *Enabled/Updated* {D68DDC... Read more

A:Need help to identify if machine is still infected

As this issue has already been addressed by AdvancedSetup at the Malwarebytes forums, I'll go ahead and close this topic now.

Thanks!

Read other 1 answers
RELEVANCY SCORE 55.6

Hello,

I just spent like 2 hrs with no success to be able to access my Windows 8.1 machine (which I will call machine2) remotely using my Windows 7 machine (I will call it machine 1). Please help.

What I want to do: be able to access machine2 from machine1 remotely using remote desktop connection.

Step followed:
1- Enabled the Remote desktop connection on machine2 (image attached)
2- Disabled machine2 firewall (windows firewall)
3- Enabled DMZPlus mode on the router
4- Configured the Port number for machine2 in the router firewall section.
5- got the ip address of the router
6- tried to remotely connect from machine1 using the ip address to machine2, but didnt work.

I receive error image attached.

Please help. what should I do from here to make this work.

1. Who is your Internet Service Provider (ISP)?
US Providers - At&T

2. What type of Broadband connection are you using?
DSL

3. What is the exact Make and Model of your Modem, Router or Modem/Router Combo
Router AT&T Uverse 3801HGV

4. What is the Name of the Anti-Virus, Security or Firewall Software installed from the problematic computer?
Avira
thanks

A:Remote Desktop Connection to Windows 8.1 machine

Welcome to the forum.

Do you have basic network connectivity between the two computers? Your post does not make this clear.

Read other 4 answers
RELEVANCY SCORE 55.2

     I have a small network with about 15 workstations connecting to a server.  They have mapped drives to shared directories on the server.  Something infected with Cryptowall is encrypting files in the shared directories.  We are having trouble identifying which machine is infected and doing the encrypting.  I am looking for ideas on how to identify the infected machine.  I have tried using Process Monitor from sysinternals and looking through the logs to see who is touching the affected files but I did not have much luck.  I looked at Openfilesview from NirSoft but it does not show the user who has the file open.  The manage open files console in Windows does show the user but does not give a real time view or save a log.  Is there something specific in the network traffic I could look for in Wireshark?  Open to any ideas.
 
Thanks

A:Identify machine infected with Cryptowall

A repository of all current knowledge regarding CryptoWall is provided by Grinler (aka Lawrence Abrams), in this tutorial: CryptoWall and DECRYPT_INSTRUCTION Ransomware Information Guide and FAQReading that Guide will help you understand what CryptoDefense does and provide information for how to deal with it and possibly decrypt/recover your files. At this time there is no fix tool for CryptoWall.There is an ongoing discussions in this topic where you can ask questions and seek further assistance.CryptoWall - new variant of CryptoDefense Support & DiscussionRather than have everyone start individual topics, it would be best (and more manageable for staff) if you posted any questions, comments or requests for assistance in that topic discussion. Doing that will also ensure you receive proper assistance from our crypto malware experts since they may not see this thread. To avoid unnecessary confusion...this topic is closed.ThanksThe BC Staff

Read other 1 answers
RELEVANCY SCORE 53.6

We have a strange issue going on with a couple of freshly imaged Windows 7 workstations over here.

At first we were unable to remote in to them because of a message that the remote computer does not support NLA. Setting the option to Allow connections from computers running any version of Remote Desktop (less secure) works, but then RDP goes directly
to the remote machine and authentications happens there, which would be the case with a XP (or other non-NLA-capable) machine.
I tried troubleshooting the issue by opening the Certificates snap-in in mmc and deleting the Remote Desktop self-signed certificate but I seem to be unable to reissue/recreate it again...
I have read that i need to restart the Remote Desktop Configuration service in order for the certificate to recreate itself, but whenever I try to do this, Event Viewer logs the following error:
Log Name: System
Source: TerminalServices-RemoteConnectionManager 
Event ID: 1057
The Terminal Server has failed to create a new self signed certificate to be used for Terminal Server authentication on SSL connections. The relevant status code was An internal error occurred.
.

Any help or ideas on that would be greatly appreciated!





MCTS ConfigMgr 2012 | Twitter: @SergeiBiliarski | LinkedIn:
Sergei Biliarski

A:How can I reissue the Remote Desktop self-signed certificate for a standard Windows 7 client machine?

Hi,

Please check if this post can help:
http://social.technet.microsoft.com/Forums/en-US/winserverTS/thread/8df42746-465f-4902-95a6-121ef1f0fd68

Meanwhile, you can try the following:
Check the MachineKeys directory.
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\XXX

Copy the keys to a different directory by taking a backup and go into the file system and also delete the files in C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\.
After deletion log off and log in to see how it works.

If this cannot help,
I recommend to post in Server Forum to get more insights.
http://social.technet.microsoft.com/Forums/en-US/winserverTS/threadsTracy Cai
TechNet Community Support

Read other 7 answers
RELEVANCY SCORE 51.2

I have a query that pulls results from two other queries. And those pull from a combination of tables and other queries.

My issue is that when any of the underlying queries produces no result, instead of leaving those fields empty, it prevents any data from being fetched by the queries higher up the ladder.

For example, let's say the primary query displays the the first name of two contacts: Project Leader 1 (Jerry Collwell) and Project Leader 2 (Jane Law). If both project leaders exist, it'll return in one column "Jerry" and in the next column "Jane." However, if the project only has one project leader, and it's Jerry, then the query results in "" and "" instead of just displaying "Jerry" and "".

How do I prevent the whole query from breaking when there's missing optional data?
 

A:Solved: Access 2007 - Queries depending on other queries

How do you achieve the Jerry and Jane, if it is using an expression it sounds like you need to include an IIf() in it to test for Null conditions.
 

Read other 2 answers
RELEVANCY SCORE 49.6

Hi, my Windows XP keeps going on a go-slow and I can see both MsMpEng.exe and wuauclt.exe are hogging resources. I tried to investigate but got bamboozled by previous forum entries. They mention Windows Defender but I don't have that. I do use Microsoft Security Essentials so is that to blame? Also I read somewhere that updates should be Windows Updates and not Microsoft Updates - is that right and is that connected to my problem?
 

A:Solved: CPU being hogged

MSE should not be the cause unless you had other Anti Virus software or Security software’s on your Computer before and were not properly removed, some A/Vs are really hard to remove like AVG and McAfee just to name a couple and they need their special removal tools to completely remove from your system.
Also, could you please provide more details or Specs? about your machine re: RAM, Processor, etc.
If you are not sure how to do that, this Forum has an excellent that will provide the essential, NON Personal information needed for members and moderators to help you along; this tool can be found by:
Going into your Account, then click on "Edit your Details" and at the very bottom of the page in the box that states: Computer Specs , look for the words: SysInfo utility and click on that and it will update your Computer specs.

Good luck
Ray
 

Read other 3 answers
RELEVANCY SCORE 49.6

Hi. A friend of mine has asked me to find out what's wrong with his Dell laptop. He recently had a virus/trojan that he had his brother-in-law cleanup, but I think something was missed. There is a significant delay between pressing a key and the character showing up on the screen. This happens in any application. It seems like something is hogging the resources. If I type a sentence fast and wait about 10 seconds, the text will eventually appear. Also, during that weight, the mouse cursor does not respond. Any help would be appreciated. Thanks.


DDS (Ver_09-02-01.01) - NTFSx86
Run by Jeff at 15:24:15.85 on 14/03/2009
Internet Explorer: 6.0.2900.5512
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.894.448 [GMT -4:00]

AV: avast! antivirus 4.8.1335 [VPS 090313-0] *On-access scanning disabled* (Updated)
FW: Norton Internet Worm Protection *disabled*

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
C:\WINDOWS\system32\svchost -k rpcss
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common File... Read more

A:Resources being hogged

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

------------------------------------------------------

Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate.

Please stay with me until given the 'all clear' even if symptoms seemingly abate.

Kindly follow my instructions and please do no fixing on your own or running of scanners unless requested by a helper.

------------------------------------------------------

As far as the lag in typing, the laptop probably needs a new battery. Take out the battery and see if the lag goes away.

------------------------------------------------------

Please visit this webpage for download links, and instructions for running ComboFix:

http://www.bleepingcomputer.com/comb...o-use-combofix

* Ensure you have disabled all antivirus and antimalware programs so they do not interfere with the running of ComboFix.

Get help here

Please post the C:\ComboFix.txt in your next reply for further review.

------------------------------------------------------

Read other 5 answers
RELEVANCY SCORE 48.8

aite so heres the problem, for a week my internet connection on all my home computers had been going very slow ( i have high speed cable). I called my ISP and they ran diagnostics and sent a technician, but nothing was wrong on their side. The technician however did find out something else. He ran ping tests on all the computers simultaneously and was getting over 2000 in ms. However when he disconnected my laptop from the network, the ms response on all the other computers went back down to normal (4-15 ms). I want to know if there is anything running on my laptop that is hogging network resources. Logfile of Trend Micro HijackThis v2.0.2Scan saved at 1:43:08 PM, on 1/17/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\ibmpmsvc.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Common Files\Symantec... Read more

A:Internet Connection Being Hogged

Hi funktastic and welcome to the BC HijackThis forum. As far as malware goes, I see no signs of any in the log. It's clean.P2P applications will consume alot of bandwidth. My first guess would be Napster. Terminate it and see if the performance is any better. If not, then for performance related issues I would suggest posting a question in the Windows XP Home and Professional forum.The techs in that forum specialize in matters pertaining to the operating system, performance and applications. Let them know that you have been to this forum and that no malware was found.When posting to any other forum, do not post a HijackThis log or the post will simply be moved back to this forum for infection analysis. That is what HijackThis is used for and that is what we specialize in here in this forum.Also, when posting in any other forum for assistance, give as much detail as possible regarding any issues that are occurring. The more information they have, the better the techs can analyze the issue and make any recommendations for resolving it.Cheers.OT

Read other 1 answers
RELEVANCY SCORE 48.8

HJT log

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:01:11 AM, on 12/23/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINNT\System32\smss.exe
C:\PROGRA~1\AVG\AVG10\avgchsvx.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\Ati2evxx.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\System32\WLTRYSVC.EXE
C:\WINNT\System32\bcmwltry.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\Ati2evxx.exe
C:\WINNT\Explorer.EXE
C:\Program Files\AVG\AVG10\avgwdsvc.exe
C:\WINNT\system32\HPZipm12.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINNT\system32\WLTRAY.exe
C:\Program Files\SigmaTel\C-Major Audio\WDM\stsystra.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Logitech\SetPointP\SetPoint.exe
C:\Program Files\AVG\AVG10\avgtray.exe
C:\WINNT\system32\ctfmon.exe
C:... Read more

A:memory being hogged in intervals

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review your topic an do their best to resolve your issues.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions that pop up for posting... Read more

Read other 2 answers
RELEVANCY SCORE 48.4

Hello All,

I have a situation where I need to map a network drive on a remote server so that a scheduled installation can tale place from the mapped drive. For scheduling the installation I used the Schtasks.exe which has an option to create the scheduled task on a remote machine too using :

Schtasks.exe /create /S <remote computer name>

What I am interested in knowing is if there is any EXE file that can help me map a network drive on a remote computer in the same manner as schtasks.exe as there is no option for doing it in net.exe that is used for mapping a network drive. To avoid confusion let me put up :

machine that I want to map the network drive upon : ABC
Server on which i need to map the network drive upon : XYZ
Network path to be mapped : \\PQR

A:Using Net Use on a remote machine

Hi rahul1911,

The procedure should be possible. Here's a tutorial that may help as it contains additional commands and addresses share issues: How-To Map a Network Drive using Windows 7, Vista or Windows Server 2008.

I hope this helps. If not, check to make sure the server is sharing properly and that permissions are set to allow this to occur (you aren't prohibited from Group Policy or Active Directory) and/or that you are using an appropriate username and/or password if required.

Good luck!

Read other 4 answers
RELEVANCY SCORE 48.4

When i plug in devices(new ones),plug in Ethernet cords(connecting to networks), Or some other random things my computer spikes to 100% percent usage and remains there forever. Ive tried Microsoft tech support but...yeah. I cant run the computer in safe mode with networking so that makes no sense when im in normal. I dont know whats wrong. I ran spyware, maleware, virus scans etc. but nothing comes up. I just dont want my only option to be factory restore.

Read other answers
RELEVANCY SCORE 48

Basically, there's lots of people I share the house with, and my speeds and performance are lacking when you have several people streaming, downloading, etc.

Seeing as how there's already a cable modem (connected to a wireless router that is the network we all use), how would I go about getting a stable connection for myself? Could I call up my ISP, have them install a second cable connection and just have a second network that only I would use? (I realize I would have to pay for this.) Is that possible?
 

A:Bandwidth being hogged, can I get a second internet connection for one house?

Read other 8 answers
RELEVANCY SCORE 48

I recently switched my main computer over to Linux (from Win8), and everything is working fine, except that when I would remote into the computer from my other computer (running Win7), it was much faster when running Win8. Since I upgraded to Linux, I can connect, but the screen refreshes at a much slower rate, even over the same connection (LAN speed).

Anyone know of any settings either on the Win7 side or on the Linux server side that I can change to speed things up?
 

A:remote into Linux machine

Which Linux distro are you using ? There are some distros made specifically for older machines. For example, Fedora has it's flagship distro using Gnome, but it also has 2 lighter versions one using LXDE. and the other using Xfce.
 

Read other 3 answers
RELEVANCY SCORE 48

Hi

I cant seem to be able to remote desktop to an XP SP3 machine from my Windows 7 pro desktop. My colleague who has an XP desktop can remote desktop fine to the other XP SP3 machine.

I can also remote desktop from the XP SP3 back to my Windows 7 fine but not the other way round.

Can anyone help on this please?

Thank you

A:Remote Desktop from Win 7 to XP machine

hello and welcome,
did you already disable the firewall both of the OS?

Read other 9 answers
RELEVANCY SCORE 48

I have one very powerful PC that I would like to use as a VM server, and then I have a netbook and a HP pavilion dv2000 laptop that I would like access the VMs. My ideal setup would be to have my main machine running Windows 7 and have two virtual machines running Windows 7 that would be accessed and used by the netbook and notebook across the network, this would allow the two mobile PCs to make use of the main PC's sizable resources while still being three different machines that can be used by three different people. The reason I want to do this is that I have a lot of people who want to use the computer, but only one that runs Windows, has Office, and is very powerful. Any help on this topic would be appreciated.

A:Remote Virtual Machine

Problem: The VMs would not have office unless you could install it in each VM and that means a separate product key.

Also, each instance of Win 7 would need it's own product key since you can't run the same one in a virtual machine.

Other than that it sounds doable running Win 7 guests under Oracle VirtualBox. Just set the networks up as Bridged so they get their IP address from the same router, then setup port forwarding to a VNC server running in each VM. TightVNC is a good choice.

I don't think you will be very happy with the performance though. Even with Gigabit network adapters it will be slow.

It would be fun to try though.

Read other 9 answers
RELEVANCY SCORE 48

Helloo I'm having a problem with connecting my Windows 7 laptop to my Windows XP Pro machine. I have my router at home (where the XP machine is) port forwarded for Remote Desktop, I set up the XP machine completely for connecting to by allowing exceptions for the Remote Desktop.

When on my Win 7 machine I type in the IP address and port and it gets me to the log in screen where it gives me the username (Matt) and I enter my credentials (password). After entering it and clicking OK it brings me back to the log in screen. Over and Over. Does anyone have an idea of what I may have done wrong? I can post a link of the site I used to set it up.

Thanks!

A:Remote Desktop Win 7 to XP machine

Do you have RDP access turned on for user Matt? If not you will not be able to use RDP.

Read other 3 answers
RELEVANCY SCORE 48

Hello,

I am interested in turning my PC to a remote machine (like a dedicated/rootserver) but to be able to start up and shut down my PC w/e I want remotely. Also I would like not to change my OS (windows) in order to achieve that, if it's possible of course. The whole thing has to do with my business trips (I have to travel around and change places) so I need to turn my home PCs into remote machines in order to be able to control them from my laptop. I searched a bit and I found this Home but I would like to find a way with windows.

Looking forward to your replies,
Thanks

A:Turn my PC to remote machine

Mine have to be turned ON. But this is my favorite remote program.

TeamViewer

Read other 4 answers
RELEVANCY SCORE 48

Hi,
I have XP machine, which Im accessing Remotly, Im able to Record In my current machine. But when I try recording in remote machine the Recording Option itself is Desabled. Will I be able to record Remotly or Do I need to Enable same thing in remote Machine to save or Enable recording Option. Pls Suggest a Solution.
 

A:Not able to Record in Remote Machine

Record what? What software are you using? Is your remote connection by Windows Remote Desktop? i.e. more information is needed to give a helpful response.
 

Read other 3 answers
RELEVANCY SCORE 47.2

I suspect that an admin user is accessing my Work Computer by \\Hostname\C$ and checking my documents. Is there a way I can track this down?

Read other answers
RELEVANCY SCORE 47.2

As someone who is working towards a bachelors degree in computer networking, I have a half decent understanding (or so I thought) of how the internet works. But today... today my mind was blown. I knowingly downloaded something for a game that was a bit sketchy, fully aware that there was a 90% chance a keylogger came packaged with it, didn't concern me that much. I tend to be a bit reckless with my machine because just about every virus I've ever come across I can take care of with relative ease (and heck virus removal offers a weird thrill). Throw in a Hiren's boot CD, run trusty old MBAM, TDSS killer etc. and smash malware with an iron fist. Not to mention I tend to re install my OS every two months because I make such a mess of my file system I figure its best I start anew, and continue to dump everything to desktop.
 
So here's the story of what happened today, I'm playing my game and having a blast when all of a sudden it closes. I figure "Hey, the game just crashed that's pretty lame". Upon attempt to run the game again and log in I was confronted with a "Password is incorrect" message, at this point I knew what was going on, got keylogged and someone was in the process of trying to cause havoc with the account. I giggled a bit, then proceeded to go to the website and push a password reset request through my email, since the email had a different password I wasn't too concerned. Upon logging into my email to confirm the password reset... Read more

A:Someone gained remote access to my machine

Haha you sound like me, but I haven't seen active on-screen activity for for almost 2 months now!
So I really shouldn't give you advice haha!
 
Some simple exploit protection that I know of is EMET and Secunia PSI, if that fails, I usually just end up using a boot CD lol

Read other 7 answers
RELEVANCY SCORE 47.2

Problem: As a member of the security team, I am not a member of the IT team. Therefore do not have access to physical lists of a given machine.

The easy solutions are-1. Ask IT for the list of machine names, 2. Ask someone physically at the location to look for the users cubical and tell me the machine name (located on the ID tag)

Issue: Examine the contents of a workstation somewhere on our intranet.
Known Data: Username, server, server profile, physical address (big deal), personal storage on the LAN. Every workstation on the intranet has a unique identifier assigned by IT and placed on label on the physical case. Connecting remotely is permissible for my position.

Question. Is there a way to look on the local server (remotely) and determine the IP or machine name from a profile stored on the server or any other identifying characteristics to help me map to this workstation.

The problem with my "easy solutions" are that IT is NOT security, asking anyone opens the door to multiple questions that cannot be answered during an active investigation, and the separation of management (which I am classified as) and the workers prohibits them from assisting. Last resort, if there is no way to virtually accomplish this, is to contact the manager of the office to physically look at the workstation.

Thanks for your help,
MM
 

A:Solved: Need to find remote machine name

Read other 10 answers
RELEVANCY SCORE 47.2

Hello,



I have run into an issue where psexec is not working on one of my remote clients. However, it is working on other remote clients. When I execute the psexec \\computername it returns with the error (Error communicating with PsExec service on the remote computer:
no process is on the other end of the pipe). I then am able to perform a pslist on the remote computer and I do see the PSEXESVC process, then I can run a pskill and end that process which I have seen by other people that this works and then they can execute
a psexec with no issue, this does not work for me still. I have also tried deleting the service on the remote computer using sc.exe \\computername delete PSEXESVC which completes successfully. I then run a psexec again and the service creates and starts but
the same error occurred. I can also confirm that the PSEXESVC application is running in the %WINDIR% directory on the remote machine. Has anyone else experienced this issue has is there a resolution to this issue. 



Thank you,

Tobias

Read other answers
RELEVANCY SCORE 47.2

This has been going on for some time I dont know if its research or a game for advanced entities or likely I checked yes to but was vaguely reading the terms because extremely malicious things haven't happened but its been way too long of a volunteer effort on my part and I'm sick of constantly resetting or having sound embedded or flat stop working along with all sound icons in several of all the places. and cams and mic coming on my cell phone taking hundreds of screen shots and a very impressive variety of  synchronized things that Im either completely mad or its really great skillsI am sure I have not been a challenge for them and I feel they easily controlled Norton. I'm so shameless I wish I could ask them 100 questions and have them show me how I mean as long as evidently have put so much time.I hate to think I am actually here for a Psychiatric validation because I used to not care if I was crazy just hoped I was crazy enuff! But settings change, text gets rearranged, sound changes or my heartbeat-yes this is wild gets broadcast and plays out of an antique Grundage shortwave radio no its not a tube Grundage has an unusual radio setup. radio  I would love to take all the credit for the calamity as I do cause most of myown  messes am calamity capable when things in my electrical proximity are  difficult to controll I could admit Ive only mastered but the electric toothbrush and a few other things just not the phone the o... Read more

A:Remote control of my machine and many other hatricks

ESET Online ScannerClick here to download the installer for ESET Online Scanner and save it to your Desktop.Disable all your antivirus and antimalware software - see how to do that here.Right click on esetsmartinstaller_enu.exe and select Run as Administrator.Place a checkmark in YES, I accept the Terms of Use, then click Start. Wait for ESET Online Scanner to load its components.Select Enable detection of potentially unwanted applications.Click Advanced Settings, then place a checkmark in the following:Remove found threatsScan archivesScan for potentially unsafe applicationsEnable Anti-Stealth technologyClick Start to begin scanning.ESET Online Scanner will start downloading signatures and scan. Please be patient, as this scan can take quite some time.When the scan is done, click List threats (only available if ESET Online Scanner found something).Click Export, then save the file to your desktop.Click Back, then Finish to exit ESET Online Scanner.

Read other 15 answers
RELEVANCY SCORE 47.2

I am trying to RD into a machine that I can ping. RD fails with the generic "this computer can't connect to the remote computer" message. I checked and the remote machine does have the "allow other to connect to this machine via RD" checkbox checked. Furthermore I was able to RD to it about a month ago. Not sure what has changed since then. Where should I look? Thanks.
 

A:cannot connect to machine via remote desktop

Read other 8 answers
RELEVANCY SCORE 47.2

Hi All,
I was wondering whether it is possible to check if a particular username exists on a remote machine given the machine's IP address.

(something like : Net user dude100 //193.63.251.8)

TIA,
Shafeeq M.
 

A:checking user name on a remote machine ???

cooldude3K said:

Hi All,
I was wondering whether it is possible to check if a particular username exists on a remote machine given the machine's IP address.

(something like : Net user dude100 //193.63.251.8)

TIA,
Shafeeq M.Click to expand...
NBTscan
 

Read other 1 answers
RELEVANCY SCORE 47.2

I have two windows 7 pro machines and 2 xp pro machines. Every once in a while I need to remote into the 2008 server at work. I can do that perfectly fine when I am using my XP machines. With my Windows 7 machines, I can remote into any workstation at work but it will not allow me to remote into the 2008 server. It asks me to enter my credentials (I try typing in the admin username and password but it doesn't work). It doesn't bring me to the usual full screen where I need to put the username and password to join the domain, a different box pops up asking me for credentials. From what I read, I can log onto 2008 server with Win 7. What am I doing wrong???

A:Remote into a 2008 server from a Win 7 machine

Are you using the Remote Desktop Tool located in Start > All Programs > Accessories?

Read other 5 answers
RELEVANCY SCORE 47.2

About a week ago I went on a trip out of town and left a box running a game server through Hamachi at home. I have done this countless times and never had a problem. TeamViewer is loaded on the box and has always connected and ran just fine remotely. However, on this specific trip, TeamViewer simply gives up on trying to connect. The iPhone version brings up an error stating 'Protocol negotiation failed.' The game server application no longer responds either. Also, both the remote and the local machine I am on right now are connected through Hamachi on a VPN. The interesting thing is the remote computer responds to ping, allows me to bring up shared folders in Explorer, and is listed as running in the Hamachi client. What it does not allow me to do is control it remotely in any way. This system needs a restart badly and I have run out of ideas on how to remotely access it. Seeing that I am a couple of hundred miles away, I cannot drive over and restart it in person so easy. Here are some further details:

Remote System:
OS: Windows XP Pro SP3
TeamViewer: Logged in and setup for unattended access - Shows up on my list with a yellow dot.
Hamachi: Connected with direct tunnel
Firewall: Comodo Firewall (older version) - Every program I've mentioned has been allowed through with no issue.

Local System:
OS: Windows 7 Ultimate x64 SP1
TeamViewer: Logged in and setup for unattended access
Hamachi: Connected with direct tunnel
Firewall: Windows Firewall
Things I have tried which h... Read more

A:Need to restart remote machine, TeamViewer down, only on a VPN now

Well I drove back home earlier than expected and fixed the remote computer in person. Turns out the system had run out of memory after being on so long and TeamViewer simply had no resources to initiate, or everything was just timing out from the system taking so long with any request. I'll be picking up more RAM after the 4th. I suppose no one had any answers on how else I could restart the system remotely, but I'll be marking this thread as solved.

Read other 2 answers
RELEVANCY SCORE 47.2

Hi,

I dont think there is away for this, but can you connect to another machine that can still be used, but under a different setting on Windows XP Pro, like you can with Windows Servers?
 

A:Connect to another machine using remote desktop

Read other 12 answers
RELEVANCY SCORE 47.2

I am here at the office attempting to use remote desktop to connect into my Vista Ultimate SP1 laptop.

I get connected and logon, get the desktop and everything drawn on screen, the it totally freezes.

After a minute or so I get the dialog box showing that I have been disconnected and it will attempt to reconnect.

Attempting to logon at the console of that laptop now, I put in my password, it says Welcome, then a message comes up stating , "This network connection does not exist."

If I click on OK and attempt to logon again, it gives me the same message.

If I wait about 5 minutes, I am able to logon again.

In the event log I am seeing from source TermDD an event 56 stating, "The Terminal Server security layer detected an error in the protocol stream and has disconnected the client."

Is this because I am using SP2 on the XP machine instead of SP3 ?

I've seen similar issues but only on occasion when connecting from the same XP box to my home desktop running Ultimate SP1. Every attempt I may to get into this laptop results in the same thing.

Any thoughts on this? I'd appreciate any input!

Thanks!

A:Remote Desktop to Vista machine from XP SP2

I guess nobody else has seen this?

Read other 1 answers
RELEVANCY SCORE 47.2

Hi All,
I was wondering whether it is possible to check if a particular username exists on a remote machine given the machine's IP address.

(something like : Net user dude100 //193.63.251.8)

TIA,
Shafeeq M.
 

Read other answers
RELEVANCY SCORE 47.2

I have a Windows 7 machine that I'm trying to setup to allow Remote Desktop connections so that I can access my machine when I'm away from home. I used this method in the past with other machines and always enjoyed the convenience of working at my home PC when away on vacation, etc.

After setting it up, I can access the machine using Remote Desktop Connection from within the local LAN network using the computer name. However, I cannot access it using my external IP address which should be the router which should forward it to my personal computer. The error I get says "Remote Desktop can't connect to the remote computer for one of these reasons: 1) Remote access to the server is not enabled, 2) The remote computer is turned off, 3) The remote computer is not available on the network."

Here is everything I've done so far:

I've enabled Remote Assistance connections via the System Properties and Allowed connects from any version of Remote Desktop

The Remote Desktop services (3 of them I think) are all enabled and started.

I've checked and Windows Firewall is allowing port 3389 through

I have an Asus RT-N66R router which I've added a Port Forwarding rule to forward that port to the LocalIP of my personal machine.

A:Can't get Remote Desktop working on my machine - help

Hi and Welcome to SevenForums.

I understand i am not answering your question directly with this reply but have you considered using TeamViewer to do this task?
Download Here - TeamViewer - Free Remote Control, Remote Access & Online Meetings

It is free for personal use and i've never come across an issue using this method of a remote connection from outside my home in all the years i have used it (within my home i use remote desktop).

Is there a reason for needing Remote Desktop?

Regards,
Jamie

Read other 2 answers
RELEVANCY SCORE 46.8

Hello,


we are using task scheduler to run our qtp regression scripts.sometimes in the middle of execution remote machine getting hanged.could you please help me to find the way to restart my machine when it got hanged.

REgards,
Suneetha

A:how to restart a remote machine automatically when it got hanged

Can't do it remotely since when it's hung, it will not receive or respond to any command you can send it.

Read other 1 answers
RELEVANCY SCORE 46.8

I have VPN service running on my Linksys DD-WRT router at home, so I can VPN back into my home network when using unsecured wireless internet on travel. I also have remote desktop port forwarding to my home machine if I want to just remote desktop in without using the VPN. However, often times I will VPN in, then remote desktop to my machine. Lately, I can VPN in, but remote desktop to the machine's NAT'ed address on the local network doesn't work. I used to be able to do it that way and I'm not sure what has changed. The home machine runs Windows 7 and the laptop I use on the road for VPN'ing back in runs Windows XP. Any ideas why after I VPN in to the home network I can't see any other machines on the network anymore? I have a folder shared on the home machine that I'd like to map to my laptop once I've VPN'ed in but it can't see that either.

Any ideas or help would be appreciated.

A:VPN'ed into home router, but can't remote desktop to machine on LAN

The home network subnet is 192.168.1.0/24 using DHCP (with the home machine statically keeping it's x.x.x.147 address) and the VPN pool consists of two addresses of 192.168.1.160 and 192.168.1.161. Network sharing and discovery is all turned on for the Win7 home machine, as well as the XP machine.

Read other 2 answers
RELEVANCY SCORE 46.8

I wonder if anyone else has tried rebooting a Windows 8 machine remotely yet. This is probably not a common occurrence yet, though it someday may be, and it turned out to be quite a debacle. Obviously we all know that in order to reboot a machine, we have to access the charms bar, go to settings and then power, then restart. This turned out to be almost impossible for me to accomplish remotely using ultravnc, as I could only see a small portion of the screen, and the charms kept vanishing from the screen while I was trying to get to settings. Is there another simple way to restart the machine that I am missing, that does not rely on mouse gestures, or 3rd party applications?

A:Trouble power cycling a remote machine.

Would it help to create Shutdown and Restart shortcuts on the Desktop?

Shutdown: C:\Windows\System32\shutdown.exe /s /t 0

Restart: C:\Windows\System32\shutdown.exe /r /t 0

Read other 2 answers
RELEVANCY SCORE 46.8

As the topic states...Trying to log into my W7 desktop from my W8 laptop and it keeps saying wrong password. I can login fine using the exact same username and password from another W7 machine..

What am I doing wrong here?

Thanks..

A:Trouble logging into W7 machine via Remote Desktop

You have to use the same username & password that is on the machine you are trying to connect to. Otherwise use Teamviewer to do Remote Desktop.

Read other 1 answers
RELEVANCY SCORE 46.8

I'm trying to setup TLS e-mail on remote machine, but it doesn't work.
Trying to send e-mail on my local machine (Windows 7 x64 locale ru-ru) and it works:

16:33:18 CONNECT : Looking up host name mail.domain.com...
16:33:18 CONNECT : Host name mail.domain.com found
16:33:18 CONNECT : Connecting to host mail.domain.com [123.456.789.123:25]...
16:33:18 CONNECT : Connected to host mail.domain.com [123.456.789.123:25]
16:33:19 SMTP REPLY: 220 mail.domain.com ESMTP Postfix
16:33:19 SMTP SEND : EHLO hostname
16:33:19 SMTP REPLY: 250-mail.domain.com
16:33:19 SMTP REPLY: 250-PIPELINING
16:33:19 SMTP REPLY: 250-SIZE 73400320
16:33:19 SMTP REPLY: 250-VRFY
16:33:19 SMTP REPLY: 250-ETRN
16:33:19 SMTP REPLY: 250-STARTTLS
16:33:19 SMTP REPLY: 250-ENHANCEDSTATUSCODES
16:33:19 SMTP REPLY: 250-8BITMIME
16:33:19 SMTP REPLY: 250 DSN
16:33:19 SMTP SEND : STARTTLS
16:33:19 SMTP REPLY: 220 2.0.0 Ready to start TLS

All is correct.
Then, using the same email account, on remote machine, all settings are absolutely identical (Windows XP Home locale ru-ru):

16:34:29 CONNECT : Looking up host name mail.domain.com...
16:34:29 CONNECT : Host name mail.domain.com found
16:34:29 CONNECT : Connecting to host mail.domain.com [123.456.789.123:25]...
16:34:30 CONNECT : Connected to host mail.domain.com [123.456.789.123:25]
16:34:30 SMTP REPLY: 220 ***************************
16:34:30 SM... Read more

A:SMTP doesn't work on remote machine

The correct way to uninstall ComboFix, all of its related folders, files and logs is to make sure it is still on the Desktop (<-Important!!!) and follow these instructions.When finished you will see a dialog box stating that "ComboFix has been uninstalled".After that, you can remove the ComboFix.exe program from your Desktop by right-clicking on it and choosing delete.If you encounter any problems using the switch from the Run dialog box or Search field, just rename ComboFix.exe to Uninstall.exe, then double-click on it to remove.If ComboFix is no longer on your Desktop, re-download it from here, save to the Desktop and follow the instructions above to properly uninstall it from your computer.Another option if the above is unsuccessful is to download DelFix by Xplode and save to your Desktop.Double-click on delfix.exe to run the tool.Vista/Windows 7/8 users right-click and select Run As Administrator.Put a check mark next to these items:- Activate UAC- Remove disinfection tools- Create registry backup- Purge System Restore- Reset system settingsClick the "Run" button.When the tool has finished, it will create and open a log report (DelFix.txt)A copy of that report will be saved to the following location C:\DelFix.txt.-- Doing this will remove many specialized tools downloaded and used for malware removal. Any leftover logs, files, folders or tools remaining on your Desktop which were not removed can be deleted manually (right-click on it and choose delete).

Read other answers
RELEVANCY SCORE 46.8

I am looking for a way to view what netork printers are connected on a remote machine. Aside from going to the person's desk and taking control of their machine with remote control.

I have tried Dameware NT utilities and it only shows the local printers. And there registry keys that contain this info can't be accessed from a remote machine.

Any ideas?

Thanks in advance for your help.
 

A:View Netork Printers on a Remote Machine

still have not found a good way to do this. But adprintx.exe is a very good batch file utility for add/removing printers from a login script in case anyone was looking for one.
 

Read other 2 answers
RELEVANCY SCORE 46.8

Hello.

My goal is to restore a remote desktop to the local console so that the user doesn't have to re-enter their password and log back in. While connected remotely to a Windows 7 machine via RDP, I run the following command in a batch file:
tscon %sessionname% /dest:console

This works fine if I connect via RDP with an account in the Administrators group. The problem is when I RDP to the remote machine with an account that's not in the Administrators group, I get the following error:

Could not connect sessionID 1 to sessionname console, Error code 5
Error [5]:Access is denied.

The batch file needs to be run as an Administrator for it to work. I don't have the Administrator account password, but I do have credentials for an account that is in the Administrators group on the machine. I've tried a few different things to run the batch file as an Administrator, but I can't get it to work right.

So my question is how can I get the tscon.exe command to work on this remote machine as a non-Admin?

Any suggestions would be greatly appreciated. Thanks.

Read other answers
RELEVANCY SCORE 46.8

Hello All,

I wanted to know if there is a method that I can use to get the hard drive information of a remote server using powershell 1.0. The WMI class that has been introduced in Powershell 2.0 does have the option to fetch the same information but the server environment that I work in does not have the option for Powershell 2.0 on the servers..

I do have powershell 2.0 on the machine from which i want to execute the command and fetch the information.

What I am looking for is to have the information like free space, name of the hard drives on a remote server.

Thanks in advance for any help that you can provide.

A:Information of drives on a remote machine using powershell

Hi rahul1911,

See if the following thread helps: Logical Disk Report - Remote Servers. I honestly don't know if the difference in versions will permit this or make no difference or if another method is required.

If not, search through the Powershell section of the newsgroup to see if you can find what you need: PowerShell - Vista Forums

If that also doesn't help, try some other Powershell-specific forums:

http://www.scriptinganswers.com/foru...ics.asp?FID=27

http://social.technet.microsoft.com/...rshell/threads

http://www.powershellcommunity.org/Forums.aspx

I hope this helps.

Good luck!

Read other 3 answers
RELEVANCY SCORE 46.8

Hello everyone,

I want to be able to connect to my Vista Home Premium 32bit machine through an XP machine and print using a printer connected via USB on the XP machine. A little history: I had XP Pro and used remote desktop and printing worked fine. We upgraded the computer and OS to Vista Home Premium 32bit. I understand this version doesn't have remote desktop, but I found a way to get it to work online and now we can connect remotely to the desktop using Remote Desktop.

However, when I try to print something while being connected remotely, it won't print. It doesn't find the USB printer. Please I just want to figure this out. We are using the Vista machine as a remote desktop that houses our excel files and Quickbooks. We connect to this remotely from an XP laptop and 2 Macbook Pro's. Printing doesn't work on either of these computers. They are also on separate networks if that changes anything.

I have read a lot on this and everything points to the same answer -> go to Local Resources in Remote Desktop before you log in remotely and check mark the "select the devices and resources you want to use in your remote session: Printers and Clipboard". Both are checked. Still nothing.

Read other answers
RELEVANCY SCORE 46.4

Hi, Our team members have recorded some ctrx scripts with loadrunner on our loacal machine,and it executes successfully everytime,  however, when we trying to replay those scripts on a remote machine which was located at customer side in US, the replay cannot initiated, with errorWe have add the reg patch according to the notification above, and registry showed the patch was installed successfully: Still the scripts replayed failed with the error of the first image, is anyone could provide a solution for this issue? Thanks!

Read other answers
RELEVANCY SCORE 46.4

Issue: I have a Windows 7 client that will not activate via the command slmgr.vbs /ato nor through the Volume Activation Management Tool.

Error: 0x800706BA Unable to connect to the WMI service on the remote machine
Troubleshooting:  I have added the workstation via ip address and tried to activate since I read that it could be a DNS issue. I also ran a script that was supposed to repair the WMI.  Neither tries fixed it.

Read other answers
RELEVANCY SCORE 46.4

What do I need to do to make a XP machine connect to a Remote access server. This is an apple computer that establishes the connection and then the users can browse a Windows 2000 domain.
 

Read other answers