IP Experience Book

[Security] How to Remove System Security Virus – is A VIRUS on Windows 7

admin — Mon, 29 Apr 2013 05:44:29 +0000

Very Annoying Virus (Malware)
It can be infected your PC from any insecure plugged in device, downloaded from any insecure website etc.

How to quickly remove this in Windows 7 ?
Easy one

1. Boot your Windows 7 to Safe mode (Press and Hold F8 key during restarting
2. Choose Safe Mode (either With / Without Networking)
3. Click Start and Type System Restore on Search Box
4. It takes few minutes (depends on how you set your restore point)
4. Choose any restore point (time) where you believe the latest good one before this virus infected your PC
5. Do Next and Restore

There you go !, it moves this Annoying Virus.

a. rahman isnaini r.sutan

[Putty] How to Increase Scroll Log Buffer for Default Config Putty

admin — Fri, 26 Apr 2013 11:21:53 +0000

Everytime you open Putty with default config.
Default buffer window : 200 raw only
Tracking the history of Putty Activities is not possible as line over 200 will be override.

For me it’s really important to have at least 32000 raw buffer window.
Even you can set 50000

Here how to change
a. Right click and change setting
b. Click Window edit value to 32000 for e.g on line scrollback
c. Click Session
d. Just click default setting
e. Click Save

There you buddy !

a. rahman isnaini r.sutan

[Juniper] How to Check / Trace Typed and Executed Command History / Log in JunOS

admin — Thu, 25 Apr 2013 13:59:31 +0000

Due to a need of checking who’s done wrong in Juniper.
You can check who has been logged in and what command has been entered.

Here how to :
a. Directly from user prompt :
JunOS>show log interractive-commands
others :

<[Enter]> Execute this command
Name of log file
aprobed Size: 0, Last changed: Jan 20 2007
apsd Size: 82713, Last changed: Apr 25 18:15:10
auditd Size: 0, Last changed: Jan 07 1999
authd_sdb.log Size: 0, Last changed: Feb 03 2012
bfdd Size: 1066, Last changed: Feb 03 2012
bgp-ggc Size: 65339, Last changed: Apr 25 21:25:23
bgp-ggc.0.gz Size: 13286, Last changed: Apr 25 15:36:35
bgp-ggc.1.gz Size: 13235, Last changed: Apr 24 22:22:59
bgp-ggc.2.gz Size: 13322, Last changed: Apr 24 05:10:31
bgp-ggc.3.gz Size: 13324, Last changed: Apr 23 11:57:34
bgp-ggc.4.gz Size: 13271, Last changed: Apr 22 18:43:29
bgp-ggc.5.gz Size: 13281, Last changed: Apr 22 01:29:57
bgp-ggc.6.gz Size: 13246, Last changed: Apr 21 08:17:37
bgp-ggc.7.gz Size: 13298, Last changed: Apr 20 15:05:20
bgp-ggc.8.gz Size: 13251, Last changed: Apr 19 21:51:47

chassisd Size: 980570, Last changed: Jan 08 21:59:46
cli-commands Size: 365712, Last changed: Jan 26 2011
cli-commands.0.gz Size: 80519, Last changed: Oct 27 2008
cli-commands.1.gz Size: 70115, Last changed: Aug 01 2007
cosd Size: 8910, Last changed: Jan 08 21:28:13
dcd Size: 418979, Last changed: Apr 25 18:15:10
dfcd Size: 2482, Last changed: Feb 07 2011
dfcd_sdb.log Size: 9278, Last changed: Jan 08 21:28:13
dfwc Size: 0, Last changed: Jan 07 1999
dfwd Size: 0, Last changed: Jan 07 1999
eccd Size: 3437, Last changed: Jan 08 21:28:13
ext/ Last changed: Feb 03 2012
flowc/ Last changed: Jan 07 1999
ggsn/ Last changed: Jan 07 1999
gres-tp Size: 29255, Last changed: Jan 08 21:28:13
hostname-cached Size: 765, Last changed: Jan 08 21:27:48
ilmid Size: 2686, Last changed: Feb 03 2012
install Size: 1510, Last changed: Feb 03 2012
install.0.gz Size: 807, Last changed: Jan 30 2012
install.1.gz Size: 667, Last changed: Jan 09 2008
install.2.gz Size: 320, Last changed: Jan 18 2007
interactive-commands Size: 49864, Last changed: Apr 25 21:25:54
interactive-commands.0.gz Size: 69853, Last changed: Apr 25 21:00:00
interactive-commands.1.gz Size: 71296, Last changed: Apr 25 13:00:00
interactive-commands.2.gz Size: 67051, Last changed: Apr 24 14:00:00
interactive-commands.3.gz Size: 68736, Last changed: Apr 23 15:00:00
interactive-commands.4.gz Size: 69761, Last changed: Apr 22 18:00:00
interactive-commands.5.gz Size: 63040, Last changed: Apr 22 03:00:00
interactive-commands.6.gz Size: 63681, Last changed: Apr 21 10:00:00
interactive-commands.7.gz Size: 68265, Last changed: Apr 20 05:00:00
interactive-commands.8.gz Size: 67829, Last changed: Apr 19 04:00:00
interactive-commands.9.gz Size: 70097, Last changed: Apr 17 13:00:00
inventory Size: 29015, Last changed: Jan 08 21:29:46
irsd.trace Size: 54075, Last changed: Feb 03 2012
kmd Size: 0, Last changed: Nov 30 18:15:20
ksyncd Size: 2616, Last changed: Feb 07 2011
l2ald Size: 200491, Last changed: Feb 03 2012
l2ald.0.gz Size: 53163, Last changed: Jan 20 2007
l2tpd Size: 22080, Last changed: Jan 08 21:28:13
l2tpd_cfg Size: 112, Last changed: Jan 08 21:28:03
lmpd Size: 2340, Last changed: Jan 08 21:28:13
mastership Size: 365, Last changed: Jan 08 21:18:36
messages Size: 780660, Last changed: Apr 25 21:25:55
messages.0.gz Size: 49189, Last changed: Apr 25 17:00:00
messages.1.gz Size: 50654, Last changed: Apr 25 11:00:00
messages.2.gz Size: 50266, Last changed: Apr 25 01:00:00
messages.3.gz Size: 55143, Last changed: Apr 24 17:00:00
messages.4.gz Size: 51805, Last changed: Apr 24 12:00:00
messages.5.gz Size: 52949, Last changed: Apr 24 06:00:00
messages.6.gz Size: 58906, Last changed: Apr 23 23:00:00
messages.7.gz Size: 58545, Last changed: Apr 23 17:00:00
messages.8.gz Size: 52277, Last changed: Apr 23 11:00:00
messages.9.gz Size: 52193, Last changed: Apr 23 01:00:00
mib2d Size: 28032, Last changed: Feb 03 2012
pf Size: 27584, Last changed: Apr 25 18:15:07
pfed_trace.log Size: 0, Last changed: Feb 03 2012
pgmd Size: 1213, Last changed: Jan 08 21:27:47
ppmd Size: 210, Last changed: Jan 26 2011
rdd Size: 14268, Last changed: Feb 03 2012
rmopd Size: 10489, Last changed: Jan 30 2012
rtspd Size: 2614, Last changed: Jan 08 21:28:13
sampled Size: 79485, Last changed: Feb 03 2012
sampled.0.gz Size: 3837, Last changed: Jan 20 2007
sampled.1.gz Size: 4455, Last changed: Jan 18 2007
sampled.2.gz Size: 6101, Last changed: Jan 18 2007
smartd.trace Size: 3727711, Last changed: Apr 25 19:05:19
snapshot Size: 4021, Last changed: Dec 20 10:52:58
snmpd Size: 6236, Last changed: Feb 03 2012
user Show recent user logins
utmp Size: 0, Last changed: Feb 03 2012
vrrpd Size: 24693, Last changed: Feb 03 2012
wtmp Size: 59844132, Last changed: Apr 25 21:25:37
wtmp.0.gz Size: 942708, Last changed: Apr 21 09:59:52
wtmp.1.gz Size: 435622, Last changed: Mar 22 10:00:00
wtmp.2.gz Size: 500293, Last changed: Feb 20 09:58:34
wtmp.3.gz Size: 579386, Last changed: Jan 21 09:57:58
wtmp.4.gz Size: 359422, Last changed: Dec 22 09:59:31
| Pipe through a command

b. If you are a linux/unix minded
1. From Router Prompt type start shell to go to shell
JunOS>start shell
2. From Shell go to /var/log/
%cd /var/log
3. Check all the commands here :
%more Interactive-Commands

Got you !

a. rahman isnaini r.sutan

Apr 25 18:09:32 JunOS-2 mgd[92644]: UI_CMDLINE_READ_LINE: User ‘robin’, command ‘show arp | match 192.168.74.172 ‘
Apr 25 18:09:55 JunOS-2 mgd[92644]: UI_CMDLINE_READ_LINE: User ‘robin’, command ‘ping 192.168.74.172 ‘
Apr 25 18:12:17 JunOS-2 mgd[92644]: UI_CMDLINE_READ_LINE: User ‘robin’, command ‘clear arp ‘
Apr 25 18:12:18 JunOS-2 mgd[92644]: UI_CMDLINE_READ_LINE: User ‘robin’, command ‘exit ‘
Apr 25 18:12:18 JunOS-2 mgd[92644]: UI_LOGOUT_EVENT: User ‘robin’ logout
Apr 25 18:13:56 JunOS-2 mgd[94013]: UI_AUTH_EVENT: Authenticated user ‘robin’ at permission level ‘j-admin’
Apr 25 18:13:56 JunOS-2 mgd[94013]: UI_LOGIN_EVENT: User ‘robin’ login, class ‘j-admin’ [94013]
Apr 25 18:14:09 JunOS-2 mgd[94013]: UI_CMDLINE_READ_LINE: User ‘robin’, command ‘show configuration | match infokom | display set ‘
Apr 25 18:14:36 JunOS-2 mgd[94013]: UI_CMDLINE_READ_LINE: User ‘robin’, command ‘edit ‘
Apr 25 18:14:36 JunOS-2 mgd[94013]: UI_DBASE_LOGIN_EVENT: User ‘robin’ entering configuration mode
Apr 25 18:14:41 JunOS-2 mgd[94013]: UI_CMDLINE_READ_LINE: User ‘robin’, command ‘set interfaces ge-0/0/0 unit 0 family inet address 192.168.74.127/23 arp 192.168.74.172 mac 00:1f:9e:d2:be:40 ‘
Apr 25 18:14:44 JunOS-2 mgd[94013]: UI_CMDLINE_READ_LINE: User ‘robin’, command ‘show | compare ‘
Apr 25 18:14:56 JunOS-2 mgd[94013]: UI_CMDLINE_READ_LINE: User ‘robin’, command ‘commit check ‘
Apr 25 18:15:06 JunOS-2 mgd[94013]: UI_CMDLINE_READ_LINE: User ‘robin’, command ‘commit ‘
Apr 25 18:15:06 JunOS-2 mgd[94013]: UI_COMMIT: User ‘robin’ requested ‘commit’ operation (comment: none)
Apr 25 18:15:12 JunOS-2 mgd[94013]: UI_CMDLINE_READ_LINE: User ‘robin’, command ‘quit ‘
Apr 25 18:15:12 JunOS-2 mgd[94013]: UI_DBASE_LOGOUT_EVENT: User ‘robin’ exiting configuration mode
Apr 25 18:15:14 JunOS-2 mgd[94013]: UI_CMDLINE_READ_LINE: User ‘robin’, command ‘show configuration | match infokom | display set ‘
Apr 25 18:15:22 JunOS-2 mgd[94013]: UI_CMDLINE_READ_LINE: User ‘robin’, command ‘show configuration | match infokom | display set ‘
Apr 25 18:15:37 JunOS-2 mgd[94013]: UI_CMDLINE_READ_LINE: User ‘robin’, command ‘show configuration | match 192.168.74.172 | display set ‘
Apr 25 18:17:18 JunOS-2 mgd[94013]: UI_CMDLINE_READ_LINE: User ‘robin’, command ‘clear arp ‘
Apr 25 18:17:41 JunOS-2 mgd[94013]: UI_CMDLINE_READ_LINE: User ‘robin’, command ‘show configuration ‘
Apr 25 18:18:09 JunOS-2 mgd[94013]: UI_CMDLINE_READ_LINE: User ‘robin’, command ‘exit ‘
Apr 25 18:18:09 JunOS-2 mgd[94013]: UI_LOGOUT_EVENT: User ‘robin’ logout
Apr 25 18:19:01 JunOS-2 mgd[94393]: UI_AUTH_EVENT: Authenticated user ‘robin’ at permission level ‘j-admin’
Apr 25 18:19:01 JunOS-2 mgd[94393]: UI_LOGIN_EVENT: User ‘robin’ login, class ‘j-admin’ [94393]
Apr 25 18:19:09 JunOS-2 mgd[94393]: UI_CMDLINE_READ_LINE: User ‘robin’, command ‘show log messages | last ‘
Apr 25 18:19:32 JunOS-2 mgd[94393]: UI_CMDLINE_READ_LINE: User ‘robin’, command ‘show log messages ‘
Apr 25 18:20:35 JunOS-2 mgd[94393]: UI_CMDLINE_READ_LINE: User ‘robin’, command ‘show bgp summary ‘
Apr 25 18:20:52 JunOS-2 mgd[94393]: UI_CMDLINE_READ_LINE: User ‘robin’, command ‘show log messages ‘
Apr 25 18:21:29 JunOS-2 mgd[94393]: UI_CMDLINE_READ_LINE: User ‘robin’, command ‘show log bgp | last ‘
Apr 25 18:21:41 JunOS-2 mgd[94393]: UI_CMDLINE_READ_LINE: User ‘robin’, command ‘show log bgp | last ‘
Apr 25 18:21:48 JunOS-2 mgd[94393]: UI_CMDLINE_READ_LINE: User ‘robin’, command ‘show bgp summary ‘

[Recommendation] Use Different Block IP for Name Server – DNS (Primary and Secondary) Mail Exchange – MX (Primary and Secondary)

admin — Mon, 22 Apr 2013 15:52:00 +0000

Use Different IP Blocks for Your Primary and Secondary Server (DNS and MX)
Not in the same Class C at least
Purpose :

- Avoiding a Totally DNS Blocking if Third parties filtered your /24
- Avoiding a Totally Mail Blocking if Third parties filtered your /24
- Avoiding Unreachable DNS Primary/Secondary if one BGP path problem
Impact : Timed Out Domain Query and rest Impact of unavailable domain
- Avoiding Unreachable MX Primary/Secondary if one BGP path problem
Impact : Bounched Mail to Sender

Unless you have only /24 from a RIR/LIR

a. rahman isnaini r.sutan

[Recommendation] Use Domain and Different Domain for Server POP, IMAP and SMTP

admin — Mon, 22 Apr 2013 03:12:48 +0000

Use Domain for your POP, IMAP and SMTP
Purpose:
- It’s easy to remember domain rather than IP
- It’s easy to change IP address record in DNS if your server had been listed on RBL
or blocked by others for any reason
- There’s no change on user Mail Client Setting
- Using same Domain for POP,SMTP and IMAP in the same mailserver
may not a good choice once you need to move (balance load)
just either SMTP, POP or IMAPto another server (let say the server is overloading).

Use Different Domain for your POP, IMAP and SMTP
Purpose:
- It’s easy to change / move IP Address record in DNS
- It’s easy to move IP from one machines to another machines
and change record without re-socializing the new IP to your customer

a. rahman isnaini r.sutan

[MSOffice 2010] How to Find Hidden PowerPoint Animations in Animation Pane ?

admin — Thu, 18 Apr 2013 04:32:03 +0000

Running Animation for any Icon in a Power Point Presentation would explain more clear about a process to the audience.
Anyway, you might have found that when trying to play the animation you have created..
You see more animation rows on animation pane which you believe that you didn’t even created.

Why this is happened ?

Your master slide already have animation applied.
Go to Master Slide and remove the Animation
So will see now the normal/right number of animation rows.

Sample of what I have in master slide.

Sample of normal slide

Before removing animations in Master slide, I saw there many rows while playing (test) the animation

a. rahman isnaini r.sutan

[Mikrotik] MSSQL Port Scanning Log

admin — Thu, 18 Apr 2013 03:07:29 +0000

Blocked MSSQL Port Scanning on Mikrotik

a. rahman isnaini r.sutan

[Mikrotik] Remote Logging to Syslog Server Not Working

admin — Mon, 15 Apr 2013 11:45:02 +0000

Make sure action is : “Remote”
If you’d like to see on local log > Create Similar by Copy, action Memory

a. rahman isnaini r.sutan

[JunOS] Juniper M10 Weird Routing

admin — Sat, 13 Apr 2013 04:34:48 +0000

Juniper M10 Version :

Model: m10
JUNOS Base OS boot [8.4R4.2]
JUNOS Base OS Software Suite [8.4R4.2]
JUNOS Kernel Software Suite [8.4R4.2]
JUNOS Crypto Software Suite [8.4R4.2]
JUNOS Packet Forwarding Engine Support (M/T Common) [8.4R4.2]
JUNOS Packet Forwarding Engine Support (M5/M10) [8.4R4.2]
JUNOS Online Documentation [8.4R4.2]
JUNOS Routing Software Suite [8.4R4.2]

Purpose: Route a /24 to Mikrotik (as Router)

=========================================================
Juniper Configuration:

Routing-Options/Static
route 10.54.2.0/24 next-hop 10.54.100.132; > NOT WORK

=========================================================
Show Routing
ri1@RMP1# run show route 10.54.2.254

inet.0: 466646 destinations, 930897 routes (465709 active, 0 holddown, 14613 hidden)
+ = Active Route, – = Last Active, * = Both

10.54.2.0/24 *[Static/5] 00:02:09
> to 10.54.100.132 via ge-0/2/0.58

[edit routing-options static]

=========================================================
Traceroute from an outsider Host > LOOPING

> traceroute 10.54.2.254
traceroute to 10.54.2.1 (10.54.2.1), 64 hops max, 40 byte packets
1 iix-Gateway-1 (192.168.33.32) 0.527 ms 0.649 ms 0.261 ms > HOST GW
2 10.54.54.17 (10.54.54.17) 0.825 ms 0.769 ms 1.019 ms > JUNIPER M10
3 10.54.54.20 (10.54.54.20) 0.974 ms 0.931 ms 0.927 ms > HOST GW (REROUTE-BACK)
4 10.54.54.17 (10.54.54.17) 1.367 ms 1.226 ms 1.215 ms > JUNIPER M10
5 10.54.54.20 (10.54.54.20) 1.432 ms 1.450 ms 2.724 ms > HOST GW (REROUTE-BACK)
6 10.54.54.17 (10.54.54.17) 1.980 ms 1.639 ms 1.788 ms
7 10.54.54.20 (10.54.54.20) 1.583 ms 1.624 ms 1.517 ms
8 10.54.54.17 (10.54.54.17) 2.175 ms 2.124 ms 2.253 ms
9 10.54.54.20 (10.54.54.20) 2.023 ms 2.229 ms 2.198 ms
10 10.54.54.17 (10.54.54.17) 2.584 ms 2.338 ms 2.377 ms
11 10.54.54.20 (10.54.54.20) 2.429 ms 2.611 ms 2.511 ms
12 10.54.54.17 (10.54.54.17) 3.020 ms 2.842 ms 3.003 ms
13 10.54.54.20 (10.54.54.20) 2.788 ms 2.789 ms 2.699 ms
14 10.54.54.17 (10.54.54.17) 3.142 ms 3.227 ms^C

================================================================
WORKAROUND (1): Split /24 to longer > 25

route 10.54.2.128/25 next-hop 10.54100.132; > DOESN’T WORK EITHER

=================================================================
WORKAROUND (2): Split /24 to longer > 27
route 10.54.2.224/27 next-hop 10.54100.132; > WORK ???

> traceroute 10.54.2.254
traceroute to 10.54.2.254 (10.54.2.254), 64 hops max, 40 byte packets
1 iix-Gateway-1 (192.168.33.32) 0.634 ms 18.808 ms 0.495 ms > HOST-GW
2 10.54.54.17 (10.54.54.17) 0.994 ms 0.894 ms 0.909 ms > JUNIPER M10
3 10.54.2.254 (10.54.2.254) 1.048 ms 16.453 ms 20.530 ms > MIKROTIK (NAT) or 10.54.100.132
4 10.54.2.254 (10.54.2.254) 20.513 ms 20.023 ms 20.395 ms
> traceroute 10.54.2.251
traceroute to 10.54.2.251 (10.54.2.251), 64 hops max, 40 byte packets
1 iix-Gateway-1 (192.168.33.32) 0.650 ms 1.831 ms 0.448 ms
2 10.54.54.17 (10.54.54.17) 0.820 ms 0.904 ms 0.897 ms
3 10.54.2.251 (10.54.2.251) 0.893 ms 15.760 ms 19.418 ms

a. rahman isnaini r.sutan

[Office 2010] Microsoft Office Excel 2010 Not Automatically Calculate the Cell Formula Until File Saved

admin — Wed, 20 Feb 2013 07:23:19 +0000

Last few weeks till today I have a weird thing happened on my XLS cell formula.
I’m running Office 2010 XLS and used to calculate with formula.

Weird thing was : the cell formula not even calculating after I changed some of values on other cell that correlated with the formula. Googling somewhere I found an idea from tech republic which alse experience similar thing but on Excel 2007.

Anyway, it must be same solution but in another how to on Office 2010.
Just go to File and Options, then to Formulas.
The calculation option has to be set to “automatic” to have the cell formula automatic calculating.

Just curious how could I get in to this issue before ?

rgs
a. rahman isnaini r.sutan