To ungroup:

1. ctrl+shift+a to toggle grouping on and off
2. use PICKSTYLE variable to turn grouping off

After that everything becomes single entity.

To group:

Type GROUP in the command line and follow the on screen instructions/dialog boxes. You give it a name and then select items. You can later add or remove items or explode the group.

Tip:

if youuse group for a selection of blocks,and you then explode the group, you will also explode the blocks in that group.

simply type in the command line group>select the group name,then select remove. this will avoid exploding the blocks.

On a small LAN, with no DNS or WINS server, you’ll use NetBIOS Over TCP for local name resolution. NetBT based name to address resolution is a pretty complex process, and a rather common cause of problems in Windows Networking.

To identify a possible problem on your LAN, start by running “ipconfig /all” in a command window, or in a Windows Vista command window. The value of NodeType will tell you if you have a problem with network based resolution. Remember to allow for local resolution too.

You might see output similar to this:

Windows IP Configuration Host Name . . . . . . . . . . . . : MyComputer Primary Dns Suffix . . . . . . . : Node Type . . . . . . . . . . . . : Broadcast
You might see any of 5 values for Node Type, and the various values will have varying effects on address resolution.

•Broadcast
•Hybrid
•Mixed
•Peer-Peer
•Unknown
•Changing Node Type
•The Total Picture

Broadcast Node Type

For a small LAN with no name server, Broadcast, or B-node, makes the most sense. Broadcast simply resolves by broadcasting an address query to all computers on the subnet, then responds promptly with “name not found” if no response is received from the broadcast.

Note that Broadcast, and the variants of Broadcast (Hybrid / Mixed), depend upon packets broadcast over NetBIOS Over TCP (NetBT). Make sure that your DHCP server, if you have one, is setup to enable NetBT. If you’re on a small LAN with a NAT router providing DHCP, make sure that NetBT is explictly Enabled on each computer, and make sure that all personal firewalls are properly configured for NetBT. Without NetBT, you’ll need a DNS server, for name resolution.

Also note that the effect of NetBT Broadcast name resolution is much more pronounced on a large LAN with slow network speed, or with congestion. In a small LAN, with modern, high-speed components, the effects of NetBT broadcast will be minimal. For most small LANs, NetBT Broadcast is a perfectly acceptable method of name resolution.

Hybrid Node Type

Node type Hybrid, or H-node, will work on a small LAN, but it may cause response issues. Hybrid queries the name server first, using directed NetBT, not broadcast NetBT. If there is no name server, the computer has to wait for the name server query to time out, before trying to resolve by Broadcast.

Mixed Node Type

Node type Mixed, or M-node, will work on a small LAN, but it may cause response issues when trying to resolve invalid names. Mixed tries Broadcast first, then queries the name server if no response is received to the broadcast. If a computer with the desired name does not exist, the computer has to wait for the name server query to time out before responding with an error 53, “name not found”.

Peer-Peer Node Type

Node type “Peer-Peer”, more appropriately called “Point-Point”, is a problem on most small LANs. That means MyComputer requires a WINS server to resolve names. No WINS server means no name resolution, no access to its shared resources, and the dreaded “Name Not Found” error (among various symptoms).

Microsoft has documented (KB903267): a fix for this. You’ll need to run the Registry Editor on MyComputer. You need to find the key [HKEY_LOCAL_MACHINE \SYSTEM \CurrentControlSet \Services \NetBT \Parameters], and delete these two values (which ever is there):

•NodeType
•DhcpNodeType

After restarting the computer, rerun IPConfig and examine the results.

Unknown Node Type
An Unknown node type, if a WINS server is configured, will be treated as Hybrid. If you actually have a WINS server, then fine. If not, this could cause name resolution latency.

On a small LAN, with no WINS configuration, Node Type Unknown should not be a problem – Unknown will be treated as Broadcast. However, Microsoft has documented (KB310570): a fix for this, if seeing “Unknown” bothers you.

To resolve this issue, use Registry Editor (Regedit.exe) to locate the following key in the registry:
HKEY_LOCAL_MACHINE \System \CurrentControlSet \Services \Netbt \Parameters
Change the value of the EnableProxy value in the preceding registry key to 0 or 1, quit Registry Editor, and then restart your computer.

The above fix simply says to change the value specified. Some people discover that their system has no registry entry for that value. If that’s the situation you find yourself in, simply add a REG_DWORD value of that name, with value “0”. Apparently, changing (or adding) that value forces the system to recalculate the correct value of NodeType.

Changing The Node Type

There’s no GUI applet to change Node Type. You’ll have to use the Registry Editor, and change value [HKEY_LOCAL_MACHINE \SYSTEM \CurrentControlSet \Services \NetBT \Parameters \DHCPNodeType], or [HKEY_LOCAL_MACHINE \SYSTEM \CurrentControlSet \Services \NetBT \Parameters \NodeType] (which ever is there), or add [HKEY_LOCAL_MACHINE \SYSTEM \CurrentControlSet \Services \NetBT \Parameters \NodeType].

Value Node Type
1 Broadcast.
2 Peer-Peer.
4 Mixed.
8 Hybrid.

Go to >Control Panel >Network and Sharing Center. than make sure that your network says it is a ‘private network’, if not use the link that says ‘customize’ and change it to a private network. You should be able to map it now

Instructions for Using Windows Vista with a Network File Server (NAS)
Many network file servers, such as Linksys NSLU2 are based on Linux. Microsoft Vista has introduced an incompatibility with almost all NASes. What’s more, the NAS vendors have failed to deliver updated firmware versions to deal with this. The issue is related to an authentication protocol that runs between Vista and and the network devices; a newer version is needed. Eventually, updates to the network devices will solve this issue (latest version of SAMBA works), but before that here’s what you can do in your Vista computer:

1. Run regedit

2. Find the key KEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa

3. Set LmCompatibilityLevel to 1

The problem is where right-clicking on an image brings up the option in Internet Explorer to (only) save that image as a Bitmap file, aka .bmp.

The symptoms are rather obvious: Internet Explorer, even with all of the most recent updates, may sometimes refuse to let you save images in any format other than Bitmap. The problem is caused when a “damaged” or “unknown” program is sitting in your “%systemroot%\Downloaded Program Files” folder (usually C:\WINDOWS\Downloaded Program Files).

The fix is simple. First, empty your Temporary Internet Files to clear the cache (In IE, go to Tools: Internet Options, and chose “Delete Files” in the “Temporary Internet Files” section of the first tab). This can take several minutes to complete if you have allocated a lot of space. Next, browse to your ‘Downloaded Program Files’ folder, and delete any program that is listed as either “unknown” or “damaged.” That should do it. Some users have found that other applications downloaded into that folder can cause the problem. If the above fix does not work, you may need to start removing those applications one by one to find the offender. Once the offending program is deleted, you should be able to save as the appropriate image type again.

Symptom
When you try to open Task Manager, the following error may occur:

Task Manager has been disabled by your administrator

This error is caused by restrictions placed in Registry. DisableTaskMgr value is set to 1. To enable Task Manager, try any of these methods:

Resolution

Method 1

Click Start, Run and type this command exactly as given below: (better – Copy and paste)

Method 2

Download and run this REG fix and double-click it.

Method 3

• Open Registry Editor (Regedit.exe) and navigate to:
HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Policies\ System
• In the right-pane, double-click DisableTaskMgr and set it’s data to 0
Method 4: Using Group Policy Editor – for Windows XP Professional
• Click Start, Run, type gpedit.msc and click OK.
• Navigate to this path
User Configuration
=> Administrative Templates
==> System
===> Ctrl+Alt+Delete Options
====> Remove Task Manager
• Double-click the Remove Task Manager option.
• Set the policy to Not Configured.

W32/Sdbot-CWM is a worm for the Windows platform.

W32/Sdbot-CWM runs continuously in the background, providing a backdoor server which allows a remote intruder to gain access and control over the computer via IRC channels.

W32/Sdbot-CWM includes functionality to access the internet and communicate with a remote server via HTTP.

When first run W32/Sdbot-CWM copies itself to:

\alg.exe
\KaZaA\My Shared Folder\.exe

The file alg.exe is registered as a new system driver service named “Application Layer Gateway Services”, with a display name of “Application Layer Gateway Services” and a startup type of automatic, so that it is started automatically during system startup. Registry entries are created under:

HKLM\SYSTEM\CurrentControlSet\Services\Application Layer Gateway Services

Registry entries are set as follows:

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
SFCScan
0

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
SFCDisable
ffffff9d

For the other Internet activity mentioned, I would need to know the ports used so I can confirm why/if they are needed.
Some ports need to be limited or blocked, such as example: ports 135/137-139/445/1900/5000

FILENAME: Alg.exe.
PROGRAM NAME: Application Layer Gateway.
DESCRIPTION: Part of Windows XP that provides support for ICS and Internet
Connection Firewall (ICF).
RECOMMENDED ACTION: If a third-party firewall warns you that ALG.exe wants
access, check to make sure you’re not double-firewalled. If you are, disable
ICF. If you are using neither ICF nor ICS and are warned that ALG.exe is
trying to access the Net, deny it. A Trojan horse or worm may be trying to
use it as a backdoor.

When first run Troj/Clown-A copies itself to \syscom832.exe and creates the file \serfer.ini. The Trojan then attempts to connect to a remote site to download information into serfer.ini.

The following registry entries are set, disabling the registry editor (regedit) and the Windows task manager (taskmgr):

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System
DisableTaskMgr
1

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System
DisableRegistryTools
1

The following registry entry is set:

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Userinit
userinit.exe,syscom832.exe

Troj/Clown-A may also create the following registry entry:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
winlogon
winlogon.exe

Desktop.ini Removal

CAUTION: Symantec strongly recommends that you back up the registry before you make any changes to it. Incorrect changes to the registry can result in permanent data loss or corrupted files. Modify only the keys that are specified. Read the document, “How to make a backup of the Windows registry,” for instructions.
1. Click Start, and then click Run. (The Run dialog box appears.)
2. Type regedit and then click OK. (The Registry Editor opens.)
3. Navigate to the key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
4. In the right pane, delete the value:

Kernel32
5. Navigate to the key:

HKEY_CURRENT_USER\Identities\[Default Use ID]\Software\
Microsoft\Outlook Express\[Outlook Version].0\Mail
6. In the right pane, delete the values:

Compose Use Stationery
Stationery Name
Wide Stationery Name
7. Navigate to the key:

HKEY_CURRENT_USER\Software\Microsoft\Office\9.0\Outlook\Options\Mail
8. In the right pane, delete the value:

EditorPreference
9. Navigate to and delete these subkeys:

HKEY_CLASSES_ROOT\dllFile\Shell
HKEY_CLASSES_ROOT\dllFile\ShellEx
HKEY_CLASSES_ROOT\dllFile\ScriptEngine
HKEY_CLASSES_ROOT\dllFile\ScriptHostEncode
10. Exit the Registry Editor.

• Warning
o Most of the people follow a common spyware removal technique. They delete the directory C: \ Program Files \ FunWebProducts using Windows Explorer and registry key HKEY_LOCAL_MACHINE \ Software \ FunWebProducts using regedit.exe without knowing that the spyware might leave some files in Windows System directory using which it can either repair itself or start generating system error notifications usually when Windows starts. We highly recommend to try Windows Add / Remove tool to uninstall the desired malware if found, use a good spyware cleaner / remover or get help from a professional.

• Recommendation

o In order to clean your PC by removing FunWebProducts infection which might require you to manually detect the malware that can be in the form of an EXE , DLL , REGISTRY KEY , BROWSER HIJACK , TOOLBAR , LSP, PROCESS and/or BROWSER PLUGIN , we recommend you to DOWNLOAD our FREE FunWebProducts FINDER SOFTWARE. Using our FREE DETECTION TOOL not only you will be able to find FunWebProducts tracks but this will also help you to find other spyware , adware , trojan and virus infections in your PC containing the leftovers from your previous Anti-Spyware.

• Note

o This FunWebProducts info page will not only provide manual removal instructions but also help you to get information about what is and how to remove or get rid of FunWebProducts.

• Warning

o ScanSpyware uses certain rules for detection and removal of spyware from your PC, which results in 100% accuracy in removal process. ScanSpyware.net provides this information “AS IS” without warranty of any kind. Your use of this information is at your own risk. We strictly restrict you from using this information if you are not sure about what you are doing.

• Recommendation

o We recommend you to take a backup of Windows Registry before following these manual spyware removal instructions to fix your PC. You can do this either by creating a Restore Point using System Restore Utility in Windows System Tools or by using the Export feature of regedit.exe.

Removal Instructions
• Delete the following directories
%programfilesdir%\FunWebProducts
%programfilesdir%\FunWebProducts\Shared
Installr
%programfilesdir%\FunWebProducts\ScreenSaver
Cache
1.bin
5.bin
%programfilesdir%\FunWebProducts\Installr\Cache
Setups
Images

• Delete the following files
files.ini
F3EZSETP.DLL
f3initialsetup1.0.0.8-2.inf
MailStampBtn.html
%programfilesdir%\FunWebProducts\Shared\Cache\CursorManiaBtn.html
%programfilesdir%\FunWebProducts\Shared\Cache\MyStationeryBtn.html
%programfilesdir%\FunWebProducts\Shared\Cache\SmileyCentralBtn.html

• Delete the following cookies
FunWebProducts does not create any cookies

• Delete the following registry keys
FunWebProducts
Fun Web Products
FunWebProducts
FocusInteractive
Fun Web Products
bar
FunWebProducts.HTMLMenu
FunWebProducts.HTMLMenu.1
FunWebProducts.HTMLMenu.2
FunWebProductsInstaller.Start
FunWebProductsInstaller.Start.1
FunWebProducts.KillerObjManager
FunWebProducts.KillerObjManager.1
FunWebProducts.IECookiesManager
FunWebProducts.IECookiesManager.1
FunWebProducts.PopSwatterBarButton
FunWebProducts.PopSwatterBarButton.1
FunWebProducts.PopSwatterSettingsControl
FunWebProducts.PopSwatterSettingsControl.1
FunWebProducts.HistoryKillerScheduler
FunWebProducts.HistoryKillerScheduler.1
FunWebProducts.HistorySwatterControlBar
FunWebProducts.HistorySwatterControlBar.1
FunWebProducts.HTMLMenu
FunWebProducts.HTMLMenu.1
FunWebProducts.HTMLMenu.2
FunWebProductsInstaller.Start
FunWebProductsInstaller.Start.1
FunWebProducts.KillerObjManager
FunWebProducts.KillerObjManager.1
FunWebProducts.IECookiesManager
FunWebProducts.IECookiesManager.1
FunWebProducts.PopSwatterBarButton
FunWebProducts.PopSwatterBarButton.1
FunWebProducts.PopSwatterSettingsControl
FunWebProducts.PopSwatterSettingsControl.1
FunWebProducts.HistoryKillerScheduler
FunWebProducts.HistoryKillerScheduler.1
FunWebProducts.HistorySwatterControlBar
FunWebProducts.HistorySwatterControlBar.1
{FA20A987-9D1E-45B6-923A-DBF23C83F013}
{1D4DB7D2-6EC9-47a3-BD87-1E41684E07BB}
{CFF4CE82-3AA2-451F-9B77-7165605FB835}
{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}
{B813095C-81C0-4E40-AA14-67520372B987}
{147A976F-EEE1-4377-8EA7-4716E4CDD239}
{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}
{1D4DB7D0-6EC9-47A3-BD87-1E41684E07BB}
{1D4DB7D1-6EC9-47A3-BD87-1E41684E07BB}
{1D4DB7D3-6EC9-47A3-BD87-1E41684E07BB}
{FA20A987-9D1E-45B6-923A-DBF23C83F013}
{1D4DB7D2-6EC9-47a3-BD87-1E41684E07BB}
{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}
{B813095C-81C0-4E40-AA14-67520372B987}
{147A976F-EEE1-4377-8EA7-4716E4CDD239}
{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}
{1D4DB7D0-6EC9-47A3-BD87-1E41684E07BB}
{1D4DB7D1-6EC9-47A3-BD87-1E41684E07BB}
{1D4DB7D3-6EC9-47A3-BD87-1E41684E07BB}
{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
{FA20A987-9D1E-45B6-923A-DBF23C83F013}
{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
{FA20A987-9D1E-45B6-923A-DBF23C83F013}

• Delete the following registry values

FunWebProducts
My Web Search (Smiley Central or FWP product as applicable)
My Way Speedbar (Smiley Central or other FWP as applicable)
My Way Speedbar (AOL and Yahoo Messengers) (beta users only)
My Way Speedbar (Outlook, Outlook Express, and IncrediMail)
Search Assistant – My Way

To clean up the registry, delete the keys and value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MyWebSearch Email Plugin.

Reboot your Computer.

Next, open My Computer, Drive C, and double-click on the Program Files folder

Right-click and delete the folders for:

FunWebProducts
MyWebSearch

MyWebSearch should now be completely uninstalled from your computer.