Hacked by pokemon

fleurzsa · Post time 11-6-2007 08:35 AM

Salam

Komputer jadi slow pulak

Maleh tul nak buang n install windows balik...

Mcm mana nak bunuh pokemon ni....:@

TQ in advance..:love:

0001 · Post time 11-6-2007 10:04 PM

Ko boleh tengok thread ni:

http://forum.cari.com.my/viewthread.php?tid=274360&extra=page%3D2

Atau gi link ni:

How to remove VBS.Flesh.A

syafthegeek · Post time 12-6-2007 05:30 AM

dia kuar kat browser jugak kan? kat atas browser dia kuar "hacked by pokemon"

fleurzsa · Post time 13-6-2007 08:11 PM

thanks nanti I cuba tips yg dibincangkan...

Naper I boleh kena hack ek?... I mana pernah bukak laman porno..

fleurzsa · Post time 13-6-2007 08:16 PM

Kalo I bukak guna mozilla firefox... tak der lak pokemon tu...

fleurzsa · Post time 13-6-2007 08:17 PM

Sebab I guna wifi ker?

0001 · Post time 15-6-2007 02:31 PM

Bukan laman porn jer yang ada malware... mungkin ko kena benda ni ikut thumbdrive yang telah di cucuk merata. Ramai orang tak tau betapa bahayanya thumbdrive tu... kalau ko ada thumbdrive, baik ko scan guna good antivirus software (yg bukan AVG).

Spread ikut Wifi tu only boleh kalau PC ko dah kena hacked - aku rasa ni bukan sebab malware tu boleh kena PC ko.

Anyway, virus ni ringan jer and senang ko dapat settlekan problem ni.

Show all posts · Post time 15-6-2007 03:43 PM

MF: nak tunggu virus Hacked by doraemon pula!

aziz79 · Post time 15-6-2007 08:43 PM

pokemon tu hijack internet explorer aje

ascari · Post time 16-6-2007 10:50 AM

kena selalu right click sebelum buka pendrive.. kalau ada autoplay kat pendrive kemungkinan pendrive tu dah kena.

fleurzsa · Post time 17-6-2007 07:01 PM

Oooooo gitu ek... Hmmmm.. memang my thumbdrive cucuk merata... pantang jumpa data2 menarik... I pun memang tak lokek kasi kat org2 lain lak..

I guna anti virus ad Aware SE Personal.... I download kat internet. Ok ke?

Aper anti virus yg paling best sekarang ni ek... malas lak I nak semak kat board ni.. he he he

Thanks kpd yg meng- reply

May Allah bless u all

fleurzsa · Post time 17-6-2007 07:03 PM

Buat aper right click? Tak faham la...

Mehacomp_91 · Post time 17-6-2007 07:39 PM

Setahu sayalah Aware SE Personal tu bukan anti-virus
amik link ni dan download AVIRA Personal Edition Classic
http://www.softpedia.com/progDow ... -Download-6527.html

fleurzsa · Post time 17-6-2007 11:28 PM

eh yer ke? I boleh bunuh virus ngan program tu.... bila dah selesai scan siap sedawa lagi dia...

ok I download yg u kasi pulak..

thanks

0001 · Post time 18-6-2007 10:28 PM

Kalau tak happy ngan Avira AV, try yang ni:

Click for info - Active Virus Shield

Aku guna AVS ni sekarang and pendapat aku AVS tu AV freeware yang paling bagus - gerenti sedawa yg ni lagi kuat.

tukul_kaku · Post time 19-6-2007 12:58 AM

:setuju: :setuju:

sendawa sampai pecah speaker...

bzzts · Post time 19-6-2007 01:47 AM

aku nak rekemen guna aje hijackthis. atleast leh tengok bebende apa yg dah masuk. bukan nk buang hijcaked by pokemon aje, lelain pun sapu. kira sekali harung la...

bzzts · Post time 30-6-2007 02:10 AM

aku clean error tu guna spybot je. dapat le list ni:

lepas aku snap screenshot, aku transfer gambar ni ke pendrive aku, tenGok2 ada 4 file berjaya masuk lam pendrive aku siap dgn autorun lagik. hampeh tol. mujur aku enable view hidden file & folder. dapat le aku delete terus - manually.

[Autorun]
OPEN=MySexy.exe
Shell\Autoplay\command =MySexy.exe
Shell\OPEN\command =MySexy.exe
Shell\Explore\command =MySexy.exe
Shell = Autoplay

[ Last edited by bzzts at 30-6-2007 02:12 AM ]

bzzts · Post time 30-6-2007 02:21 AM

tapi dalam C:\ drive masih ada NTDETECH.com dan Autorun.inf.

aku taktau mana lokasi file asal yg jadi tukang generate file ni. :@

bzzts · Post time 30-6-2007 02:38 AM

This section is for technical experts who want to know more.

W32/VB-CWQ is a worm for the Windows platform.

W32/VB-CWQ spreads via removable storage devices.

When first run W32/VB-CWQ copies itself to:

\ntdetech.com
<Windows>\default__.pif
<System>\BrO_AcT.exe
<System>\MySexy.exe
<System>\REPCLIENT1\svchost.exe
<System>\REPCLIENT1\winlogon.exe
<System>\msconfig.com
<System>\regedit.com

and creates the file \Autorun.inf. This file can be deleted.

*************************************************

W32/VB-DLK is a worm for the Windows platform.

When first run, the worm creates the following copies of itself on the infected computer:

\NTDETECH.com
<Windows>\default__.pif
<System>\BrO_Act.exe
<System>\msconfig.com
<System>\MySexy.exe
<System>\regedit.com

The file \Autorun.inf is also created to execute NTDETECH.com.

W32/VB-DLK attempts to periodically copy itself to removeable drives, including floppy drives and USB keys. The worm will attempt to create a hidden file Autorun.inf on the removeable drive and copy itself to the same location. The file Autorun.inf is designed to start the worm once the removeable drive is connected to a uninfected computer.