Lowyat.NET: Latest topics by Jazz_

[Help] dunno where the trojan/malware located

Jazz_ — Tue, 27 Oct 2009 22:52:49 +0800

this trojan/spyware keep created a .exe file with the same name with the folder located and it showed as a folder icon in my removable drive.
eg: in a folder named "video" it will auto create a exe file named "video.exe" but showed as a folder icon.

it created all the exe files inside all my folder in my pendrive and external hardisk..this exe can be deleted but after few seconds its appear again automatically..swt"..

any experienced for this and any solution to remove it?? my avira antivirus cant even detected it.

one more..i cant boot in to safe mode..dunno why, it will direct shut down while it half loading to windows..im using compaq..

can't install wlm..

Jazz_ — Sat, 19 Sep 2009 18:40:03 +0800

i previously using windows live mensenger 7.1 and recently it force me to update to the latest version..
and after i uninstall and install the wlm 2009, it failed and comes error..

the same problem came if i install version 8.5..
any solution?

Help! can't install msn live mesenger

Jazz_ — Sat, 19 Sep 2009 18:39:13 +0800

can't access page

Jazz_ — Mon, 17 Aug 2009 21:27:12 +0800

i face a problem that i can't load my university portal website with my laptop
but it can be load with other laptop.
im using firefox and sometime it can be load if im using IE but with the speed of turtle.

the website is .jsp type
im using dell and firefox

anybody knw the problem or solution?

running slow or can't load on webpage

Jazz_ — Mon, 17 Aug 2009 21:19:55 +0800

i face a problem that i can't load my university portal website with my laptop as it can be load if connect with other fren laptop. Anybody knw what the problem is?
im using firefox and sometime it can be load if im using IE but with the speed of turtle.

msn virus

Jazz_ — Tue, 12 May 2009 17:30:24 +0800

anybody know which is it?
hijacked:

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaul...rch/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaul...//www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://us.rd.yahoo.com/customize/ie/defaul...//www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaul...rch/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaul...//www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaul...//www.yahoo.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
O4 - HKLM\..\Run: [AcronisTimounterMonitor] C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe"
O4 - HKLM\..\Run: [FlashGuard] "C:\Program Files\FlashGuard\FlashGuard.exe" -run
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE VIMICRO USB PC Camera
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {9E265649-6E0E-4EEA-9F49-DAE0801440CF} (WebDigiNet Control) - http://shawsp76.dyndns.org/WebDiginet.CAB
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe
O23 - Service: CLCV0 (UTSCSI) - Unknown owner - C:\WINDOWS\system32\UTSCSI.EXE

seeking full time for 2 months or part-time?

Jazz_ — Tue, 05 May 2009 21:03:55 +0800

im currently seeking full time job for temporary or part-time for two months ( May and June 2009) which included accommodation..
KL or selangor based..
any?

laptop LCD...HELP!

Jazz_ — Fri, 27 Mar 2009 15:32:10 +0800

my acer travelmate became like this after a normal shut down. the LCD screen keep sparkle like the picture below..anybody know what the problem is and how to solve it?

[WTA] about LG phone spec

Jazz_ — Wed, 10 Sep 2008 13:07:30 +0800

Is all of the music player for LG phone cant be play in background?
i mean that like playing music but smsING at the same way? or
in a call and smsING at the same time?

bcause i had heard that LG phone cannot do it so..is it true?

keep failed to sign in msn msg

Jazz_ — Fri, 25 Jul 2008 16:15:45 +0800

im keep failed to sign in the msn msg as my friend success to do it with his laptop as we are using the same wireless network..
its troubleshoot told me that cant access my firewall but my firewall is already allow for it and already in the exceptions programs list..
any idea for me?

any idea?

Jazz_ — Thu, 17 Jul 2008 17:38:53 +0800

there are such a type of system that we need to login with identity and pass to serve on pages after we connected to its network via wireless..
i mean that after we connect to a server via wireless, it will bring us to a page to login our account to continue using its internet connection...if not we cant enjoy their internet..just like the system in some university and college..
any idea to make it serving through internet without login to their system?

can't detect bluetooth device

Jazz_ — Wed, 16 Jul 2008 14:46:13 +0800

any idea?
it seen at many type of laptop especially dell and acer

any live stock watching software?

Jazz_ — Thu, 12 Jun 2008 17:36:25 +0800

it is better if can access singapore board..any recommend?

recommend me a fast respond digital camera

Jazz_ — Wed, 28 May 2008 00:10:04 +0800

which brand and model do i nd to looking 4?

any ASTRO user know how to stop the service?

Thu, 01 Jan 1970 07:30:00 +0800

any ASTRO user know how to stop the service?

Jazz_ — Sat, 10 May 2008 13:23:24 +0800

any directions?

how to create a home wireless system?

Jazz_ — Wed, 23 Apr 2008 16:53:09 +0800

anybody can show me how to create a home wireless system with a new wireless modem and streamyx in XP and Vista?

help! nothing showing on monitor..

Jazz_ — Wed, 23 Apr 2008 15:51:26 +0800

my dekstop auto start without pressing the power button and nothing showing on my monitor..
i didnt install any new software and didnt change any setting at my last normal running before shut down..
the dekstop just running automaticly but nothing any showed at monitor and the monitor LED never turn to green color while its running..
checked..my lcd monitor stil in good condition..
anybody knw wat is the problem??

recovery partition in a laptop

Jazz_ — Thu, 20 Sep 2007 23:18:23 +0800

what use for the recovery partition in a laptop?

anybody can help me?

Jazz_ — Thu, 20 Sep 2007 00:33:04 +0800

im using XP..something i dunno is virus or spyware ha changed my laptop register at "MY Computer > Properties..Registered to: " there to a something "xx..xx.com" startup got an error with tat program and at the same time i cant show out the hidden files and folders bcause the option is missing!..at the same time also i cant access "regedit"..any expert here can help me?

i had scan with anti-virus and anti-spyware..no any infection..

when i start windows, i an error sound play out and show out this:

my computer > properties :

when i try to run out regedit, it show me this: im alrdy a administrator:

when i wanna show out hidden files i found that the "folder option" is missing:

HJT log:

Logfile of HijackThis v1.97.7
Scan saved at 4:28:06 PM, on 9/21/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\FlashGet\flashget.exe
C:\HJT\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.friendster.com/
F0 - system.ini: Shell=Explorer.exe "C:\WINDOWS\system32\JambanMu.com"
F2 - REG:system.ini: Shell=Explorer.exe "C:\WINDOWS\system32\JambanMu.com"
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll
O3 - Toolbar: FlashGet - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\Program Files\FlashGet\fgiebar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - Extra context menu item: &Download All with FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: &Download with FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: 50 FREE MP3s! (HKLM)
O9 - Extra button: Research (HKLM)
O9 - Extra button: FlashGet (HKLM)
O9 - Extra 'Tools' menuitem: FlashGet (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.adobe.com/pub/shockwave/...ash/swflash.cab