RE: [ITCENTER] Cara membersihkan W32/Kang.A - I (Bonus Lebaran Vaksincom)

2005-10-30 Thread Paten malik Akbar 
Clear dengan anti virus Avast Gratisan
Versi Kang.A
& Kang.B
Coba menggunakan Anti Virus Gratisan dar Avast  lumayan 
Lebih ringan 
Download Free Trail dari Avast.com
Mereka kirim no aktifasi 
Caba Scan...lumayan lebih cepet. 

-Original Message-
From: ITCENTER@yahoogroups.com [mailto:[EMAIL PROTECTED] On Behalf
Of Rika Trenita
Sent: Thursday, October 27, 2005 1:13 PM
To: [EMAIL PROTECTED]; ITCENTER@yahoogroups.com
Subject: [ITCENTER] Cara membersihkan W32/Kang.A - I (Bonus Lebaran
Vaksincom)

 
Cara membersihkan W32/Kang.A - I
   
 




   
Keterangan
   Varian W32.Kang
   
Kang.A
   Kang.B-D, F-H
   Kang.E
   Kang.I
   
Terminate proses virus
   Ccapps.exe 
   Winword.exe 
   Bervariasi
   Tskmgr.exe 
   
Gunakan perintah "taskkill "
   
dari MS DOS Prompt
   
C:\Taskkill /f /im nama proses 
   
File yang dihapus
   C:\Windows\system32
   C:\windows\system32
   C:\Windows\system32
   C:\Windows\Fonts
   
Ccapps.exe 
   Winword.exe 
   Bervariasi 
   Tskmgr.exe 
   
Winlog.dat 
   Winlog.dat


   
Kangen.doc 
   Kangen.doc 
   
Root C:\
   Root  C:\
   Root C:\
   C:\Windows\System32
   
Folder !Submit 
   Folder !Submit 
   Selamat ulang tahun meyer.exe 
   syslove.exe 
   
Kangen.exe 
   Kangen.exe 

   readme123.exe 
   
 

   C:\Windows
   C:\Windows
   
passMe.txt 
   rundll32.exe 
   
 
   Root C:\
   
untukmu.exe 
   
Folder !Submit 
   
C:\My Documents and settings
   
love.dot dan love1.dot 
   
Ukuran file virus
   64 kb, untuk kangen.doc 2kb
   72 kb
   Bervariasi (105 atau 81 kb)
   48 kb, 1-2 Kb untuk file love.dot dan love1.dot
   
Hapus option pada [Msconfig]
   Rest In peace
   Rest In peace

   Witta I Love You
   
Ccapps
   Ccapps
   Bervariasi (dengan lokasi C:\Windows\system32)
   Tskmgr.exe 
   
 
   winword


   
Hapus Registry Key

   Ccapps
   FSysApp

   
HKLM\Software\Microsoft\Windows\
   Ccapps
   LoadService
   Local Service
   
Current_version\Run
   LoadService
   OSA
   Security
   
 

   Symrun

   
HKCU\Software\Microsoft\
   -
   -
   about:tumero
   -
   
internet Explorer\main, start page
   
HKCU\Software\Microsoft\Windows\
   -
   -
NoDispCPL
   -
   
CurrentVersion\Policies\System
   
HKCU\Software\Microsoft\Windows
   -
   -
NoFolderOptions
   -
   
\CurrentVersion\Policies\Explorer
   
HKLM\Software\Microsoft\
   -
   -
   . RegisteredOrganization = Your Organization Name
   -
   
WindowsNT\CurrentVersion
   . RegisteredOwner = Your User Name
   
HKLM\SOFTWARE\Microsoft\
   -
   -
   OrgOwner = ToMErO yOu toMErO mE
   -
   
Windows\CurrentVersion
   
HKCU\Control Panel\International
   -
   -
   o s1159 = ToNgam Meyer menjadi AM
   -
   
o s2359 = RogaTMan TaMPubOLon menjadi PM
   
HKLM\SOFTWARE\Classes\CLSID\
   -
   -
   Untuk merubah info tip pada menu My Computers
   -
   
{20D04FE0-3AEA-1069-
   Ubah pada value INFO TIP menjadi =
   
A2D8-08002B30309D}, 
   Show the disk drives and hardware connected to this computer
   
HKLM\SOFTWARE\Classes\CLSID\
   -
   -
   Untuk merubah info tip pada menu My Documents
   -
   
{450D8FBA-AD25-11D0-
   Ubah pada value INFO TIP menjadi =
   
98A8-0800361B1103}, 
   Contains letters, reports

RE: [ITCENTER] Virus Rontokbro

2005-10-30 Thread Paten malik Akbar 
Coba cari di avast.com yg free trail, mudah-mudahan membantu. 

-Original Message-
From: ITCENTER@yahoogroups.com [mailto:[EMAIL PROTECTED] On Behalf
Of S.Hikmat
Sent: Sunday, October 30, 2005 8:21 PM
To: ITCENTER@yahoogroups.com
Subject: [ITCENTER] Virus Rontokbro

Hello ITCENTER,

  Ada yg dapat bantu cara mengatasi virus baru "RontokBro" ?

--
Best regards,
 S.Hikmat




-- 
www.itcenter.or.id - Komunitas Teknologi Informasi Indonesia 
Info, Gabung, Keluar, Mode Kirim : [EMAIL PROTECTED] 
:: Hapus bagian yang tidak perlu (footer, dst) saat reply! :: 
## Jobs: itcenter.or.id/jobs ## Bursa: itcenter.or.id/bursa ##
$$ Iklan/promosi : www.itcenter.or.id/sponsorship $$

[@@] Jaket ITCENTER tersedia di http://shop.itcenter.or.id 

 
Yahoo! Groups Links



 









-- 
www.itcenter.or.id - Komunitas Teknologi Informasi Indonesia 
Info, Gabung, Keluar, Mode Kirim : [EMAIL PROTECTED] 
:: Hapus bagian yang tidak perlu (footer, dst) saat reply! :: 
## Jobs: itcenter.or.id/jobs ## Bursa: itcenter.or.id/bursa ##
$$ Iklan/promosi : www.itcenter.or.id/sponsorship $$

[@@] Jaket ITCENTER tersedia di http://shop.itcenter.or.id 

 
Yahoo! Groups Links

<*> To visit your group on the web, go to:
http://groups.yahoo.com/group/ITCENTER/

<*> To unsubscribe from this group, send an email to:
[EMAIL PROTECTED]

<*> Your use of Yahoo! Groups is subject to:
http://docs.yahoo.com/info/terms/