Welcome to my life .... Home Blog  | Location  |  Tag  |  Guestbook
2 entries in 'virus gusdur.exe ruu app w32/vbworm folder option'
2007/02/06   Virus GusDur.exe sudah bisa ditangani (Manual) (6)
2007/02/05   New Virus GusDur.exe atau Ruu APP (12)


Virus GusDur.exe sudah bisa ditangani (Manual)
The Chronicle | 2007/02/06 14:40
Hal pertama yang gw lakuin adalah gimana caranya Meng"KILL" process virus ini ...

Pertanyaan teman gw ..
"Zes, gimana lu tau kalo nama virus itu GusDur.exe, jangan2 lu ngarang "

Oke gw jelasin dulu  ....
Awalnya gw punya XPsyspad yang versi "JADUL" .........
Disitu kita bisa liat process apa yang berjalan .. kayak di Task manager
Tapi Gak bisa melakukan KILL karena udah diblokir duluan ama tu virus.

Apalagi Antivirus gw gak detect ama tuh virus ...
akhirnya gw download versi terbarunya di :

http://xtort.net/apps/XPSysPad.exe

Hal yang gw lakuin setelah itu, tetntu aja di'install, trus gw "KILL" process GusDur.exe ...

Setelah itu gw refresh list ...
Muncul PKB.exe ---> Gw kill juga ...

langsung gw buka registry Editor dan delete semua string yang berhubungan dengan GusDur.exe & PKB.exe.

Masalah Display ...
gw delete file gambarnya yang bernama temp.bmp trus gw ganti yang gw suka ..

Trus masalah memunculkan file yang diblokir gimana zes ????
kalo process udah di kill semua yang diblokir bisa dibuka ...

kecuali "PROPERTIES DISPLAY" lakukan refresh dahulu ...
lakukan juga refresh di control panel ...
Trus liaht di XpSyspad apakah ada nama presiden RI lainnya atau nama partai lainnya....

cek lagi di registrynya ... untuk 2 nama tadi.
Trus ...

Coba buka lagi .... Bisa kan :)

Gunakan fasilitas search kamu ...
Ketik *.exe
File At Most 52Kb
Centang pilihan Hidden Files (Artinya mencari file di hidden files juga)
Setelah itu Delete (Gunakan cara SHIFT+DELETE agar tak bisa direcovery)
--> New Text Docoment.txt.exe
--> GusDur.exe

lakukan search sekali lagi
cari GusDur.exe & PKB.exe ...
Delete semua file ini .... (detet juga  file yang aneh2 yang berextension *.exe)

masalah folder option --> Restart aja lagi komputer kamu .. karena shutdown ama restart udah bisa dipakai .....

Kalo Antivirus kamu bisa melakukan boot scan jangan lupa untuk melakukan itu sebelum me-restart komputer kamu ...

Semoga cara yang gw tempuh ini tadi bisa membantu kamu :)

Thanks God udah bantuin gw mematikan virus ini.

Tag : , , , ,
Trackback : | Comment(6)
Trackback Address :: http://www.blogboleh.com/mozes/trackback/58252
mulbrry shoulder bags 2011/03/14 15:34 L R X
<a href="http://www.buy-cheap-mulberry.com">mulberry bags</a>
<a href="http://www.buy-cheap-mulberry.com">mulberry alexa</a>
<a href="http://www.buy-cheap-mulberry.com">mulberry handbags</a>
<a href="http://www.buy-cheap-mulberry.com">mulberry bayswater</a>
<a href="http://www.buy-cheap-mulberry.com">mulberry clutch bags</a>
<a href="http://www.buy-cheap-mulberry.com">mulberry cross body bags</a>
<a href="http://www.buy-cheap-mulberry.com">mulberry hobo</a>
<a href="http://www.buy-cheap-mulberry.com">mulberry holdalls</a>
<a href="http://www.buy-cheap-mulberry.com">mulberry mens messager</a>
<a href="http://www.buy-cheap-mulberry.com">mulberry oversize works</a>
<a href="http://www.buy-cheap-mulberry.com">mulbrry shoulder bags</a>
<a href="http://www.buy-cheap-mulberry.com">discount mulberry bags</a>
<a href="http://www.buy-cheap-mulberry.com">discount mulberry alexa on sale</a>
<a href="http://www.buy-cheap-mulberry.com" >discount mulberry bayswater on sale</a>
gucci high tops 2011/08/13 23:57 L R X
Hi friend Excuse me ,welcome to our sites
http://www.nice-sneaker.com
http://www.hats-clothing.com
http://www.shoe-jordan.com
http://www.nfljerseysall.com
http://www.jordanair9.com
http://www.guccihightopsuk.com
Karenmillen 2012/02/02 19:16 L R X
I rode--I was then a mere boy, and a very wild lad--with one of our men. When the storm commenced we found ourselves among the sand-hills. Ah! that you should have seen! The sand forms along the strand high banks, which serve as dikes against the sea; these are overgrown with sea-grass, but, if the storm bursts a single hole, the whole is carried away. This spectacle we chanced to witness. It is a true Arabian sand-storm, and the North Sea bellowed so that it might be heard at the distance of many miles. The salt foam flew together with the sand into our faces."
knockoff handbags 2012/04/09 22:46 L R X
Its interesting. I would like to know more about this…I really wanted to know how this works can you please help me out…….Thanks for sharing.
top handbags 2012/05/17 03:10 L R X
nice post, thanks for you share!
knockoff handbags 2012/05/25 00:21 L R X
They're not chosen, so one of these ideal for you. For more flexibleness a lot more like these, there are lots of discount louis vuitton uk. in fact, Louis Vuitton is one of the most famous fashion design master.he opened the fist suitcase shop called after his name.

Name :
Password :
Homepage :
 
Content :
 



New Virus GusDur.exe atau Ruu APP
The Chronicle | 2007/02/05 12:50

                                 

    New Virus GusDur.exe ....



1. Si Virus memperkenalkan diri dengan nama Gus Dur.
2. Pada My Computer>Properties>(tab)General : Registered to : Gus Dur anti Islam, Gus Dur Pro Kafir .... (seingat saya bunyinya begitu)
3. Gambar Desktop dirubah menjadi gambar Presiden AS (G.W. Bush) sedang memeluk perempuan telanjang dan PM Israel sedang "mengelus" resliting celananya sendiri. Klik kanan>properties pada Desktop tidak berfungsi.
4. Hasil deteksi Norman dikenali sebagai W32/VBWorm.NO
5. Folder Option hilang
6. Run dan Search tidak hilang tapi tidak dapat difungsikan.
7. Membuat file application (New Document) sebesar 52KB, icon di explorer = icon notepad, extension EXE
8. Ada lampiran tersembunyi : VIRUS.EXE, mama.txt, no. pin ATM BCA mama.exe, dll
9. Tiap kali UFD dimasukkan, akan segera "ketempelan" 2 file virus, yakni : New Document.exe (52KB) dan No. pin ATM BCA mama.exe (52KB)
10. Aktif di Safe Mode yang manapun dan komputer tidak bisa Shut Down.
Demikian sedikit data dari Gus Dur.

Sebelumnya kalo mau delete virus Kn keluar warning , "drive C: akan diformat"
TOLOOOONG bagaimana menyembuhkannya???



setelah gw searching nih katanya alamat sample virusnya :

http://virus.ognizer.net/files/download.php?fid=07e1cd7dca89a1678042477183b7ac3f

Tag :
Trackback : | Comment(12)
Trackback Address :: http://www.blogboleh.com/mozes/trackback/58250
life_love 2007/02/05 13:03 L R X
thx 4 d info!! ;)
mozes 2007/02/05 15:01 L X
Coba ini Bro & Sist karena gw juga belum nemuin antivirusnya + karena gw juga kena tuh virus ...

http://www.xtort.net/xtort/xpsyspad.php (bisa buat "FORCE SHUTDOWN";) -Memakasa untuk shutdown / forces shutdown.
caranya klik admin - logoff

trus gw belum coba yang ini ...
Sekedar berbagi informasi FreeSoftware, ini ada Tools yang bisa membantu Anda untuk kill process dan edit registry, Download :
http://202.38.64.10/~jfpan/download/IceSword120_en.zip

............
sejauh ini gw tersiksa juga ama virus ini .. hiks ...

Di task manager dikenali sebagai GusDur.Exe
agie 2007/02/05 15:43 L R X
hiks, kompi gie rusak...

komen curhat ini sih :P
Hendra Ciptawan 2007/02/05 16:05 L R X
Kaya'nya varian virus baru ya? :(
Untuingnya aku blon kena' 8D
mozes 2007/02/06 13:47 L R X
Berhasil gw tangani ....
Pake XPSYPAD ...
Kill Proces GusDur.exe & PKB.exe
Trus bersih2 di registry ..
And pake serch semua file yang gak jelas ... yang besarnya 52kb gw delete ...
Restart dan scan boot pake **** Antivirus

Selesai :)
mulbrry shoulder bags 2011/03/14 15:34 L R X
<a href="http://www.buy-cheap-mulberry.com">mulberry bags</a>
<a href="http://www.buy-cheap-mulberry.com">mulberry alexa</a>
<a href="http://www.buy-cheap-mulberry.com">mulberry handbags</a>
<a href="http://www.buy-cheap-mulberry.com">mulberry bayswater</a>
<a href="http://www.buy-cheap-mulberry.com">mulberry clutch bags</a>
<a href="http://www.buy-cheap-mulberry.com">mulberry cross body bags</a>
<a href="http://www.buy-cheap-mulberry.com">mulberry hobo</a>
<a href="http://www.buy-cheap-mulberry.com">mulberry holdalls</a>
<a href="http://www.buy-cheap-mulberry.com">mulberry mens messager</a>
<a href="http://www.buy-cheap-mulberry.com">mulberry oversize works</a>
<a href="http://www.buy-cheap-mulberry.com">mulbrry shoulder bags</a>
<a href="http://www.buy-cheap-mulberry.com">discount mulberry bags</a>
<a href="http://www.buy-cheap-mulberry.com">discount mulberry alexa on sale</a>
<a href="http://www.buy-cheap-mulberry.com" >discount mulberry bayswater on sale</a>
gucci high tops 2011/08/13 23:57 L R X
Hi friend Excuse me ,welcome to our sites
http://www.nice-sneaker.com
http://www.hats-clothing.com
http://www.shoe-jordan.com
http://www.nfljerseysall.com
http://www.jordanair9.com
http://www.guccihightopsuk.com
logo design samples 2012/03/30 16:51 L R X
i am really impressed your collection and cool stuff ....
custom paper 2012/04/05 00:15 L R X
All the learning' my father paid for was a bit o' birch at one end and an alphabet at the other.

knockoff handbags 2012/04/09 22:46 L R X
Its interesting. I would like to know more about this…I really wanted to know how this works can you please help me out…….Thanks for sharing.
top handbags 2012/05/17 03:10 L R X
nice post, thanks for you share!
knockoff handbags 2012/05/25 00:21 L R X
They're not chosen, so one of these ideal for you. For more flexibleness a lot more like these, there are lots of discount louis vuitton uk. in fact, Louis Vuitton is one of the most famous fashion design master.he opened the fist suitcase shop called after his name.

Name :
Password :
Homepage :
 
Content :
 



[PREV] [1] [NEXT]
 
BLOG main image
Agak berantakan, gak teratur, agak cuek dikit ... gw memang begini ....
Shout Box
Name :

Message :

test....ist by n21ns 04/23
How Are You Todays? by bocahitamputih 04/09
Leter by shin_rha 03/26
Terbangun *ga penting by underiez 2011
GA penting! by reneepsiko 2011
AMBIL SISI POSITIVX by nophee_dhe 2011
If .... by nophee_dhe 2011
aku vs facebook by yisha 2011
memulai by yisha 2011
if by yisha 2011
All (340)
mozes's other side (156)
Poetry (43)
The Chronicle (111)
faith (16)
Chat Room (2)
About Me (3)
Edit Corner (3)
SOFTWARE GRATIS (1)
CSS (0)
Mozes Mencari Cinta (3)
Software info 3GP it Trouble Shooting CHECK PESING hot VIRUS GEN spirit xpsyspad samurai BAJUL pdf uang BRONTOK mozes bushido CHECK ONLINE BLUEFANTASY virus gratisan ebook free money VBS Check-In online virus gusdur.exe ruu app w32/vbworm folder option computer
sudah lama gak ngeblog ... (64)
ya sudahlah .... (37)
Buku perdana gw terbit .. be.. (35)
Mulai berpikir maju dan maju.. (29)
Leganya... buku gw akhirna s.. (34)
day is the first time to vis..
05/26 - Wholesale Jerseys
day is the first time to vis..
05/26 - Wholesale Jerseys
With the purpose to foreclos..
05/26 - thesis service
You don't need to do hard wo..
05/26 - pay for essay
They're not chosen, so one o..
05/26 - knockoff handbags
baju pria dewasa
baju pria dewasa
calvin klein model jamie
calvin klein model jamie
tas dompet murah
tas dompet murah
printer management application
printer management application
jobs in luton bedfordshire
jobs in luton bedfordshire
708090 2011
lischantik 2010
reneepsiko 2009
boni 2009
sacharissa 2009
dyto 2009
mozes 2009
massiimmaa 2009
princess-olive 2009
sebelasagustus 2009

Total : 59861
Today : 14
Yesterday : 11
 
 
 
My Blog : Location : Tag : Guestbook : Admin
mozes’s Blog is powered by blogboleh.com