Lowyat.NET: Latest topics by slacker

Xcode latest version

slacker — Sun, 12 Jul 2009 11:20:40 +0800

My current version of Xcode in my Macbook is showing 3.1.2. How come version 3.1.3 is not shown in Apple Software Update when i launched it? Is 3.1.3 latest official release?

Who is the original singer of 童年?

slacker — Tue, 02 Jun 2009 07:40:38 +0800

A. Zhang Ai Jia
B. Luo Da Yu
C. Liu Wen Zheng

Good ol' song. I was still peeing at tepi longkang when I listened to this classic. Bring back memories....

BT3 + Macbook(Santa Rosa)

slacker — Tue, 26 Aug 2008 19:51:42 +0800

Anyone got Backtrack 3 running in the latest Santa Rosa Macbook? Be it from USB/CD or VM/Parallel image, rEFIt, harddisk install whatever....as long as it works.

Will appreciate if anyone can give me the direction.

BT3 + Macbook (Santa Rosa)

slacker — Mon, 25 Aug 2008 23:55:29 +0800

Slipstream Leopard

slacker — Thu, 21 Aug 2008 23:25:48 +0800

I just bough an used macbook with OS X version 10.5.2. Here is the question:
a) Can I slipstream the combo update 10.5.4 to the existing disc to make it become 10.5.4? Then, next time no need to download the 500MB over update for each fresh installation.

b) If a) is not feasible, where can I download the OS X version 10.5.4 iso image?

Thanks.

Fill up PDF Form

slacker — Tue, 22 Jul 2008 18:43:55 +0800

How do I fill up the form below?
http://www.hasil.org.my/melayu/pdf/C006PDSL6.pdf

It's there a way to do it by batch? Need to computerised it coz my company will be filling this form a lot.

My123

slacker — Sat, 15 Mar 2008 21:21:15 +0800

My computer has been infected with this spyware can some sifu here help me a bit? I've scanned it with Antivir and delete it but it comes back again. Here is the latest report.

AntiVir PersonalEdition Classic
Report file date: 15 March 2008 17:43

Scanning for 1147670 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Username: SYSTEM
Computer name: BARRY

Version information:
BUILD.DAT : 270 15603 Bytes 9/19/2007 13:32:00
AVSCAN.EXE : 7.0.6.1 290856 Bytes 8/23/2007 14:16:29
AVSCAN.DLL : 7.0.6.0 49192 Bytes 8/16/2007 13:23:51
LUKE.DLL : 7.0.5.3 147496 Bytes 8/14/2007 16:32:47
LUKERES.DLL : 7.0.6.1 10280 Bytes 8/21/2007 13:35:20
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 7/18/2007 15:27:15
ANTIVIR1.VDF : 7.0.3.2 5447168 Bytes 3/7/2008 18:45:09
ANTIVIR2.VDF : 7.0.3.3 2048 Bytes 3/7/2008 18:45:09
ANTIVIR3.VDF : 7.0.3.31 158208 Bytes 3/14/2008 18:45:09
AVEWIN32.DLL : 7.6.0.73 3334656 Bytes 3/14/2008 18:45:10
AVWINLL.DLL : 1.0.0.7 14376 Bytes 2/26/2007 11:36:26
AVPREF.DLL : 7.0.2.2 25640 Bytes 7/18/2007 08:39:17
AVREP.DLL : 7.0.0.1 155688 Bytes 4/16/2007 14:16:24
AVPACK32.DLL : 7.6.0.3 360488 Bytes 3/14/2008 18:45:11
AVREG.DLL : 7.0.1.6 30760 Bytes 7/18/2007 08:17:06
AVARKT.DLL : 1.0.0.20 278568 Bytes 8/28/2007 13:26:33
AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 7/18/2007 08:10:18
NETNT.DLL : 7.0.0.0 7720 Bytes 3/8/2007 12:09:42
RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 8/7/2007 13:38:13
RCTEXT.DLL : 7.0.62.0 86056 Bytes 8/21/2007 13:50:37
SQLITE3.DLL : 3.3.17.1 339968 Bytes 7/23/2007 10:37:21

Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: 15 March 2008 17:43

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'msiexec.exe' - '1' Module(s) have been scanned
Scan process 'wmiprvse.exe' - '1' Module(s) have been scanned
Scan process 'MPAPI3s.exe' - '1' Module(s) have been scanned
Scan process 'SERVIC~1.EXE' - '1' Module(s) have been scanned
Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
Scan process 'PcSync2.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
Scan process 'MSASCui.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'LAUNCH~1.EXE' - '1' Module(s) have been scanned
Scan process 'apdproxy.exe' - '1' Module(s) have been scanned
Scan process 'agrsmmsg.exe' - '1' Module(s) have been scanned
Scan process 'atiptaxx.exe' - '1' Module(s) have been scanned
Scan process 'StartFX.exe' - '1' Module(s) have been scanned
Scan process 'dvdtray.exe' - '1' Module(s) have been scanned
Scan process 'issch.exe' - '1' Module(s) have been scanned
Scan process 'jusched.exe' - '1' Module(s) have been scanned
Scan process 'V0230Mon.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'PSIService.exe' - '1' Module(s) have been scanned
Scan process 'HPZipm12.exe' - '1' Module(s) have been scanned
Scan process 'LSSrvc.exe' - '1' Module(s) have been scanned
Scan process 'mscorsvw.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'MsMpEng.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
43 processes with 43 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
[NOTE] No virus was found!

Start scanning boot sectors:
Boot sector 'C:\'
[NOTE] No virus was found!

Starting to scan the registry.
The registry was scanned ( '38' files ).

Starting the file scan:

Begin scan in 'C:\'
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\~de10D.tmp
[DETECTION] Is the Trojan horse TR/Agent.CPQ
[INFO] The file was deleted!
C:\System Volume Information\_restore{86BAA262-139D-45DA-9406-ABF5EF40AADE}\RP75\A0032355.sys
[DETECTION] Is the Trojan horse TR/Rootkit.Gen
[INFO] The file was deleted!
C:\System Volume Information\_restore{86BAA262-139D-45DA-9406-ABF5EF40AADE}\RP75\A0032356.sys
[DETECTION] Is the Trojan horse TR/Dldr.Agent.bbc.2
[INFO] The file was deleted!
C:\System Volume Information\_restore{86BAA262-139D-45DA-9406-ABF5EF40AADE}\RP75\A0032357.sys
[DETECTION] Is the Trojan horse TR/Zapchast.CH
[INFO] The file was deleted!
C:\System Volume Information\_restore{86BAA262-139D-45DA-9406-ABF5EF40AADE}\RP75\A0032358.sys
[DETECTION] Contains detection pattern of the rootkit RKIT/StartPage.D
[INFO] The file was deleted!
C:\System Volume Information\_restore{86BAA262-139D-45DA-9406-ABF5EF40AADE}\RP78\A0032632.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '480ba27a.qua'!
C:\System Volume Information\_restore{86BAA262-139D-45DA-9406-ABF5EF40AADE}\RP81\A0032863.dll
[DETECTION] Is the Trojan horse TR/Dldr.My123.A
[INFO] The file was deleted!
C:\System Volume Information\_restore{86BAA262-139D-45DA-9406-ABF5EF40AADE}\RP81\A0032864.dll
[DETECTION] Is the Trojan horse TR/Dldr.Agent.bbc.1
[INFO] The file was deleted!
C:\System Volume Information\_restore{86BAA262-139D-45DA-9406-ABF5EF40AADE}\RP81\A0032865.dll
[DETECTION] Is the Trojan horse TR/Dldr.Sma.eil.8.A
[INFO] The file was deleted!
C:\System Volume Information\_restore{86BAA262-139D-45DA-9406-ABF5EF40AADE}\RP81\A0032866.dll
[DETECTION] Is the Trojan horse TR/Dldr.Sma.eil.8.A
[INFO] The file was deleted!
C:\System Volume Information\_restore{86BAA262-139D-45DA-9406-ABF5EF40AADE}\RP81\A0032867.dll
[DETECTION] Is the Trojan horse TR/Dldr.Sma.eil.8.A
[INFO] The file was deleted!
C:\System Volume Information\_restore{86BAA262-139D-45DA-9406-ABF5EF40AADE}\RP81\A0032868.dll
[DETECTION] Is the Trojan horse TR/Dldr.Sma.eil.8.A
[INFO] The file was deleted!
C:\System Volume Information\_restore{86BAA262-139D-45DA-9406-ABF5EF40AADE}\RP87\A0033673.sys
[DETECTION] Is the Trojan horse TR/Rootkit.Gen
[INFO] The file was deleted!
C:\System Volume Information\_restore{86BAA262-139D-45DA-9406-ABF5EF40AADE}\RP87\A0033674.sys
[DETECTION] Is the Trojan horse TR/Dldr.Agent.bbc.2
[INFO] The file was deleted!
C:\System Volume Information\_restore{86BAA262-139D-45DA-9406-ABF5EF40AADE}\RP87\A0033675.sys
[DETECTION] Contains detection pattern of the rootkit RKIT/StartPage.D
[INFO] The file was deleted!
C:\System Volume Information\_restore{86BAA262-139D-45DA-9406-ABF5EF40AADE}\RP87\A0033676.dll
[DETECTION] Is the Trojan horse TR/Dldr.QQHelper.QR
[INFO] The file was deleted!
C:\System Volume Information\_restore{86BAA262-139D-45DA-9406-ABF5EF40AADE}\RP87\A0033677.vbs
[DETECTION] Contains detection pattern of the worm WORM/Small.N.3
[INFO] The file was deleted!
C:\System Volume Information\_restore{86BAA262-139D-45DA-9406-ABF5EF40AADE}\RP87\A0033678.dll
[DETECTION] Is the Trojan horse TR/Drop.Atlandics
[INFO] The file was deleted!
C:\System Volume Information\_restore{86BAA262-139D-45DA-9406-ABF5EF40AADE}\RP94\A0033896.sys
[DETECTION] Is the Trojan horse TR/Rootkit.Gen
[INFO] The file was deleted!
C:\System Volume Information\_restore{86BAA262-139D-45DA-9406-ABF5EF40AADE}\RP94\A0033897.sys
[DETECTION] Is the Trojan horse TR/Dldr.Agent.bbc.2
[INFO] The file was deleted!
C:\System Volume Information\_restore{86BAA262-139D-45DA-9406-ABF5EF40AADE}\RP94\A0033898.sys
[DETECTION] Contains detection pattern of the rootkit RKIT/StartPage.D
[INFO] The file was deleted!
C:\WINDOWS\system32\bsiwomeh.dll
[WARNING] The file could not be opened!
C:\WINDOWS\system32\drivers\bsnjnt25.sys
[WARNING] The file could not be opened!
C:\WINDOWS\system32\drivers\ctjxpnfi.sys
[WARNING] The file could not be opened!
C:\WINDOWS\system32\drivers\lxgbuv99.sys
[WARNING] The file could not be opened!
C:\WINDOWS\system32\drivers\oufijwuk.sys
[WARNING] The file could not be opened!
C:\WINDOWS\system32\drivers\tbtgmq36.sys
[WARNING] The file could not be opened!
C:\WINDOWS\system32\drivers\xjtkji42.sys
[WARNING] The file could not be opened!
C:\WINDOWS\system32\drivers\xyfuhi26.sys
[WARNING] The file could not be opened!
C:\WINDOWS\Temp\nlfdxfirc.exe
[DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
[INFO] The file was deleted!

End of the scan: 15 March 2008 18:38
Used time: 54:53 min

The scan has been done completely.

4968 Scanning directories
228646 Files were scanned
21 viruses and/or unwanted programs were found
1 Files were classified as suspicious:
21 files were deleted
0 files were repaired
1 files were moved to quarantine
0 files were renamed
9 Files cannot be scanned
228625 Files not concerned
1375 Archives were scanned
9 Warnings
0 Notes

Here is the HJT log:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:20:30 PM, on 3/15/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Common Files\Protexis\License Service\PSIService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\V0230Mon.exe
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Ahead\ODD Toolkit\DVDTray.exe
C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,Start Page = http://www.my123.com/
R1 - HKLM\Software\Microsoft\Internet Explorer,Start Page = http://www.my123.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.my123.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.my123.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://go.microsoft.com/fwlink/?LinkId=54843
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.2.7.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: brush Class - {F92A7C72-B661-40FA-BEFD-9091E597FCE1} - c:\windows\system32\brushb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [IdnSvr] C:\Program Files\OCINS\idnsvr.exe
O4 - HKLM\..\Run: [VOMVQJST] "C:\WINDOWS\system32\Regsvr32.exe" -s "C:\Program Files\Common Files\VOMVQJST\VOMVQJST.dll"
O4 - HKLM\..\Run: [V0230Mon.exe] C:\WINDOWS\system32\V0230Mon.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [DVDTray] C:\Program Files\Ahead\ODD Toolkit\DVDTray.exe
O4 - HKLM\..\Run: [AVFX Engine] C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [xjtkji42] C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\xjtkji42.dll,DllCanUnloadNow
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Policies\Explorer\Run: [run] C:\WINDOWS\System32\explore.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Policies\Explorer\Run: [System] C:\WINDOWS\System32\inetinfo.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\Policies\Explorer\Run: [System] C:\WINDOWS\System32\inetinfo.exe (User 'Default user')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1205520082739
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1205520048161
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O21 - SSODL: SysTray - {12311512-2C1D-44b2-A044-872AD2AD5A61} - (no file)
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NT Data Provider (Mercha2) - Unknown owner - C:\WINDOWS\SYSTEM32\RUNDLLFOROUR.EXE (file missing)
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\Program Files\Common Files\Protexis\License Service\PSIService.exe

--
End of file - 9578 bytes

Also here is the result of Windows Defender

Win32/My123
Category:
Browser Modifier

Description:
This program has potentially unwanted behavior.

Advice:
Review the alert details to see why the software was detected. If you do not like how the software operates or if you do not recognize and trust the publisher, consider blocking or removing the software.

Resources:
file:
C:\WINDOWS\system32\bsiwomeh.dll

Win32/YokSearch
Category:
Browser Modifier

Description:
This program adds a browser toolbar and may be delivered through unsolicited installation.

Advice:
Review the alert details to see why the software was detected. If you do not like how the software operates or if you do not recognize and trust the publisher, consider blocking or removing the software.

Resources:
file:
C:\System Volume Information\_restore{86BAA262-139D-45DA-9406-ABF5EF40AADE}\RP88\A0033682.dll

Win32/NewWeb
Category:
Adware

Description:
This program displays advertisments separate from the parent program.

Advice:
Review the alert details to see why the software was detected. If you do not like how the software operates or if you do not recognize and trust the publisher, consider blocking or removing the software.

Resources:
file:
C:\System Volume Information\_restore{86BAA262-139D-45DA-9406-ABF5EF40AADE}\RP88\A0033683.dll

Win32/FlyingCall
Category:
Adware

Description:
This program has potentially unwanted behavior.

Advice:
Review the alert details to see why the software was detected. If you do not like how the software operates or if you do not recognize and trust the publisher, consider blocking or removing the software.

Resources:
file:
C:\System Volume Information\_restore{86BAA262-139D-45DA-9406-ABF5EF40AADE}\RP88\A0033684.dll

file:
C:\Program Files\Common Files\viguvw\wgycxv.nls

How to open .mod file?

slacker — Thu, 13 Sep 2007 02:57:10 +0800

I need to mod my phpBB2 forum by downloading a file with this extension. How do I open/use this file? I've google the information but none of those explaining it regarding php or whatsoever. Is this an archive/compress file?

Dual audio problems

slacker — Thu, 02 Aug 2007 05:41:44 +0800

I've bought a dual audio vcd series. But both audio came out at the same time. One language from left and another language from right. I'm currently using Media Player Classic. Any solution to make it it one audio language with stereo?

How to register domain with eNom?

slacker — Sat, 28 Jul 2007 02:39:48 +0800

It seems that they don't register to end user. What I get is from their website is only resellers information. eNom don't take end user domain registration anymore?

Services Binding to Port Question

slacker — Mon, 02 Jul 2007 23:20:08 +0800

Broadband provider
ISP/package: Streamyx
Location: Johor
Have you called your ISP's helpline?: No

Personal equipment
Modem: Aztech DSL 600EU
Router: Aztech DSL 600EU
Firewall used: Modem built-in and Windows bulit in

Problem details
First occurence of problem:
Problem frequency:
Problem description:

Is it possible to have multiple type of services binding to the same port number? Let's say my remote management configuration of my router is bind to port 80 and a webserver behind the router also bind to port 80, how do I solved this problem? I already forward the necessary port. Any way to disable the remote management so that it points to the webserver? Can it be also solved by subnetting? Any pointer to this? The manual for Aztech DSL 600EU is rare also in regard of the subnetting usage.

How to DIY hosting a forum?

slacker — Fri, 29 Jun 2007 18:56:14 +0800

I'm currently learning how to create a forum for fun. Thing's I've done:

1. Installed XAMPP Lite
2. Installed phpBB3

Now I can acceess this forum through localhost. So, what steps should I proceed further so that I can access my forum from outside? The server is behind a router and I got dynamic IP. Also, no domain name yet. Thanks.

Singapore PR

slacker — Thu, 31 May 2007 13:56:22 +0800

If i'm issued a Blue IC from Singapore, is this going to be valid for whole life? What is Re-entry permit going to have anything to do with the Blue IC?

I'm currently a SPR. I got this status in 2002. After the issuance of this IC to me. I'm back here to M'sia until now.

So, if my re-entry permit expire, I'm not a SPR anymore? I intend to go back to work. The re-entry permit is going to expire this November. What is the relationship between re-entry permit and SPR? Any idea what's the criteria for them to assess the application for renewal of re-entry permit?

Internet Time

slacker — Thu, 24 May 2007 08:28:08 +0800

Each time I pressed the "Update Now" button to update my computer time, this error message appear "An error occurred while Windows was synchronizing with time.nist.gov". I remember last time it can be done without any problems.

Using WinXPSP2

Need hlp to remove spyware

slacker — Sun, 11 Mar 2007 03:48:46 +0800

Scanned with Search and Destroy:
WSearch and VX.a appear but cannot be removed. Will be detected again with new scan.

Scanned with Xscan {web based}:
CoolWebSearch appear. Will be detected again with new scan.

Removed with CWShredder. Also cannot ler.

Here is my HJT log:

Logfile of HijackThis v1.99.1
Scan saved at 3:47:54 AM, on 3/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\HJT\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com/0SEENUS/SAOS01
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://msg.edit.yahoo.com/config/reset_coo...com/%3f.intl=aa
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: IExpress - {27E96DE0-8211-42CF-9A1E-FA6246A95B77} - C:\WINDOWS\system32\iexpress.dll (disabled by BHODemon)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Advance Helper - {8E25AC4A-B129-451B-BEE2-3B510BB751DA} - C:\WINDOWS\system32\NTDLL32.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (disabled by BHODemon)
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll (disabled by BHODemon)
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll (disabled by BHODemon)
O2 - BHO: IE Browser Helper - {D0903A3B-F0EA-434a-9742-98C5335C7946} - C:\WINDOWS\system32\IEHelper.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\\NeroCheck.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Internet] "C:\WINDOWS\system32\internet.exe"
O4 - HKLM\..\Run: [Desktop] "C:\WINDOWS\system32\internet.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\ypager.exe" -quiet
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NVMCTRAY.DLL,NvTaskbarInit
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesaa.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesaa.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {556DDE35-E955-11D0-A707-000000521957} - http://www.xblock.com/download/xclean_micro.exe
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/...lscbase9602.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {9E265649-6E0E-4EEA-9F49-DAE0801440CF} (WebDigiNet Control) - http://sml.myftp.biz/WebDiginet.CAB
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://download.games.yahoo.com/games/popc...aploader_v6.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit...wn.cab31267.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - AppInit_DLLs: C:\WINDOWS\system32\NTDLL32.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Logical Disk Manager Amdinistrative Serviece (Service27333) - Unknown owner - c:\windows\system\iexplore.exe (file missing)
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Windows NT Service32 - Unknown owner - C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\NTService32.dll",Start (file missing)

Local Area Connection on Linux IGD

slacker — Sat, 20 Jan 2007 18:17:34 +0800

This connection automagically appear in my computer. I don't remember i touch any settings on my pc nor install thing as such. Problem now is I can't seem to remove it. On further probe to the advanced settings, 2 of my Azureus services was listed there. Is this some kind of malware or spyware thingy? How can I remove it?

Hotmail problem

slacker — Sat, 04 Nov 2006 12:38:01 +0800

How come my hotmail cannot view the picture directly? It's always embedded in repetitive attachment file that I need to click in order to view the actual picture in the end (it's with .htm extension). Is this an issue with recipient mail settings or sender mail setting? If it is recipient mail setting, how do I rectify it. BTW, I'm using Windows Live Mail Beta. Thanks!!

At best effort basis...

slacker — Fri, 20 Oct 2006 18:22:56 +0800

Why always at best effort basis? Why not just advertise the minimum and maximum speed that we will get?

If we want to lodge a complain on slow connection, how slow is considered slow? Doesn't this type of KPI is important to them for customer service?

Orkut

slacker — Wed, 12 Apr 2006 15:37:36 +0800

As per above title. I got gmail....but it seems that it is by invitation only. Anyone can invite me? Please PM me.

L4/HURD on STI Cell

slacker — Sat, 02 Jul 2005 13:23:08 +0800

Anyone ever think of this combination? Or perhaps is it possible in a foreseeable future? Or maybe on a more short term approach with L4/HURD running on PS3? Maybe there are already some enthusiast already working on this. Give your comments here....