Somethings change dlm C aku..(BERGAMBAR)

Bateesta

Adakah ini virus..kalau virus..camane aku nak heal ,psl after aku scan dgn avg aku , bnda ni kuar tp x ditulis sbg virus tp somethings change in C aku..Any idea nak setelkan bnda ni , tq



[ Last edited by  bzzts at 23-6-2007 12:41 AM ]

matlampir

AVG boleh buang ker virus nih....:hmm:

bzzts

buleh delete file tu, tapi kalo ko nak tau, dlm pc aku pun ada bende tu.
bende tu la yg kita guna kalo nk block address apa2 kat internet. sure pc kita takleh masuk even guna proxy atau apa2.

hosts file aku (open guna notepad) : -

# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
#      102.54.94.97     rhino.acme.com          # source server
#       38.25.63.10     x.acme.com              # x client host

127.0.0.1       localhost

cuba ko refer thread ni: http://forum.cari.com.my/viewthread.php?tid=111017 masalah dia berpunca dari hosts file yg telah di edit (hijacked).
ini la detik permulaan aku blajar XP ni ;)

bzzts

mungkin jugak hosts file ko dah kena hijacked. cuba check. kalo ada bende pelik, cuba copy apa yg aku quote tu dan paste lam hosts file ko (guna notepad) pastu ko save je.

then restart pc.

Bateesta

Originally posted by bzzts at 23-6-2007 12:37 AM
buleh delete file tu, tapi kalo ko nak tau, dlm pc aku pun ada bende tu.
bende tu la yg kita guna kalo nk block address apa2 kat internet. sure pc kita takleh masuk even guna proxy atau apa2.

...

Tq mod , ni yg akudpt dr hosts file aku lak

1. 
   
2. # Copyright (c) 1993-1999 Microsoft Corp.
   
3. #
   
4. # This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
   
5. #
   
6. # This file contains the mappings of IP addresses to host names. Each
   
7. # entry should be kept on an individual line. The IP address should
   
8. # be placed in the first column followed by the corresponding host name.
   
9. # The IP address and the host name should be separated by at least one
   
10. # space.
    
11. #
    
12. # Additionally, comments (such as these) may be inserted on individual
    
13. # lines or following the machine name denoted by a '#' symbol.
    
14. #
    
15. # For example:
    
16. #
    
17. #      102.54.94.97     rhino.acme.com          # source server
    
18. #       38.25.63.10     x.acme.com              # x client host
    
19. 127.0.0.1       localhost
    
20. 127.255.255.255 serial.alcohol-soft.com
    
21. 127.255.255.255 www.alcohol-soft.com
    
22. 127.255.255.255 images.alcohol-soft.com
    

Copy the Code

Apa yg prlu aku buat mod ?

Bateesta

Originally posted by matlampir at 23-6-2007 12:26 AM
AVG boleh buang ker virus nih....:hmm:

Aku pun x pasti bnda ni virus atau tidak

Bateesta

Ok mod..after paste hosts ko pnya file aku dah ok..rasanya..dpt yg ni skrg..

1. 
   
2. # Copyright (c) 1993-1999 Microsoft Corp.
   
3. #
   
4. # This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
   
5. #
   
6. # This file contains the mappings of IP addresses to host names. Each
   
7. # entry should be kept on an individual line. The IP address should
   
8. # be placed in the first column followed by the corresponding host name.
   
9. # The IP address and the host name should be separated by at least one
   
10. # space.
    
11. #
    
12. # Additionally, comments (such as these) may be inserted on individual
    
13. # lines or following the machine name denoted by a '#' symbol.
    
14. #
    
15. # For example:
    
16. #
    
17. #      102.54.94.97     rhino.acme.com          # source server
    
18. #       38.25.63.10     x.acme.com              # x client host
    
19. 
    
20. 127.0.0.1       localhost
    

Copy the Code

Tp yg pelik nape aku still dpt msg CHANGE..bila aku scan dgn avg aku..:hmm:

0001

Tu bukan virus kot... ko ada install Alcohol 120 ke sebelum issue ni berlaku?

Sekarang masih ada error message tu? Kalau iye, maybe solution ni boleh tolong ko. Ni dari AVG nyer forum:

It is normal that AVG shows that files, the MBR or Boot record to have changed. These are done during normal maintainance, when you or windows updates files or have had to correct errors on the drive. The only time that you should worry is if they also show as infected.

To get AVG to quit showing them as changed, open the AVG Test Center, click the F3 key on your keyboard and tell it to accept the changes. If it still shows something as changed after this.. delete the file named AVG7QT.DAT in the %ALLUSERSPROFILE%\Application Data\avg7\ folder and AVG will rebuild it the next time it is run.

The %ALLUSERSPROFILE% is different for each version of Windows. The following are the typical locations for XP and Win9x

XP - C:\Documents and Settings\All Users\Application Data\avg7
Win9x -C:\Windows\All Users\Application Data\avg7

[ Last edited by  0001 at 23-6-2007 09:34 AM ]

bzzts

err... lepas ko ubah hosts file ni, dah restart pc blom?
skrg ni, sistem ko ada masalah ke?
alcohol 120% tu memang ada ke dlm pc ko?

kalu takde apa2, mungkin AVG detect hosts yg telah dimodify ni sebagai threat.
bila ko dah betolkan balik, adakah AVG masih detect sbg threat?
kalu takde apa2, mungkin jugak false alarm. sebab pc ko takde apa2 bende yg mencurigakan berlaku, so takyah le risau.