Masalah Komputer

Remove JambuMu virus

2009-03-12T08:08:00.001-07:00

This program I just found in a forum.Thanxxx to the people that create this program.

Download this program

Double click this program.

Restart your PC or Laptop.

** Have been tested by me.It is 100% working.

File and Printer Sharing in Windows Vista

2008-08-27T06:14:00.000-07:00

Abstract

Microsoft® Windows Vista™ has made some important changes to the way that file and printer sharing works. This article describes the changes and provides step-by-step instructions for sharing files and printers and connecting to shared files and printers from a computer running Windows Vista for a small-office or home office network that does not use the Active Directory® domain service.

This article is designed for IT professionals and experienced users that are familiar with file and printer sharing in Windows. If you are new to file and printer sharing, see the following Windows Vista help topics

Differences in File and Printer Sharing in Windows Vista

The differences in file and printer sharing in Windows Vista are the following:

The default workgroup name in Windows Vista has been changed to WORKGROUP. In Windows® XP Home Edition, the default workgroup name is MSHOME. If you upgrade a computer running Windows XP Home Edition to Windows Vista, it will keep its existing workgroup name. However, new computers with Windows Vista can have a different workgroup name than the other computers on your network. With different workgroups, it takes more time and effort to view all of the computers on the network.
Windows Vista uses the Public folder, rather than the Shared Documents folder in Windows XP, to simplify file sharing. With Public folder sharing enabled, the public folders and all of the folders within the Public folder are automatically shared with the name Public. You do not have to configure file sharing on separate folders. You only have to either move or copy the file or folder you want to share on the network to the Public folder.
Windows Vista by default does not allow simple file sharing. Access to shared folders, including the public folder (if shared), requires a user name and password. Simple file sharing is enabled by default in Windows XP Home Edition.

Top of page

Configuring File and Printer Sharing Behavior in Windows Vista

Configuring file and printer sharing behavior in Windows Vista consists of the following:

Setting the workgroup name to be the same as the other computers
Setting the network location type
Enabling file and printer sharing options

Setting the Workgroup Name

For easier and faster discovery of computers on your home network, it is highly recommended that all computers on a home network be configured for the same workgroup name. If computers are in multiple workgroups, it can take additional time and effort to discover all of the computers on the network.

To find out the existing workgroup name for a computer running Windows XP, do the following:

Click Start, right-click My Computer, and then click Properties.
In the System Properties dialog box, click the Computer Name tab and note the name of the workgroup.

Figure 1 shows an example.

Figure 1: The workgroup name in Windows XP

To find out the existing workgroup name for a computer running Windows Vista, click Start, right-click Computer, and then click Properties.

In the System window, the workgroup name is listed in the Computer name, domain, and workgroup settings section. Figure 2 shows an example of the System window with the workgroup name highlighted.

Figure 2: The workgroup name in Windows Vista

To configure the workgroup name for a computer running Windows Vista:

In the Computer name, domain, and workgroup settings section of the System window, click Change settings.
On the Computer Name tab of the System Properties dialog box, click Change.
In the Computer Name/Domain Changes dialog box, type the name of the workgroup being used by the other computers on your network in Workgroup, and then click OK. Figure 3 shows an example.
When you are prompted with a welcome message box, click OK. When prompted with a message box to restart your computer, click OK.
Click Close. When prompted to restart the computer, click Restart Now.

Figure 3 shows an example of the Computer Name/Domain Changes dialog box.

Figure 3: An example of the Computer Name/Domain Changes dialog box

Setting the Network Location Type

The network location type in Windows Vista is a setting that allows Windows Vista to automatically configure security and other settings based on the type of network to which the computer is connected. The Windows Vista network location types are the following:

Domain The computer is connected to a network that contains an Active Directory domain controller for the domain to which the computer is joined. An example a domain network type is an organization intranet.
Public The computer is connected to a network that has a direct connection to the Internet. Examples of public network types are public Internet access networks such as those found in airports, libraries, and coffee shops.
Private The computer is connected to a network that has some level of protection from the Internet and contains known or trusted computers. Examples of private network types are home networks or small office networks that are located behind an Internet gateway device that provides firewalling against incoming traffic from the Internet.

For small office or home office networks, you want to make sure that the network location type is set to private.

To view the current network location type, do the following, click Start, right-click Network, and then click Properties.

The Network and Sharing Center window displays the network location type in parentheses after the network name. Figure 4 shows an example of the Network and Sharing Center window with the network location type highlighted.

Figure 4: An example of the Network and Sharing Center window

If your network type is Public, do the following:

To the right of the network name and location type, click Customize.
In the Set Network Location dialog box, click Private, and then click Next.
In the Successfully set network settings dialog box, click Close.

Enabling File and Printer Sharing Options

By changing your network location type to private, network discovery is automatically enabled in the Sharing and Discovery section of the Network and Sharing Center window. The following additional file and printer sharing options must be manually enabled:

File sharing
Public folder sharing
Printer sharing
Password protected sharing

When all of these sharing and discovery options are enabled, your computer can:

Locate other computers and devices on your home network and have other computers locate your computer
Share its folders
Share its Public folder
Share its printers
Require user names and passwords for other computers that connect to the shared folders and printers of this computer

To enable file sharing, do the following:

In the Sharing and Discovery section of the Network and Sharing Center window, click the down arrow next to File sharing.
Within the File sharing settings, click Turn on file sharing, and then click Apply.

To enable public folder sharing, do the following:

In the Sharing and Discovery section of the Network and Sharing Center window, click the down arrow next to Public folder sharing.
Within the Public folder sharing settings, click one of the following:
- If you want to share the public folder so that other computers on the network can access the Public share to open files, but not create or change files, click Turn on sharing so anyone with network access can open files. This is the default setting.
- If you want to share the public folder so that other computers on the network can access the Public share to open files and also create or change files, click Turn on sharing so anyone with network access can open, change, and create files.
Click Apply.

To enable printer sharing and share all of your connected printers, do the following:

In the Sharing and Discovery section of the Network and Sharing Center window, click the down arrow next to Printer sharing.
Within the Printer sharing settings, click Turn on printer sharing, and then click Apply.

To enable password protected sharing, do the following:

In the Sharing and Discovery section of the Network and Sharing Center window, click the down arrow next to Password protected sharing.
Within the Password protected sharing settings, click Turn on password protected sharing, and then click Apply.

Password Protected Sharing

With password protected sharing enabled, other computers on your network will not be able to access your shared folders, including the Public folder, without a user name or password that corresponds to a user account on the computer with the shared folder. When a user on another computer tries to connect to the shared folder, they will send the user name and password of the account that they used to log on to their own computer. For example, if they logged on to their computer with the “Bob” account and a password, then the “Bob” name with its password is sent when connecting to a shared folder on another computer.

If there is a “Bob” account with its password on the computer that is sharing the folder, the shared folder connection will be successful (provided the "Bob" account is specified as one of the accounts that can access the share). However, if there is no “Bob” account on the computer that is sharing the folder, the shared folder connection will fail and the user on the other computer will be prompted with a dialog box to type in a user name and password. At this point, the user on the computer attempting to connect can type the name and password of an account on the computer sharing the folder that is specified as one of the accounts that can access the share.

To prevent shared folder connection failures, you can do one of the following:

Add the same accounts and passwords to all of the computers on your network

For example, if you have three computers in your home and four family members that use them, add all four accounts with their passwords corresponding to your family members to all three computers. When this is done, each family member can access the shared folders of the other computers, regardless of which computer they are using. This is the recommended method, which provides protection of shared folders and prevents shared folder connection failures.
Disable password protected sharing

When you disable password protected sharing, the computer sharing the folder does not require a user account or password. Anyone on your network can access the shared folders of the computer (provided the folder was shared for the Guest or Everyone account). This behavior is equivalent to simple file sharing in Windows XP.

To disable password protected sharing, do the following:

In the Sharing and Discovery section of the Network and Sharing Center window, click the down arrow next to Password protected sharing.
Within the Password protected sharing settings, click Turn off password protected sharing, and then click Apply.

Top of page

Sharing a Folder or Printer in Windows Vista

To share a folder in Windows Vista, do the following:

Ensure that file sharing is enabled as described in the “Enabling File and Printer Sharing Options” section of this article.
Click Start, and then click Computer.
In the Computer window, navigate to the folder containing the folder that you want to share.
Right-click the folder that you want to share, and then click Share. The File Sharing window is displayed.
If you have password protected sharing enabled, use the File Sharing window to select which users can access the shared folder and their permission level. To allow all users, select Everyone in the list of users. By default, the permission level for a selected user is Reader. Users cannot change files or create new files in the share. To allow a user to change files or folders or create new files or folders, select Co-owner as the permission level. Figure 5 shows an example of configuring users and permission levels in the File Sharing window.

If you have password protected sharing disabled, use the File Sharing window to select the Guest or Everyone account. This is equivalent to simple file sharing in Windows XP.
When complete, click Share, and then click Done.

Figure 5: An example of the File Sharing window

You can also share a folder from the folder’s properties by doing the following:

In the Computer window, navigate to the folder containing the folder that you want to share.
Right-click the folder that you want to share, and then click Properties. Windows Vista displays the folder properties window.
Click the Sharing tab. Figure 6 shows an example. Click Share for the File Sharing dialog box previously described. To configure advanced sharing options, click Advanced Sharing.

Figure 6: An example of the Sharing tab for the properties of a folder

When you click Advanced Sharing, Windows Vista displays the Advanced Sharing dialog box. Figure 7 shows an example.

Figure 7: An example of the Advanced Sharing dialog box

From this dialog box, you can do the following:

Create more than one share for the same folder with different share names.

Click Add to specify the new share name, a description for the share, the number of users allowed to connect, and share permissions (by default, the Everyone group has Read permissions).
Specify the maximum number of users that can be connected to the shared folder.

In Limit the number of simultaneous users to, specify 1 to 10.
Add a comment to the shared folder that appears to users when they are browsing for shared folders.

Type a description for the share in Comments.
Specify folder share permissions.

Click Permissions to specify individual user or group names and their permissions to access the files in the shared folder. Figure 8 shows an example.
Specify whether the contents of the folders of the share can be made available offline.

Click Caching and specify offline settings.

Figure 8: An example of the Permissions dialog box

To verify that the folder is shared, do the following:

Click Start, right-click Network, and then click Properties.
Under the Sharing and Discovery section of the Network and Sharing Center window, click Show me all the shared network folders on this computer.

A window displays the shared folders and printers. Verify that the window contains the folder that you just shared. Figure 9 shows an example.

Figure 9: An example of the list of shared folders and printers

If you share any folder within your user folder (click Start, and then click your user name), such Documents or Pictures, then other computers will see a folder named Users in the list of shared folders on this computer. For example, if the user Bob shares his Desktop folder on his computer named BobPC, it means that Bob has shared his c:\users\bob folder, which includes the Desktop folder. Bob’s Desktop folder is now available at \\bobpc\users\bob\desktop.

Sharing Your Printers

To share your printers in Windows Vista, ensure that printer sharing is enabled as described in the “Enabling File and Printer Sharing Options” section of this article.

To verify that your printers are shared, do the following:

Click Start, right-click Network, and then click Properties.
Under the Sharing and Discovery section of the Network and Sharing Center window, click Show me all the shared network folders on this computer.
In the list of shared resources, verify that your printers are listed.

Top of page

Accessing a Shared Folder or Printer with Windows Vista

To access a shared folder from a computer running Windows Vista, do the following:

Click Start, and then click Network. The Network window displays a list of computers in the workgroup of the computer. Figure 10 shows an example.
Double-click the name of the computer containing the shared folder that you want to access.
Double-click the shared folder that you want to access.

Figure 10: An example of the Network window

If the shared folder is on a computer running Windows Vista that has network discovery enabled, it should appear in the Network window quickly. If the computer containing the shared folder is on a computer running Windows XP, it might take up to 15 minutes for the computer to appear in the Network window.

If the computer that you are trying to access has password protected sharing enabled, the possibilities are the following:

If you are logged in using a user account that has been added to the computer sharing the folder and that name has been added to the list of users who have access to the folder, the shared folder connection will be successful.
If you are logged in using a user account that has not been added to the computer sharing the folder, you will be prompted to provide a user name and password of an account on the computer sharing the folder that has been added to the list of users who have access to the folder.
If you are logged in using a user account that has been added to the computer sharing the folder but has not been added to the list of users who can access the share, the shared folder connection will be denied.

If the computer that you are trying to access has password protected sharing disabled, the possibilities are the following:

In most cases, the access to the shared folder will be successful without prompting for a user name and password.
In some cases, you will be prompted to provide a user name and password. You should type the name guest with no password to access the shared folder.
If the shared folder does not have the Guest or Everyone account in its list of allowed users, shared folder access can fail even after prompting you for the name of the Guest account. To correct this, add the Guest or Everyone account to the list of allowed users on the share.

Accessing a Shared Printer

To access a shared printer from a computer running Windows Vista, do the following:

Click Start, and then click Network. The Network window displays a list of computers in the workgroup of the computer.
Double-click the name of the computer containing the shared printer that you want to access.
Right-click the shared printer that you want to access, and then click Connect. Alternately, you can double-click on Printers to see just the list of shared printers, and then right-click the shared printer that you want to access, and then click Connect.

After you have connected to the shared printer, you will be able to print to this shared printer as long as the printer and the computer sharing the printer are turned on.

Top of page

Common Questions with Windows Vista File and Printer Sharing

The following sections describe common questions about file and printer sharing in Windows Vista.

Using a Third-Party Firewall

Windows Vista includes a built-in host-based firewall known as Windows Firewall. When network discovery or file and printer sharing are enabled, Windows Firewall automatically allows the corresponding incoming traffic. However, many users use a different firewall product such as Windows Live OneCare or PC-cillin. These firewalls by default might block incoming network discovery and file and printer sharing traffic. If a firewall product other than Windows Firewall is being used, Windows Vista displays an information message above the Sharing and Discovery section of the Network and Sharing Center window. Figure 11 shows an example.

Figure 11: The information message in the Network and Sharing Center window when Windows Firewall is not being used

If you are using a firewall other than Windows Firewall, you must configure the firewall to allow incoming network discovery and file and printer sharing traffic.

For network discovery of other computers running Windows Vista, you must allow the following incoming Transmission Control Protocol (TCP) and User Datagram Protocol (UDP) traffic:

UDP 3702
TCP 5357
TCP 5358

For network discovery of computers running Windows XP and for file and printer sharing for both Windows Vista and Windows XP, you must allow the following incoming traffic:

UDP 137
UDP 138
TCP 139
TCP 445

For network discovery of network devices, you must allow the following incoming traffic:

UDP 1900
TCP 2869

For more information about how to configure your third-party firewall to allow incoming traffic, see the documentation for your third-party firewall.

Cannot Authenticate to a Shared Folder from a Windows Vista-based Computer

If you cannot authenticate when accessing a shared folder from a Windows Vista-based computer on a computer running a version of Windows prior to Windows XP (such as Windows 98 or Windows 95), a computer running an operating system other than Microsoft Windows, or to a network device, the cause might be a mismatch in the configured support for NTLM 2, an authentication protocol that is used for file and printer sharing connections. By default, Windows Vista is configured to use NTLM 2.

To resolve this issue, you can do one of the following:

Enable NTLM 2 support on the computer or device to which the Windows Vista-based computer is attempting to connect. For computers running versions of Windows prior to Windows XP, see How to enable NTLM 2 authentication. For computers running operating systems other than Windows, see the operating system's product documentation for information about how to enable NTLM 2 support. For network devices, see the device's product documentation or Web site for information about how to enable NTLM 2 support or download a firmware update that supports NTLM 2. This is the preferred solution.
If you cannot update the computers running operating systems other than Windows or your network devices to support NTLM 2, change the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\LMCompatibilityLevel registry value on the computer running Windows Vista to 1. This solution is not recommended.

Folder Security and Share Permissions

Folder security defines what users can do within folders. To configure folder security, right-click a folder in the Computer window, and then click the Security tab. Share permissions must match the folder security for access to a share to be successful. For example, if the share permissions allow access to both Bob and Sally, but the folder security only allows Bob, then Sally will not be able to access the share. You must add the Sally account to the folder security settings.

For another example, when a user disables password protected sharing, the default share permissions for new shares include the Everyone group. If the folder security specifies access for the Users group, another computer that is not using an account on the sharing computer will not be able to access the share. Another computer that is not using an account on the sharing computer will be using the Guest account, which is not a member of the Users group. To allow this other computer to access the share, you must add the Guest account to the folder security settings.

Administrative Shares and Sharing the Root of a Drive

Windows XP by default created administrative shares for the root folders of the fixed drives of the computer. For example, for the root of the C: drive on the computer named BobPC, Windows XP automatically shared \\bobpc\c$. The “$” at the end of the share name means that the share name will not appear in the list of shares. For computers running Windows Vista that are members of a workgroup, these administrative shares exist but are blocked for network access for security reasons. You can create your own shares to share your drives from the root of the drive, but Microsoft highly recommends that you share only the folders that you need to, rather than the entire drive.

To share the root of a drive, do the following:

Right-click the drive in the Computer window, and then click Share. Windows Vista displays the properties for the drive with the Sharing tab selected.

The Share button and the File Sharing dialog box are not available.
Click Advanced Sharing.
In the Advanced Sharing dialog box, click Share this folder and specify the share name, permissions, and other settings as needed.
Click OK, and then click Close.

Because the “driveletter$” shares already exist, you cannot share the root of a drive with the name “driveletter$”. However, you can share it with another name, such as “driveletter”. For example, you cannot share the root of your C: drive as “C$”, but you can share it as “C”.

Viewing Shares Without the Network Window

If the computer that you are trying to access for a shared folder or printer does not appear in the Network window, you can try to view the shares of the computer by clicking Start, typing \\ ComputerName , and then pressing Enter.

For example, to view the shares of the computer named BobPC, click Start, type \\bobpc, and then press Enter.

Getting Additional Help With Questions About Windows Vista File and Printer Sharing

For help in answering a specific question about Windows Vista file and printer sharing that is not described in this article, submit your question to the Discussions in Windows Vista Networking and Sharing newsgroup.

How to Share Files and Folders between two Computers with Vista using Wireless or Wired Network?

2008-08-27T06:06:00.001-07:00

Long back I wrote the post how to share internet connection with another computer using vista. That helps to understand how to share internet between computers if you don’t have a wireless router or a hub and if you have only one access point at home. Some of the commenter’s were asking how to share folders between computers.

So how to share files and folders in a wireless network at home or work?
Note: This method is applicable both to wired and wireless network in Windows Vista.

First you need to access Network and Sharing Center. Go to Control Panel -> Network and Internet -> Network and Sharing Center. You can also access it by clicking the network icon on the tray from the taskbar and then click Network and Sharing Center.

Here you will see the network you are connected currently and under that you find the title Sharing and Discovery. Turn on Network Discovery, File Sharing and public folder sharing. Make sure you do the same thing in the computer that you want to share files with.

To see the computers available on your network, click Network from Start or click View Network Computers and Devices from Network and Internet at Control Panel. Here you will be able to see your computer and other computers that are connected to this network with public file sharing mode.

Now, all the files that are in the public user are shared across the network. You can see these folders and files from C drive/users/public (or from the drive where windows is installed). To share a file you can just copy and paste it under the folder public.

Share files and folders from anywhere by changing its properties:
You can also share files and folders from anywhere by changing the sharing properties of the files and folders. To change its Properties, right click and click Properties. Go to Sharing tab and click Share.

Click the drop down menu and select Guest and click Add. Click Share at the bottom of the window and it will close.

By default, the guest will have view access and if you want to give access to full access or change, click Advanced Sharing from the Sharing tab and click Permissions. Select Guest and choose the permission setting you would like to give and click Ok.

Now you will see that folder under your PC apart from public in Network folder. To stop sharing these files, Click Sharing from the properties, Click share and click stop sharing.

Password Protection:
If you are sharing folders in a network where there are couple of computers and you would selectively share folders then you can opt for password protection. You can activate Password Protection from Network and Sharing Center. Now while accessing the shared folders from another computer, you need to use the User account and Password that is already there in your computer.

As a best practice, always turn off network discovery and file sharing after you are done with sharing.

Can't see external hard drive in Windows Explorer

2008-07-28T08:03:00.000-07:00

Problem : I am connecting an external hard drive (Acomdata 250G drive - pretty
standard) via USB to my HP laptop running Vista. I am able to see the device
listed under Disk Drives in the Device Manager. Drilling into Properties, I
see that the device is running properly and, having re-loaded the device
drivers, I have the most recent drivers.

The issue: I am unable to see the device listed in Window Explorer, and thus
I can't drill into the folders to get at the content.

Any help is greatly appreciated.

---------------------------------------------------------
Solution

Right click Computer, choose Manage, expand Storage, and choose Disk
Management.

Click to unmanage hard drive , assign drive and format.

Remove RVHOST.EXE

2008-07-24T20:57:00.000-07:00

Follow these steps to completely remove this worm:
1-Start>RUN
2-Write CMD
3-In CMD,write "Taskkill /T /IM "RVHOST.EXE"
then open a Notepad Start>RUn
4-Write "NOtepad"
5-in notepad paste these lines below
On Error Resume Next
Set shl = CreateObject("WScript.Shell")
Set fso = CreateObject("scripting.FileSystemObject")
shl.RegDelete "HKEY_CURRENT_USER\Software\Microsoft\Windows\Curr entVersion\Policies\System\DisableRegistryTools"
shl.RegDelete "HKEY_CURRENT_USER\Software\Microsoft\Windows\Curr entVersion\Policies\System\DisableTaskMgr"
shl.RegDelete
6- save the notepad as "Enable.VBS" and the change the file type to "All"
7-double click "Enable.VBS"
8-now Start>Run. Write "Regedit" in it and press enter
9- Do the following changes in Registy

In the left panel, double-click the following:
HKEY_CURRENT_USER>Software>Microsoft>
Windows>CurrentVersion>Run
In the right panel, locate and delete the entry:
Yahoo Messengger = "%System%\RVHOST.exe"
(Note: %System% is the Windows system folder, which is usually C:\Windows\System on Windows 98 and ME, C:\WINNT\System32 on Windows NT and 2000, and C:\Windows\System32 on Windows XP and Server 2003.)-->
Removing Other Entry from the Registry

Still in Registry Editor, in the left panel, double-click the following:
HKEY_CURRENT_USER>Software>Microsoft>Windows>
CurrentVersion>Policies>Explorer
In the right panel, locate and delete the entry:
NofolderOptions = "1"
Restoring Modified Entries from the Registry

Still in Registry Editor, in the left panel, double-click the following:
HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows NT>
CurrentVersion>Winlogon
In the right panel, locate the entry:
Shell = "Explorer.exe RVHOST.exe"
Right-click on the value name and choose Modify. Change the value data of this entry to:
Explorer.exe
In the right panel, double-click the following:
HKEY_LOCAL_MACHINE>SYSTEM>CurrentControlSet>
Services>Schedule
In the right panel, locate the entry:
NextAtJobId = "2"
Right-click on the value name and choose Modify. Change the value data of this entry to:
1
Close Registry Editor.
Deleting the Malware File(s)

Right-click Start then click Search... or Find..., depending on the version of Windows you are running.
In the Named input box, type:
AT1.JOB
In the Look In drop-down list, select My Computer, then press Enter.
Once located, select the file then press SHIFT+DELETE.
Note: AT1.JOB is a Sheduled Task so you can find this in C:\WINDOWS

The Best Windows Antivirus – 2008 Editions

2008-07-21T21:34:00.000-07:00

By: Marius Oiaga, Technology News Editor

Enlarge picture

The search for the best antivirus of 2008 has advanced one step further, courtesy of security solution testing lab AV-Test.org. All the best available 2008 security suite editions were thrown against in excess of 1.1 million samples of malicious code on an arena of Windows XP SP2. At this point in time, with XP SP3 just around the corner, the results released by AV-Test are also valid for the third and final service pack of Windows XP, but not the same is valid for the Windows Vista (plus Service Pack 1) platform.
"A comprehensive review should not only concentrate on detection scores of the on-demand scanner, as this would give a user only a very misleading and limited view of the product's capabilities," explained AV-Test 's Andreas Marx as quoted by Sunbelt Software. "The different detection types have to be taken together to make a valid statement about the whole detection mechanisms: neither static nor proactive detection mechanisms alone can catch all malware."

Essentially, the tests run were designed to evaluate a wide range of the aspects that together build the puzzle of a bulletproof security solution. The antivirus programs had to deal with on-demand detection of malware samples, adware and spyware, but also of rootkits, and even the proactive detection capabilities for unknown malicious code. And on top of this, the analysis took into consideration factors like performance, the volume of false positives generated, response times, and cleaning capabilities.

Enlarge picture

"It is important to have good heuristics, generic signatures and dynamic detection and prevention in place to be able to handle new unknown malware without any updates. It is crucial to have good response times, to be able to react to new malware, when proactive mechanisms fail to detect them. It is essential to have good static detection rates, to be able to handle already known malware, even before it is executed on a system. So comparing single features makes less sense, as we should think about the fact that a user has not bought an AV product to find some viruses and report them, but he has actually bought a service to keep his system malware-free," Marx added.

The rankings with the best Windows antivirus for this year, considering just the 2008 editions that were tested by AV-Test, and in terms of malware, adware and spyware detection, have WebWasher-GW (with detection rates for malware of 99.85% and for adware and spyware of 99.86%), AVK (G Data) (99.91% - 99.85%), TrustPort (99.63% - 99.82%)and AntiVir (Avira) (99.32% - 99.15%)in the first four positions.

Enlarge picture

The list continues with the remaining antivirus tested out of the total 30 security solutions. The detection rates for malware, as well as adware and spyware are for Trend Micro 98.72% - 95.14%; Sophos 98.10% - 98.83%; Nod32 (Eset) 97.85% - 96.33%; Microsoft 97.79% - 91.50%; BitDefender 97.77% - 98.77%; Kaspersky 97.17% - 92.02%; Norton (Symantec) 95.70% - 98.62%; Panda 95.62% - 95.57%; McAfee 95.58% - 98.56% etc.

Sophos was quick to celebrate its victory over rivals Symantec and McAffe. "Sophos continues to innovate and improve the techniques used to protect against viruses, Trojans, spyware, adware and other threats. It's particularly gratifying to see Sophos praised for being 'very good' at detecting unknown malware," said Guy Edsall, product manager at Sophos. "Sophos received high scores across the board. Combining these excellent protection capabilities with Sophos's underlying philosophy of simple management has been the driver behind many companies switching from Symantec and McAfee to Sophos."

The results for the Anti-virus comparison test of current anti-malware products, March 2008, are available via Sunbelt Software here, here, and here. With the original Excel spreadsheet from AV-Test up for grabs here.

Remove haha manually

2008-07-04T00:23:00.001-07:00

I got lot of email asking me on how to remove haha virus.. Before this i post a tool to remove this virus. That tools does work but only for a while. See here . So i decided to install haha virus on my virtual machine and figure out how to remove it manually. This is my method.
Firstly you have to install unlocker (Unlocker is an explorer extension that allows you with a simple right-click of the mouse on a file or folder to get rid of error message such as error ) download Unlocker latest version .The reason to install this software is to kill instantly the virus process that running on your machine.

Then you go to start>search> type haha.js

After finished searching for the haha.js virus (under search option please enable search including hidden system file) Please ask me in the comment if you dont understand this.

Select all haha.js file by CTRL+A. Right click and remove it with unlocker. Remove the all haha.js at the same time. Dont remove them one by one.

Finished deleting the virus using Unlocker go to start>run> type in regedit . Inside regedit navigate to edit>find next (type haha.js) hit find next. Just delete the registry that you found related to haha.js. Repeat the find next process until theres no more haha.js file in your pc. If you have problem please state them in the comment. This method really worked. I have done it to a lot of pc that infected with this Virus.

How to fix problem that cause by haha.js virus " can not find script file 'c:\haha.js "

2008-07-04T00:18:00.000-07:00

Someone asking me how to fix problem cause by the Haha.js viruses or mallware. When you want to open your hard disk or pendrive you will get this error message

hi i cant open my acer(C:) and my local disk(D:) directly..it says 'can not find script file 'D:haha.js'.... so wat shld i do? the same step as above o wat? pls help!!! dis is my email-suqwerty@yahoo.com...
thank you!

Before you proceed please consider to update your antivirus protection first. My recommeded antivirus is mcafee antivirus, antivirus norton, or you should update your antivirus programs. This is the steps to solve this problem. I am not a good writer so i show the picture tutorial. Its much more easier. I hope you will like it.

First Step
Go to start > control panel. Inside the control panel click folder options. In the folder option window go to view and do this. 1. Untick the Hide protected operating system files 2. Choose to show the hidden files and folder. See pics. ( just ignore the warning message) Remember to undo this after you finished doing the last step!!.

Second step
Go to my computer. Right click on your infected hard drive and click explore.

Third step
Find this file "Autorun" and delete that file

Last step
Undo the first step to get back your normal setting and restart your computer. Good luck! If you like this post please subscribe to my feed here. or feel free to give your comment. This method can be applied only when you already remove Haha.js viruses using antivirus programs.

How to Remove VBS.Solow.G:

2008-06-30T19:57:00.000-07:00

1. Temporarily Disable System Restore (Windows Me/XP).
2. Update the virus definitions.
3. Reboot computer in SafeMode
4. Run a full system scan and clean/delete all infected file(s)
5. Delete/Modify any values added to the registry.
Navigate to and delete the following registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\”winrun.dll” = “%Windìr%\winrun.dll.vbs”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\”officescan” = “C:\Documents and Settings\All Users\Menu Demarrer\Programmes\Demarrage\officescan.vbs”

Restore the following registry entry to its previous value, if required:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\”Window Title” = “// ;) anna I Liebe YOU ==> MILK@3|_!!!”

6. Exit registry editor and restart the computer.
7. In order to make sure that threat is completely eliminated from your computer, carry out a full scan of your computer using AntiVirus and Antispyware Software. Another way to delete the virus using various Antivirus Program without the need to install can be done with Online Virus Scanner.

How to remove Antivirus 2008

2008-06-19T00:35:00.000-07:00

How to remove Antivirus 2008

What this programs does:

Antivirus 2008 is a rogue anti-malware program that displays
false results and requires you to first purchase the software before you can
remove anything. When installed, Antivirus 2008 will scan your computer and
list a variety of infections found on your computer. When most anti-malware
programs, and even rogue ones, scan your computer they will list the infections
as specific registry keys or files. Antivirus 2008 moves away from this tradition
and instead is very general about what is infected. For example, you can see
in the scan results screenshot below that Antivirus 2008 states there are a
variety of infections in the C:\Windows folder. What it does not tell you are
the specific files that are bad. Maybe it does this because all of this programs
results are fake and they are just trying to scam you into purchasing the software?

Below are screen shots of Antivirus2008 and one of its false positives.

Antivirus 2008 Screenshot

Antivirus 2008 False Positive

This guide will walk you through removing the Antivirus 2008 program.

Threat Classification:

Information on Rogue Programs

Advanced information:

View Antivirus 2008 files.

View Antivirus 2008 Registry Information.

Tools Needed for this fix:

Malwarebytes' Anti-Malware

Symptoms that may be in a HijackThis Log:

O4 - HKCU\..\Run: [Antivirus] C:\Program Files\Antivirus 2008\Antvrs.exe

O4 - HKCU\..\RunOnce: [3P_UDEC] "C:\Documents and Settings\forensics\Desktop\AtnvrsInstall.exe" 0;C;

Guide Updates:

04/30/08 - Initial guide creation.

Automated Removal Instructions for Antivirus 2008 using Malwarebytes' Anti-Malware:

Print out these instructions as we will need to close every window that
is open later in the fix.

Download Malwarebytes' Anti-Malware, or MBAM, from the following location
and save it to your desktop:

Malwarebytes' Anti-Malware Download Link
Once downloaded, close all programs and Windows on your computer, including
this one.
Double-click on the icon on your desktop named Download_mbam-setup.exe.
This will start the installation of MBAM onto your computer.
When the installation begins, keep following the prompts in order to continue
with the installation process. Do not make any changes to default settings
and when the program has finished installing, make sure you leave both the
Update Malwarebytes' Anti-Malware and Launch
Malwarebytes' Anti-Malware checked. Then click on the Finish
button.
MBAM will now automatically start and you will see a message stating that
you should update the program before performing a scan. As MBAM will automatically
update itself after the install, you can press the OK button
to close that box and you will now be at the main program as shown below.

On the Scanner tab, make sure the the Perform
quick scan option is selected and then click on the Scan
button to start scanning your computer for Antivirus 2008 related
files.

MBAM will now start scanning your computer for malware. This process can
take quite a while, so we suggest you go and do something else and periodically
check on the status of the scan. When MBAM is scanning it will look like the image below.

When the scan is finished a message box will appear as shown in the image
below

Antivirus2008

You will now be back at the main Scanner screen. At this point you should
click on the Show Results button.
A screen displaying all the malware that the program found will be shown
as seen in the image below.

You should now click on the Remove Selected button to remove
all the listed malware. MBAM will now delete all of the files and registry
keys and add them to the programs quarantine.
When MBAM has finished removing the malware, it will open the scan log and
display it in Notepad. Review the log as desired, and then close the Notepad
window.
You can now exit the MBAM program.

Your computer should now be free of the Antivirus2008 program. If your current anti-virus solution let this infection through, you may want to consider purchasing the PRO version of Malwarebytes' Anti-Malware to protect against these types of threats in the future.

If you are still having problems with your computer after completing these instructions, then please follow the steps outlined in the topic linked below:

Associated Antivirus 2008 Files:

c:\Program Files\Antivirus 2008

c:\Program Files\Antivirus 2008\Antvrs.exe

c:\Documents and Settings\forensics\Start Menu\Antivirus

c:\Documents and Settings\forensics\Desktop\antvrs.exe

c:\Documents and Settings\forensics\Application Data\Antivirus

c:\Documents and Settings\forensics\Start Menu\Antivirus\Antivirus 2008.lnk

c:\Documents and Settings\forensics\Start Menu\Antivirus\Uninstall Antivirus.lnk

c:\Documents and Settings\forensics\Local Settings\Temporary Internet Files\Content.IE5\0L6FS9QR\instlog[1].htm

c:\Documents and Settings\forensics\Local Settings\Temporary Internet Files\Content.IE5\IQJ9X5GB\antvrs[1].exe

Associated Antivirus 2008 Windows Registry Information:

HKEY_CURRENT_USER\Software\Antivirus

HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Antivirus"

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce "3P_UDEC"

Ultimate Antivirus 2008 Automatic Removal Instructions

2008-06-18T00:03:00.000-07:00

In non-techie terms: Ultimate Antivirus 2008 is not much different from other rogue anti-spyware programs that may be installed on your computer. Ultimate Antivirus 2008 may be spread through Trojan infections or malicious websites. Ultimate Antivirus 2008 is in no way related to Norton’s Antivirus 2008. Hackers use the similar name to confuse computer users and ultimately get them to waste their money on the Ultimate Antivirus 2008 program. Do not download or purchase Ultimate Antivirus 2008 under any circumstances.

Aliases: Ultimate Antivirus 2008, Ultimate Antivirus2008, UltimateAntivirus2008, XP Antivirus.

Ultimate Antivirus 2008 Automatic Removal Instructions

This automatic removal method is for non-techie computer users. If you’re too lazy to learn about spyware removal or how to access sensitive files in your computer, then this is the method for you.
Before you start: Print or bookmark these instructions because you’ll have to reboot into Safe Mode. Also back up your computer in case you make a mistake.

Download and save SmitFraudFix to your desktop.
Restart your computer in Safe Mode (how to do safe mode). Once the
desktop appears, double click on the SmitfraudFix.exe on your desktop.
After the credits screen, you’ll see a menu. Select the option number 2, which is ‘Clean (safe mode recommended)’, and then
press Enter to delete infect files.
SmitFraudFix will begin cleaning your computer and take a series of cleanup processes. When the process is over, it will automatically begin the Disk Cleanup program.
Once the Disk Cleanup program is complete, you will be prompted with the message ‘Registry cleaning - Do you want to clean the registry’. Answer Y (Yes) and hit Enter. Reboot your computer.
SmitFraudFix will now check if wininet.dll is infected. SmitFraudFix will ask you whether to replace the infected file (if there’s any) ‘Replace infected
file?’ Answer by typing Y (Yes) and hit Enter.
Reboot your computer to complete the cleaning process.
After reboot, a Notepad screen may appear containing a log of all the files
removed from your computer. If it doesn’t appear, a file will be created called
rapport.txt in the root of your drive, (Local Disk C:).
Restart your computer in Safe Mode (how to do safe mode).
Go to C:\Windows\Temp, click Edit, click Select All, press DELETE, and then
click Yes to confirm that you want all the items to go to the Recycle Bin.
Go to C:\Documents and Settings\[LISTED USER]\Local Settings\Temp, click Edit, click Select All, press DELETE, and then click Yes to confirm that
you want all the items to go to the Recycle Bin.
Reboot your computer back to normal mode. Go to Windows Update and download all critical updates.

For professional : Ultimate Antivirus 2008 Manual Removal Instructions

This manual removal method is for techie computer users. Ultimate Antivirus 2008 manual removal may be difficult and time consuming to remove. There’s no guarantee that Ultimate Antivirus 2008 will be removed completely. So read the Ultimate Antivirus 2008 removal steps carefully and good luck.
Before you start: Close all programs and Internet browsers. Also back up your computer in case you make a mistake and your computer stops working.

Uninstall Ultimate Antivirus 2008 Program
Click on Start > Settings > Control Panel > Double-click on Add/Remove Programs. Search for and uninstall Ultimate Antivirus 2008 if found.
To stop Ultimate Antivirus 2008 processes (view process removal steps)
Go to Start > Run > type taskmgr. The click the Processes tab and you’ll see a list of running processes.
Search and stop these Ultimate Antivirus 2008 processes:
UltimateAntivirus2008.exe
Antvrs.exe
For each unwanted process, right-click on it and then select “End task”.
To Unregister Ultimate Antivirus 2008 DLLs (view DLL removal steps)
Search and unregister these Ultimate Antivirus 2008 DLLs:
shlwapi.dll
wininet.dll

To locate the Ultimate Antivirus 2008 DLL path, go to Start > Search > All Files or Folders. Type Ultimate Antivirus 2008 and in the Look in: select either My Computer or Local Hard Drives. Click the Search button.
Once you have the Ultimate Antivirus 2008 DLL path, go to Start and then click on Run. In the Run command box, type cmd, and then click on OK.
To locate the exact DLL path, type cd in order to change the current directory. To display the contents of the directory, use the dir command. To remove the DLL file type regsvr32 /u FILENAME.dll (FILENAME is the name of the file that you want to unregister).
To unregister Ultimate Antivirus 2008 registry keys (view registry keys removal steps)
Go to Start > Run > type regedit > press OK.
Edit the value (on the right pane) by right-clicking on it and selecting the Modify option. Select the Delete option.
Search and delete these Ultimate Antivirus 2008 registry keys:

HKEY_CURRENT_USER\Software\Antivirus
HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus
HKEY_CURRENT_USER\Software\UltimateAntivirus2008
HKEY_LOCAL_MACHINE\SOFTWARE\UltimateAntivirus2008

If your homepage has been changed, go to Start > Control Panel > Internet Options > click on the General > click Use Default under Home Page. Add the your desired default homepage, then click Apply > click OK. Open a new web browser to check that you have your desired default homepage.
Remove Ultimate Antivirus 2008 Directories.
To find Ultimate Antivirus 2008 directories, go to Start > My Computer > Local Disk (C:) > Program Files > Show the contents of this folder.
Search and delete the following Ultimate Antivirus 2008 directories:
C:\ProgramFiles\Ultimate Antivirus 2008

Right-click on the Ultimate Antivirus 2008 folder and select Delete.
A message will appear saying ‘Are you sure you want to remove the folder Ultimate Antivirus 2008 and move all its contents to the Recycle Bin?’, click Yes.
Another message will appear saying ‘Renaming, moving or deleting Ultimate Antivirus 2008 could make some programs not work. Are you sure you want to do this?’, click Yes.
To remove Ultimate Antivirus 2008 icons on your Desktop, drag and drop them to the Recycle Bin.

You’ve completed the Ultimate Antivirus 2008 manual removal instructions!
I hope this article has helped you solve your Ultimate Antivirus 2008 problems. If you want to contribute to this article, post your comment below.

Disclaimer: This article is for educational purposes. By using this information you agree to be bound by the disclaimer. There’s no guarantee that Ultimate Antivirus 2008 will be completely removed from your computer. Seek professional help if your computer continues to experience problems.

I Don’t Hate Firefox But Use IE or Else, orkut is banned you fool!!!

2008-05-26T21:59:00.000-07:00

February 22nd, 2008 · by David Bradley

Have you ever seen the following message when you open the Mozilla or Firefox browser?

I DNT HATE MOZILLA BUT USE IE OR ELSE

Several Sig Fig readers have contacted me recently because they have seen this message and other similar popup

Solution

Well, if you see that or a similar message, don’t panic. Calmly and steadily, save any open files, shut down open applications, and reboot your PC into safe mode. From there run your (hopefully up to date virus checker). You will most likely then discover that you have been infected with “w32.usbworm”.

Other symptoms include messages telling you that Orkut and Youtube are inaccessible. You might see, for example, a message box that says:

orkut is banned you fool!!!

Those messages are all symptoms of a worm burrowing into your system.

Here’s a nice cartoony video showing the damage worms, viruses, and trojans might do to you and your data.

I.E and all other application windows and folders close suddenly abnormally. Is this a malware?

2008-05-26T21:51:00.000-07:00

Problem:

I have tried searching on my pc with the problem but everthing just closes. I don't know how it got there but everthing i work on and all windows just close leaving me on my desktop. Help very much appreciated. Thankyou

Solution:

The first thing to do is Check it out and see. Assuming you have a PC and not a Mac. Turn off your Windows firewall and download a good free one (I use Comodo Pro 32 bit. you should use 64 bit if you run Vista) This can then be set to scan for malware. Then get some good free antivirus and anti spyware downloads. (I use AVG8 for virus and Spybot Search and Destroy and Spyware Blaster for spyware) then get a good free reg clener (I use C Cleaner) If you run scans with all of these(One at a time. Never multi scan or multi update. Always one program at a time) and you still have the problem I would then carry out a system restore to a date before the problem started. If you don't know how to do this, easy to follow instructions can be googled.
Good luck.

My laptop/pc has been infected by the autorun.vbs virus

2008-05-26T21:43:00.000-07:00

My laptop has been infected by the autorun.vbs virus

I can't open my C:/ and also D:/

Everytime i tried it said cannot find autorun.vbs

The words on "Open" and "Explore" when i right-click on my C:/ and D:/ became un-readable words

Please i really need help here because my AVAST antivirus cant remove it.

Thanks

solution:

try Flash_Disinfector.exe. If you do that please connect disconnect from the internet and put any Flashdrives you have in the computer

the user has not been granted the requested logon type at this computer.

2008-05-23T05:41:00.001-07:00

We have a network of three computers at work. One computer is wired to the network via D link. This computer runs XP Pro. Both of the other computers run XP Home and are connected by wireless. One is a laptop. The laptop is able to access both of the other computers. The desktop computers are not able to access the laptop. The error message that comes up is: name is not \\computer accessible. You might not not have have permission to use this network resource. Contact the admin of this server to find out if you have access permission. Login failure : the user has not been granted the requested logon type at this computer.

The laptop has XP sp2. File and printer sharing has been checked. It is in the same workgroup and has been assigned a dns, a gateway and an ip address. Any help on this would be greatly appreciated!

solution:

Go to start, run, and type:

gpedit.msc

Go to computer Configuration>Windows Settings>Security Settings>Local Policies, and highlight user Rights Assignment.

The key in question on the right will be the "Deny access to this comptuer from"

Make CERTAIN the Guest account is not in there.

There is also Access this computer from the network... key, but that one usually isn't the problem

Disable Spyware

2008-05-22T18:44:00.000-07:00

articel from symantec

Name: Disable Spyware

Version: 3.2.0.0

Publisher: DisableSpyware.com

Risk Impact: Medium

Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Vista, Windows XP

Behavior
The program must be manually installed. It can be downloaded from the following location:
DisableSpyware.com

The program reports false or exaggerated system security threats on the computer.

The user is then prompted to pay for a full license of the application in order to remove the errors.

Installation
When the program is executed, it creates the following folder:
%UserProfile%\Application Data\Microsoft\Installer

It also creates the following files:

%UserProfile%\Desktop\Disable Spyware Demo.lnk
%UserProfile%\Start Menu\Programs\Coding Elite Software\Disable Spyware Demo\Disable Spyware Demo.lnk
%UserProfile%\Start Menu\Programs\Coding Elite Software\Disable Spyware Demo\DisableSpyware.com.url
%UserProfile%\Start Menu\Programs\Coding Elite Software\Disable Spyware Demo\Readme-Help.lnk
%UserProfile%\UserData\[RANDOM NAME]\[RANDOM NAME][1].xml
%ProgramFiles%\Disable Spyware Demo\DisableSpywareDemo.exe
%ProgramFiles%\Disable Spyware Demo\help.chm
%ProgramFiles%\Disable Spyware Demo\Localization.txt
%ProgramFiles%\Disable Spyware Demo\Localization.xml
%ProgramFiles%\Disable Spyware Demo\riched32.dll
%ProgramFiles%\Disable Spyware Demo\RunAtStartupTool.exe
%Windìr%\Installer\[RANDOM NAME].msi
%System%\actskn43.ocx
%System%\Memman.vxd
%System%\skinboxer43.dll
%UserProfile%\Application Data\AntiSpywareDAT\BlockedCookies.dat
%UserProfile%\Application Data\AntiSpywareDAT\date.dat
%UserProfile%\Application Data\AntiSpywareDAT\DirectoryDefinition.dat
%UserProfile%\Application Data\AntiSpywareDAT\ENoSignature.dat
%UserProfile%\Application Data\AntiSpywareDAT\ExeDefinition.dat
%UserProfile%\Application Data\AntiSpywareDAT\FileDefinition.dat
%UserProfile%\Application Data\AntiSpywareDAT\RegistryDefinition.dat
%UserProfile%\Application Data\AntiSpywareDAT\Safety.dat
%UserProfile%\Application Data\AntiSpywareDAT\Scan_Log.txt

Next, the program creates the following registry entry/ies so that it executes whenever Windows starts:

It also creates the following registry subkeys:

HKEY_CURRENT_USER\Software\VB and VBA Program Settings\Disable Spyware
HKEY_LOCAL_MACHINE\SOFTWARE\Coding Elite
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2122F7FF-DF7B-4B6E-9E3B-19656320B2D2}

How to remove??

Disable System Restore (Windows Me/XP).
Update the virus definitions.
Run a full system scan.
Delete any values added to the registry.

and for step 4

To delete the value from the registry
Important: Symantec strongly recommends that you back up the registry before making any changes to it. Incorrect changes to the registry can result in permanent data loss or corrupted files. Modify the specified subkeys only.

Click Start > Run.
Type regedit
Click OK.

Note: If the registry editor fails to open the threat may have modified the registry to prevent access to the registry editor. Security Response has developed a tool to resolve this problem. Download and run this tool, and then continue with the removal.
Navigate to and delete the following registry subkeys:
- HKEY_CURRENT_USER\Software\VB and VBA Program Settings\Disable Spyware
- HKEY_LOCAL_MACHINE\SOFTWARE\Coding Elite
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2122F7FF-DF7B-4B6E-9E3B-19656320B2D2}
Exit the Registry Editor.

Windows cannot access the specified device,path or file

2008-05-19T19:00:00.000-07:00

Hi
I have a computer using windows xp with 2 gig of ram and i am starting to get the following message up,more so if im copying to disk. The message is :-
Windows cannot access the specified device,path or file. You may not have the appropiate permission to access the item, Also get this message up when i try to start a game off. checked for a virus done the safe mode way as well,also noticed when i get up my explorer i try to access a site or page and it freezes for a few seconds before it allows me to go to the page, Any help on this especially the message would be most greatfull
thanks,
peter

solution
=============

try this one

XP_TWEAKUI

or download AVG

SigmaTel - Device Object not present, restart the system and run setup again."

2008-05-19T17:09:00.000-07:00

SigmaTel driver (and I tried three different ones) for my computer, I receive the error message "Device Object not present, restart the system and run setup again."

solution

easy, just update your windows,

Tak boleh Open Folder - Keluar Open With / "Can'tOpen folder with double click

2008-05-13T06:02:00.000-07:00

It's coz of virus/worm. try out this application.

disebabkan oleh worm, cuba application ini.
harap dapat membantu anda

download:
download here

Print Spooler service is not running

2008-05-05T18:48:00.000-07:00

Do the following:
Start -> Run -> services.msc /s
Then
Scan down to Print Spooler, right click, click on Start

The Print Spooler services should start and you will have printing functions restored. At this point, you should also be able to add printers.

Anda ada masalah

2008-05-01T19:47:00.000-07:00

Anda anda masalah komputer, boleh share dengan saya di sini, kita cari jalan penyelesaian bersama , dan harap-harap dapat membantu orang lain juga.

Sila masukkan pertanyaan anda pada comment.

Sharing Berserta Security Partition dan Folder

2008-05-01T05:20:00.000-07:00

Tutorial hari ini saya ingin mengajak anda untuk sama-sama belajar bagaimana cara untuk sharing partition dah folder disamping buat password untuk akses melalaui network.Kaedah ini amat berguna jika ingin sharing file dengan orang lain dalam network yang sama.Sebagai contoh kalau anda ingin sharing file yang bersaiz besar dengan kawan satu pejabat tanpa menggunakan pendrive , portalbe hardisk dan cd.Kaedah ini juga menjimatkan masa kerana tidak pergi menyerahkan file tersebut secara manual.

Panduan ini saya tulis berpandukan kepada Windows XP.Namun begitu rujukan ini juga boleh digunakan untuk version Windows lain kerana kaedah settingnya lebih kurang sama.

Sharing Partition dan Folder Tanpa Password

Klik kanan mouse pada partition atau folder.
Klik Sharing and Security.
Klik pada “If you understand the risk but still want to share the root of the drive,click here”.
Tip pada Share this folder on the network.
Tip pada “Allow network users to change my file” jika ingin memberi kebenaran untuk user ubah file tersebut.
Klik Apply dan OK.

Sharing Partition dan Folder Ada Password

Klik My Computer.
Klik Tools dan Folder Options.
Klik View dan buang tip pada “Use simple file sharing” yang terdapat dalam “Advanced settings.
Klik Apply dan OK.
Seterusnya klik kanan mouse pada partition atau folder.
Klik Sharing and Security.
Tip pada “Share this folder”.
Tip pada “Maximun allowed” untuk tiada had users.
Jika anda inginkan hanya seorang yang dapat akses folder tersebut dalam satu masa tip pada “Allow this number of users” dan masukkan nilai 1.
Klik Apply dan OK.

NOTA :

Pastikan akaun user Guest di “off” jika anda ingin sharing partition dan folder yang mempunyai password.
Jika pada partition dan folder keluar gambar tanggan ini bermakna anda telah berjaya membuat setting tersebut.
Untuk akses partition dan folder tersebut klik pad Run dan taip \\no ip computer.

Sudahkah Anda Update Windows ?

2008-05-01T04:19:00.000-07:00

Anda sentiasa update windows ? Jika belum update pastikan anda update windows bagi mengelak sebarang masalah lebih-lebih lagi serangan virus.Sebelum ini saya ada menulis tip-tip menghalang virus dan salah satu tipnya adalah topik yang saya akan huraikan pada hari ini.Sebelum saya terangkan cara-cara untuk update windows saya akan ceritakan serba sedikit tentang update windows.

Update perlu dilakukan bagi megemaskini kelemahan file-file windows yang ditemui hampir setiap minggu.Dengan adanya fungsi update windows kita dapat memperbaiki kelemahan file-file tersebut. Terdapat beberapa cara yang boleh digunakan untuk membuat pengemaskinian pada sistem operasi Windows. Microsoft telah membahagikan jenis kemaskini kepada 3 kategori iaitu Hotfix, Roll-up dan Service Pack.

Hotfix ialah program penampal bagi membaikpulih masalah secara spesifik. Contohnya, apabila sesuatu kelemahan dikenalpasti di dalam Windows XP ataupun aplikasi Microsoft (seperti Internet Explorer), Microsoft akan membangunkan satu hotfix untuk mengatasi masalah tersebut.

Kadang-kala Microsoft akan menggabungkan lebih dari satu hotfix menjadi satu pakej besar yang dipanggil sebagai roll-up. Ini biasanya dilakukan apabila terdapat banyak isu-isu keselamatan yang dikenalpasti dalam jangka masa waktu yang singkat.

Service Pack ialah program kemaskini Windows yang mengandungi penyelesaian kepada masalah dan penambahan fungsi-fungsi baru yang melibatkan perubahan drastik kepada sistem. Ini termasuklah membaikpulih kerosakan serta menampal kelemahan-kelemahan sekuriti.Service Pack juga menggabungkan kesemua hotfix-hotfix terdahulu di mana apabila Service Pack dipasangkan ke dalam sistem, anda tidak perlu lagi memasang hotfix kerana Service Pack telah pun mengandungi hotfix di dalamnya.

Semak Status Service Pack.
Klik kanan button mouse pada My Computer dan klik Properties.Under General akan ditayangkan komputer anda menggunakan service pack berapa.

Manual Setting Automatik Update Windows XP.

Windows XP = Start Menu – Setting – Control Panel – Performance and Maintenanc – System – Automatic Updates.
Tip pada automatic dan pilih hari dan masa automatic update seperti gambarajah dibawah.

Windows 2000 = ?
Windows Vista = ?

Sekiranya anda ingin update secara manual boleh layari laman web Microsoft untuk download service pack terkini.

Nota :

Service pack terkini bagi windows xp adalah service pack 3.
Service pack terkini bagi windows vista adalah Service pack 1.

Cepatkan masa komputer anda shut down?

2008-05-01T04:16:00.000-07:00

Ramai pengguna komputer termasuk saya selalu mengeluh mengapa komputer mengambil masa terlalu lama untuk shut down.”Malas a nak tunggu” secara tidak langsung anda meningalkan komputer tanpa off suis power.Inilah salah satu penyebab mengapa ramai yang tidak off power utama ke komputer.Sedangkan dengan off kan suis utama dapat memanjangkan hayat ~~manusia~~ peralatan komputer dan menjimatkan bil api elektrik.

Mengikut ilmu dan pengalaman saya , masa yang diambil oleh internet komputer untuk shut down bergantung kepada hardware dan aplication yang sedang runing/dijalankan.Jika komputer anda berkuasa ~~kuda~~ tinggi dari segi CPU dan RAM , masa yang diambil untuk shut down lebih laju dari komputer yang hardware berkuasa rendah.Aplication yang sedang running juga mempengaruhi masa yang diambil untuk shut down.Semakin banyak aplication sedang runing semakin lama masa diambil.

Hari ini saya akan kongsi satu tip untuk melajukan proses shut down komputer anda.Anda hanya perlu membuat sedikit perubahan pada setting di system registry.Boleh baca artikel sebelum ini jika belum mengenali apa itu system registry.Apa yang perlu anda lakukan adalah ubah value data pada AutoEndTasks dan WaitToKillAppTimeout.Double klik pada AutoEndTask dan ubah nilai 0 kepada 1000 dan value data WaitToKillAppTimeout dari 2000 kepada 5000.Selepas itu restart komputer anda dan lihat perbezaan.

Pesanan Penaja :

Install program yang berkenaan sahaja dan bersesuain dengan hardware komputer anda.
Anda tidak digalakkan mengubah system registry kerana kesilapan anda akan membawa padah.

Masalah Brontok?

2008-05-01T03:00:00.000-07:00

Ia adalah cacing komputer yang merebak melalui USB drive dan e-mel.

Apa tanda-tanda bahawa komputer anda telah dijangkiti brontok?

Tidak boleh memulakan regedit.exe
Komputer ‘restart’ dengan sendiri
Komputer anda menjadi lembab.

Cara untuk membuang brontok.

Muatturun Brontok Washer (jika anda menggunakan AVAST antivirus, fail (bw.exe) ini akan dikesan sebagai virus. Ini adalah kesan ‘false-positive‘ sahaja dan anda boleh abaikannya.
Muatturun Penawar Brontok oleh Syed Muhammad Syed Hussin. Anda boleh mencuba versi percuma dahulu namun sebagai ingatan versi percuma hanya akan membuang brontok daripada drive C:\ sahaja. Jika anda mempunyai lebih dari satu partition maka ia tidak akan membuang brontok daripada partition selain C sahaja. Harga aplikasi ini hanya RM10 sahaja!
Jalankan aplikasi BrontokWasher terlebih dahulu. Setelah segala proses brontok dihentikan barulah anda jalankan aplikasi Penawar Brontok.

Selamat mencuba

Macam mana nak Reinstall Windows

2008-05-01T02:53:00.001-07:00

Ini adalah suatu kaedah yang dicadangkan oleh Fred Langa untuk membolehkan anda memasang semula sistem operasi Windows XP anda dan kesemua perisian dan fail-fail anda tetap sedia ada.

Dalam pengalaman saya menggunakan kaedah ini, ia akan berjaya ANDAINYA sistem operasi anda ( yakni XP ) tidak rosak teruk hingga tidak ditemui oleh CD installer XP! ( Lihat pada Langkah ke 7 dalam kaedah yang dicadangkan )

Kaedahnya ialah seperti berikut:

Boot komputer anda menggunakan CD XP.
Pada skrin ke 4 anda akan melihat skrin seperti di sebelah. JANGAN pilih dulu pilihan kedua iaitu Recovery Console!
Apabila anda diperlihatkan skrin ini - barulah anda pilih Recovery Console dengan menekan kekunci R!
Anda perlu memasukkan Product Key untuk XP anda. Setelah selesai, sepatutnya anda akan dapati semua perisian yang anda pasang sebelum ini seperti Office dan sebagainya telah sedia ada, termasuklah fail-fail anda.
Jika skrin ke 7 tidak keluar, sebaliknya skrin seperti DI BAWAH pula yang muncul bermakna sistem operasi Windows anda sudah tidak dapat dibaiki dengan kaedah ini. Maknanya perlulah anda ‘backup’ fail-fail anda, pasang semula XP dari mula serta memasang kembali segala perisian anda.

Sila lawati InformationWeek untuk melihat dengan lebih jelas kaedah yang Fred Langa cadangkan itu.

Lupa Password User

2008-05-01T02:43:00.000-07:00

Trik ini berguna apabila kita lupa password akaun user.
Trik ini akan lebih efektif apabila teman2 sudah mengetahui cara membuat akun user

Ada beberapa cara untuk menghilangkan password akun user. Namun trik yg terkenal ialah dgn cara menekan tombol Ctrl alt Del secara bersamaan pada dilayar log in yaitu layar dimana kita diminta untuk memasukkan password pada akun user (user Account). Trik ini dapat digunakan dgn syarat akun administrator tidak dikunci. (makanya jangan ngunci akun administrator, karena terlalu paranoid.., fufufu/hehehe . red).

Langkah2nya:

Pada layar log in tekan tombol Ctrl Alt Del secara bersamaan sampai muncul layar log on to windows xp.
Di layar “Log On to windows xp” terdapat dua kolom, yang pertama kolom “user Account” dan yang kedua kolom “password”, maka isilah kolom “User Accounts” dengan mengetikkan kata administrator. Sedangkan pada kolom Password biarkan kosong alias tidak diisi. Kemudian klik OK. Kalau setelah klik ok berhasil Log on ke windows sebagai administrator maka itu artinya akun administrator tidak dikunci (alhamdulillah…, pengarang artikel sekarang dalam keadaan religious mode tidak gokil seperti biasanya uhuk uhuk mmm, red). Kalau gagal log on artinya akun administrator dikunci, artinya teman2 tidak bisa melanjutkan ke langkah selanjutnya…, kecuali memakai software active password changer.
Setelah teman-teman log on sebagai administrator, maka langkah selanjutnya ialah klik start, klik control panel, klik user accounts, kemudian klik akun yang terproteksi password, kemudian klik remove password. Mm,mmm, Mission Accomplished…, password akun user telah dihilangkan.., kemudian restart/reboot atau log off.

Missing Folder Options Item From Tools or View Menu - PC Troubleshooting Help Tips

2008-04-23T08:42:00.001-07:00

If you open My Computer or Windows Explorer there is a menu item called Folder Options under the Tools menu. You may find that you do not have this option or did have it and it disappeared. There are a few methods you can try to get it back.

Edit the registry to get the folder options back.
Go to Start, Run then type in regedit and click Ok.
Browse to the following key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
Find the NoFolderOptions key and change the vaule to 0 assuming you have this registry key.
Restart your computer.

Check your computer's policy to make sure its not disabled.
Click on Start, Run and type in gpedit.msc and navigate to the following location:
User Configuration\Administrative Templates\Windows Components\Windows Explorer.
On the right side, set Remove the Folder Options menu item from the Tools menu to Not Configured by double clicking it and setting the appropriate option.

Import a registry tweak\edit.
Download and import this registry tweak that will change settings in your registry.
Download the file.
Double click it and then click Run and then Yes when it asks if you want to import the file into the registry.

Computer Virus attacks HC Lab!

2008-04-23T08:34:00.000-07:00

There's a strain of computer virus that infects the file server and workstations of the computer laboratory of Hercor College, Roxas City, Capiz, Philippines. It hides itself by using the name ctfmon.exe (Ctfmon.exe monitors the active windows and provides text input service support for speech recognition, handwriting recognition, keyboard, translation, and other alternative user input technologies.) It was detected by TrendMicro 2007 as PE_VBAC.A virus and as MianCrypt.Gen virus by AVAST.

The said virus hides itself inside a folder named Recycled. The folder has a hidden/system/read-only attribute, that's why you can't see it if you will use the Search window. When your system is infected by the said virus, it infects every drive connected to your PC by dropping VCAB.DLL to the internet temporary folder and creating the CTFMON.EXE to folder Recyled & AUTORUN.INF to the root directory of every drive. That's why when you connect your USB sticks to the infected PC it will be infected immediately, the USB disks will be the new carrier for the virus. The program runs every time you start your computer because it copy itself in the Startup folder of the Start Menu. It also run every time your insert the infected USB disk and it triggers every time you Double-Click the infected drive (bcoz of the AUTORUN.INF). The virus infects .EXEs and .DLLs.

To check if your system is infected by the said virus without using an antivirus, do the following steps:

1. Go to command prompt.
2. Type CD\ in drive C to go the root directory
3. Type DIR /AH and press ENTER key. This will display all hidden files in your drive C
4. If you see a file AUTORUN.INF and a folder Recycled, then your system is infected.
5. Try doing this to your USB drive and check if your USB stick contains the same folder and AUTORUN.INF, if it does then your system is really infected.

To remove it download and install a trial version of Trendmicro and scan your system.

To manually remove it (but i'm not recommending it especially if the infections of Bacalid is very high try using an anti-virus such as McAfee or TrendMicro's PCCillin) follow the following steps (This is the step I take when i repair my computer without an internet connection. Note you should understand what you're about to do, you try it at your own risk!)

1. Boot your system in Safemode
2. Go to command prompt, in Drive C do the following commands.
3. Type -> ATTRIB -H -R -S AUTORUN.INF then press enter
4. Type -> DEL AUTORUN.INF then press enter
5. Type -> ATTRIB -H -R -S Recycled then press enter
6. In Windows Explorer in Safemode, remove the folder Recycled in drive C use Shift-Delete to delete the folder.
7. Repeat Step 3 to 6 for all drives of your system including the USB drive.
8. Search for CTFMON.EXE in your system using the Search of Windows found in Start Menu. If you find a file that is not located in C:\WINDOWS\SYSTEM32, delete it immediately. Dont forget to empty the recycle bin afterwards (Usually the virus will copy itself in the Startup folder of the Startmenu. Check if the file is present there and delete it then.)

To disable autorun of drives (i.e. everytime you double-click a drive or cd or usb, it is auto open) follow the following step:

1. Click Start->Run->type REGEDIT.EXE
2. Go to this key from the register HKEY_CURRENT_USER\Software\ Microsoft\Windows\CurrentVersion\Policies\Explorer
3. Look for the entry NoDriveTypeAutoRun, double click the entry
4. Type a new value : 0FF (Hex) for the NoDriveTypeAutoRun, this will turn off the AutoRun for all drives, and press ENTER
5. Reboot the system.

Good luck everyone!

Removing SCVHOST.exe or W32/YahLover.Worm.gen

2008-04-23T07:37:00.000-07:00

There’s a strain of computer virus/worm that hide itself using the name SCVHOST.EXE or SCVHOSTS.EXE, (don’t mistaken it as SVCHOST.EXE, it’s one of the vital programs of Windows, see the difference in spelling). It was detected as W32/YahLover.Worm.gen of McAfee Antivirus and as Win32/Autorun.R.worm by NOD32. This virus infects your computer by different means.

One is it install itself in autorun.inf in Open option of the AUTORUN. Once you double click it will run and start spreading itself to your system.

The other event that I observed is it copy itself through all the shared files of the computers on your network and install itself in the registry entries remotely using a GUEST account (through System:Remote).

Characteristic of the Virus

This virus/worm when blocks the task manager when you press Ctrl+Alt+Del to invoke the task manager
It blocks the registry (The worm change the registry to prevent running task manager and registry for harder detection).
It also restarts the computer when you try to go to the command prompt. (This is based on my experience on this worm/virus when I try to disinfect it manually)
It copy itself to different folders of drives and uses the name of the folder where it belongs. The copied virus/worm uses a FOLDER icon
According to McAfee it changes the configuration of your Yahoo Messenger (see McAfee info)
It autostart via registry keys Windows->Run and add itself to WinNT->WinLogon->Explorer.exe

To remove the virus manually, (try this it works with my computer but if you can’t try using an ANTI-VIRUS like McAfee or NOD32):

Boot your system in Safe Mode Command Prompt Only (Press F8 when your computer restarts, a menu will be shown and select the option)
After you log-in the command prompt will be opened (LOG-IN AS ADMINISTRATOR).
Type CD C:\WINDOWS\SYSTEM32 (assuming that your Windows System files are located at Drive C)
Type DIR /AH, this will display all hidden files of this folder. You will see the following file which is used by the virus to spread itself: AUTORUN.INI, BLASTCLNNN.EXE, and SCVHOST.EXE
Type ATTRIB -H -R -S SCVHOST.EXE
Type ATTRIB -H -R -S BLASTCLNNN.EXE
Type ATTRIB -H -R -S AUTORUN.INI
Type DEL SCVHOST.EXE
Type DEL BLASTCLNNNN.EXE
Type DEL AUTORUN.INI
Type CD\
Type ATTRIB -H -R -S AUTORUN.INF
Type DEL AUTORUN.INF

After removing the virus/worm files, it should be removed from the registry of your system.

From the command prompt type REGEDIT.EXE this will run the Registry Editor
From the registry, look for the key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run, you will see an entry Yahoo! Messengger (it’s spelled like this) with a value c:\windows\system32\scvhost.exe, Delete this entry.
Look again for the key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, there’s an entry named: SHELL, it has a value = Explorer.exe SCVHOST.EXE , don’t delete this entry!!! Just edit this entry and REMOVE the SCVHOST.EXE so that Explorer.exe will be the only value that will remain from this registry entry.

I’ve tried this steps and this works. You should try this if you’re only know how to edit registry entries. (try it at your own risk) Hope this will help you.

Removing Autorun.inf Virus & Viruses that uses Autorun.INF

2008-04-23T07:33:00.001-07:00

There are several viruses that uses the autorun.inf to spread itself such as the Bacalid (hides itself in ctfmon.exe) and the RavMon.EXE. These viruses set its file attributes to System+Hidden+Read-Only attributes so some anti-viruses will have a hard time detecting or finding them. These viruses save itself in the root directory of every available drives of the current infected computer and runs itself every time you Double-Click the drive. In USB Sticks and CDs that are infected by the virus runs automatically especially if drive autorun is enabled for the current drives (which is usually by default, autorun for drives are enabled).

Autorun.INF is usually used by CD Installers to autoplay their installations but Hard disks by default should not have AUTORUN.INF in the drive.

Now, it is possible that your computer is infected by those viruses if you try to display the content of the your computer through command prompt, using the dir /ah command. You will see the following window if you try this:

You will see from this window that drive C contains a hidden file autorun.inf, this is a possibility that the computer is infected. Now to erase this, restart your window to Safe Mode Command Prompt. (Do this by rebooting your computer and pressing F8 before windows go out and select from the boot menu). On drive C and other drives type the following commands: 1. attrib -h -r -s autorun.inf 2. del autorun.inf

Do this steps to other drives to disable the autorun.inf .

Disable AUTORUN from Registry

Now you can disable the AUTORUN for all drives by configuring the registry. Open the registry by typing regedit.exe to the command prompt (if your still at the command prompt) or execute it in Run. Look for the HKEY_CURRENT_USER\Software\ Microsoft\Windows\CurrentVersion\Policies\Explorer as shown below:

Double-click the NoDriveAutorun DWORD entry and type the value HEX: FF (255 in Decimal). (If the NoDriveAutorun does not exists, you can creat it by right-clicking the right side area of the regedit window, then click New->DWord Value -> type NoDriveAutorun) Close the registry and restart the computer. This procedure will disable all the autorun for all drives of your computer and at least will prevent the autorun function of infected USB drives or CDs and avoid the infection of viruses like the Bacalid and RavMon.exe.

Update:

If you want to prevent viruses that uses autorun.inf to infect your USB flash drive, try to do this:

1. Open your flash drive via Command Prompt (do this via Start->Run->cmd.exe)

2. Change your logged drive to your USB flash drive (e.g. if your drive is at drive E: then type E: on the command prompt then press enter)

3. Create a folder named: AUTORUN.INF on the root directory of your flash drive. (to do this type the command: MD\AUTORUN.INF). If an error: a subdirectory already exists… shows, try to follow the instruction above to remove existing autorun.inf before doing this instruction.

The reason why this will avoid future infection is that autorun.inf viruses usually generates a file autorun.inf. Having an AUTORUN.INF folder on the root directory of your drives will make virus programs unable to create their own autorun.inf file, virus can’t even overwrite it because it’s a folder and not a file. See my point?

Registry editing has been disabled by your administrator

2008-04-21T17:14:00.000-07:00

Symptom

Bila anda cuba untuk menggunakan Registry Editor (regedit.exe) di dalam windows anda, anda mungkin akan menerima mesej error berikut:

Registry editing has been disabled by your administrator

Resolution

Jika masalah ini timbul di dalam standalone system, kemungkinan ianya disebabkan oleh jangkitan daripada Malware. Dan juga disebabkan oleh DisableRegistryTools policy yang di enable kan oleh third-party tweak program yang mana anda gunakannya.

Adalah sangat disyorkan agar anda membuat complete system checkup untuk mengesan Virus and Malwares .

Note: Jika pc / system anda dihubungkan dengan domain, network administrator mungkin enabled the DisableRegistryTools Policy setting. Dalam kes ini anda perlu menghubungi network administrator untuk membenarkan anda menggunakannya, sekiranya perlu.

Kaedah 1 - Menggunakan Group Policy Editor

Jika anda menggunakan edisi Windows Vista (Windows Vista Business, Enterprise and Ultimate editions) yang didalamnya terkandung Group Policy Editor, sila ikut langkah-langkah ini.:

klik Start, type gpedit.msc dalam kotak Search, dan tekan ENTER
Kemudian klik User Configuration -> Administrative Templates -> System

Double-klik Prevent access to registry editing tools
Set kan kepada Not Configured

PENTING: Jika ianya telah pun Not Configured, -> set kan kepada Enabled dan klik Apply. Ulang langkah dan tukarkan kembali kepadaNot Configured.

Kaedah 2

Kaedah ini sepatutnya berjaya dilakukan di semua version Windows Vista.

Download reg_enable.vbs dan save di Desktop
Buka elevated command prompt. untuk melakukan ini, klik Start, click All Programs, Accessories, right-click Command Prompt, dan kemudian klik Run as administrator. Jika anda ditanya administrator password, masukkan password, dan klik Allow.
Taipkan command berikut, dan tekan ENTER:

cd /d %userprofile%\desktop

Kemudian, taip command berikut dan tekan ENTER

wscript.exe reg_enable.vbs

Kemudian taip EXIT dan close Command Prompt window.

Jika semuanya berjalan lancar, DisableRegistryTools policy sepatutnya boleh di removed. cuba run kan Regedit.exe sekarang.

Semoga Berjaya

Problem - Task Manager has been disable by Administrator

2008-04-21T03:19:00.000-07:00

Banyak PC yang mempunyai masalah ini.... di sini saya ada jalan penyelesaiannya...

terdapat banyak lagi jalan penyelesaian.. ini adalah yang paling mudah..…

Problem : Apabila anda tekan CTRL ALT DELETE anda akan dapat mesej ini ‘Task Manager has been disabled by the Administrator’.

Ini berlaku adalah disebabkan oleh malware atay spyware meletakkan sesuatu rekod dalam registry file dan ianya adalah tidak dapat dijumpa oleh oleh antivirus dan tidak dapat dibuang daripada system startup.

Download percuma Task Manager Fix untuk menyelesaikan masalah ini.

http://www.taskmanagerfix.com/dl/download.php?id=1