yurckk 0 Report post Posted April 20, 2009 Salam,Ade sesape pernah experienced ngn virus ni tak? by the way, sama ke ngn thread xleh nk update AV bukak AV nyer website tu? jwgkvsq.vmx ni yang aku perasan ade berkaitan ngn DLL/Svchost so nk kill mmg xleh.Mcm2 dah aku carik tp kebanyakan Website disabled. Maybe caused by this virus. "Oops! This link appears broken."Ni aku pny SvcHost-Netsvcs list:Code:6to4AppMgmtAudioSrvBrowserCryptSvcDMServerDHCPERSvcEventSystemFastUserSwitchingCompatibilityHidServIasIpripIrmonLanmanServerLanmanWorkstationMessengerNetmanNlaNtmssvcNWCWorkstationNwsapagentRasautoRasmanRemoteaccessScheduleSeclogonSENSSharedaccessSRServiceTapisrvThemesTrkWksW32TimeWZCSVCWmiWmdmPmSpwinmgmtwscsvcxmlprovBITSwuauservShellHWDetectionhelpsvcWmdmPmSNfyrtonThanks in advance! Quote Share this post Link to post Share on other sites
princeofsadness 0 Report post Posted April 20, 2009 run search.. search file tu.. run msconfig.. cari nama fail tu.. disablekan..nak senang guna geek remover..http://putera.forumotion.com/windows-f22/option-hilang-t1364.htm Quote Share this post Link to post Share on other sites
yurckk 0 Report post Posted April 20, 2009 Thx for you effort. tp ni xkn jadi aku rs, even DLL file xsama ngn org lain yg aku tgk having mslh sm ngn aku. ape yg aku phm virus ni inject into system. DLL injection. mmg nyampah gak r ngn virus ni.Byk website makin kena block....lg fedap jadinyer...naseb pc ofis je ni kalo pc kt rumah...format la jawabnya..hahaha...geek remover? kk aku try that...thanks... Quote Share this post Link to post Share on other sites
yurckk 0 Report post Posted April 20, 2009 Ok solved, for now sume site yg xleh msuk dah bleh. tp xtau kalo ade infection lain lg. skrg baru leh nk update AV and re-scan PC. Ok so here aku share ape yang leh removekn this d**m virus:jwgkvsq.vmx removalMirror 1: http://www.filefactory.com/file/agcga43/n/KidoKiller_rar Mirror 2: http://www.filedropper.com/kidokillerMirror 3: http://www.badongo.com/file/14547386Mirror 4: http://www.webfilehost.com/?mode=viewupload&id=3185125Mirror 5: http://www.zshare.net/download/589070553f58d8a9Mirror 6: http://www.turboupload.com/u4hj3p90bjuo/KidoKiller.rar.htmlMirror 7: http://www.youshare.com/bradwilk/a42743/DisplaySimple Quote Share this post Link to post Share on other sites
princeofsadness 0 Report post Posted April 20, 2009 ni flash virus... duk dalam registry je.. nak lagi berkesan, delete cara manual.. guna geek, kill all process... kat option folder.. show all hidden, include system file.. pastu run search.. cari fail tu, delete.. tgk2 kat c.. ada fail nama dia autorun.*check isi kandungan dgn right klik --> edit.. kalau ada nama jwgkvsqdelete autorun tu.. dah selesai semua, run AV yg dah update..Full scan.. mana2 virus yg terjumpa, delete je.. jgn quarantin.. delete tanpa was-was.. haha ::icon_lol:: Quote Share this post Link to post Share on other sites
yurckk 0 Report post Posted April 20, 2009 Haha dok dlm registry je pun tp bnde ni ade kaitan ngn network, so kalo infected baik unplug la network. and ade review aku bc "key logging" pun ade. plus byk lg yg aku rase menyusahkan in future. tp tu r aku pake KidoKiller tu. run pakai cmd je. xslh kalo tulis kt c2 kaspersky nyer. so untuk memudahkan org nanti, aku dah share dlm file hosting atas tu. ade 7 mirrors aku buat.btw cara ang mngkin leh pake gak kot. so ade options pd sape yg mencari cara nk remove virus ni nanti. thanks papehal gak ::icon_biggrin:: Quote Share this post Link to post Share on other sites
mitutoyo 0 Report post Posted April 20, 2009 kido lagi,byk varians dia a,b,c,d,& e,http://www.geekzlife.net/v1/category/home/ Quote Share this post Link to post Share on other sites
yurckk 0 Report post Posted April 24, 2009 Ehhh...file ni die inject file lain x? Sbb aku try kaspersky, banyak gile virus detect...termasuk la my documents...pelik gak aku...tp aku try bitdefender xplak detect.. Quote Share this post Link to post Share on other sites
mitutoyo 0 Report post Posted April 25, 2009 Dh try GVR 4.2 Beta baru nya? [url]sini http://forum.geekzlife.net/download/file.php?id=24&sid=a6aaffcfaaedbd13217146f57bba14e6[/url]Kamu upload dulu pada shahrir minta dia wat new database http://www.geekzlife.net/v1/upload-sample-virus/Perkara biasa la tu,ada yg AV dpt detect ada yg x,semua AV xsempurna & 100% detection,based on dia dpt detect varians tersebut.Kalo kita x upload sample xde la signature dia nk berubah.Takutnya jadi dulpicate file.,huhuh.,seram,.delete restart ada blk..,So skrg cmne?Apa yg terjadi ?Buat dlm safe mode?Kaspersky detect?sebagai?apa kata kamu bg je results kaspersky tu.Minta otai2 sini tlg.Jgn kamu diam je,tetiba muncul balik.Dia dh delete?quarantine?postpone? Quote Share this post Link to post Share on other sites
yurckk 0 Report post Posted April 25, 2009 File virus tu kt opis, next week xmasuk opis smggu outstation. so maybe aku reply lmbt sket nant, btw thx a lot!~ Quote Share this post Link to post Share on other sites