|
Reply #20 zasieka's post
pastu.. the same things happen gak..
maksudnya? |
|
|
|
|
|
|
|
Reply #20 zasieka's post
refer balik step kat #7
memula test remove *.inf yg kacau tu guna flash disinfector
download, letak kat desktop, restart masuk ke safe mode (F8)
dlm safe mode run flash disinfector & remove segala yang tak patut ada
restart masuk normal mode, check ada lagik tak?
klu ada lagik...
try combofix pulak, combofix ni ganas sket... so baca instruction camne nak guna kat site tu
run dalam safe mode jugak
then tgk klu2 ada lagik kesan degil tu... harap2 dah hilang
===
selesai segala tu, install ninja pendisk
fungsi ninja ni, dia start ngan windows & halang segala autorun script.
autorun.inf ni asalnya bukan virus, tp sb function dia yg meng-automated kat sesuatu, so ada virus/trojan yang eksploitasikan...
dah ada ninja ni, lepas cucuk pendrive,dah tak automatik kuar box/folder pendrive tu, kena browse my computer |
|
|
|
|
|
|
|
o0o ok sy try lagi...
agaknya sbb sy dld n terus run kan benda tu without dlm safe mode..
sbb tu tak mnjadi.. |
|
|
|
|
|
|
|
hehehehehhehehe..
bukan lupa red.. tapi benda ni nak gak tahu...
antivirus kesan tapi cucuk balik ada lagi.. so what da prob act?
the system have been infected. so clean the system 1st, after that, clean the usb flash drive..
just a suggestion |
|
|
|
|
|
|
|
Reply #25 kmkd's post
mende tu akan ada balik tiap kali cucuk pendrive @ hdd pun... sebab source dia tak didelete
ni log dari combofix aku, suatu ketika dulu, terpaksa guna CF script...
FILE ::
C:\autorun.inf
C:\j60osk9.cmd
c:\windows\a3kebook.ini
c:\windows\akebook.ini
c:\windows\ANS2000.INI
c:\windows\system32\olhrwef.exe
D:\Autorun.inf
D:\j60osk9.cmd
E:\Autorun.inf
E:\iqe68o.bat
E:\j60osk9.cmd
E:\kk3.bat
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\autorun.inf
C:\j60osk9.cmd
c:\windows\system32\olhrwef.exe
D:\Autorun.inf
D:\j60osk9.cmd
E:\Autorun.inf
E:\j60osk9.cmd |
|
|
|
|
|
|
|
Balas #29 akeyron\ catat
rasanya kalau guna avira baru tak de masalah.. avira ni tengok juga fail apa yang didetectnya
kalau macam fail tu dekat system restore punya clean system restore, pastu tinggalkan yang latest je.. kompem hilang masalah tu.. |
|
|
|
|
|
|
|
aku pun pnah gak alamai masalah yg same bab virus autorun.inf ni mmg virus halus je ni...
dlu aku selalgu buang autorun ni gune geekz remover elok je mmg leh buang...
tp lately aku tgk skrg ni autorun.inf ni makin kuat...gune geekz remover tu pun dah tak leh...kene cari remover yg lain lak...antivirus yg biase kite gune tu mmg takleh nk wat pe...dia just detect autorun.inf tu tp takleh delete... |
|
|
|
|
|
|
|
thumb disk tu pun kena scan dulu la....dan sila matikan autorun tu..... |
|
|
|
|
|
|
|
registry hack
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\Autorun.inf]
@="@SYS:DoesNotExist"
type kat notepad dan save as disableautorun.reg
[ Last edited by razhar at 9-4-2009 15:48 ] |
|
|
|
|
|
|
|
cam na nak copy virus definition |
|
|
|
|
|
|
|
Reply #9 zasieka's post
sama macam masalah aku.. dah byak aku taip tiba2 hilang.. dah x autorecover. tension |
|
|
|
|
|
|
| |
|