ict.ken.be

1. You check WinDirStat with options > show unknown and see that huge disk space is unknown
2. You remove system restore points and still see huge disk space in unknown
3. You run WinDirStat as an admin and the application hangs
4. You worry, if someone is proxing stuff through my computer
5. You use  Procmon to check the file activity and see that lots of files are written in C:\Windows\System32\config\ systemprofile\AppData\Local\ Microsoft\Windows\Temporary Internet Files\Content.IE5
6. Ah, IE again. You delete this files and realize that they are created faster than you delete.
7. You type one of the htm files and see Assembly Binding Log Entry
8. You realize you forgot to turn off Fuslogvw (and it somehow logs to this hidden folder wtf)
9. You open Fuslogvx and click settings > log disabled
10. You cleanup the milion of files mess you made, understanding why your computer was going slower lately
11. Priceless, well actually around 850 euros 

Probably the previous version of web platform installer was uninstalled correctly.

Use a tool like CCleaner to remove the corrupt entry or try using this Microsoft uninstaller tool: 

http://support.microsoft.com/mats/Program_Install_and_Uninstall/

The cache of the webplatform installer can be found at:

%LocalAppData%\Microsoft\Web Platform Installer\installers 

Enable Notifications

• Local Group Policy Editor (gpedit.msc) > Computer Configuration > Windows Settings > Security Settings > Local Policies > Audit Policy > Audit object access on Failure
• Event Viewer (eventvwr.msc) > Windows Logs > Security
• Local Security Policy (secpol.msc) > Advanced Audit Policy Configuration > Object Access > Disable Audit Handle Manupulation

Protocol Numbers

• 1: ICMPv4
• 2: IGMP
• 6: TCP
• 17: UDP
• 41: IPv6
• 43: IPv6-Route
• 44: IPv6-Frag
• 47: GRE
• 58: ICMPv6
• 59: IPv6-NoNxt
• 60: IPv6-Opts
• 112: VRRP
• 113: PGM
• 115: L2TP

Before Win 7 this was needed:

• auditpol /set /SubCategory:"MPSSVC Rule-Level Policy Change","Filtering Platform Policy Change","IPsec Main Mode","IPsec Quick Mode","IPsec Extended Mode","IPsec Driver","Other System Events","Filtering Platform Packet Drop","Filtering Platform Connection" /success:disable /failure:enable
• net stop MPSSVC
• net start MPSVC

'Back to Eli' is a typical expression used by it-professionals, when they run into people who are supposed to be professionals but actually are missing some basic computer knowledge. Eli the computer guy is a YouTube teacher that makes little movies about technology and he repeats himself so many times that it is impossible you will ever forget... 

(Eli5 means explain like i'm five)

http://www.youtube.com/user/elithecomputerguy

Why would you hack your dns?

• block pages from employees on corporate network
• routers do not allow to loop outside your network and back in

Order in which DNS resolves domain names into ip addresses

• browser
• local hosts file
• Windows: dir C:\Windows\System32\drivers\etc\hosts
• Linux: ls -l /etc/hosts 
• local or private dns server
• mostly the one handing out DHCP eg. router
• service like dyndns.com
• public dns servers

Free DNS

• google.com: 8.8.8.8 and 8.8.4.4 (DNS Client Service)
• opendns.org: 208.67.222.222 and 208.67.220.220 (filtered dns)

VPN - Virtual Private Networking

• old routers might not allow vpn pass-through