Atasi Virus, Spam, Broadcast YM!

Spam…spam..spam… Malware.. Malware.. Malware.. holy shit…

Menurut pengalaman pribadi yang sering “terkena” spam dari yahoo messenger, yang selalu broadcast message ke beberapa link, semacam :

http://miggiphotos.com/image.php
http://funwiththisguy.com/image.php
http://ariafotos.com/image.php
http://zhelefun.com/image.php
http://tviceimg.com/image.php
http://tusfbfotos.com/image.php
http://twittersphoto.com/image.php
http://tuesimages.com/image.php
http://red-myspace.com/image.php
http://foto-spaces.com/image.php
http://beautyphotoson.com/image.php

Maka langkah yang harus di lakukan untuk membersihkan virus tersebut adalah :

  • Hapus File di :
    C:\Windows \mds.sys

    C:\Windows \mdt.sys

    C:\Windows \winbrd.jpg

    C:\Windows \net.exe

    C:\Windows \infocard.exe

  • Setelah itu hapus beberapa file registry :
    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    “Firewall Administrating”=”C:\\WINDOWS\\infocard.exe” “Administrating Firewall” = “C:\WINDOWS\\infocard.exe”
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    “Firewall Administrating”=”C:\\WINDOWS\\infocard.exe” “Administrating Firewall” = “C:\WINDOWS\\ infocard.exe”
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software\Microsoft\Windows\CurrentVersion\Run] “Administrating Firewall” = “C:\WINDOWS\\ infocard.exe”
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
    “C:\\Documents and Settings\\Desktop\\IM56245.JPG-www.myspace.com.exe”=”C:\\WINDOWS\\infocard.exe:*:Enabled:Firewall Administrating” “C:\Documents and Settings\\ Desktop\\ IM56245.JPG-www.myspace.com.exe” = “C:\WINDOWS\\ infocard.exe: *: Enabled: Firewall Administrating ”
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
    “C:\\Documents and Settings\\Desktop\\IM56245.JPG-www.myspace.com.exe”=”C:\\WINDOWS\\infocard.exe:*:Enabled:Firewall Administrating” “C:\Documents and Settings\\ Desktop\\ IM56245.JPG-www.myspace.com.exe” = “C:\WINDOWS\\ infocard.exe: *: Enabled: Firewall Administrating ”
    [HKEY_USERS\S-1-5-21-117609710-764733703-1957994488-1003\Software\Microsoft\Windows\CurrentVersion\Run]
    “Firewall Administrating”=”C:\\WINDOWS\\infocard.exe” “Administrating Firewall” = “C:\WINDOWS\\infocard.exe”

Bisa juga  dengan, download dan install  anti malware

Iklan

~ oleh deeinside pada 03/05/2010.

Tinggalkan Balasan

Isikan data di bawah atau klik salah satu ikon untuk log in:

Logo WordPress.com

You are commenting using your WordPress.com account. Logout / Ubah )

Gambar Twitter

You are commenting using your Twitter account. Logout / Ubah )

Foto Facebook

You are commenting using your Facebook account. Logout / Ubah )

Foto Google+

You are commenting using your Google+ account. Logout / Ubah )

Connecting to %s

 
%d blogger menyukai ini: