Dear Rekan rekan  ITer

Files di C:\WINDOWS\system32\spool\PRINTERS memang sdh empty.

Jadi kalau mau masuk share folder, runing dulu files autorun.exe,spoolsv.exe, 
dan xxxx.files.exe (xxxx Random).
Setelah itu semua extention diatas berubah menjadi inf & doc.
Jadi komputer yang akses ke share folder pasti terinfeksi.

di msconfig sdh dimatikan.
di registry editor HKLM\software\microsoft\windows\run  juga sdh clean.

ada pencerahan?


salam
Daniel Handojo

----- Original Message ----
From: Rachmat Destriana <[EMAIL PROTECTED]>
To: "[email protected]" <[email protected]>
Sent: Monday, November 12, 2007 2:07:56 PM
Subject: RE: [ITCENTER] Membasmi Virus thumbs









  


    
            Try this way.....



C:\WINDOWS\system32 \spool\PRINTERS and delete the files there. I found 
'00020.SHD' and '00020.SPL'. Now turn your printer back on and restart the 
service. Check task manager, spoolsv.exe should be at 00%. Whew!



Problemnya adalah :

SPOOLSV.EXE selalu bekerja full 99%, sehingga pc menjadi sangat lambat.

Ini dapat di lihat di Task Manager di processes dan Performance



Jika ada cara yg lebih topcer ... just send it back ok.......



Regards,

~ Rachmat Destriana ~



____________ _________ _________ __

From: [EMAIL PROTECTED] s.com [mailto:[EMAIL PROTECTED] s.com] On Behalf Of 
Daniel Handojo

Sent: Monday, November 12, 2007 11:44 AM

To: [EMAIL PROTECTED] s.com

Subject: [ITCENTER] Membasmi Virus thumbs



Dear Rekan rekan,



mau tanya cara yang paling jitu untuk membasmi virus spoolsv,

Biasanya yang kena ini komputer jadi lambat.



penyebarannya dari Flashdisk.



Dia clone dirinya menjadi 3 files :



1. autorun.inf

2. TextXXXX.doc

3. Spoolsv.doc. exe



Salam

Daniel Handojo












__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

[Non-text portions of this message have been removed]



-- 
www.itcenter.or.id - Komunitas Teknologi Informasi Indonesia 
Gabung, Keluar, Mode Kirim : [EMAIL PROTECTED] 

 
Yahoo! Groups Links

<*> To visit your group on the web, go to:
    http://groups.yahoo.com/group/ITCENTER/

<*> Your email settings:
    Individual Email | Traditional

<*> To change settings online go to:
    http://groups.yahoo.com/group/ITCENTER/join
    (Yahoo! ID required)

<*> To change settings via email:
    mailto:[EMAIL PROTECTED] 
    mailto:[EMAIL PROTECTED]

<*> To unsubscribe from this group, send an email to:
    [EMAIL PROTECTED]

<*> Your use of Yahoo! Groups is subject to:
    http://docs.yahoo.com/info/terms/
 

Kirim email ke