Jump to content

Impreza_2004

Members
 View Profile  See their activity

  • Content Count

    1409

  • Joined

  • Last visited

Posts posted by Impreza_2004

  8. Posted · Report reply

    info dari trendmicro:

    WORM_AGOBOT.FD:

    Solution:

    AUTOMATIC REMOVAL INSTRUCTIONS

    To automatically remove this malware from your system, please refer to the Trend Micro Damage Cleanup Engine and Template.

    MANUAL REMOVAL INSTRUCTIONS

    Restarting in Safe Mode

    • On Windows NT (VGA mode)

    1. Click Start>Settings>Control Panel.

    2. Double-click the System icon.

    3. Click the Startup/Shutdown tab.

    4. Set the Show List field to 10 seconds and click OK to save this change.

    5. Shut down and restart your computer.

    6. Select VGA mode from the startup menu.

    • On Windows 2000

    1. Restart your computer.

    2. Press the F8 key, when you see the Starting Windows bar at the bottom of the screen.

    3. Choose the Safe Mode option from the Windows Advanced Options Menu then press Enter.

    • On Windows XP

    1. Restart your computer.

    2. Press F8 after the Power-On Self Test (POST) is done. If the Windows Advanced Options Menu does not appear, try restarting and then pressing F8 several times after the POST screen.

    3. Choose the Safe Mode option from the Windows Advanced Options Menu then press Enter.

    Note: After performing all the solutions for the removal of this malware, please restart your system normally, and run your Trend Micro antivirus product.

    <-- added by leilanij 071005 -->

    Removing Autostart Entries from the Registry

    Removing autostart entries from the registry prevents the malware from executing during startup.

    1. Open Registry Editor. To do this, click Start>Run, type Regedit, then press Enter.

    2. In the left panel, double-click the following:

    HKEY_LOCAL_MACHINE>Software>Microsoft>

    Windows>CurrentVersion>Run

    3. In the right panel, locate and delete the entry:

    Winsock Driver = "Nvscv32.exe"

    4. In the left panel, double-click the following:

    HKEY_LOCAL_MACHINE>Software>Microsoft>

    Windows>CurrentVersion>RunServices

    5. In the right panel, locate and delete the entry:

    Winsock Driver = "Nvscv32.exe"

    6. Close Registry Editor.

    NOTE: If you were not able to terminate the malware process from memory as described in the previous procedure, restart your system.

    Additional Windows ME/XP Cleaning Instructions

    Running Trend Micro Antivirus

    Scan your system with Trend Micro antivirus and delete all files detected as WORM_AGOBOT.FD. To do this, Trend Micro customers must download the latest pattern file and scan their system. Other Internet users can use HouseCall, Trend Micro’s free online virus scanner.

    Applying Patches

    Download the latest patch. Information and download links on the vulnerabilities exploited by the malware can be found at the following links:

    Microsoft Security Bulletin MS03-026

    Microsoft Security Bulletin MS03-001

    Microsoft Security Bulletin MS03-007

  9. Posted · Report reply

    info dari viruspool:

    TR/Agent.Small.D.1:

    Detected by: Avira AntiVir/Win32-Console Version 7.4.0.15 19-Oct-2007

    Aliases:

    Trojan.Agent.Small.D:

    SOFTWIN BitDefender BDSCAN 1.01 19-Oct-2007

    Virus.Win32.Small.r:

    IKARUS T3SCAN V1.27 T3 V1.01.13 19-Oct-2007

    Virus:Win32/Small.R:

    Microsoft MP CL 1.2908 19-Oct-2007

    Win32/Enfomend.A:

    CA VET RESCUE 8.3.0.0 19-Oct-2007

    Win32/Small.U:

    GRISoft AVG 7.5.488/1079 19-Oct-2007

    Win32:Small-EAE [Trj]:

    ALWIL avast! ashCmd 4.7/0782-3 19-Oct-2007

    WORM_SMALL.HYN:

    Trend Micro VSCANTM 3.00-1009/786 19-Oct-2007

  11. Posted · Report reply

    info dari computerhope:

    Error loading Operating System after Windows XP setup:

    Issue:

    Error loading Operating System after Windows XP setup.

    Cause:

    This issue is caused by any of the below reasons.

    1. The computer's BIOS does not support the computer hard disk drive's size or settings.

    2. Computer Hard disk drive is not properly setup in CMOS.

    3. Issue with drive's partitions.

    Solution:

    The computer's BIOS does not support the computer hard disk drive's size or settings

    This issue is often caused when the BIOS does not properly detect the hard disk drive. To resolve this issue, update the computer motherboard's BIOS. Additional information and help with upgrading the BIOS can be found on document CH000236.

    Computer Hard disk drive is not properly setup in CMOS:

    Verify that the computer's hard disk drive is properly setup in CMOS setup. Additional information about getting into CMOS setup can be found on document CH000192.

    Once in CMOS, verify the below hard disk drive settings.

    1. Verify the hard disk drive is detected.

    2. Try changing the "Access mode" on the hard disk drive to "Large" or "LBA". This setting may vary

    depending on the type of BIOS.

    Issue with drive's partitions:

    This issue can be cause if the disk drives are not properly setup or have been changed by another program, such as a utility that comes with a Linux distribution. To resolve this issue, delete and recreate all the partitions before running the Windows XP setup.

  12. Posted · Report reply

    aku nak tukar window dari vista ke xp professional..

    vista ni baru lg so tak brape pandai nak guna... rasa cam leceh plak sebab kalo wat keje bila

    masuk pc lain yg tak pakai vista tak bleh bukak.. aku try format.. tp x blh..

    hard disk not found. pastikan hardisk on . aku dah on kan hard disk kat power option> turn off hard disk= never.. tp

    still dapat error yg sama. kat mana lg aku blh setting?

    da try tak format guna win98bootdisk??...kalo da try comment kat sini :)..

  13. Posted · Report reply

    Assalamualaikum.

    Nak mintak tolong kepada kawan-kawan di sini sesiapa yg tau apa masalah saya. Saya punya pc tak boleh buka Windows Task Manager. Tekan cltl + alt + del tak boleh, ctrl + shift + esc tak boleh, right click kat Taskbar pun tak boleh open Windows Task Manager. Dia keluar berkelip/flash sesaat kemudian hilang. Ada sesapa yg tau tak macamana nak selesaikan masalah ni. Adakah windows pc saya diserang virus yg merosakkan Windows Task Manager. Macamana cara nak kembalikan Windows Task Manager saya. Perlu ke format semula windows? Harap bantuan daripada kawan semua.

    leh try guna autorun eater :)...

  21. Posted · Report reply

    info dari prevx:

    RESFIX32V.EXE:

    Status:

    BAD

    Name:

    RESFIX32V.EXE

    Malware Group:

    TROJAN.MKTROJAN.A

    The filename RESFIX32V.EXE was first seen on Dec 26 2007 in SPAIN. It has also been seen in the following geographical regions of the Prevx community:

    * NETHERLANDS on Dec 26 2007

    * CANADA on Dec 28 2007

    The filename RESFIX32V.EXE refers to many versions of an executable program.

    The most common file size is 354,816 bytes. But the following file sizes have also been seen:

    * 6,546 bytes

    * 6,545 bytes

    The unsafe files using this name are associated with the malware group TROJAN.MKTROJAN.A.

    These files have no vendor, product or version information specified in the file header.

    RESFIX32V.EXE has been seen to perform the following behavior(s):

    * The Process is packed and/or encrypted using a software packing process

    * Adds a Registry Key (RUN) to auto start Programs on system start up

    * Registers a Windows APPINIT DLL To be loaded in all processes

    * This Process Creates Other Processes On Disk

    * Executes a Process

    * Registers a Dynamic Link Library File

    RESFIX32V.EXE has been the subject of the following behavior(s):

    * Deleted as a process from disk

    * Writes to another Process's Virtual Memory (Process Hijacking)

    * Executed as a Process

    * Added as a Registry auto start to load Program on Boot up

    RESFIX32V.EXE can also use the following file names:

    * 21182389.SVD

    * RCX2D.TMP

×
×
  • Create New...