Awas !!! serangan baru virus Yahoo Messenger

Discussion in 'Server Pulsa Elektronik' started by Iwan Pethax, Dec 12, 2009.

  1. Iwan Pethax

    Iwan Pethax New Member

    Messages:
    399
    Likes Received:
    243
    Trophy Points:
    0
    Ada beberapa server lumpuh karena serangan virus ini, yang belum kena, silahkan waspada :
    6 Langkah Membasmi Virus Penyerang Yahoo Messenger
    [​IMG]
    Jakarta - Serangan virus Coutsonif.A yang mengancam pengguna Yahoo Messenger dan Skype patut diwaspadai. Virus ini menyebar dengan mengirimkan dirinya ke semua kontak yang ada dalam alamat aplikasi tersebut dari komputer yang terinfeksi.

    Pesan tersebut sekilas seperti pesan pada umumnya. Namun jangan sampai mengklik link yang diberikan, sekalipun dikirimkan oleh teman Anda. Pasalnya, pesan tersebut sebenarnya bukan dikirimkan oleh rekan Anda, melainkan oleh virus yang telah berhasil menginfeksi komputer rekan Anda.

    Nah, jika sudah terinfeksi, maka secara otomatis ia akan membuat nama file acak dengan ekstensi .tmp dan .exe yang akan disimpan di direktori [C:\Documents and Settings\%user%\Local Settings\Temp] dengan nama yang berbeda-beda.

    Kalau sudah begini, user hanya bisa pasrah dan tak tenang beraktifitas di internet lagi. Bahkan, bisa-bisa nama baiknya pun rusak karena dituduh menyebarkan virus juga. Sebab, si penerima pesan menduga temannya yang sengaja mencelakakan dirinya dengan mengiriminya virus.

    Makanya, sebelum kejadian itu terjadi. Ada baiknya Anda simak 6 cara jitu untuk membasmi virus perusak nama baik yang menyerang aplikasi chat ini seperti dilansir Vaksincom:

    1. Disable 'System Restore' selama proses pembersihan.
    2. Disable autorun Windows, agar virus tidak dapat aktif secara otomatis saat akses ke drive /flash disk.

    • Klik tombol 'start'
    • Klik 'run'
    • Ketik 'GPEDIT.MSC', tanpa tanda kutip. Kemudian akan muncul layar 'Group Policy'
    • Pada menu 'Computer Configuration dan User Configuration', klik 'Administrative templates'
    • Klik 'System'
    • Klik kanan pada 'Turn On Autoplay', pilih 'Properties'. Kemudian akan muncul layar 'Tun on Autoplay propeties'
    • Pada tabulasi 'Setting', pilih 'Enabled'
    • Pada kolom 'Tun off Autoplay on' pilih 'All drives'
    • Klik 'Ok'

    3. Matikan proses virus, gunakan tools 'security task manager' kemudian hapus file [sysmgr.exe, vshost.exe, winservices.exe, *.tmp]

    Sekadar catatan, .tmp menunjukan file yang mempunyai ekstensi TMP [contoh: 5755.tmp]. Klik kanan pada file tersebut dan pilih 'Remove', lalu pilih opsi 'Move File to Quarantine'.

    4. Repair registry yang sudah diubah oleh virus. Untuk mempercepat proses penghapusan silahkan salin script dibawah ini pada program notepad kemudian simpan dengan nama repair.inf. Jalankan file tersebut dengan cara: Klik kanan repair.inf, lalu pilih instal.

    [Version]
    Signature="$Chicago$"
    Provider=Vaksincom Oyee


    [DefaultInstall]
    AddReg=UnhookRegKey
    DelReg=del


    [UnhookRegKey]

    HKLM, Software\CLASSES\batfile\shell\open\command,,,"""%1"" %*"
    HKLM, Software\CLASSES\comfile\shell\open\command,,,"""%1"" %*"
    HKLM, Software\CLASSES\exefile\shell\open\command,,,"""%1"" %*"
    HKLM, Software\CLASSES\piffile\shell\open\command,,,"""%1"" %*"
    HKLM, Software\CLASSES\regfile\shell\open\command,,,"regedit.exe "%1""
    HKLM, Software\CLASSES\scrfile\shell\open\command,,,"""%1"" %*"
    HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell,0, "Explorer.exe"
    HKCU, SessionInformation, ProgramCount, 0x00010001,3
    HKCU, AppEvents\Schemes\Apps\Explorer\BlockedPopup\.current,,,"C:\WINDOWS\media\Windows XP Pop-up Blocked.wav"
    HKCU, AppEvents\Schemes\Apps\Explorer\EmptyRecycleBin\.Current,,,"C:\Windows\media\Windows XP Recycle.wav"
    HKCU, AppEvents\Schemes\Apps\Explorer\Navigating\.Current,,,"C:\Windows\media\Windows XP Start.wav"
    HKCU, AppEvents\Schemes\Apps\Explorer\SecurityBand\.current,,,"C:\WINDOWS\media\Windows XP Information Bar.wav"

    [del]

    HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft(R) System Manager
    HKCU, Software\Microsoft\Windows\CurrentVersion\Run, bMaxUserPortWindows Service help
    HKLM, SYSTEM\CurrentControlSet\Services\Tcpip\Parameters, MaxUserPort

    5. Hapus file virus berikut:
    C:\vshost.exe [all drive]

    C:\autorun.inf [all drive]

    C:\RECYCLER\S-1-5-21-9949614401-9544371273-983011715-7040\winservices.exe

    C:\Documents and Settings\%user%\Local Settings\Temp

    A415.tmp [acak]

    034.exe [acak]

    Lady_Eats_Her_Shit--www.youtube.com

    C:\WINDOWS\system32\sysmgr.exe

    C:\WINDOWS\TEMP\5755.tmp

    C:\windows\system32\crypts.dll

    C:\windows\system32\msvcrt2.dll


    6. Untuk pembersihan optimal dan mencegah infeksi ulang silahkan gunakan antivirus yang dapat mendeteksi dan membasmi virus ini up to date. Anda juga dapat download tools Norman Malware Cleaner di http://download.norman.no/public/Norman_Malware_Cleaner.exe

    sumber : detikInet : 6 Langkah Membasmi Virus Penyerang Yahoo Messenger
     
    alexkim, alexa imoet, ddiek88 and 8 others like this.
  2. oursun

    oursun New Member

    Messages:
    62
    Likes Received:
    3
    Trophy Points:
    0
    wah serem juga yah kalo gitu.....

    pake antivirus kedeteck gak yah??
     
  3. 4j1

    4j1 New Member

    Messages:
    318
    Likes Received:
    30
    Trophy Points:
    0
    betul nich bro...saya juga pernah baca infonya beberapa hari kebelakang ...memang serem juga kalau sampe "mampir" ke server kita....amit amit dach...:frusty::frusty::frusty:
     
  4. ricky

    ricky New Member

    Messages:
    178
    Likes Received:
    19
    Trophy Points:
    0
    Pake smadav ke detect bos, begitu kita klik link virus langsung terdetect oleh smadav 7.4
     
    sarunghipster likes this.
  5. pengamatKEJAM

    pengamatKEJAM New Member

    Messages:
    192
    Likes Received:
    10
    Trophy Points:
    0
    Wah kayaknya virus gini ga bisa ditangani oleh smadav, kecuali kita kirim info atau sample virus ke bagian dev nya.
    Sekedar saran sih mending jangan pake antivirus yg biasa, pake anvirus yg agak kelas, seperti K*S, dkk. Berat dikit gpp-lah, kalu punya duit kan bisa nambah spek biar ga kerasa berat sama tuh antivirus :peace: :peace:...


    Nih beberapa contoh link nya:

    Someone just tagged me in this pic on facebook... I think my parents are going to disown me! h**p://c5ac-r.myspace-pics.info:88/images07/94014/MVC-NewPhoto13.JPEG.***

    I just got a new kitten, but she is freaking out and breaking EVERYTHING! Atleast she is cute right? h**p://c5ac-r.myspace-pics.info:88/images07/94014/MVC-NewPhoto13.JPEG.***

    Would this picture be good enough for my new default? h**p://c5ac-r.myspace-pics.info:88/images07/94014/MVC-NewPhoto13.JPEG.***
    How would this outfit look on me? Here's the picture of it, I can't makeup my mind if I should go buy it or not. h**p://c5ac-r.myspace-pics.info:88/images07/94014/MVC-NewPhoto13.JPEG.***
    You don't think this pic will get removed if I post it on myspace. Right? h**p://c5ac-r.myspace-pics.info:88/images07/94014/MVC-NewPhoto13.JPEG.***

    ada juga beberapa link/text yg ditulis pake bahasa vietnam (Mungkin ya?? SOalnya aneh banget) :peace: :peace: :peace: :peace:
    Mudah2an jadi info yg bermanfaat. :thumb: :thumb: :thumb:
     
  6. shinkyoo

    shinkyoo New Member

    Messages:
    131
    Likes Received:
    1
    Trophy Points:
    0
    waduh kudu extra ati ati nih, update antivus dulu nih, thanks gan buat warningnya :thumb:
     
  7. dnutz85

    dnutz85 Active Member

    Messages:
    630
    Likes Received:
    47
    Trophy Points:
    38
    telat baca tread ini :(:(:(:( udah terlanjur kena..:frusty::frusty::frusty::frusty:
     
  8. Iwan Pethax

    Iwan Pethax New Member

    Messages:
    399
    Likes Received:
    243
    Trophy Points:
    0
    Turut berduka bozzz, segera bersihin saja. Pakai Avira juga beres kok, malah sebelum masuk, dah di cut dl :gossip:
     
  9. pengamatKEJAM

    pengamatKEJAM New Member

    Messages:
    192
    Likes Received:
    10
    Trophy Points:
    0
    Share donk gan bagaimana pengaruhnya setelah kena virus ini, dan apa harapan kedepannya setelah menjadi salah satu korban kekejaman virus ini...??!!!! :eek: :eek: :eek:

    :peace: :peace: :peace: :peace: :peace: :peace:
     
  10. dunk2

    dunk2 New Member

    Messages:
    11
    Likes Received:
    3
    Trophy Points:
    0
    sialll,, gw kemaren biz kena ni virus bro.... hmmmmm,,,,
    akhir kata pake jurus paling jituuu en berhasil...

    jurusnya:
    Format ulang HDD, install windows baruu... :peace::peace::peace::peace::peace::peace::peace::peace:

    :peace::peace::peace:
     
  11. Haloboss

    Haloboss Active Member

    Messages:
    303
    Likes Received:
    16
    Trophy Points:
    28
    di PC ane pake avira tetep tembus bos...
    terinfeksi juga....
     
  12. sadermo

    sadermo Super Moderators Super Moderator

    Messages:
    2,086
    Likes Received:
    2,110
    Trophy Points:
    123
    jiahhh...wakakak...gw juga barusan kena nih,,,wixixixi...gw format aja tuh kompi gw.......wakakakakak:D:D:D
     
  13. Iwan Pethax

    Iwan Pethax New Member

    Messages:
    399
    Likes Received:
    243
    Trophy Points:
    0
    Lho kok punyaku bisa mrotect ??? coba setingannya di cek lagi gan, sama update nya :gossip:

     

    Attached Files:

  14. Haloboss

    Haloboss Active Member

    Messages:
    303
    Likes Received:
    16
    Trophy Points:
    28

    sudah tak uninstal boss, tak ganti ma Kaspersky kayanya aman nih...
     
  15. Haloboss

    Haloboss Active Member

    Messages:
    303
    Likes Received:
    16
    Trophy Points:
    28
    Pake ini Nih.....
     

    Attached Files:

    • 1.JPG
      1.JPG
      File size:
      68.1 KB
      Views:
      233
  16. pengamatKEJAM

    pengamatKEJAM New Member

    Messages:
    192
    Likes Received:
    10
    Trophy Points:
    0
    :thumb: :thumb: :thumb: :thumb:
     
  17. mangsan

    mangsan New Member

    Messages:
    149
    Likes Received:
    15
    Trophy Points:
    0
    sorry oot dikit bos, bisa share link avira premiumnya ? plus jamunya ya..biar i lovo full version..:pray:
    soalnya ane pake avira free ga ada fitur online protectionnya..:noidea:
     
  18. nasywa

    nasywa Active Member

    Messages:
    386
    Likes Received:
    21
    Trophy Points:
    28
    Sempet ke kirim dari temen kirain..sengaja ga taunya dia kerja ngirim dirinya sendiri ke semua teman2 yang terdaftar di yahoo mesengger.. bagusnya PC client yang kena udah tak pasangi Freezee.. tinggal restart KELAUT tuh viruzz :peace::boxing:
     
  19. Iwan Pethax

    Iwan Pethax New Member

    Messages:
    399
    Likes Received:
    243
    Trophy Points:
    0
    Coba ini bozzz :D
    [​IMG]

    Avira AntiVir Premium 2009 V9.0.0.447 Plus Key Till March 2010

    Download
     
    mangsan likes this.
  20. Iwan Pethax

    Iwan Pethax New Member

    Messages:
    399
    Likes Received:
    243
    Trophy Points:
    0
    Ato yang lengkap sekalian :

    [​IMG]


    Size : 659mb |Full versions

    Info
    Kaspersky Internet Security
    Avast Antivirus Pro
    Bitdefender Total security
    Avg Antivirus
    Ad-Aware Pro
    Bitdefender Antivirus
    Spyware Doctor
    DeepFreeze Enterprise
    Norton Antivirus
    NOD 32
    Rising Antivirus
    McAfee Total protection
    Panda Antivirus
    Trend Micro Antivirus
    Avira Antivirus Premium
    Malwarebytes Anti-Malware
    GSAn4lyzer

    Silahkan sedot gan : jangan lupa klik [​IMG] ya :D

    http://hotfile.com/dl/10837058/9eeff94/ ... 1.rar.html
    http://hotfile.com/dl/10837090/dc44273/ ... 2.rar.html
    http://hotfile.com/dl/10837102/d243e25/ ... 3.rar.html
    http://hotfile.com/dl/10837120/d688495/ ... 4.rar.html
    http://hotfile.com/dl/10837138/fb93b01/ ... 5.rar.html
    http://hotfile.com/dl/10837188/70d1d07/ ... 6.rar.html
    http://hotfile.com/dl/10837202/4ffe9de/ ... 7.rar.html
     
    kleptorian, ttronik and mangsan like this.

Share This Page