Laman

Sabtu, 26 Februari 2011

How to make your AVG 2011 talk to you?


We know that AVG always give notification in the lower right corner of the taskbar every time an update, scan, resident shield alerts, and online alerts shield. But unfortunately there is no accompanying sound notification. This will not be set by default, then we need to set it up. Here is a guide how to setup AVG sound :
1. Open AVG user interface
2. Click on "Tools" tab
3. Select "Advanced settings ..."
4. After the Advanced window settings appears, Click on "Sounds"
5. Tick the box "Enable sound events"
6. Choose the Event That You Want to add the sound on it by highlighting it (click on it)
7. then click on "Browse", select the sound you want from your computer
8. you can try the sound is added to the AVG event by clicking the "Play"
9. After completing the setting and then Click on "Apply"
10. Close the window by clicking the "Ok" button

Now AVG will as if speaking to you every time AVG did the event.

tough on threats
easy on you
enjoy AVG

Minggu, 20 Februari 2011

How to remove trojan/malware/virus manually

How to remove trojan/virus/spyware manually
1. Stop from running by disable or remove the suspicious startup program
    use msconfig (click on Start button --- click on Run --- type msconfig
    use Windows Task Manager (ctrl+shift+esc) --- services --- find suspicious file ---end process
    if msconfig and Windows Task Manager has been blocked by virus, download and use  another application such CCleaner or Hijackthis
2. Delete regystry added by malicious software (malware)
   use Registry Editor (click on Start button --- click on Run --- type regedit)
   go to HKEY_LOCAL_MACHINE/Software/Microsoft/Windows/CurrentVersion/Run --- then find suspicious string value on the right pane, delete it
   go to HKEY_CURRENTUSER/Software/Microsoft/Windows/CurrentVersion/Run --- then find suspicious string value on the right pane, delete it
3. Delete or quarantine the suspicious file
   use Windows Explorer --- go to local drive (example D:/) --- D:/Documents and Settings/Administrator/localsettings/temp ---- delete all temporary files

How to remove virus manually using Command Prompt

Remove virus using Command Prompt (Win XP/Vista/7)
1. Run Command Prompt : klik "Start" klik "Run" ketik "cmd" lalu klik "Ok"
2. Select the infected drive : if the infected drive is drive d type D: then press "Enter" to see content of drive d type "dir",
3. type "attrib -s -h *.* /s /d" then press Enter
4. find unusual .exe file or autorun.inf, then rename or remove it
5. to rename autorun.inf, type "rename (space) autorun.inf (space) xxx
4. now u can access the drive d without affecting virus
5. go to the file location using Windows Exlorer then rename or delete them

7 steps to remove virus

Follow these steps to resolve it.
1. Disconnect the computer that will be cleared from the network.
2. Disable "System Restore" during the process of cleaning the virus.
3. Turn off the virus active in memory. Use task manager replacement tools, such as IceSword, HijackThis, Process Explorer or other tools that are not on the block by the virus.
4. Do terminate the process on a file virus is active, choose the suspicious process and then click on "terminate" button
5. Delete the registry string that was created by the virus. In this case, we still use the tools because the worm has IceSword disable repair function through registry script. The following steps are performed: Explore IceSword compress files that have been downloaded or can be extracted first, then run (click 2x) IceSword.exe file.
On the tab [Registry], delete the following string: HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun
In the right pane, delete the value "Windows". On the tab [Registry],
change the following string: HKEY_LOCAL_MACHINE SOFTWAREClassesbatfileshellOpencommand In the right pane, change value "(Default)" to ""% 1 "% *" HKEY_LOCAL_MACHINE SOFTWAREClassescmdfileshellOpencommand
In the right pane, change value "(Default)" to ""% 1 "% *" HKEY_LOCAL_MACHINE SOFTWAREClasseshtmlfileshellOpencommand
In the right pane, change value "(Default)" to "" C: Program FilesInternet Exploreriexplore.exe "-nohome" HKEY_LOCAL_MACHINE SOFTWAREClassesinffileshellOpencommand In the right pane,
change value "(Default)" to "% SystemRoot% System32rundll32.exe" HKEY_LOCAL_MACHINE SOFTWAREClassesregfileshellOpencommand In the right pane, change value "(Default)" to be "regedit.exe"% 1 "" HKEY_LOCAL_MACHINE SOFTWAREClassestxtfileshellOpencommand
In the right pane, change value "(Default)" to "% SystemRoot% System32NOTEPAD.EXE% 1"
To see the changes, you should log off / restart.
6. Delete virus files that have the characteristics of a virus
Note: We recommend that you show hidden files in order to simplify the process of finding the virus file. To simplify the search process should use the "Search Windows" with the filter files (eg *. exe) that have a maximum size that fit the characteristics of the virus. Delete virus files usually have the same date modified.
7. For optimal cleaning and prevent re-infection, you should use the Security Suite or AVG antivirus was updated and recognize this virus very well.