RE: [ITCENTER] Cara membersihkan W32/Kang.A - I (Bonus Lebaran Vaksincom)
Clear dengan anti virus Avast Gratisan Versi Kang.A & Kang.B Coba menggunakan Anti Virus Gratisan dar Avast lumayan Lebih ringan Download Free Trail dari Avast.com Mereka kirim no aktifasi Caba Scan...lumayan lebih cepet. -Original Message- From: ITCENTER@yahoogroups.com [mailto:[EMAIL PROTECTED] On Behalf Of Rika Trenita Sent: Thursday, October 27, 2005 1:13 PM To: [EMAIL PROTECTED]; ITCENTER@yahoogroups.com Subject: [ITCENTER] Cara membersihkan W32/Kang.A - I (Bonus Lebaran Vaksincom) Cara membersihkan W32/Kang.A - I Keterangan Varian W32.Kang Kang.A Kang.B-D, F-H Kang.E Kang.I Terminate proses virus Ccapps.exe Winword.exe Bervariasi Tskmgr.exe Gunakan perintah "taskkill " dari MS DOS Prompt C:\Taskkill /f /im nama proses File yang dihapus C:\Windows\system32 C:\windows\system32 C:\Windows\system32 C:\Windows\Fonts Ccapps.exe Winword.exe Bervariasi Tskmgr.exe Winlog.dat Winlog.dat Kangen.doc Kangen.doc Root C:\ Root C:\ Root C:\ C:\Windows\System32 Folder !Submit Folder !Submit Selamat ulang tahun meyer.exe syslove.exe Kangen.exe Kangen.exe readme123.exe C:\Windows C:\Windows passMe.txt rundll32.exe Root C:\ untukmu.exe Folder !Submit C:\My Documents and settings love.dot dan love1.dot Ukuran file virus 64 kb, untuk kangen.doc 2kb 72 kb Bervariasi (105 atau 81 kb) 48 kb, 1-2 Kb untuk file love.dot dan love1.dot Hapus option pada [Msconfig] Rest In peace Rest In peace Witta I Love You Ccapps Ccapps Bervariasi (dengan lokasi C:\Windows\system32) Tskmgr.exe winword Hapus Registry Key Ccapps FSysApp HKLM\Software\Microsoft\Windows\ Ccapps LoadService Local Service Current_version\Run LoadService OSA Security Symrun HKCU\Software\Microsoft\ - - about:tumero - internet Explorer\main, start page HKCU\Software\Microsoft\Windows\ - - NoDispCPL - CurrentVersion\Policies\System HKCU\Software\Microsoft\Windows - - NoFolderOptions - \CurrentVersion\Policies\Explorer HKLM\Software\Microsoft\ - - . RegisteredOrganization = Your Organization Name - WindowsNT\CurrentVersion . RegisteredOwner = Your User Name HKLM\SOFTWARE\Microsoft\ - - OrgOwner = ToMErO yOu toMErO mE - Windows\CurrentVersion HKCU\Control Panel\International - - o s1159 = ToNgam Meyer menjadi AM - o s2359 = RogaTMan TaMPubOLon menjadi PM HKLM\SOFTWARE\Classes\CLSID\ - - Untuk merubah info tip pada menu My Computers - {20D04FE0-3AEA-1069- Ubah pada value INFO TIP menjadi = A2D8-08002B30309D}, Show the disk drives and hardware connected to this computer HKLM\SOFTWARE\Classes\CLSID\ - - Untuk merubah info tip pada menu My Documents - {450D8FBA-AD25-11D0- Ubah pada value INFO TIP menjadi = 98A8-0800361B1103}, Contains letters, reports
RE: [ITCENTER] Virus Rontokbro
Coba cari di avast.com yg free trail, mudah-mudahan membantu. -Original Message- From: ITCENTER@yahoogroups.com [mailto:[EMAIL PROTECTED] On Behalf Of S.Hikmat Sent: Sunday, October 30, 2005 8:21 PM To: ITCENTER@yahoogroups.com Subject: [ITCENTER] Virus Rontokbro Hello ITCENTER, Ada yg dapat bantu cara mengatasi virus baru "RontokBro" ? -- Best regards, S.Hikmat -- www.itcenter.or.id - Komunitas Teknologi Informasi Indonesia Info, Gabung, Keluar, Mode Kirim : [EMAIL PROTECTED] :: Hapus bagian yang tidak perlu (footer, dst) saat reply! :: ## Jobs: itcenter.or.id/jobs ## Bursa: itcenter.or.id/bursa ## $$ Iklan/promosi : www.itcenter.or.id/sponsorship $$ [@@] Jaket ITCENTER tersedia di http://shop.itcenter.or.id Yahoo! Groups Links -- www.itcenter.or.id - Komunitas Teknologi Informasi Indonesia Info, Gabung, Keluar, Mode Kirim : [EMAIL PROTECTED] :: Hapus bagian yang tidak perlu (footer, dst) saat reply! :: ## Jobs: itcenter.or.id/jobs ## Bursa: itcenter.or.id/bursa ## $$ Iklan/promosi : www.itcenter.or.id/sponsorship $$ [@@] Jaket ITCENTER tersedia di http://shop.itcenter.or.id Yahoo! Groups Links <*> To visit your group on the web, go to: http://groups.yahoo.com/group/ITCENTER/ <*> To unsubscribe from this group, send an email to: [EMAIL PROTECTED] <*> Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/