Neh Cara ngilangin virus brontok....
a.Klik *Start > Run*.

b.Ketik *regedit*

c.Klik *OK*.

d.Masuk ke registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

e.Disebelah kanan delete file:

"Bron-Spizaetus" = "%Windir%\INF\norBtok.exe"

f. Masuk ke registry:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

g.Disebelah kanan delete file:

"Tok-Cirrhatus" = "%UserProfile%\Local Settings\Application Data\smss.exe"

h.Masuk ke registry:


HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

 i. Disebelah kanan , reset value ke default value seperti dibawah:

"Shell" = "Explorer.exe"

 j. Masuk ke registry:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

 k.Disebelah kanan , reset value ke default value seperti dibawah:

"NoFolderOptions" = "0" or "NoFolderOptions" = "1"

 l. Masuk ke registry:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\explorer\advanced

m. Disebelah kanan , reset value ke default value seperti dibawah:

"Hidden" = "0" or "Hidden" = "1"
"ShowSuperHidden" = "0" or "ShowSuperHidden" = "1"
"HideFileExt" = "0" or "HideFileExt" = "1"

n.Keluar dari Registry Editor.

o. Untuk menghapus scheduled yang udah di bikin virus lakukan langkah sbb:

 Klik Start, dan click Control Panel. (In Windows XP, rubah ke Classic
View.)
di Control Panel window, double klik Scheduled Tasks.
klik kanan task icon dan pilih Properties dari menu.
properties dari task akan tampil
Delete task jika ada contents yang Running dalam task pane, yang cocok
dengan file dibawah ini:*

*%Windir\Tasks\At1.job


On 11/10/05, Ibnu Hartanto <[EMAIL PROTECTED]> wrote:
>
> kayak gw tuh itu mah virus virus W32/Rontokbro.K hehehehe cara ilangin nya
> klo gk salah pernah dikasih tahu di milis ini deh..
>
> On 11/9/05, Yudie Rajagukguk <[EMAIL PROTECTED]> wrote:
> >
> > sepertinya itu mirip seperti virus zotob, ato trojan yg bulan ini jg ada
> > bbrp
> > varian yg muncul,Coba pake antivir versi 6 bs di download di
> > www.free-av.com <http://www.free-av.com> <http://www.free-av.com>
> > trus update definitionnya keluar tiap hari
> >
> > Good luck
> >
> > -----Original Message-----
> > From: "iboed" <[EMAIL PROTECTED]>
> > To: <[email protected]>
> > Date: Tue, 8 Nov 2005 14:50:31 +0700
> > Subject: [ITCENTER] Tanya virus baru
> >
> > > sebelumnya saya mengucapkan minal adzin wal fa' idzin.. mohon maaf
> lahir
> > > batin...
> > >
> > > ditempat kerja saya ada virus...
> > > -bila kita save as file maka akan muncul file yg ber extantion Exe...
> > > -sementara sebagian file exe berupa menjadi file folder bagitu di
> > exekusi
> > > langsung menuju folder my document..
> > > -bila mau shut down, begitu di clik langsung restart...
> > > -kadang komputer restart atau mati sendiri.... kadang cuman hang
> > doang...
> > >
> > > virus apa itu ya... soalnya sama Norton2003 mcAfee &e-trust ga ter
> > detek...
> > >
> > > mohon solusi dan pencerahannya...
> > >
> > > Thx banget
> > >
> > > Iboed
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > > --
> > > www.itcenter.or.id <http://www.itcenter.or.id> <
> http://www.itcenter.or.id> - Komunitas Teknologi
> > Informasi Indonesia
> > > Info, Gabung, Keluar, Mode Kirim : [EMAIL PROTECTED]
> > > :: Hapus bagian yang tidak perlu (footer, dst) saat reply! ::
> > > ## Jobs: itcenter.or.id/jobs <http://itcenter.or.id/jobs> <
> http://itcenter.or.id/jobs> ## Bursa:
> > itcenter.or.id/bursa <http://itcenter.or.id/bursa> <
> http://itcenter.or.id/bursa> ##
> > > $$ Iklan/promosi : 
> > > www.itcenter.or.id/sponsorship<http://www.itcenter.or.id/sponsorship>
> <http://www.itcenter.or.id/sponsorship>$$
> > >
> > > [@@] Jaket ITCENTER tersedia di http://shop.itcenter.or.id
> > >
> > >
> > > Yahoo! Groups Links
> > >
> > >
> > >
> > >
> > >
> > >
> >
> >
> >
> >
> >
> >
> > --
> > www.itcenter.or.id <http://www.itcenter.or.id> <
> http://www.itcenter.or.id> - Komunitas Teknologi
> > Informasi Indonesia
> > Info, Gabung, Keluar, Mode Kirim : [EMAIL PROTECTED]
> > :: Hapus bagian yang tidak perlu (footer, dst) saat reply! ::
> > ## Jobs: itcenter.or.id/jobs <http://itcenter.or.id/jobs> <
> http://itcenter.or.id/jobs> ## Bursa:
> > itcenter.or.id/bursa <http://itcenter.or.id/bursa> <
> http://itcenter.or.id/bursa> ##
> > $$ Iklan/promosi : 
> > www.itcenter.or.id/sponsorship<http://www.itcenter.or.id/sponsorship>
> <http://www.itcenter.or.id/sponsorship>$$
> >
> > [@@] Jaket ITCENTER tersedia di http://shop.itcenter.or.id
> >
> >
> > Yahoo! Groups Links
> >
> >
> >
> >
> >
> >
> >
>
>
> [Non-text portions of this message have been removed]
>
>
>
>
>
> --
> www.itcenter.or.id <http://www.itcenter.or.id> - Komunitas Teknologi
> Informasi Indonesia
> Info, Gabung, Keluar, Mode Kirim : [EMAIL PROTECTED]
> :: Hapus bagian yang tidak perlu (footer, dst) saat reply! ::
> ## Jobs: itcenter.or.id/jobs <http://itcenter.or.id/jobs> ## Bursa:
> itcenter.or.id/bursa <http://itcenter.or.id/bursa> ##
> $$ Iklan/promosi : 
> www.itcenter.or.id/sponsorship<http://www.itcenter.or.id/sponsorship>$$
>
> [@@] Jaket ITCENTER tersedia di http://shop.itcenter.or.id
>
>
> Yahoo! Groups Links
>
>
>
>
>
>
>


--
Salam,
Supenri or just call me BenQ....
Spesial penghancur VIRUS...
contact: [EMAIL PROTECTED]
or: [EMAIL PROTECTED]


[Non-text portions of this message have been removed]





-- 
www.itcenter.or.id - Komunitas Teknologi Informasi Indonesia 
Info, Gabung, Keluar, Mode Kirim : [EMAIL PROTECTED] 
:: Hapus bagian yang tidak perlu (footer, dst) saat reply! :: 
## Jobs: itcenter.or.id/jobs ## Bursa: itcenter.or.id/bursa ##
$$ Iklan/promosi : www.itcenter.or.id/sponsorship $$

[@@] Jaket ITCENTER tersedia di http://shop.itcenter.or.id 

 
Yahoo! Groups Links

<*> To visit your group on the web, go to:
    http://groups.yahoo.com/group/ITCENTER/

<*> To unsubscribe from this group, send an email to:
    [EMAIL PROTECTED]

<*> Your use of Yahoo! Groups is subject to:
    http://docs.yahoo.com/info/terms/
 



Kirim email ke