HP laptops exposed to criminal hacking

• ndmmxiaomayi

  13 Dec 07, 22:23

  Originally posted by kenn3th:

  i itchy hand again. go download it. so that's the live strain isit? or is it the testing strain.

  Testing strain. Not live strain. I hope no exploits yet.
• kenn3th

  13 Dec 07, 22:24

  how come cannot delete one
  nvm i go tweak
• kenn3th

  13 Dec 07, 22:25

  Originally posted by ndmmxiaomayi:

  Testing strain. Not live strain. I hope no exploits yet.

  Mayi, not only HP, compaq also.
  
  knockonmydoor's laptop also kanna alr.
• ndmmxiaomayi

  13 Dec 07, 22:25

  Originally posted by kenn3th:

  how come cannot delete one
  nvm i go tweak

  Just disable it lah. I also can't delete it. God cares.
  
  Unless someone else find another way to exploit it, I wouldn't care so much. So, for now, use your brain. Don't anyhow allow anything.
• kenn3th

  13 Dec 07, 22:26

  Originally posted by ndmmxiaomayi:

  Just disable it lah. I also can't delete it. God cares.
  
  Unless someone else find another way to exploit it, I wouldn't care so much. So, for now, use your brain. Don't anyhow allow anything.

  i dont after i got rogue spyware ages ago.
  compaq presario B1200 (knockonmydoor's laptop model)
• ndmmxiaomayi

  13 Dec 07, 22:27

  Originally posted by kenn3th:

  Mayi, not only HP, compaq also.
  
  knockonmydoor's laptop also kanna alr.

  Who is knockonmydoor?
  
  I know, my Compaq also tio. But due to the restrictions I've set, it didn't work.
• turbo_drift

  13 Dec 07, 22:27

  Originally posted by ndmmxiaomayi:
  For the interested, here's what I did to my Group Policy.
  
  1. Start > Run and type in gpedit.msc and press Enter.
  
  2. Computer Configuration > Administrative Templates > Windows Components > Internet Explorer
  
  3. On the right hand side, double click on Do not allow users to enable or disable addons.
  
  4. On the Setting tab, select Enabled.
  
  5. Click OK to apply the settings.
  
  6. Then go to User Configuration > Administrative Templates > Windows Components > Internet Explorer
  
  7. On the right hand side, double click on Do not allow users to enable or disable addons.
  
  8. On the Setting tab, select Enabled.
  
  9. Click OK to apply the settings.
  
  When you open IE and check the settings (Tools > Manage Addons > Enable or disable Addons...), it should be greyed out.
  
  So even if you click OK... it won't run... because Windows doesn't allow you to enable or disable an addon.
  
  
  
  See the above picture... the HPInfo Class addon is downloaded and attempted to run... but due to policies in place... it can't run. Hehe

  The 1 above ONLY if ur window is XP Professional..
  
  if not, u cant find gpedit.msc..
• ndmmxiaomayi

  13 Dec 07, 22:28

  Originally posted by turbo_drift:
  The 1 above [b]ONLY if ur window is XP Professional..
  
  if not, u cant find gpedit.msc.. [/b]

  Paiseh, me running Vista. I have to verify it on XP when I got the time. I will come up with the registry hack also.
• turbo_drift

  13 Dec 07, 22:30

  Originally posted by ndmmxiaomayi:

  Paiseh, me running Vista. I have to verify it on XP when I got the time. I will come up with the registry hack also.

  XP i know. Mine is Home Edition, dun have gpedit.msc command..
  
  Heard from my lecturer that only XP Professional have the command, gpedit.msc..
• knockonmydoor

  13 Dec 07, 22:33

  Originally posted by ndmmxiaomayi:

  Who is knockonmydoor?
  
  I know, my Compaq also tio. But due to the restrictions I've set, it didn't work.

  knockonmydoor is me lor
• kenn3th

  13 Dec 07, 22:33

  Originally posted by knockonmydoor:

  knockonmydoor is me lor

  my friend lai eh
  not a clone lai de
• ndmmxiaomayi

  13 Dec 07, 22:35

  Originally posted by turbo_drift:

  XP i know. Mine is Home Edition, dun have gpedit.msc command..
  
  Heard from my lecturer that only XP Professional have the command, gpedit.msc..

  Yeah, I know Home don't have.
  
  XP Pro have because it's for business...
  
  OK, registry hack uploaded.
  
  http://www.mediafire.com/?4dty0zyy91s
  
  Double click on it and click on Install. By default, it installs to the desktop. Double click on the registry file to merge it.
  
  Check your IE settings afterwards.
  
  Tested on XP SP2 and Vista Business.
  
  The rest, not my dai ji!
• knockonmydoor

  13 Dec 07, 22:35

  Originally posted by kenn3th:

  my friend lai eh
  not a clone lai de

  thanks for the intro. i am completely original
• ndmmxiaomayi

  13 Dec 07, 22:36

  Originally posted by knockonmydoor:

  knockonmydoor is me lor

  Er... what happened to yours? Same screenshot as kenneth ar?
  
  Somehow your nick is familiar leh
  
  Wonders where I saw your nick...........
  
  Never mind.
• knockonmydoor

  13 Dec 07, 22:38

  yep. same as his.
• ndmmxiaomayi

  13 Dec 07, 22:38

  Uninstaller... same thing, merge the registry file. Only tested on XP SP2 and Vista Business!
  
  http://www.mediafire.com/?2bgwkdx9lzw
• ndmmxiaomayi

  13 Dec 07, 22:40

  Originally posted by knockonmydoor:

  yep. same as his.

  Tools > Manage Addons > Enable or disable addons...
  
  Find this addon named HPInfo Class...
  
  Then select Disable (make sure you don't have the policy installed or you can't disable or enable addon)
  
  Clear all your temp files and cache
  
  Then go that webbie again
  
  See if it's OK. Should report not vulnerable now.
• ndmmxiaomayi

  13 Dec 07, 22:42

  IE6 users - refer to this KB article: http://support.microsoft.com/kb/883256
  
  Just follow this part:
  
  

  Using the Manage Add-ons feature
  To change the status of an add-on or to update an add-on, follow these steps:
  1. Start Internet Explorer.
  2. On the Tools menu, click Manage Add-ons.
  3. Click the name of the add-on.
  4. Use one of the following methods:
  • Click Update ActiveX to replace the add-on with the current version. This option is not available for all add-ons.
  • To enable an add-on, click Enable, and then click OK.
  • To disable an add-on, click Disable, and then click OK.
  You may have to restart Internet Explorer for the changes to take effect after you enable or disable an add-on.

• knockonmydoor

  13 Dec 07, 22:43

  Originally posted by ndmmxiaomayi:

  Tools > Manage Addons > Enable or disable addons...
  
  Find this addon named HPInfo Class...
  
  Then select Disable (make sure you don't have the policy installed or you can't disable or enable addon)
  
  Clear all your temp files and cache
  
  Then go that webbie again
  
  See if it's OK. Should report not vulnerable now.

  think it's okay ler. even though i didn't "Clear all your temp files and cache".
• kenn3th

  13 Dec 07, 22:51

  but if u disable it alr. still need registry hack?
• ndmmxiaomayi

  13 Dec 07, 23:21

  Originally posted by kenn3th:

  but if u disable it alr. still need registry hack?

  This is to safeguard against exploits of such nature.
  
  If it can happen to HP, it can happen to all addons, just need to find the right codes.
  
  You can trust the bad guys to come up with anything.
• kenn3th

  13 Dec 07, 23:55

  Originally posted by ndmmxiaomayi:

  This is to safeguard against exploits of such nature.
  
  If it can happen to HP, it can happen to all addons, just need to find the right codes.
  
  You can trust the bad guys to come up with anything.

  mayi so good.
  But mayi can be bad too
• ndmmxiaomayi

  21 Dec 07, 22:32

  Worse news.
  
  http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9053818&source=rss_topic82
• ndmmxiaomayi

  21 Dec 07, 22:33

  Originally posted by kenn3th:

  mayi so good.
  But mayi can be bad too

  Yesh, I am. If I could find a way to bypass, would you think hackers are dumb?