Friday, July 23, 2010

How to Use AVG Command Line Scan

AVG command line scanning allows advanced users to run anti-virus scans directly from the command prompt or customized scripts. Command line scan in AVG offers most of the features available in the graphical interface.

To run command line scan, enter the command prompt (click Windows Start > Run > type cmd and press Enter), chdir to your AVG installation directory (usually C:\Program Files\AVG\AVG8) and type the following command:

  • avgscanx for Windows 32-bit
  • avgscana for Windows 64-bit

Type avgscanx /HELP or avgscana /HELP for help. You can provide multiple parameters at a given time.

AVG Command Line Scan Parameters

Below is a non-comprehensive list of the AVG Command Line Scan parameters. Use /HELP parameter for a complete list.

  • /SCAN /[PATH] - specify path(s) to be scanned
  • /COMP - scan entire computer
  • /HEUR - use heuristics
  • /EXCLUDE - exclude files or path from the scan
  • /EXT=[DLL,EXE,COM] - scan only files with the listed extensions
  • /NOEXT=[GIF,PNG] - omit files with listed extensions from scan
  • /ARC - scan archives
  • /CLEAN - recursively clean all threats found
  • /TRASH - move infected files to the Virus Vault
  • /QT - run a quick scan of the system
  • /MACROW - report macros
  • /PWDW - report password-protected files

You can cancel scan process at any time by pressing Ctrl+C while the command window is active.

Digested from http://www.sytru.com/support/avg/196

Thursday, July 22, 2010

AutoIt Console Application ConsoleRead Replacement

; Need #include <WinAPI.au3>

Func ReadCMD()
    Local $tBuffer = DllStructCreate("char"), $nRead, $sRet = ""
    Local $hFile = _WinAPI_CreateFile("CON", 2, 2)

    While 1
        _WinAPI_ReadFile($hFile, DllStructGetPtr($tBuffer), 1, $nRead)
        If DllStructGetData($tBuffer, 1) = @CR Then ExitLoop
        If $nRead > 0 Then $sRet &= DllStructGetData($tBuffer, 1)
    WEnd

    _WinAPI_CloseHandle($hFile)
    Return $sRet

EndFunc   ;==>_ConsoleRead

Wednesday, February 24, 2010

Spyware O6KO.SYS And O6KO.DLL

Did spyware removal on client computer. The client computer could not access any security website, such as avg.com, Symantec.com and prevx.com etc. Computer could not get IP addresses. The DNS server was check OK. One Windows Service called “SRVO6KO” was found running in background with two infected files: “C:\windows\system32\drivers\o6ko.sys” and “C:\windows\system32\o6ko.dll”. Ran command line and typed command “sc stop srvo6ko” and “sc delete svro6ko”. Then deleted the files “O6KO.SYS” and “O6KO.DLL”. Problem solved.

Thursday, February 18, 2010

Gateway Laptop Main Fan Error 02FA

Client brought in a Gateway MT6728 laptop with error message "02FA Main Fan Error". The fan was checked not OK - It won't spin at all. Replaced with another fan, the fan spinned but the error msg was still there. I thought that meight be compatible issue. So I ordered one on Ebay. After the new fan was installed, error msg still there and would not go away even after I reset the BIOS. I thought it was a bad sensor and meight not be repairable - I had wasted my time and money. But just before I gave up, I did a search on Google. A lot of people got the same problem. Finally, I came across some information useful - If the fan is working, just unplug the battery and power it on with AC adapter. I tried that and I got the problem fixed.

Monday, December 7, 2009

Incorrect Mac Address Prevent Internet Connection

Last Tuesday when I was working on my things, my colleague came up to me and asked me to take look at one computer which could not go online. He had already tried many ways to fix it. But none of them worked. The computer was an Acer computer and the Windows was just installed there. The NIC card driver was first installed using driver tools and reinstalled with the driver from the manufacturer. The NIC worked in DOS after the DOS driver was correctly loaded. I went to the computer and ran “ipconfig /all” in the command line and found the Mac Address (Physical Address) for the NIC card was 00-00-00-00-00-00!. Then I opened Device Manager to found the NIC and went to the Advanced Tab of its properties page. Set a value in the Network Address and saved the setting. After doing that, the computer came back online again. That was the first time to see the invalid Mac problem. I think it should be caused by the incorrect Windows driver. I do not want to write everything here in detail to show how to do it step by step, so I googled something for you: How to Change or Spoof MAC Address in Windows XP, Vista, Server 2003/2008, Mac OS X, Unix and Linux and a small utility called Macshift. I did not test the Macshift. Do it by yourself if you need.

Thursday, July 16, 2009

Slow open Word, Excel and PowerPoint

If the problem is ONLY when you double-click on a file to open it. the
problem is likely due to DDE. It can be fixed by reinstalling, OR this
workaround.

Go to Control Panel, Folder Options, File Types, scroll down to and
select (DOC for Word files) or XLS (for Excel files), click Advanced,
select Open entry, click the edit Button.
Now uncheck "Use DDE" and then put your cursor in the Application box,
arrow all the way to the right and put in "%1" (include the quote
marks), IF there is /dde remove it. Then OK you way out. Things should
work quickly again.

Wednesday, July 1, 2009

Exchange Server Failed to Send Email to AOL or Yahoo

Please perform these steps to solve the problem:

1. Make sure that you have a PTR (reverse) DNS record for your mail server. If you don't have one AOL will not accept your mail. It does not have to match the A used for your mail server or your MX record, and doesn't have to make sense.. you just have to have one.

a. Go to http://postmaster.info.aol.com/tools/rdns.html

b. Type in your public IP for your Exchange server. (If you do not know the IP, log into your Exchange server and go to www.whatismyip.com to find the IP).

c. Click “Submit” to see the result. If you get “Success!”, your server PTR is fine. Otherwise, you need contact your ISP to put a PTR DNS for you.

2. Verify your DNS Capability to resolve AOL’s MX record

Open command line. Type in “nslookup –q=mx aol.com”. If you get something like these, you are fine

Server: exserver.yourdomain.com

Address: 192.168.30.100

Non-authoritative answer:

aol.com MX preference = 15, mail exchanger = mailin-01.mx.aol.com

aol.com MX preference = 15, mail exchanger = mailin-02.mx.aol.com

aol.com MX preference = 15, mail exchanger = mailin-03.mx.aol.com

aol.com MX preference = 15, mail exchanger = mailin-04.mx.aol.com

3. Perform Telnet [Very Important] to get an error code

a. From a Command Line prompt, type: telnet mailin-01.mx.aol.com

b. You may get 554 error right away.

554- (RTR:CH) http://postmaster.info.aol.com/errors/554rtrch.html

554 Connecting IP: 66.66.66.66

Connection to host lost.

c. If not, type: HELO yourdomainname.com

d. If you receive “250 OK”, then type: MAIL FROM:<youremail@yourhost.com>

e. If you receive “250 OK”, then type: RCPT TO:<postmaster@aol.com>

f. Type: DATA

g. Type a brief message, followed by <Enter&gt;.<Enter> (Type a period on a line by itself, then hit ENTER.)

h. If you get any error, write it down. Otherwise you will see this:








4. Analyze the error code and send request to AOL postmaster if needed.

If you receive an error message like this:

421-: (RLY:CH) http://postmaster.info.aol.com/errors/554rlych.html

Your server are on the blacklist of AOL and is being blocked. Go here http://postmaster.info.aol.com/waters/sa_form.html to send a request to remove your IPs from the blacklist. When you submit the request, do not list just your server IP. Better list all your company IPs. Otherwise, you need submit the request again if you setup another SMTP server in your company in the future.

For other errors and request forms, please go to http://postmaster.info.aol.com/waters/index.html to get more information.

If you are blocked by Yahoo or SBCGlobal, send request here:

http://help.yahoo.com/l/us/yahoo/mail/postmaster/defer.html