~~~~~~~Forum Diskusi Software dan Internet untuk Kristen-Katolik~~~~~~~
Ditulis 6-4-2000 jam 14:28 > 5-4-2000 20:29 Hellen
c:\windows\kak.htm <------
c:\windows\system\(name).hta <--------
c:\windows\Menu D�marrer\Programmes\D�marrage\kak.hta
c:\windows\Start Menu\Programs\StartUp\kak.hta <------------------------
In the above list, "(name)" is a random 8 character name (e.g.
98278AE0.HTA).
The AUTOEXEC.BAT file is modified to run the file KAK.HTA and then delete it
from its folder location. The system registry is also modified when the
script executes a shell registry update using regedit and the REG file
written to the local system. The registry modification is this-
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
"cAg0u"="C:\WINDOWS\SYSTEM\(name).hta"
The entry "(name)" is a random 8 character name (e.g. 98278AE0.HTA).
file-file dan registry diatas harus dihapus.
> Hi teman-teman,
> Ada yang tahu bagaimana cara membasmi "Wscript.KakWorm" ?
> TIA
> Hellen
--
Aku http://www.starindo.net/~nono/index.htm
----- Hemat Bandwith : Hapus pesan yang tidak perlu sebelum reply -----
SUBSCRIBE---> To: [EMAIL PROTECTED], Isi/Body: kosong
UNSUBSCRIBE---> To: [EMAIL PROTECTED], Isi/Body: kosong
