kalau nggak salah anda kena virus Very Funny.HTM (12KB) &/
LOVE-LETTER-FOR-YOU.HTM &/ LOVE-LETTER-FOR-YOU.TXT.vbs, atau variannya
Cara kerja scipt ini ternyata sama dengan step2 pembersihan manual ini
(bisa dicoba):
-Jangan buka browser dulu.
-Cari di registry: run REGEDIT
hapus key di:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\*.vbs
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\WIN-BUGSFIX.EXE
-Buka: control panel --> internet options
trus ganti address home page (yang telah dimodifikasi) dengan yang aman,
-Yang pake MiRC buka file 'mirc.ini', buang file "script.ini" !!!
-cari file *.vbs yang berukuran 10KB, buang!!!
-cari file Very Funny.HTM (12KB) &/ LOVE-LETTER-FOR-YOU.HTM &/
LOVE-LETTER-FOR-YOU.TXT.vbs,
buang juga!!!
untuk mengembalikan file mp2/mp3:
-cari file mp2/mp3 yang di'hidden' oleh virus:
dari dos propt: D:\dir *.mp3 /s /ah
kembalikan attributnya.
tetapi file2 jpg/jpeg kayaknya nggak bisa diselamatkan.
semoga membantu,
salam
ihin
nb : ini link2 untuk
Please follow the link bellow
http://202.78.86.25/
PUBLIC SERVICE
VIRUS ADVISORY !!!
There is a Virus spreading around the world today called "The LOVE BUG"
and is spreading itself through emails as a Visual Basic (*.vbs) file
attachment.
If your Web Browser has been redirected to this webpage then there is a
strong possibility
that your computer may have been infected by the "I LOVE YOU" virus,
commonly know as the "Love Bug", or its variants.
For more information about this virus please refer to this link
Below are links where you can download the
fixes and the anti-virus definition updates for the LOVE BUG virus.
McAffee: http://download.mcafee.com/updates/updates.asp
Symantec:ftp://ftp.symantec.com/public/english_us_canada/antivirus_definitions/norton_antivirus/specdef/sarci32.exe
Datafellows: http://www.datafellows.com/download-purchase/updates.html
TrendMicro: http://www.antivirus.com/download/pattern.asp
Sophos: http://www.sophos.com/downloads/ide/index.html#loveleta
Tucows: http://tucows.skyinet.net/virus95.html
You can find some lovebug cleaners here like:
lovebug squasher 1.0 - freeware and the rating is 5 cows
NoLoveBug 1.06 - freeware, rating 4 cows
True Love 1.0 - freeware, rating 4 cows
If you wish to remove the Virus manually or by using a VisualBasic Script
then you may do so by going over the below detailed instructions.
Manual fix from www.thepope.org: http://www.thepope.org/index.pl?node_id=140
VisualBasic Scipt fix from www.thepope.org: http://www.thepope.org/fix.vbs
For more detailed technical information for this virus, please refer to the
below links.
F-Secure Virus Information Page: http://www.data-fellows.com/v-descs/love.htm
Symantec Corp.
http://www.symantec.com/avcenter/venc/data/vbs.loveletter.a.html
At 12:54 PM 12/16/00 +0700, you wrote:
>Saya mau nanya.... saya ada ngopi script irc dari temen saya! saya melihat
>ada file berekstension jpg, tetapi pas saya mencoba melihatnya dengan
>mengklik ganda file tersebut, ternyata.... SELURUH file jpg saya berubah
>ekstensionnya menjadi VBS! Kata temen saya, ini adalah terkena virus worm?
>ada yang tau gak gimana cara ngilangin virus ini
