~~~~~~~Forum Diskusi Software dan Internet untuk Kristen-Katolik~~~~~~~
Dear all; hari ini ada virus baru yang ngerusak ratusan komputer; nah
buat pencegahan baca sbb :
Jangan membuka e-mail dengan subject "ILOVEYOU" atau pun dengan isi e-mail
"kindly check the attached LOVELETTER coming from me" dan yang perlu diingat
jangan menjalankan sisipan file "LOVE-LETTER-FOR-YOU.TXT.vbs"
Plus kalau menemukan warning:
This HTML file need ActiveX Control
To Enable to read this HTML file
- Please press 'YES' button to Enable ActiveX
Pilihlah option No, karena setelah menekan Yes dan melihat e-mail tersebut,
virus akan membuka file MSKERNEL32.VBS dan akan segera memodifikasi isi file
tersebut dengan data dirinya.
Cure-nya ? Try this :
1. Click START|RUN
Type REGEDIT and hit ENTER key
2. In the left panel, click the "+" to the left of the following:
HKEY_LOCAL_MACHINE, Software, Microsoft, Windows, CurrentVersion, Run
3. In the right panel, search for the registry key that contains the data
value of ":\Windows\System\ MSKernel32.vbs" and "\WIN-BUGSFIX.exe". These
are the registry keys that grant the capability to load the worm whenever
Windows starts up.
4. In the right window, highlight the registry key that loads the file and
press the DELETE key.
5. Search for the registry key that contains the data value of
":\Windows\System\ Win32DLL.vbs". In the right window, highlight the
registry key that loads the file and press the DELETE key.
6. Exit the registry.
7. Click START|SHUTDOWN. Choose "Restart in MS-DOS mode" and click OK.
8. After the computer has restarted, the default directory should C:\.
9. Subsequently, type "DEL WIN-BUGSFIX.exe".
10. Press CTRL+ALT+DEL and allow Windows to restart.
11.You may also delete the file detected as VBS_LOVELETTER by Trend
antivirus is to ensure re-infection does not occur.
12. To correct the registry and remove dropped HTML and TXT files click here
to run this Free Tool provided by Trend. (This tool will not delete
VBS_LOVELETTER, to delete this virus you must update your pattern file or
use HouseCall)
(from :Trend Micro, Incorporated - Security Info - Virus Encyclopedia)
----- Hemat Bandwith : Hapus pesan yang tidak perlu sebelum reply -----
SUBSCRIBE---> To: [EMAIL PROTECTED], Isi/Body: kosong
UNSUBSCRIBE---> To: [EMAIL PROTECTED], Isi/Body: kosong
