fyi,
Subject: Fw: Cara nangani Virus RE: Your Password
Akhir-akhir ini beredar virus RE: Your Password
Cara nangani virus RE: Your Password, disadur dari salah satu situs dan ringkasannya
sbb:
1. e-mail yang mengandung file password.exe segera delete dan kosongkan folder Delete
Items dengan klik Edit --> Empty Delete Items folder.
2. Jalankan komputer saudara dalam status Safe Mode, dengan cara restart komputer dan
tekan tombol F8 sampai ada pilihan (Normal, Safe Mode, Step By Step dll). Pilih Safe
Mode Kemudian enter.
3. Cari File :
setup.exe pada direktori Start MenuProgramsStartup
status.ini pada direktori/sub direktori Windows
Win64.ini pada direktori/sub direktori Windows
Hapus File tersebut dan kosongkan Recycle Bin .
3. Restart Komputer Saudara.
Kalau ingin jelasnya silahkan baca dibawah ini .
-------------------------------------- Naskah Aslinya
--------------------------------------------------------------------------------------------------------------------------
How to Delete the "Your Password" Virus From Your Windows Computer.
Mike Ely, TIS
Print-Friendly Version
So, you got the bug, eh? Fortunately, it doesn't do any real damage (other than
sending copies of itself to all your friends - how embarrassing), and it's very easy
to remove. I have written step-by-step instructions for all the vulnerable versions of
Windows. Although this document is long, the steps for your particular version of
Windows is not. Just pay attention, take things a step at a time and BE PATIENT.
Here's how to rid your computer of the bug forever:
1) Start your computer in Safe Mode
If your computer runs Windows 95, Windows 98, or Windows ME: Restart your computer. As
the computer starts up, hold down the "Control" (CTRL) key. You will be presented with
a menu. Use the arrow keys on your keyboard to highlight Safe Mode and press Enter (or
Return).
If your computer runs Windows 2000 or XP:
Restart your computer. When you see the black screen with the progress bar on the
bottom, press the F8 key. A menu will appear. Use the arrow keys on your keyboard to
highlight Safe Mode, and press Enter (or Return). When prompted, log in as the
Administrator.
All Windows versions:
After following the instructions above, your computer will load. A window will appear,
informing you that Windows is running in Safe Mode, and the words "Safe Mode" will
appear on all four corners of the screen. If this is not the case, your computer is
NOT running in Safe Mode. You will need to restart your computer and follow the
instructions for your computer again.
2) Remove the bug
The virus exists in two different directories as a total of three files. Once again,
the location of some of these files depends on which version of Windows you were
using. For tech-savvy users, the path to the virus is:
* Start MenuProgramsStartupsetup.exe
* %WinDir%status.ini
* %WinDir%Win64.ini
For everyone else, here's how to find and delete the virus.
If your computer runs Windows 95 or Windows 98:
Double-click on the My Computer icon on your desktop. Double click on the C drive.
Double click on Windows. Scroll down. The virus files in this folder are called
status.ini and Win64.ini. Delete both of these files and empty the Recycle bin (to do
this, right-click on the Recycle Bin and select Empty Recycle Bin. Next, double-click
on the folder icon that says All Users. Double-click on the folder icon that says
Start Menu. Double-click on the folder icon that says Startup. The virus file is
called setup.exe. Delete it and empty your recycle bin. Go to step 3. You can now
restart your computer, and it is virus free. Now, update your computer so that it is
no longer vulnerable. Go to your Start Menu, choose Windows Update, click on the link
to Update My Computer, and install all the Critical Updates which you are offered.
Restart your computer and do this again. You may need to do this three of four times
before there are no more Critical Updates. Please do so - your computer will remain
vulnerable to viruses until this has completed. Then, run Windows Update about once
per month to ensure that your system is up-to-date.
If your computer runs Windows 2000:
Double-click on the My Computer icon on your desktop. Double-click on the C drive.
Double-click on WINNT. Scroll down. The virus files in this folder are called
status.ini and Win64.ini. Delete both of these files and empty the Recycle bin (to do
this, right-click on the Recycle Bin and select Empty Recycle Bin. Close the window,
and double-click on the My Computer icon again. Double-click on the C drive.
Double-click on Documents and Settings. Double-click on the folder corresponding to
the user name you were logged in as when you contracted the virus. Double-Click on
Start Menu. Double-click on Programs. Double-click on Startup. The virus file is
called setup.exe. Delete it and empty your recycle bin. Go to step 3.
If your computer runs Windows ME:
Right click the My Computer icon on the Desktop and click on Properties. Click on the
Performance tab. Click on the File System button. Click on the Troubleshooting tab.
Put a check mark next to 'Disable System Restore'. Click OK. Click Yes to restart your
computer. When the computer restarts, follow the instructions for Windows 95 and 98
computers to remove the virus. IMPORTANT: You will also need to remove the virus files
from the restore folder. To do this, double-click on the My Computer icon on the
desktop. On the window that opens, go to the View menu. Choose Folder Options. Click
the View tab. In the Advanced Settings box, click Show All Files, and then click OK.
Double-click on the C drive. You should see a dimmed-out folder called _RESTORE.
Double-click on it. This folder is a mirror image of your C drive. You will find the
virus files in the same relative locations as they appear on the C drive. Delete them
as you did from the instructions for computers running Windows 95 and 98. Restart your
computer and re-enable System Restore by followin the steps to disable it, but by
removing the check mark next to 'Disable System Restore.' You will need to restart
your computer again after this is done.
If your computer runs Windows XP:
Right click the My Computer icon on the Desktop and click on Properties. Click on the
System Restore tab. Put a check mark next to 'Turn off System Restore on All Drives'.
Click OK. Click Yes to restart your computer. When the computer restarts, follow the
instructions for Windows 2000 to remove the virus. IMPORTANT: You will also need to
remove the virus files from the restore folder. To do this, double-click on the My
Computer icon on the desktop. On the window that opens, go to the View menu. Choose
Folder Options. Click the View tab. In the Advanced Settings box, click Show All
Files, and then click OK. Double-click on the C drive. You should see a dimmed-out
folder called _RESTORE. Double-click on it. This folder is a mirror image of your C
drive. You will find the virus files in the same relative locations as they appear on
the C drive. Delete them as you did from the instructions for computers running
Windows 2000. Restart your computer and re-enable System Restore by followin the steps
to disable it, but by removing the check mark next to 'Turn off System Restore on All
Drives.' You will need to restart your computer again after this is done.
3) Make sure your system is no longer vulnerable
You can now restart your computer, and it is virus free. Now, update your computer so
that it is no longer vulnerable. Go to your Start Menu, choose Windows Update, click
on the link to Update My Computer, and install all the Critical Updates which you are
offered. Restart your computer and do this again. You may need to do this three of
four times before there are no more Critical Updates. Please do so - your computer
will remain vulnerable to viruses until this has completed. Then, run Windows Update
about once per month to ensure that your system is up-to-date.
This Page was last update: Thursday, June 13, 2002 at 1:22:03 PM
Copyright 2002 Technology and Information Services
