Jump to content
frostmourne

Handycafe Problem

Recommended Posts

assalamualaikum dan salam sejahtera..

aku ada masalah kat cc aku ni..

camni, cc aku guna software handycafe..

masalah aku ni merujuk kepada pc2 client kat cc aku ni..

bile customer log in, secara automatiknye akan keluar internet explorer dan internet explorer tu terus ke link yang sama dengan iklan2 handy cafe..

(bila log in, sebelah kanan desktop ada iklan2 handycafe)

seblom ni tak pernah berlaku, hari ni hari first terjadi kat cc aku ni.. internet explorer yg keluar tu menyerabutkan keadaan.. huhu..

so, macam mana nak solve problem ni?

ni log hijackthis salah satu pc client.. harap bleh tolong..

Logfile of Trend Micro HijackThis v2.0.0 (BETA)

Scan saved at 14:36, on 2007-06-20

Platform: Windows XP SP2 (WinNT 5.01.2600)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe

C:\PROGRA~1\HANDYC~1\Client\_hndguard.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Messenger\msmsgs.exe

C:\PROGRA~1\HANDYC~1\Client\hndclient.exe

C:\PROGRA~1\HANDYC~1\Client\hndfw.exe

C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe

C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe

C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe

C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Documents and Settings\All Users\Documents\HiJackThis_v2.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.leeman-automatisering.nl/startpagina

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP

O4 - HKLM\..\Run: [hndclient] C:\PROGRA~1\HANDYC~1\Client\_hndguard.exe -rungrd

O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet

O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background

O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'Default user')

O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present

O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions present

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll

O16 - DPF: {48884C41-EFAC-433D-958A-9FADAC41408E} (EGamesPlugin Class) - https://www.e-games.com.my/com/EGamesPlugin.cab

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1176198435687

O16 - DPF: {CD995117-98E5-4169-9920-6C12D4C0B548} (HGPlugin9USA Class) - http://gamedownload.ijjimax.com/gamedownlo...GPlugin9USA.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{47EC40F8-0694-4D4C-A9EE-F4B71EC41CFA}: NameServer = 202.188.0.133,202.188.1.5

O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe

O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe

O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe

O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: CLCV0 (UTSCSI) - Unknown owner - C:\WINDOWS\system32\UTSCSI.EXE

--

End of file - 5027 bytes

Share this post


Link to post
Share on other sites

senang jer...

kalau ko ade pakai router...ko pegi jer login router, pastu ko masuk kat url filter...pastu ko blocking domain/url "handycafe.com"...gerenti x naik dh natang iklan kat client tu...huhuh :rolleyes:

Share this post


Link to post
Share on other sites

senang jer...

kalau ko ade pakai router...ko pegi jer login router, pastu ko masuk kat url filter...pastu ko blocking domain/url "handycafe.com"...gerenti x naik dh natang iklan kat client tu...huhuh :rolleyes:

erm kalu block gitu dah tentu handycafe x jalan plak....hehehehe :lol:

macam yang zero kate la..blok pakai handycafe badword filter.... :rolleyes:

Share this post


Link to post
Share on other sites

aku rasa bukan handycafe tak jalan terus.. ada benda leceh..

sebab macam kita dah tak ada connection ngn handycafe group..

macam memula aku pakai time takda internet...

skit2 kena re-register... time tu pakai dial up.. biasa lah.. :lol:

Edited by zer0Nehza

Share this post


Link to post
Share on other sites

aku rasa bukan handycafe tak jalan terus.. ada benda leceh..

sebab macam kita dah tak ada connection ngn handycafe group..

macam memula aku pakai time takda internet...

skit2 kena re-register... time tu pakai dial up.. biasa lah.. :lol:

tapi takpe....taip je kt badword tu

untuk sementara ni

hari tu dah ilang dah kejap...tp 2 3 hari dah ade semula... :angry:

Share this post


Link to post
Share on other sites

la... aku pun baru kena minggu nih.. aku dah masukkan forex masih kena kaco jugak le. kalo nak delete desktop tu terus tak boleh ke?

Share this post


Link to post
Share on other sites

samala aku mslah ni..

dah benda percuma, kene la kuar iklan.. ^_^

hehehe.. btul2..

org nak settle kan masalah handycafe la cik rusli bukan nak lari dari masalah.

mende dah bermasalah.. wat ape nak pakai lagi...

buang masa je.. tak pun beli je handycafe tue.. setel masalah..

Share this post


Link to post
Share on other sites

ada beberapa keyword kena ban...

lagi mudah kalau ada pakai proxy/gateway server mcm squid+dansguardian dan sebagainya...

antara keyword

forex

adbrite -> yg ni slalu buat iklan seksi2 keluar

adserverplus

bidvertiser

ad.handycafe.net

tapi kalau takde server, try letak dalam router manager (kalau pakai linksys ada... router lain aku tak pasti...ada gak kot...)

atau letak dalam options kat handycafe...tak silap ada fungsi blocking dlm handycafe server... tp aku tak try yg ni lagi... sebab aku pakai server...

yang terbaru ni handycafe pakai google nya iklan/adsense for search...

bila login handycafe pada client... IE akan automatic launc, then keluar page search.hadycafe.com yang mana keluar interface ala google.com , then kalau kita gunakan search box tu...dia akan keluar result google search... handycafe kutip pendapatan dr google adsense gak :P

yg ni aku tak block..biar jer lah...sbb dia tak keluar iklan2 seksi/lucah...dan search pun guna google... dan elok gak... user datang ke kaunter, sebut nak guna pc07 (contoh), kita login... on the way user sampai ke pc07, duduk.. IE dah launch..dia bleh trs guna... :P

Edited by sawi

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...

×
×
  • Create New...