Jump to content

azali

Members
  • Content Count

    123
  • Joined

  • Last visited

Posts posted by azali


  1. Ntahlah, pernah masuk dalam Tmnet Multimedia Inventory and Provisioning System (mips), ada option untuk home user register yg fixed ip & takde masalah, approve terus... kalau no. tel company register pakai pakej home user barulah tak dapat... dia reject terus kat system tu...

    aku penah p telekom... depa kata tak boleh....


  2. aku baru dapat email ni... tgk la mcm mana nnt...

    ---------------------------------------------------------------

    Dear Sir or Madam,

    Thank you for your recent inquiry.

    We found a new worm in the attachment you have sent us.

    The pattern recognition will be integrated in one of our next updates.

    The pattern recognition of the virus will be detected as

    "Worm.Brontok.AD".

    We thank you for your assistance.

    Attachment(s) you sent:

    - taskmgr.zip

    --

    Freundliche Gruesse / Best regards

    Avira GmbH

    Andreas Pohl

    First Level Support

    Avira GmbH

    Lindauer Str. 21, D-88069 Tettnang, Germany

    Internet: http://www.avira.com


  3. So skrg mcmane mr-azali, problem solved?

    Dah try ke solution2 yg diaorg bg tu?

    Yg mr-aMer suruh wat tu ko kene buat tau.

    Problem tu critical, perlukan fix dgn segera.

    aku dah buang. mmg la ilang (pas delete, terus leh run task manager). tapi tak lama pastu dia mai balik...


  4. tak taw aku..tapi kalau ko nak letak dalam hostfile boleh ja, tak da masalah..lagi senang keje pasal dia boleh efek satu sistem, tak kisah guna firefox ke, opera ke, ie ke..

    p/s: dalam hostfile aku ada dekat 50k entri (url) aku dah blok..tu termasuk la web palsu mcam frienstar.com, web pr0n dsb..saiz fail tu dekat 1.5Mb

    kongsi2 la ngan org lain hostfile ko tu.... kita blh ambik kat mana2 ke list url web porn tu? yg sentiasa di update ke...


  5. aku ada mslh skit.. sbb apa aku takleh run task manager kalo tekan ctrl+alt+del?

    dia cuma boleh buka kalo aku klik kt taskmgr yg kat dlm system32..

    aku pakai winxp pro..

    aku dh scan ngan antivir (baru je update) tp dia tak jumpa apa2..

    ni aku paste HijackThis log aku.. time ni mmg aku tak run apa2 program lain..

    Logfile of HijackThis v1.99.1

    Scan saved at 1:49:53 PM, on 12/15/2006

    Platform: Windows XP SP2 (WinNT 5.01.2600)

    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\Program Files\Guardware\GWPUM\updsvc.exe

    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE

    C:\WINDOWS\system32\nvsvc32.exe

    C:\WINDOWS\system32\svchost.exe

    C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe

    C:\Program Files\AntiVir PersonalEdition Classic\sched.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\Explorer.EXE

    C:\DOCUME~1\user\taskmgr.exe

    C:\WINDOWS\system32\RUNDLL32.EXE

    C:\WINDOWS\SOUNDMAN.EXE

    C:\WINDOWS\vsnpstd.exe

    C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe

    C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe

    C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe

    C:\WINDOWS\system32\iShield.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\Documents and Settings\admin\taskmgr.exe

    c:\program files\common files\installshield\updateservice\isuspm.exe

    C:\Program Files\Common Files\InstallShield\UpdateService\agent.exe

    C:\Documents and Settings\admin\Desktop\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/

    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

    O2 - BHO: iShield Plug-in - {3050CDCA-E35E-4696-A544-8B0A589CE885} - C:\WINDOWS\system32\ISIEEdit.dll

    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll

    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

    O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE

    O4 - HKLM\..\Run: [snpstd] C:\WINDOWS\vsnpstd.exe

    O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"

    O4 - HKLM\..\Run: [iSUSPM Startup] "c:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup

    O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start

    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min

    O4 - HKLM\..\Run: [isReminder] C:\WINDOWS\system32\ISPopup.exe

    O4 - HKLM\..\Run: [iShield] C:\WINDOWS\system32\iShield.exe

    O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet

    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

    O8 - Extra context menu item: Add this site to xfilter (iShield) black list - C:\WINDOWS\system32\isBRclick.htm

    O8 - Extra context menu item: Add this site to xfilter (iShield) white list - C:\WINDOWS\system32\isWRclick.htm

    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll

    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll

    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

    O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe

    O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1152671269484

    O17 - HKLM\System\CCS\Services\Tcpip\..\{BBE72DFB-449D-4B2C-8AD2-85C78232702E}: NameServer = 202.188.0.133,202.188.1.5

    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)

    O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe

    O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe

    O23 - Service: Guardware Product Update Service - Guardware UK. - C:\Program Files\Guardware\GWPUM\updsvc.exe

    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

    sekian terima kasih....


  6. OS ape? winXP?

    nie satu cara ko bole guna (tanpa install software),

    Edit registry;

    Pegi ke Start > Run, type regedit

    Pegi ke HKey_Current_User \ Software \ Microsoft \ Internet Explorer \ Main

    Bile anda click key "main" tu, di sebelah kanan screen akan kelihatan list value

    Value yang relevan kepada anda ialah:

    Default_Page_URL

    Default_Search_URL

    Local_Page

    Search Bar

    Search Page

    Start Page

    Anda boleh memilih untuk edit "Start Page" shj, terpulang kepada anda..

    Dalam kes saya, saya tukar semua nilai diatas kepada http://www.google.com

    Bila dah selesai dan gembira dgn data yang anda masukkan, right-click key "main" tadi dan pilih "permission".

    AMARAN: Anda harus berhati2 bab set permission nie!!

    Ideanya ialah untuk beri "Read-only" permission kepada user tadi(ahmad,ali,),

    kalau nak lebih immune lagi, bagi "Read-only" permission kepada "System".(tahap nie dah cukup bagus)

    Kalau nak lebih immune lagi, bagi "Read-only" permission kepada semua.

    heh..insyaallah setting IE anda takkan berubah sampai bile2.. :D

    terima kasih...

    tapi apsal aku cuma ada search page, start page & local page je?

    aku tak tau camna nk set permission tu kpd read only.. skrg ni cuma allow Query Value, Enumerate Subkeys,Notify ngan Read Control... yg lain aku Deny (kecuali Full Control)..

    Betul tak apa yg aku wat tu? sbb aku try Deny semua kecuali Read Control, langsung takleh buka IE..

    Kalo kita dh wat Read Only utk System, user tadi tu perlu wat gak ke?


  7. pc aku pun kena virus ni... tapi bila msk safemode aku try search tak jumpa pun fail2 tu... dia mcm tetiba ilang.. bila aku restart dan msk ke normal blk.. ok la pc aku tu..

    tp lama2 dia akan dtg blk..

    awat jd camtu?

    dulu aku try search, jumpa.. tp skrg ni dia mcm leh ilang lak..

    masa nk search tu mmg aku tick semua dlm hidden, system file apa semua tu...


  8. kan boleh adjust setting dia ,

    url mana yg boleh lepas,

    dan url yg mana kena block

    cuba godek2 dulu software uh

    maksud aku, mcm kt cybercafe la.. kalo ada customer komplen ada laman web yg takleh masuk.. aku leh ubah setting dr pc cashier je.. takpun pc kt cashier ni blh kawal, nk active atau deactive software tu kt pc customer..


  9. pc aku kalo on, terus akan popup window c:\ pastu floppy drive aku sentiasa berbunyi... task manager pun xleh buka.. dia akan close sendiri.. lama2 pc akan jd slow sgt.. dulu aku pakai avg... langsung xleh wat apa2.. skrg aku tukar antivir.. mula2 ok.. skrg dh jadi blk...

    tolong la....


  10. assalamua'laikum.. nk minta tlg skit..

    ada tak perisian yg blh restore ie homepage tiap2 kali restart? kalo nk install software yg halang user change homepage, takut slow plak ie tu.. aku png try spybot sd utk halang user tukar. tp blh tukar gak bila depa msk laman web tertentu.. kita yg nk tukar ke asal blk punya la ssh kalo user tu dlm limited acc.


  11. assalamua'laikum..

    nk tanya pendapat skit. aku skrg pakai canon pixma mp130. pakai ink rifill. yg murah punya.

    aku rasa nk tukar pakai laser la. yg mana lbh menjimatkan? penggunaan aku mmg tinggi utk print kaler ni.

    mahal tak toner dia?

×
×
  • Create New...