Cannot connect to the internet after removing trojan

A colleague receive an MSN message with a linkage to the site: www. blogo .tw (intentionally add the space to avoid the auto hyperlinkage). Once clicked, a trojan is installed to the PC. (Actually, 2 files added, 1 is the C:\WINDOWS\system32\od3mdi.dll and the other is C:\DOCUMENT AND SETTINGS\USER's PROFILE\LOCAL SETTINGS\Temp\RarSFX0\z.exe). Both files are detected by the anti-virus program and were quarantineed.

However, the headache does not finish. the user's PC cannot connect to the internet.
The other symptom is when trying to use the "ping" command, it replies with a ? and a loud "bit" sound.
Pinging ? with 32 bytes of data:
Reply from 192.168.1.89: bytes=32 time=15ms TTL=247

Finally, it is found that something wrong with the Winsock. TCP/IP stack is corrupted. When the trojon melware installed, it changed some Registry Keys. Antivirus programs, adaware or spybot removed the melware but not correcting the registry keys.

Solution: fix the winsock with winsockxpfix.

The tool works fine for the PC. The problem solved after launching the tool and reboot the PC!

Reference: http://www.iup.edu/house/resnet/winfix.shtm
http://272586.blogspot.com/2007/07/winsockxpfixie.html

Enable the NUM LOCK key for the logon screen

1.	Run Registry Editor (Regedt32.exe).
2.	Navigate to HKEY_USERS\.Default\Control Panel\Keyboard.
3.	Change the value for InitialKeyboardIndicators from 0 to 2.

Source: http://support.microsoft.com/kb/154529

Change the port for Remote desktop

Enter the desired port no. in the registry:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\TerminalServer\WinStations\RDP-Tcp\PortNumber

Tibet Slideshow

No my work. I just found these wonderful photos from the web accidentally.
Wonder when will I have this photographic skill.

Locations of Emotions in MSN Messenger Live 8.1

Backup this folder for future restore of those Emotion icons:

C:\Documents and Settings\"User Profile"\Local Settings\Application Data\Microsoft\Messenger\"MSN Account"\ObjectStore\CustomEmoticons

Cannot change password with OWA (Error number: -2147024891)

The OWA change password function not working. It returns the "Error number: -2147024891".

After searching from the web, the authentication account of the IIS may be the source of the problem. I follow the suggestion of this site to create a new user for the authentication: (http://forums.msexchange.org/Owa_Error_-2147024891_while_changing_password/m_170043200/tm.htm)

Mmmu...the problem seems to be solved, partly.

More relevant sites, although not the solution to my problem:

http://www.veloci.dk/forum/topic.asp?TOPIC_ID=127
http://support.microsoft.com/kb/301428
http://www.msexchange.org/tutorials/Securing-Exchange-Server-2003-Outlook-Web-Access-Chapter5.html

The problem is solved partly because other accounts can change the password through OWA but NOT MY OWN ACCOUNT!! :<

So...still troubleshooting (due to the Group Policy? or other settings of my account?).

Anyway, at least the boss' concern is solved. Thanks God!

中文電郵亂碼 (Simplified Chinese Mail encoding problem)

A mail from China which should be simplified Chinese cannot be read, even tried all kinds of Chinese Simplified encoding in the Outlook.

From the mail internet header, it is found with "Content-Transfer-Encoding: base64". It should be read with encoding Base64 but no such opion in the Outlook encoding choices.

Finally, it is decoded to a readable simiplified Chinese message by the following procedures:

1. Copy the mail content to notepad.
2. Save the notepad file as a .txt file.
3. Open it with a Browser, such as IE.
4. Choose the Simplified Chinese encoding.

Further reference:
Suggestions from another website - using Winzip + IE with the following procedures:

1. Copy the mail contents to notepad;
2. Save it with extension of .uue (e.g. mail.uue)
3. Double click the newly saved file. It will be opened automatically with Winzip. (You should have Winzip intalled in your PC first.)
4. A file 0001.txt should be found in the Winzip.
5. Open IE
6. Drag the file 0001.txt into IE.
7. Choose simplified Chinese as the encoding and the message should be readable now.
   

Source and detailed explanation: http://ks.cn.yahoo.com/question/1307040600255.html

Recap in Chinese:
把乱码邮件的内容，拷贝到剪贴板中，然后将其粘贴到记事本中，存为文本文件（例如LI.txt），再将其后缀改 为.uue（改为LI.uue），点击此文件，会启动Winzip，然后启动IE，把Winzip中的001.txt文件拖到IE窗口中，就会显示邮件原 来的内容，而不会看到乱码。