Sunday, September 27, 2009

Saved Password Location

Many people ask about the location in the Registry or file system that applications store the passwords. Here is a list of password storage locations for popular applications compiled by Nir Sofer.
Be aware that even if you know the location of the saved password, it doesn�t mean that you can move it from one computer to another. many applications store the passwords in a way that you prevent from moving them to another computer or user profile.
  • Internet Explorer 4.00 � 6.00: The passwords are stored in a secret location in the Registry known as the �Protected Storage�.
    The base key of the Protected Storage is located under the following key:
    �HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider�.
    You can browse the above key in the Registry Editor (RegEdit), but you won�t be able to watch the passwords, because they are encrypted.
    Also, this key cannot easily moved from one computer to another, like you do with regular Registry keys.
  • Internet Explorer 7.00 � 8.00: The new versions of Internet Explorer stores the passwords in 2 different locations.
    AutoComplete passwords are stored in the Registry under HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IntelliForms\Storage2.
    HTTP Authentication passwords are stored in the Credentials file under Documents and Settings\Application Data\Microsoft\Credentials , together with login passwords of LAN computers and other passwords.
  • Firefox: The passwords are stored in one of the following filenames: signons.txt, signons2.txt, and signons3.txt (depends on Firefox version)
    These password files are located inside the profile folder of Firefox, in [Windows Profile]\Application Data\Mozilla\Firefox\Profiles\[Profile Name]
    Also, key3.db, located in the same folder, is used for encryption/decription of the passwords.
  • Google Chrome Web browser: The passwords are stored in [Windows Profile]\Local Settings\Application Data\Google\Chrome\User Data\Default\Web Data
    (This filename is SQLite database which contains encrypted passwords and other stuff)
  • Opera: The passwords are stored in wand.dat filename, located under [Windows Profile]\Application Data\Opera\Opera\profile
  • Outlook Express (All Versions): The POP3/SMTP/IMAP passwords Outlook Express are also stored in the Protected Storage, like the passwords of old versions of Internet Explorer.
  • Outlook 98/2000: Old versions of Outlook stored the POP3/SMTP/IMAP passwords in the Protected Storage, like the passwords of old versions of Internet Explorer.
  • Outlook 2002-2008: All new versions of Outlook store the passwords in the same Registry key of the account settings.
    The accounts are stored in the Registry under HKEY_CURRENT_USER\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\[Profile Name]\9375CFF0413111d3B88A00104B2A6676\[Account Index]
    If you use Outlook to connect an account on Exchange server, the password is stored in the Credentials file, together with login passwords of LAN computers.
  • Windows Live Mail: All account settings, including the encrypted passwords, are stored in [Windows Profile]\Local Settings\Application Data\Microsoft\Windows Live Mail\[Account Name]
    The account filename is an xml file with .oeaccount extension.
  • ThunderBird: The password file is located under [Windows Profile]\Application Data\Thunderbird\Profiles\[Profile Name]
    You should search a filename with .s extension.
  • Google Talk: All account settings, including the encrypted passwords, are stored in the Registry under HKEY_CURRENT_USER\Software\Google\Google Talk\Accounts\[Account Name]
  • Google Desktop: Email passwords are stored in the Registry under HKEY_CURRENT_USER\Software\Google\Google Desktop\Mailboxes\[Account Name]
  • MSN/Windows Messenger version 6.x and below: The passwords are stored in one of the following locations:
    1. Registry Key: HKEY_CURRENT_USER\Software\Microsoft\MSNMessenger
    2. Registry Key: HKEY_CURRENT_USER\Software\Microsoft\MessengerServ ice
    3. In the Credentials file, with entry named as �Passport.Net\\*�. (Only when the OS is XP or more)
  • MSN Messenger version 7.x: The passwords are stored under HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\C reds\[Account Name]
  • Windows Live Messenger version 8.x/9.x: The passwords are stored in the Credentials file, with entry name begins with �WindowsLive:name=�.
  • Yahoo Messenger 6.x: The password is stored in the Registry, under HKEY_CURRENT_USER\Software\Yahoo\Pager
    (�EOptions string� value)
  • Yahoo Messenger 7.5 or later: The password is stored in the Registry, under HKEY_CURRENT_USER\Software\Yahoo\Pager � �ETS� value.
    The value stored in �ETS� value cannot be recovered back to the original password.
  • AIM Pro: The passwords are stored in the Registry, under HKEY_CURRENT_USER\Software\AIM\AIMPRO\[Account Name]
  • AIM 6.x: The passwords are stored in the Registry, under HKEY_CURRENT_USER\Software\America Online\AIM6\Passwords
  • ICQ Lite 4.x/5.x/2003: The passwords are stored in the Registry, under HKEY_CURRENT_USER\Software\Mirabilis\ICQ\NewOwners \[ICQ Number]
    (MainLocation value)
  • ICQ 6.x: The password hash is stored in [Windows Profile]\Application Data\ICQ\[User Name]\Owner.mdb (Access Database)
    (The password hash cannot be recovered back to the original password)
  • Digsby: The main password of Digsby is stored in [Windows Profile]\Application Data\Digsby\digsby.dat
    All other passwords are stored in Digsby servers.
  • PaltalkScene: The passwords are stored in the Registry, under HKEY_CURRENT_USER\Software\Paltalk\[Account Name].

Windows 8 New File System

What is Microsoft workin on? What changes can we expect in Windows 8? I suppose every Windows 8 fan is asking those questions nowadays. There aren’t many news, but there are some hints here and there!

If you compare the performance of filesystems of the major operating systems, you will quickly realize that Windows 7 is not doing very well:

I found this at FlexSense.com, it clearly underlines that Microsoft got a lot of work to do! No wonder that they have 9 teams working on file management and file access ONLY.

Quoted from ZDNET:

And of the 12 working groups created, “eight or nine revolve around management.

Windows 8 Improvements

The core engine of Windows 8 will have security and performance improvements.

For the upcoming version of Windows, new critical features are being worked on including cluster support and support for one way replication. The core engine is also being reworked to provide dramatic performance improvements. We will also soon be starting major improvements for Windows 8 where we will be including innovative features which will revolutionize file access in branch offices.”

Windows 8 New File System Not Confirmed Yet

Microsoft is working on a new file system, an improved DSFR (Distributed File System Replication (DFSR) storage file system), according to ZDNet.

Although Microsoft is hiring people to work on DFSR (the new filesystem) codenamewindows.com reported that the new file system has not been confirmed yet:

But there’s no way to tell yet if Microsoft will start the actual work on the DFSR (Distributed File System Replication ) file replication engine in Windows 8, or if the features will debut into the planning stage

Windows 8 Server Edition Job Postings

Because it’s a bit confusing I want to underline that the following job posting is for Windows 8 Server. The improvements mentioned above are considered for Windows 8.

“In Windows Server 2008 R2 release, the Server UX Test team (under the File Server Management organization) is finalizing the MMC [Microsoft Management Console] based User eXperience (UX)/Interfaces for the File Server Role. Currently the team owns DFS [Distributed File System] Management, Share and Storage Management, FSRM [File Server Resource Manager] & Classification UI, Disk Management, SMFS. For Windows 8, the SSD organization is working on the next version of the file server.

“As the team moved to Windows 8, you will have 2 main responsibilities – (i) put on the customer/design critique hat as we plan our next version file server management experience (i) participating in the architectural design, and development and driving automated testing for managing the next generation file server. Our current automation does not meet the multi-machine paradigm requirement and so you will contribute significantly in the development of test automation to validate setup/configuration of the new server, managing configuration changes, performing diagnostics and reporting using Power Shell, Command line, Object Model, UI.”


Short: Windows 7 RTM auto-elevate white list

I received a bunch requests to update the auto-elevate list from May, so here it is. There’s no change from the RC list.

  • \Windows\ehome\Mcx2Prov.exe
  • \Windows\System32\AdapterTroubleshooter.exe
  • \Windows\System32\appinfo.dll
  • \Windows\System32\BitLockerWizardElev.exe
  • \Windows\System32\bthudtask.exe
  • \Windows\System32\chkntfs.exe
  • \Windows\System32\cleanmgr.exe
  • \Windows\System32\cliconfg.exe
  • \Windows\System32\CompMgmtLauncher.exe
  • \Windows\System32\ComputerDefaults.exe
  • \Windows\System32\dccw.exe
  • \Windows\System32\dcomcnfg.exe
  • \Windows\System32\DeviceEject.exe
  • \Windows\System32\DeviceProperties.exe
  • \Windows\System32\dfrgui.exe
  • \Windows\System32\djoin.exe
  • \Windows\System32\eudcedit.exe
  • \Windows\System32\eventvwr.exe
  • \Windows\System32\fsquirt.exe
  • \Windows\System32\FXSUNATD.exe
  • \Windows\System32\hdwwiz.exe
  • \Windows\System32\ieUnatt.exe
  • \Windows\System32\iscsicli.exe
  • \Windows\System32\iscsicpl.exe
  • \Windows\System32\lpksetup.exe
  • \Windows\System32\MdSched.exe
  • \Windows\System32\msconfig.exe
  • \Windows\System32\msdt.exe
  • \Windows\System32\msra.exe
  • \Windows\System32\MultiDigiMon.exe
  • \Windows\System32\Netplwiz.exe
  • \Windows\System32\newdev.exe
  • \Windows\System32\ntprint.exe
  • \Windows\System32\ocsetup.exe
  • \Windows\System32\odbcad32.exe
  • \Windows\System32\OptionalFeatures.exe
  • \Windows\System32\perfmon.exe
  • \Windows\System32\printui.exe
  • \Windows\System32\rdpshell.exe
  • \Windows\System32\recdisc.exe
  • \Windows\System32\rrinstaller.exe
  • \Windows\System32\rstrui.exe
  • \Windows\System32\sdbinst.exe
  • \Windows\System32\sdclt.exe
  • \Windows\System32\shrpubw.exe
  • \Windows\System32\slui.exe
  • \Windows\System32\SndVol.exe
  • \Windows\System32\spinstall.exe
  • \Windows\System32\SystemPropertiesAdvanced.exe
  • \Windows\System32\SystemPropertiesComputerName.exe
  • \Windows\System32\SystemPropertiesDataExecutionPrevention.exe
  • \Windows\System32\SystemPropertiesHardware.exe
  • \Windows\System32\SystemPropertiesPerformance.exe
  • \Windows\System32\SystemPropertiesProtection.exe
  • \Windows\System32\SystemPropertiesRemote.exe
  • \Windows\System32\taskmgr.exe
  • \Windows\System32\tcmsetup.exe
  • \Windows\System32\TpmInit.exe
  • \Windows\System32\verifier.exe
  • \Windows\System32\wisptis.exe
  • \Windows\System32\wusa.exe
  • \Windows\System32\DriverStore\FileRepository\bth.inf_amd64_neutral_a1e8f56d586ec10b\fsquirt.exe
  • \Windows\System32\oobe\setupsqm.exe
  • \Windows\System32\sysprep\sysprep.exe

Saturday, September 26, 2009

Windows 8 Concept Video: Copenhagen

A user on vimeo released a concept for Windows 8, called Concept Copenhagen.
Although the creator is not affiliated with Microsoft, this concept looks very very promising. I really wish that Microsoft hires that person, because he definitely knows a lot about user behaviour and design.

The copenhagen concept is basically all about usability, portable objects, auto-expandable menus and 3D desktops. The 3D desktop could be compared withbumptop .

Bumptop technology:
Windows 8 Concept

It’s pretty difficult to describe it in words, you got to see this:

Copenhagen User Experience from Copenhagen Concept on Vimeo.

Windows 8 Themes

Windows 8 Theme for Windows XP Pro

One theme inspired by Windows 8 has been created by Studio48. You can find the theme preview on YouTube:




3 Windows 8 Themes for Windows Vista:

Windows 8 Pro

Another great Windows 8 theme has been created by mufflerexoz on DeviantArt. He has created a theme for Vista. This one really looks cool, Windows 8 could really look like that one. The theme will change your shell, logon screens,wallpapers,tray icons and some other things. Overall it’s a pretty big theme, big kudos to the theme creator!

Windows 8 Theme for Vista

You can download the Windows 8 theme for Vista here:
Download Windows 8 Professional Theme

Windows 8 7282 RC Theme

Muffler also created some more themes inspired by Windows 8 (for Windows Vista SP1 x86):

Windows 8 Theme
Download Windows 8 Ultimate Theme

Windows 8 Superbar Theme

The Superbar works only for the bottom taskbar. The taskbar also has twice the size and you can preview any windows.

Windows 8 Theme Superbar Vista
Download Windows 8 Superbar Theme

RSS fans rejoice: FeedDemon 3 is out

FeedDemon 3 is ready for public use, after months spent in a beta version that saw a confusing migration from proprietary online syncing to Google Reader.

That rough patch sorted, FeedDemon remains one of the best desktop RSS and Atom feed catchers. This version contains a lengthy list of changes, including greatly enhanced Twitter connectivity, a tweaked interface that's a bit easier to use, and better tagging and sharing.

My Twitter stream in FeedDemon 3.

(Credit: Screenshot by Seth Rosenblatt/CNET)

FeedDemon has dumped its proprietary synchronization site, Newsgator.com, in favor of syncing with Google Reader. New users won't notice, but older users are likely to lose many unread feeds, since Google can't import feeds with more than 10 unread items. Once synced with Google Reader, unread feeds can again include more than 10 items.

There's also a new, persistent ad placed in the lower-left corner of the interface, and FeedDemon's performance could be a lot better--RAM usage was hefty, and 3GB of RAM didn't prevent occasional program hang-ups.

Twitter feed reading has been baked in because FeedDemon supports authenticated feeds. Hyperlinking and short-URL expansion are automatic, and if you use Twitter as a live news stream, FeedDemon's Twitter link sharing should appeal to you. To set that up, you need to subscribe in FeedDemon to your Twitter feed here.

Tagging, tag clouds, and item sharing get a massive overhaul in FeedDemon 3, with all three features added to the item view and a tag cloud added to the Subscriptions Home view. The interface will look similar to FeedDemon 2.8, but there are many little tweaks to improve its usability.

Flags have been renamed Stars for Google Reader consistency, for example, while the Home page features videos, pictures, and content from your feeds. One smart improvement over Google Reader is that you can view your starred feeds in the folders they came from, instead of in a single "starred items" folder.

We'd like to see performance addressed in future versions, but overall, FeedDemon remains a favorite option for desktop feed management. Let us know your thoughts on the new FeedDemon in the comments below.

Disable the log-on screen in Windows XP and Vista

My previous post described how to add information to and otherwise customize Windows' Welcome screen. But maybe you just want to get your PC going without having to log into an account. You can bypass Windows' log-on screen by changing settings in the Windows Registry, as described in a tutorial on the Computer Performance site, but I find it much simpler to use a free Windows-tweaking utility to do the same thing.

The program I used to customize the Windows Welcome screen—TweakNow PowerPack 2009—is the same tool I used to disable the log-on screen on my Vista laptop. Click Windows Secret in the utility's left pane and choose User Accounts. Click "Enable auto log-on," select the account you want to log into automatically, enter the account's password and domain name (if necessary), and click Save. The next time you start the PC, Windows will start and open that account automatically.

TweakNow PowerPack 2009 User Accounts dialog

Set Windows to start logged into a specific account—without having to enter a password—via this setting in TweakNow PowerPack 2009.

(Credit: TweakNow)

TweakNow PowerPack 2009 works with XP, Vista, and Windows 7, but I tested it only with Vista. I didn't need to download the program to my XP test machine because that system already has Tweak UI, Microsoft's free XP-reconfiguration utility that lacks a Vista version.

To set XP to start a specific account without requiring a log-on, open Tweak UI and click Logon > Autologon in the left pane, check "Log on automatically at system startup" in the right window, enter the account's user name and domain (if necessary), and click the Set Password button.

Tweak UI Autologon dialog box

The free Tweak UI utility makes it easy to start Windows without having to log into an account.

(Credit: Microsoft)

In the Set Autologon Password dialog box, enter the account's password in each of the two text boxes and click OK.

Tweak UI Set Autologon Password dialog box

Add the account's password twice and click OK to start Windows without having to log in.

(Credit: Microsoft)

Why bypassing the Windows log-on is dangerous
Setting Windows to open an administrator account automatically is risky, period. Even starting a standard account without requiring a password is dangerous, though less so. There are many very good reasons why Windows accounts are password-protected, and far fewer good reasons for doing without passwords.

That's why I recommend against allowing automatic log-ons in general. But far be it from me to tell you how to use your PC, so if you want to save a few seconds each time you start your system—and you're not worried about somebody doing serious mischief after gaining easy access to your account—it's okay by me.