virus x boleh delete

salam semua warga putera..
saya nk minta tolong sgt2 nie..komp saya kena virus dan ble install malwarebytes and update,die dh detect virus 2,tp bile remove and restart virus 2 msih ade..virus 2 disable registry,task manager,firewall dan setting kt folder option..tolong plz..

ko pkai av ape ?

pendapat aku yg x seberapa...aku rase virus tu da x de kot...cume sblm ni dia da disable kn mende2 tu...kene cri tools utk enable kn je blk...

try guna GVR..myb bole membantu...le sedut kt www.geekzlife.net

sblum ni aku pkai avira..pastu aku dh pkai geekz 2 die dh repair registry tp ble aku close geekz die jd disable blik..same mcm aku pkai malwarebytes..die detect tp ble remove and restart die still ade..mcm av 2 x dpt delete..help me

Download RSIT oleh random/random dan save ke Desktop

1. Double-click RSIT >> pastikan List files/folders created or modified in the last ditukar kepada 3 months >> tekan Continue
2. Sekiranya RSIT mahu install HijackThis >> tekan I Accept
3. Nanti akan ada dua log keluar (log.txt dan info.txt). Postkan kedua-dua log tersebut.

ok terima kasih kwn2 semua sbb bg respond,ptg ni aku akn cuba kt pc 2 sbb pc 2 ade kt umah sewa aku..tq!!!!

kawan ak dah pernah kene camni..
cam virus global.exe gak..
dh scan ngan malwarebytes, av, dan pelbagai tools yg lain..
ia detect dan suruh restart utk remove.. lepas restart virus tu still ada lagi.
nak masuk safe mode pun xleh..
Last2 kene format..
so sesiapa yg ada solution @ cadangan software utk masalah cmni bleh la kongsi same2 ye..

Kalau virus/malware yang jenis re-execute setiap kali selepas delete dan reboot nih, lebih mujarab kiranya jika menggunakan bootable virus scanner untuk remove .. rekomen Avira Antivir RescueCD atau Kaspersky RescueDisk .. pandangan aku ajer.

Dah try wat Killing Process be4 run any AV / related program? Tak silap aku geekz remover tu ader function tuh. Nk heavy skit guna PEtools (ProTouchExpert)

saya dh killing seme process sblum scan 2..tp fail jgk laa..e_sentinel,cane nk carik yg avira rescue cd 2 sbb saya cari dalam web avira x jumpe plak..hehehe

Avira AntiVir Rescue System
http://dl1.pro.antivir.de/package/rescue_system/common/en/rescue_system-common-en.iso

Kaspersky RescueDisk
http://dnl-eu10.kaspersky-labs.com/devbuilds/RescueDisk/kav_rescue_2008.iso

Burn ke CD dalam image mode
Boot CD tu
Ikut arahan seterusnya

ok time kasih nanti saya akan cube semula..tq sooo much semua..

saya budak baru belajar, kalau salah jgn marah ok..
cuma bagi pendapat..

1-tau tak ape2 nama virus tu?..kalau tau nama senang sikit..kalau tau, taip kat google@yahoo, taip je kat situ.. contoh mcm "free brontok remover tools"..
2-try buat System Restore ke tarikh sebelum kene virus..
3-pakai Avira AntiVir Rescue System mcm encik e-sentinel recommend la..
4-last choice, terpaksa format..
5-kalau nk enable task manager, cuba cari cara tu kat http://mscreborn.blogspot.com/2009/05/kembalikan-task-manager-ku.html

So sekarang macamana? Dah setel belum?
Terasa juga nak tolong secara online guna TeamViewer...
apa2 hal pun, boleh kontek saya kat annamir[at]putera.com

OFF TOPIC:


ini "virus" biase ni,nk buang virus2 mcm ni kbnykkannye berjaya dgn SAFEMODE..even aku sndiri pn "bwat virus" camni nk knekn kwn2 aku gak...aku terangkn sket mcm mane virus jenis ni btindak...

virus camni biasnye akn generate 4-5 executable file (.exe) dlm system folder (aku pn bwat camni gak) ataupn generate hidden file dlm system folder..
okay,skrg ni katakanlah aku bwat "virus" PUTERA_KENA.exe yg bertindak serupa dgn virus dlm class yg same

PUTERA_KENA.exe=execute PUTERA_PRANK.exe
PUTERA_PRANK.exe=generate/execute 4 lg exe (backup) kt bwh ni;

KORANG.exe=generate *registry entry
KENA.exe=generate&execute PUTERA_KENA.exe balik kalo proccess terminated & generate&edit registry entry
VIRUS.exe=generate&execute KENA.exe kalo PUTERA_KENA.exe proccess terminated
AKU.exe=akan generate sume dr PUTERA_KENA.exe down to VIRUS.exe &generate *registry entry

"virus cycle" ni akn continue shiggalah sume exe di-terminate,and deleted

sume exe ni run stiap kali windows startup,"virus" ni akn create registry string mcm ni

*registry entry

HKCU>Software\Microsoft\Windows\CurrentVersion\Policies\System

DWORD value:DisableTaskMgr 0x000000001(1)-disable task manager
DWORD value:DisableRegistryTools 0x00000001(1)-disable regedit,so korang xbole nk tukar registry langsung
DWORD value:NoFolderOptions 0x00000001(1) -disable folder option,so korang sume xbole view langsung hidden fail yg putera.exe da create-mlainkn advance user/user ade software 3rdparty yg bole view hidden file mcm Sergiwa RRT, dan lain2..
DWORD value:DisableCMD 0x00000001(1) -korang xbole access command prompt(cmd.exe) utk bwat .bat file nk gugat virus putera.exe aku ni


HKLM\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore
DWORD value:LimitSystemRestoreCheckpointing 0x00000001(1)
DWORD value:DisableSR 0x00000001(1) -akan disable system restore

HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{xxxxxxx-xxxx-xxx-xxxx-xxxxxxxxxxxx}
string:StubPath = "%System%\PUTERA_KENA.exe"
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
string:{PUTERA_KENA = "%systemroot%\system32\kuku\PUTERA_KENA.exe" -windows akn run PUTERA_KENA.exe dan mnyebabkan virus cycle ni bermula stiap kali windows startup

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL]
DWORD value:checkedValue = 0x00000000 -hide sys file
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
string:Shell = "Explorer.exe PUTERA.KENA.exe" -akan bwatkn PUTERA_KENA.exe runs stiap kali startup

nampak mcm komplex,tp sbenarnye senang nk bwat,dan senang nk cure jgak..

katekanlah korang kne virus mcm ni,
korang gune sofware yg bole terminate process virus tu,gune software yg bole view hidden file,trus delete exe virus yg terminate td dan gune search function utk cari fail virus yg same,kalo xjumpe?its okay...,gune registry fix program,repair/delete mane2 registry entry yg "mragukan",msuk msconfig,disable mne2 startup process yg "meragukan",lepas sume file virus da deleted..windows akn prompt eg: cannot inititate process..........virus.exe..terminated..klik ok,ni blaku sbb windows xdpt nk execute fail virus mse startup selepas korang restart windows in normal mode balik..process buang virus ni msti dlakukan dalam SAFEMODE,dalam 1 sesi logon shaje,xde restart,xde tangguh2..sume dlm 1 sesi..

dnasihatkn TS post 1 log registry entry scanner..ape2 software..nnti ade la otai2 yg tgok...tmasuk la aku

alamak,aku terAJAR putranian bwat virus ke ni?
!!WOW,WAT'A LONG POST'n!!

NazCYPHER32 wrote:
alamak,aku terAJAR putranian bwat virus ke ni?
!!WOW,WAT'A LONG POST'n!!

hahaha noobish pnye virus

mmg pn..bende simple..bkn virus...yg noob je kate virus..hahaha
tringat member aku kne spam YM bodo tu...haha..trus format,padahal bole fix sndiri je..

aku kne win32-virut.exe bru ni.search tenet byk yg recommend 4mat tnpe backup all exe file..sume exe dlm hdd dijangkiti..aku x pki av..bila da kne nk install x bley...mula2 pyh jgk sbb x taw v apa...mujur dpt buang.xyah nk 4mat..tp window byk rosak..

sy formt je pc 2 ari tu..dh buntu pikir..lg pn tun punye pc 2 nk cpt..tp klu bro annamir ade skill2 kongsi ngn sy ye.hehhehe

bro dan otai2..mcm mana nk delete virus "xiao.vbs"..slalu Av akan detect virus "autorun.inf"..
dah try delete, still ada..format pendrive pon still ada..

boleh je delete..tp lps delete, kita nk "Hide extension windows". virus ni akan hidup balik..
mcm2 tips dlm google, tp byk yk boleh pakai..byk ajar yg temporary jer..

fenin2..

xiao.vbs adalah virus VBS/Autorun-DR

1. Masuk Registry, delete/edit key bersangkutan xiao.vbs di:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run

2. Browse ke:

C:\Windows\System\wbem\ dan C:\Windows\System\ <-- delete file xiao.vbs

3. Taip dalam Run -->%TEMP%<-- delete file berextension .pif dalam temp folder tersebut .. restart PC.

Hehehe..dalam lappy aku ad 2 os XP ngan Ubuntu ( Keturunan Linux..hahaha )..so nk dipendek kan citer aku masukkan thumbdrive pjbat yg mmg terbiak ngan trojan dan sebgainya..msuk kt windows kaspersky detect trojen n neutrallize kan dier..tp ksan dier habih semua file..satu pown x nmpak..n lg mnyeramkan biler saiz thumbdrive tu jd kecik..so aku msuk plak kt ubuntu n check thumbdrive tu aku jmper smue fail termasuk yg ad vrus tu..just delete cm biase jer fail2 yg pelik dengan ubuntu..Kt MAC pown orng slalu cleankan drive2 yg sakit..emm bleh cube sbgai ikhtiar..tu jer la yg dapat aku kngsi..TQ...huhuhuhu..klu x btol tlng btolkan yer..

Bro.. Aku guna Fsecure Antivirus dan selalu bila plug in thumb drive dia popup
autorun program sebagai spyware.. boring jugak kalau selalu kena alert by system.
Autorun tu spyware ke..? Bukan ke dia dah memang ada dalm thumbdrive. Kalau total delete atau format
tak ada effect apa-apa ke..?