Balthazor 1 Report post Posted August 31, 2007 Icon bar tu yg mane? Ke toolbar yg virus ni tukar yg jd kaler ijau tu?Kalo yg tu, aku da bagitau kat atas tu..yg wallpaper tuh aku perasan ko dah buat yg toolbar kat atas tuh kalo korang perasan cuba masuk My computer pastu perhatikan kat atas tuh kan warna lain Quote Share this post Link to post Share on other sites
johnburn 6 Report post Posted August 31, 2007 yg wallpaper tuh aku perasan ko dah buat yg toolbar kat atas tuh kalo korang perasan cuba masuk My computer pastu perhatikan kat atas tuh kan warna lainKalo bukan kat toolbar tu, katne? Bleh bg screenshot? Quote Share this post Link to post Share on other sites
Balthazor 1 Report post Posted August 31, 2007 Untuk buang gambar tu plak masuk registry editor, pergi ke entri:HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbardan delete BackBitmapShellKalo rase nak tukar gambar lain, takyah delete entri tu, just tukar valuenye ke path untuk gambar yg nak digunakan (bitmap jer)..sori dah nampak thanks....but virus tuh leh masuk kedalam another drive like D or E .....ada satu folder EXE kat dalam tuh Quote Share this post Link to post Share on other sites
TonikCapGajah2013 175 Report post Posted August 31, 2007 Kepada sapa2 nak cuba dan tak ada kasperskysebelum uji lebih baik buat satu restore point.lebih selamat kalau backup terus partition C:NOD32 macamana? Quote Share this post Link to post Share on other sites
Balthazor 1 Report post Posted August 31, 2007 Kepada sapa2 nak cuba dan tak ada kasperskysebelum uji lebih baik buat satu restore point.lebih selamat kalau backup terus partition C:NOD32 macamana? jangan!!!!!! jangan cuba ngan restore point........ia x jadi.........cara terbaik nak cuba pakai la Goback atau Ghost Quote Share this post Link to post Share on other sites
johnburn 6 Report post Posted September 1, 2007 (edited) jangan!!!!!! jangan cuba ngan restore point........ia x jadi.........cara terbaik nak cuba pakai la Goback atau GhostYup, sbb virus ni kaco registry nih:HKLM\SOFTWARE\Policies\Microsoft\Windows\Installer\LimitSystemRestoreCheckpointing >> (disable Windows Installer dari create restore point)HKLM\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore\DisableSR >> (disable system restore)HKLM\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore\DisableConfig >> (disable link System Restore Settings dlm Restore interface dan Control Panel > System > System Restore page)Nak baiki balik, tukar value untuk entri tu jd 0 Edited September 1, 2007 by johnburn Quote Share this post Link to post Share on other sites
Balthazor 1 Report post Posted September 1, 2007 ada antivirus nih nama dia Ashampoo Antivirus........aku test ngan AV nih impressive AV nih leh detect.......... .........aku extact terus keluar warning virus kena delete...................x infect PC aku pun ................ Quote Share this post Link to post Share on other sites
johnburn 6 Report post Posted September 1, 2007 ada antivirus nih nama dia Ashampoo Antivirus........aku test ngan AV nih impressive AV nih leh detect.......... .........aku extact terus keluar warning virus kena delete...................x infect PC aku pun ................Kalo dah kene infect, AV tu bleh heal tak?AV lain camne? Da ade yg bleh detect virus ni? Quote Share this post Link to post Share on other sites
Balthazor 1 Report post Posted September 1, 2007 Kalo dah kene infect, AV tu bleh heal tak?AV lain camne? Da ade yg bleh detect virus ni?AV lain AVG aku dah test......dia detect but aku still x puas hati.....rasa ada bende miss.......aku rasa pakai AV Ashampoo ni ok gak leh Delete ngan Clean infected files sekali...........cuba ko download AV tuh pastu ko update dan pastu ko EXTRACT Virus Lim Kok Wing tu.......ada keluar warning........... AVira aku dah update tengah test....... Quote Share this post Link to post Share on other sites
TonikCapGajah2013 175 Report post Posted September 1, 2007 Yup, sbb virus ni kaco registry nih:HKLM\SOFTWARE\Policies\Microsoft\Windows\Installer\LimitSystemRestoreCheckpointing >> (disable Windows Installer dari create restore point)HKLM\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore\DisableSR >> (disable system restore)HKLM\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore\DisableConfig >> (disable link System Restore Settings dlm Restore interface dan Control Panel > System > System Restore page)Nak baiki balik, tukar value untuk entri tu jd 0Dah try ker?Aku cuba buat ok. Jadi.Cuba ko terangkan macamana ko guna Restore Point tu.. Quote Share this post Link to post Share on other sites
johnburn 6 Report post Posted September 1, 2007 Dah try ker?Aku cuba buat ok. Jadi.Cuba ko terangkan macamana ko guna Restore Point tu..Aku tak test pn system restore tu, cume ape yg gitau tu berdasarkan code asal virus tu jer (sbb aku ade code nye)...WriteRegistry.RegWrite "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\noFolderOptions", "1", "REG_DWORD" WriteRegistry.RegWrite "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\DisableRegistryTools", "1", "REG_DWORD" WriteRegistry.RegWrite "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\Disabletaskmgr", "1", "REG_DWORD" WriteRegistry.RegWrite "HKLM\SOFTWARE\Policies\Microsoft\Windows\Installer\DisableMSi", "1", "REG_DWORD" WriteRegistry.RegWrite "HKLM\SOFTWARE\Policies\Microsoft\Windows\Installer\LimitSystemRestoreCheckpointing", "1", "REG_DWORD" WriteRegistry.RegWrite "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore\DisableSR", "1", "REG_DWORD" WriteRegistry.RegWrite "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore\DisableConfig", "1", "REG_DWORD" Quote Share this post Link to post Share on other sites
TonikCapGajah2013 175 Report post Posted September 1, 2007 ok.. boleh guna restore point. sebab kita simpan fail registry yang belum dikacau. Quote Share this post Link to post Share on other sites
maniack 0 Report post Posted September 9, 2007 Removal tool utk virus ' IT suck at LKW.exe'http://www.savefile.com/files/1041623 Quote Share this post Link to post Share on other sites
ApoNie 0 Report post Posted September 9, 2007 (edited) bagus aidea buat file reg tu.. hokhokhokhtp untuk geekz remover, rename jer file tu jadik *.scr pon bleh.. Edited September 9, 2007 by ApoNie Quote Share this post Link to post Share on other sites
maniack 0 Report post Posted September 11, 2007 hehe.. saje try2.. aku pon baru je blajar sebenarnye.. UGPM bro ApoNie Quote Share this post Link to post Share on other sites
