Tools
Ultimate Software Directory
Teamviewer (Remote) – Edge Tab – Adobe PDF – Sysinternals – Nirsoft – HWMon(Tmp) – DiskInfo(Prtble) – PCMark – Speccy – HDD Sentinel
W11Checker – MS Safety Scanner – TCPview – ProcessExplorer – x64dbg – IPv6 – Internet Speed – Internet Latency – Browser IP – DNS Leak
DownDetector – Microsoft Teams – Odoo – ProtonPass – Dmarcian – DNSLookup – PhotoSync – Fibre+5G Checker
Please do not use ‘FREE’ software like anti-virus, VPN, quick fix/speed up software, universal driver installers or password management solutions. They are ‘free’ for a reason – either offering a false sense of security, injecting adverts, redirecting browser data, tracking or quite simply selling your data.
What is my IP?
https://browserleaks.com/ip
YubiKey: 5C NFC (Main) / Security Key C NFC (Backup)
via Misco Supplier: 5C NFC / C NFC
Is my anti-virus working? https://www.wicar.org/test-malware.html
This anti-malware check is very basic to see if its essentially turned on.
Randomware Emergency Help Guide
1. Do NOT turn off PC until RAM is saved via Hibernation or File Capture
2. If PC has Hibernation (In Start Shutdown menu then you will Hibernation) If its there then do it right away. Now call IT support for help and unplug PC once its shutdown. Do NOT ever power back up. PC will need specialist ransomware forensic analysis with the hard drive removed.
3. Try to activate Hibernation if its not available – how to do this link here
4. If all Hibernation options have not worked then try the following.
5. Download Belkasoft RAM Capture here:
[Original Download Page] or [Direct Fast Download]
6. Save a copy of the system RAM to a file – ideally to external drive.
Then once complete you can unplug the power. Call Ransomware support.
Do not power the system back on.
Speak only to a Ransomware forensic specialist not standard IT support.
Advanced Tech Link – use only on specialist advice:
Bootable Mem Imager
NoMoreRansom Report
Ransomware ID
MP3 Voice Recorder for Custom Voicemail.
https://apps.apple.com/us/app/avr-x-voice-recorder/id1344740222
Open app – go to Settings – select File Format – Choose MP3
Record your voice and then send the recording via Whatsapp or Email.
Or use a Text Speech to MP3 maker:
Windows Home Setup Local Account without Internet Account
Video Help Link
At WiFi screen press SHIFT + F10 then type oobe\BypassNRO
When WiFi screen presents itself again you can click “I don’t have internet”
Capture Website Page: https://capturefullpage.com/
How to stop a PC from automatically waking from sleep mode
powercfg – lastwake powercfg -waketimers
Office 365 Authenticator Safe Link:
Microsoft Authenticator for Android and iPhone [Link]
Windows 11 – Change Style (More like Windows 10)
Show All Task Bar Items: Win+R and Paste into Run Box:
explorer shell:::{05d7b0f4-2121-4eff-bf6b-ed3f69b894d9}
Remove Win 11 Right Click Show More Options:
Download, extract, run regedit file and then reboot.
DNS Safety Router Settings
CloudFlare – Malware Blocking – IPv4= 1.1.1.2 / 1.0.0.2
IPv6= 2606:4700:4700::1112 / 2606:4700:4700::1002
CloudFlare – Malware and Adult Blocking – IPv4= 1.1.1.3 / 1.0.0.3
IPv6= 2606:4700:4700::1113 / 2606:4700:4700::1003
OpenDNS FamilySheild – Adult Blocking – IPv4= 208.67.222.123 / 208.67.220.123
NextDNS – IPv4= 45.90.28.208 / 45.90.30.208
IPv6 = 2a07:a8c0::69:ef4b / 2a07:a8c1::69:ef4b
Quad9 – Malware Blocking – IPv4= 9.9.9.9 / 149.112.112.112
IPv6= 2620:fe::fe / 2620:fe::9
DNS Checker: https://dnschecker.org/all-dns-records-of-domain.php
Domains .co.uk Lookup: https://www.nominet.uk/lookup/
Domains .com .. Lookup: https://lookup.icann.org/en/lookup
WP Migration Plug in: https://deliciousbrains.com/wp-migrate-db-pro/
One Drive Reset – Information Link
C:\Program Files\Microsoft OneDrive\onedrive.exe /reset
How to open the BIOS on any Computer.
Which key to press to enter BIOS.
Windows / OneDrive Path File Limits Ref: 1 / Ref 2
Sync Max File Size = 250Gb
Sync Max Single File Size inside Zip = 20Gb
Path/File Total Length = 255 Characters (Copy and paste path into ‘Word’ and click the word count bottom left to show total characters with spaces)
Invalid Characters in File/Path are:
- < (less than)
- > (greater than)
- : (colon)
- ; (semi-colon)
- / (forward slash)
- \ (backslash)
- ” (double quote)
- ‘ (apostrophe)
- | (vertical bar or pipe)
- ? (question mark)
- * (asterisk)
- ~$ (tilda dollar)
- & (ampersand)
- % (percent)
- # (hash)
- _vti_ (underscore vti underscore)
- desktop.ini (desktop.ini)
- .lock
Leading and trailing SPACES in file or folder names also aren’t allowed.
Double full stops and double forward slashes or backslashes are problematic.
These names aren’t allowed for files/folders:
CON, PRN, AUX, NUL, COM0–COM9, LPT0–LPT9
Maximum Total Files = 100’000 Recommended (Max 300’000)
Files per Folder = 2’000 to 3’000 Recommended (Above 5’000 starts to cause significant slow downs)
–
OneDrive – Reset Instructions
How to Show/Find WiFi Password/Keys
Windows 11:
With the new build (23466) of Windows 11, you can now see saved SSID keys in plain text by going to Settings > Network and internet > Wi-Fi and then going to Manage known networks. Then, you can select a saved SSID and click View Wi-Fi security key
Chromebook:
At the bottom right, select the time.
Open the “Settings” menu Or press Alt + Shift + s.
At the top, in the search bar, type a keyword, like Wi-Fi OR
Scroll down to “Network” and click on the drop-down arrow
Under “Wi-Fi,” select your connected network
Choose the “Network Details” option
Your Wi-Fi password will be displayed here
Alt1: https://youtu.be/yXwORaJh0PQ
https://sipe.glitch.me/
Alt2: https://youtu.be/x38VeUViKKE
Alt3: https://youtu.be/Wr1fwYGt_K0
OR
Chromebook Policy WiFi Password Extractor
chrome://net-export
https://luphoria.com/netlog-policy-password-tool
ALT1: https://nppe.glitch.me/
Find details of BITLOCKER encryption with Command Prompt:
manage-bde -protectors -get C:
TPM. BitLocker uses the computer’s TPM to protect the encryption key. If you specify this protector, users can access the encrypted drive as long as it is connected to the system board that hosts the TPM and the system boot integrity is intact. In general, TPM-based protectors can only be associated to an operating system volume.
TPM+PIN. BitLocker uses a combination of the TPM and a user-supplied Personal Identification Number (PIN). A PIN is four to twenty digits or if you allow enhanced PINs, four to twenty letters, symbols, spaces, or numbers.
Startup key. BitLocker uses input from a USB memory device that contains the external key. It is a binary file with a .BEK extension.
TPM+PIN+Startup key. BitLocker uses a combination of the TPM, a user-supplied PIN, and input from a USB memory device that contains an external key.
TPM+Startup key. BitLocker uses a combination of the TPM and input from a USB memory device that contains an external key.
Password. A user-supplied password is used to access the volume.
Recovery key. A recovery key also called a numerical password, is stored as a specified file in a USB memory device. It is a sequence of 48 digits divided by dashes.
Active Directory Domain Services account. BitLocker uses domain authentication to unlock data volumes. Operating system volumes cannot use this type of key protector.
Windows 10:
Click the Start button and then go to Control Panel > Network and Internet > Network and Sharing Center (Windows 11) or Settings > Network & Internet > Status > Network and Sharing Center (Windows 10).
Next to Connections, click your Wi-Fi network name highlighted in blue.
In the Wi-Fi Status page that opens, click Wireless Properties and then on the Security tab.
Finally, check the box next to Show characters to display your Wi-Fi network password above it.
DOS:
Type in netsh wlan show profile and hit Enter on your keyboard to view every Wi-Fi network you are connected to.
Once you find the Wi-Fi network you want the password for, type in netsh wlan show profile “(Wi-Fi network name)” key=clear (for example, netsh wlan show profile “MyWiFi1” key=clear), and then hit the Enter key.
MAC OS:
Click on System under System Keychains in the sidebar.
Next, click on Passwords at the top of the window.
Find the Wi-Fi network you want the password for and double-click on it.
Finally, check the box next to Show password and enter your password when prompted.
BITLOCKER Continued..
If you see the lock screen immediately after turning on the system and you are sure there is no Microsoft account with backup key then are left with only one option and that is to brute force attack the system but it could take months or years or never if the password is strong.
If it shows the Windows Login screen and it gets locked at this point then there are some better options but it will require a specialist to get the decryption key via RAM dumps or Hibernation file examination.
As a user if this happens – just don’t do anything further as by simply rebooting or doing something you could loose the key forever.
BITLOCKER help links:
https://support.microsoft.com/en-us/windows/finding-your-bitlocker-recovery-key-in-windows-6b71ad27-0b89-ea08-f143-056f5ab347d6
https://support.passware.com/hc/en-us/articles/1500000308641-How-to-use-Passware-Bootable-Memory-Imager
https://www.minitool.com/partition-disk/forgot-bitlocker-password.html
Comprehensive IT solutions
Please feel free to contact us for any additional services not listed on this page or if you have any queries that we can help with. Our sales lines are open 9:30 to 5:30 and critical support services are available 24/7