Sunday, February 22, 2009

nak munculkan run command

Run Regedit:
Ctrl-Alt-Del
Click "Task List"
Click "File"
Click "New Task (run...)"
Type "RegEdit"
Press "Enter"

Go to: HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Make Sure entry for NoRun is set to 0
Make sure entry for DisallowRun is set to 0

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\drivers\sppolsv.exe
C:\hjt\HijackThis.exe

O4 - HKCU\..\Run: [svcshare] C:\WINDOWS\system32\drivers\sppolsv.exe

No comments: