Kamu udah kena virus BRONTOK. Dia mendisable semua fungsi RUN, REGEDIT ....
Kalo datanya gak penting .....mendingan di reformat. Saya butuh 2 hari membersihkannya :< Gak bisa pakai UnHook.inf dll... Usahakan bisa install beberapa antivirus. ----- Original Message ----- From: "Umay Mutiara" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Wednesday, October 11, 2006 2:44 PM Subject: Re: [ITCENTER] registry berubah jadi notepad > coba copy script dibawa ini ke notepad kemudian simapn dengan nama > misalnya repair.inf, setelah itu tinggal di klik kanan file nya pilih > install: > > [Version] > Signature="$Chicago$" > Provider=Vaksincom > > [DefaultInstall] > AddReg=UnhookRegKey > DelReg=del > > [UnhookRegKey] > HKLM, Software\CLASSES\batfile\shell\open\command,,,"""%1"" %*" > HKLM, Software\CLASSES\comfile\shell\open\command,,,"""%1"" %*" > HKLM, Software\CLASSES\exefile\shell\open\command,,,"""%1"" %*" > HKLM, Software\CLASSES\piffile\shell\open\command,,,"""%1"" %*" > HKLM, Software\CLASSES\regfile\shell\open\command,,,"regedit.exe "%1"" > HKLM, Software\CLASSES\scrfile\shell\open\command,,,"""%1"" %*" > HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell,0, > "Explorer.exe" > HKLM, SYSTEM\ControlSet001\Control\SafeBoot, AlternateShell,0, "cmd.exe" > HKLM, SYSTEM\CurrentControlSet\Control\SafeBoot, AlternateShell,0, > "cmd.exe" > > [del] > HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution > Options\Msconfig.exe > HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution > Options\regedit.exe > HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution > Options\cmd.exe > HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution > Options\taskmgr.exe > > Ok Semoga berhasil.. > > cahyanto anto <[EMAIL PROTECTED]> wrote: > kemarin dah saya coba pake online scan my-etrust.com > hanya saja sekarang registry tdk bisa dibuka, n da pesan klo > registry di disable oleh administrator. > untuk mengaktifkannya lagi gimana caranya yah??? > maaf masih amatiran nih... :) > > On 10/10/06, Mirza Khadnezar <[EMAIL PROTECTED]> wrote: > > > > virus sejenis brontok atau apa itu lupa > > coba deh scan online > > gua sih pake my-etrust.com > > ada juga yang pake vaksin.com > > ada avg ada trendmicro > > > > rata2 udah bisa kok > > > > saran gua sih > > bersiin > > terus pindahin data2(backup) > > install ulang > > karena biar udah sukses di repir/removed tetep jadi kurang syipp > windows > > nya > > > > On 10/9/06, cahyanto anto <[EMAIL PROTECTED] > <cahyanto.99%40gmail.com>> > > wrote: > > > > > > Mo tanya dunk, pake antivirus pa yg ampuh untuk betulin registry gw > yg > > > berubah jadi notepad. > > > gw dah pake mcaffe terupdate tp gw scan ga ktemu, pernah jg di > gandeng > > ma > > > avast antivirus, n di install ulang, tapi tetep ja > > > registry gw jd notepad berisi sepeti karakter2 kode ASCI. > > > thank's > > > > > > [Non-text portions of this message have been removed] > > > > > > > > > > > > > [Non-text portions of this message have been removed] > > > > > > > > [Non-text portions of this message have been removed] > > > > > > > Best Regards, > > > Umay Mutiara > ======================================================== > PT Vaksincom > Network antivirus Specialist & Data Recovery > Jl Tanah Abang III No 19E. Jakarta 10160 > Phone : 021-3456850 fax:021-3456851 > website : http://www.vaksin.com > Email :[EMAIL PROTECTED] / [EMAIL PROTECTED] > Messenger: [EMAIL PROTECTED] > ======================================================== > > > > > [Non-text portions of this message have been removed] > > > > > > -- > www.itcenter.or.id - Komunitas Teknologi Informasi Indonesia > Gabung, Keluar, Mode Kirim : [EMAIL PROTECTED] > ## Jobs: itcenter.or.id/jobs ## Bursa: itcenter.or.id/bursa ## > > ## Jaket ITCENTER tersedia di http://shop.itcenter.or.id > > Yahoo! Groups Links > > > > > > > > > > -- www.itcenter.or.id - Komunitas Teknologi Informasi Indonesia Gabung, Keluar, Mode Kirim : [EMAIL PROTECTED] ## Jobs: itcenter.or.id/jobs ## Bursa: itcenter.or.id/bursa ## ## Jaket ITCENTER tersedia di http://shop.itcenter.or.id Yahoo! Groups Links <*> To visit your group on the web, go to: http://groups.yahoo.com/group/ITCENTER/ <*> Your email settings: Individual Email | Traditional <*> To change settings online go to: http://groups.yahoo.com/group/ITCENTER/join (Yahoo! ID required) <*> To change settings via email: mailto:[EMAIL PROTECTED] mailto:[EMAIL PROTECTED] <*> To unsubscribe from this group, send an email to: [EMAIL PROTECTED] <*> Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/
