Jump to content


  • Posts

  • Joined

  • Last visited

  • Days Won


Everything posted by James_A

  1. Made even more funny by the cross-references at the bottom of the WikipediA page: "Gullibility" and "Irrationality". Seriously though, the most vulnerable part of a Mac is the browser (Safari). Look at the results of hacking contests and it's usually Safari that is used to PWN a Mac. Such as this example from CanSecWest in 2008, when the headline was "PWN 2 OWN over: MacBook Air gets seized in 2 minutes flat": Roll forwards to this year and things haven't improved: I suppose that's why pretty much all the knowledgable Mac users I know run Firefox or Chrome. .
  2. Wow! If I've read this topic correctly, it was the slave drive (the Seagate) that you had all your working files on. So does that mean you have finally had succes in recovering your working files? If so, it's worth noting for everyone's future reference that at least one brand of PATA-USB adapter doesn't work if the drive is set to slave. .
  3. Best to let F-Secure answer that. Interesting that they discontinued it due to a lack of threats: .
  4. Maybe, but then you could say that about HB Gary as well. .
  5. I've since found out that this entry (which is pretty much undocumented) may be obsolete, because it goes way back to when you could select the Search Engine in Process Explorer. Later versions of Process Explorer use the default browser and default search engine for that browser with no choice. I suppose Mike and I have it because we've been running Process Explorer since before version 11. .
  6. Those drives are jumpered as you say: Master has the master jumper set, slave has no jumper, which means slave. It is just possible that the PATA/SATA--USB adapter cannot "see" a drive set to slave (=with no jumper), so it is worth putting a jumper on the slave drive just for the purposes of testing. You can "borrow" the jumper off the master drive and place it on the slave drive in exactly the same position for testing purposes. Those pins are at a 2mm pitch and the jumper is a spring-grip that just pulls straight off using a pair of tweezers or needle-nosed pliers. It needs very little pressure to push it on the other drive, just the tip of a fingernail is sufficient to push it over the pins. .
  7. Good point. Both Maxtor and Seagate drives have four pairs of jumper pins between the data and power connectors. To set the drive as Master, the jumper should be set on the pair of pins nearest the data connector (= furthest from the power connector). On the Maxtor drive that's referred to as the DS jumper pair. In the illustration below, that's the top-left of the six alternatives shown: That should be correct for both drives. Incidentally, the Maxtor product manual (which took ages to find) shows the drive in the upside-down position. I've never understood why they do that. Please let me know if either drive is jumpered differently. They might, for example, be set in the CS position. I am doubtful that connecting direct to the motherboard will help in any way. .
  8. Thanks for the screenshots. The first, for the Seagate drive, is not looking good at all, because the SeaTools software has failed to "see" the drive at all. That can only mean a faulty connection or a faulty (or dead) drive. Can you hear (or feel) that the drive is spinning at all? Touching the top with your fingertips can usually pick up the vibration of a spinning drive. Listening with your ear close to the top surface can usually hear it spinning. Even if signs of "life" can be detected, no response could also mean that the driver control electronics (on the green circuit board usually visible on the underside) has failed. The second drive, the Maxtor, is more promising because it has been detected by SeaTools. We can see that it is a Maxtor 6L020J1, so it will say something like Maxtor DiamondMax Plus D740X on the label. It's a 20GB Ultra-ATA/133 (i.e. a PATA) drive. Giving a result of 19GB sounds about right. It all depends on whether a GB is 1024 * 1024 * 1024 bytes (as used by Windows) or if it is 1000 * 1000 * 1000 bytes (as used by drive manufacturers). I do not know why SeaTools should say "Test unavailable". At least one of the Basic Tests should be available once the drive has been selected in the check-box (on the left). However, the Short Drive Self Test may not be available as this drive is connected via USB. However, "19GB, Not initialized, 19.00 GB unallocated" suggests that Windows thinks the drive is empty. This could be either because it actually is empty or simply because the very first sector of the disk (holding the Master Boot Record, or MBR) is corrupted, or some other form of corruption. Only further tests will determine what the situation is and it is very difficult indeed to carry those out remotely, through a forum. If the data is very important it may be best to ship the drive(s) off to a specialist data recovery company. The level of investement needed by those, including use of a "clean room" to disassemble the drive, means that their prices are not cheap. Otherwise, I too, am open to suggestions. .
  9. F-Secure have just released F-Secure Anti-Virus for Mac which is normally priced at just under €32 per year, but there is currently a 30-day free trial available. The user interface is just like the Windows version. Note for Non-European users (and those using old fonts) € is the "Euro" currency symbol.) .
  10. I think that last entry just means that if you use the "search online" function in Process Explorer it will use Google. Well, I thought that too, but right-clicking on a process and selecting Search Online... Ctrl+M in the context menu, opened a Google search and I have UseGoogle = 0x00000000, not UseGoogle = 0x00000001. The only info I've found online suggests that Process Explorer should, therefore, be using MSN => Bing. .
  11. Six months is exactly right... I've seen the (Windows) source code: // Set expiration date for offer as six months from today, // represented as a YYYYMMDD numeric value. SYSTEMTIME timer = now; timer.wMonth = timer.wMonth + 6; .
  12. The date is packed in the format Year * 10000 + Month * 100 + Day, giving YYYYMMDD, as a REG_DWORD. So changing the entry to Ox1404895 (= 20990101) should fix it for now. .
  13. As far as I can tell, those entries are associated with being "offered" the relevant piece of Google-ware. As Tarun has pointed out, the key is in a slightly altered location if you are running a 64-bit OS. If the key exists, then the company bundling the "offer" will have its name present and the REG_DWORD should decode as a Date (in hexadecimal packed decimal). That's why I asked if "Piriform Ltd" was present (makers of CCleaner). However, Tarun, has one for "AVAST Software", which means they must be bundling the stuff as well. You can also look out for others, such as "PC Tools", or "Skype Technologies SA". The theory is that encoding a date with the year 2099 in it should prevent the offer -- for the forseeable future, anyway. .
  14. Well, it's all over the Internet by now (100,000+ hits in Google) but yet another Comodo subsidiary has been hacked and, once again Comodo has egg all over its face. That's the fourth known instance of a Comodo subsidiary or reseller being hacked this year. You might remember that the hack of the Italian subsidiary/reseller a couple of months ago caused Microsoft, Mozilla and Apple to issue emergency updates revoking the fraudulent SSL certificates that the hacker issued himself, for Google, Mozilla, Skype and Windows Live (actual domains were: mail.google.com, www.google.com, login.yahoo.com, login.skype.com, addons.mozilla.org and login.live.com. This time it's the website of Comodo Brazil and the login details of its employees have been posted on the internet, together with customer details and information on their certificates. Softpedia (see this link) reports as follows: No kidding, the effort needed to "crack" those password hashes is indeed minimal. In some cases you can just look them up, no "cracking" effort needed at all! Comodo President and CEO Melih Abdulhayoglu is trying to brush off the matter, because no certificates were issued as a result of the breach, but the data posted on the internet is still sensitive whatever he says. .
  15. Maybe you've been offered it in the past and refused? If so, check out the following two Registry keys: HKEY_LOCAL_MACHINE\SOFTWARE\Google\No Toolbar Offer Until HKEY_LOCAL_MACHINE\SOFTWARE\Google\No Chrome Offer Until The first one is for Internet Explorer users, the second is for other browser users. I'd be interested to know if they exist and, if so, what the DWORD data for the value "Piriform Ltd" is. .
  16. Sony has been hacked again, and again, and again, and again..... Including:- Sony BMG Greece Sony Music Japan Sony Ericsson Canada (there's more too ) According to one Security Blog, it's 5 times in 4 days. .
  17. It all depends where on the website you download CCleaner from. The Standard build, to which you are steered on the download page, has "extras". If you bypass the download page and go, instead, to the "builds" page than you can find the "no toolbar" version. .
  18. A correction to my last post (#30) - your USB disk will probably not be shown as "Removable". Just because it appears as a "USB Mass Storage Device", does not automatically mean it is "Removable". It all depends on the adapter hardware. Flash drives usually are "Removable", hard drives usually are not "Removable".
  19. If you have an Anti-Virus running on XP, 768 MB RAM should make a big speed difference over 512 MB. When the AV updates itself, and Windows Update runs at the same time, I have found that XP often requires about 580-650 MB of RAM installed. .
  20. Here's a cropped copy of the screenshot I am referring to in my last post: The second and third drives are listed under USB-1394 because they are connected via USB (or FireWire, but that's not relevant). .
  21. Ah, it's as I thought. We are NOT looking at the USB connected drive. Basically we are looking at Drive 0, which is the 1-Terabyte hard drive installed in a Hewlett-Packard computer. It has three partitions on that single drive, which are labelled: SYSTEM, OS and HP_RECOVERY. If your old drive shows up in Disk Management, it will be like Disk 1, 2, 3 or 4, which is to say, "Removable". Maybe it will be Disk 5? Since your old drive is a Seagate Barracuda, perhaps it's best to change direction and use a Seagate tool to look at it. Please go to http://www.seagate.com/www/en-us/support/downloads/seatools and download SeaTools for Windows Please download and install SeaTools for Windows in accordance with the instructions given by Seagate on the download page. Before using, I strongly advise reading the User Guide. This can be downloaded separately as an Adobe PDF file. There are download links on the web page given above (click on Learn More) and again on the download page (click on Download User Guide) or just use the following link: http://www.seagate.com/staticfiles/support/seatools/user%20guides/SeaTools_for_Windows.EN.pdf IMPORTANT: You are looking for a drive that shows up under the USB-1394 section, NOT under the PATA-SATA section in SeaTools. See the screenshot on page 4 of the User Guide. That's because the drive is (or should be) connected via a USB port. In the User Guide screenshot, that would be the FreeAgent or Toshiba drives. If there is nothing there, we have a problem: either the drive is not running, or it's not connected properly. .
  22. Following Mozilla's change of direction, to a rapid-release schedule, they have now released the first "official" Beta of Firefox 5. Choose your language and platform here: http://www.mozilla.com/en-US/firefox/all-beta.html There's a version for android mobiles as well. .
  23. Just in time for Firefox 5, Beta (actually 5.0b2) to be officially released. .
  24. Version 14.11 added new abilities: but version 14.12 looks like a minor bug-fix: .
  25. No, No, No, we've just established that the drive is NOT SATA, but the universal adapter kit, of course has a SATA cable (otherwise it wouldn't be universal) which is unused. The connection chain is DRIVE --> Universal adapter head (PATA side) --> USB cable --> working PC 100MB seems very small for a partition on any hard drive, unless it's a boot loader partition. It's a strange size and odd that nothing is visible. I would expect to see at least some folders, even if system files are hidden. As Tarun says, it's a bit difficult, without being able to interact directly, but I think a screenshot of what can bee seen of the drive properties in Disk Management would be useful. .
  • Create New...