tag:blogger.com,1999:blog-38872205Sun, 15 Apr 2012 23:00:47 +0000http://kurniawanantivirus.blogspot.com/noreply@blogger.com (Kurniawan)Blogger2125noreply@blogger.comnotag:blogger.com,1999:blog-38872205.post-117111729363081678Sat, 10 Feb 2007 14:17:00 +00002007-02-10T06:21:33.650-08:00May be someone need this information... <br />Just incase if someone need this help...<br /><br /> <br /><br /><br /> Nama Virus : Leena<br /> Keterangan :<br /><br /> # Icon Virus : word, Ukuran : 76 KB ,File Ext : .exe<br /> # Membuat file berikut ini :<br /> # c:\Documents and Settings\All Users\Application Data\Normal.exe<br /> # c:\Documents and Settings\[USER]\Local Settings\Application Data\[USER].task\services.exe<br /> # c:\Documents and Settings\[USER]\Local Settings\Temp\lsass.exe<br /> # c:\WINDOWS\ExeServ.exe<br /> # C:\WINDOWS\System32\controls.exe<br /> # c:\WINDOWS\system32\3D Soccer.scr<br /> # C:\WINDOWS\Tasks\leena.job<br /><br /><br /> Removir : http://www.macancrew.net/removir/mM_Removir.zip<br /><br /><br /> Nama Virus : yogo / the greatless<br /> Keterangan :<br /><br /> # Icon Virus : word, Ukuran : 64 KB ,File Ext : .scr<br /> # Membuat file berikut ini :<br /> # ?:\WINDOWS\system32\Msconfig.exe<br /> # ?:\WINDOWS\LastGood\system32\regwiz.exe<br /> # ?:\WINDOWS\MSGSRV32.COM<br /> # ?:\WINDOWS\system32\KERNEL.VDX<br /> # ?:\WINDOWS\system32\RPCSS.VDX<br /> # ?:\WINDOWS\system32\CIRRUSX.OXC<br /> # ?:\WINDOWS\system32\DDRAWXP.OXC<br /><br /> Removir : http://www.macancrew.net/removir/Rem_yogo.zip<br /><br /><br /> Nama Virus : Tinutuan_B<br /> Keterangan :<br /><br /> # Icon Virus : JPEG/ACDSee 7.0, Ukuran : 44 KB <br /> # Membuat file berikut ini :<br /> # ?:\WINDOWS\system32\ganemo45.exe<br /> # ?:\WINDOWS\system32\Kota-Tinu.exe<br /> # ?:\WINDOWS\system32\kangkung45.exe<br /> # ?:\WINDOWS\system32\sambiki45.exe<br /> # ?:\WINDOWS\system32\drivers\gedi.exe<br /> # ?:\Documents and Settings\USER\Local Settings\winfile.exe<br /> # ?:\Documents and Settings\USER\My Documents\My Pictures\My Pictures.exe<br /> # ?:\Documents and Settings\USER\My Documents\My Music\My Music.exe<br /> # ?:\WINDOWS\system32\3D Screen Saver.scr<br /> # ?:\WINDOWS\system32\MCR Screen Saver.scr<br /> # ?:\WINDOWS\system32\Romantic Rapshody Saver.scr<br /> # ?:\WINDOWS\system32\Laskar Cinta Saver.scr<br /> # ?:\WINDOWS\system32\3D Animation Saver.scr<br /> # ?:\Documents and Settings\USER\Start Menu\Programs\Startup\milu.bat<br /> # ?:\TINUTUAN.TXT<br /> # Loader : Winlogon Shell ==> ?:\WINDOWS\system32\drivers\gedi.exe<br /> # Loader : HKLM\Software\Microsoft\Windows\CurrentVersion\Run\message ==> ?:\WINDOWS\System32\config\smss.cmd<br /> # Loader : HKCU\Software\Microsoft\Windows\CurrentVersion\Run\manado-kota-tinutuan ==> ?:\WINDOWS\System32\Kota-Tinu.exe<br /><br /> Removir : http://www.macancrew.net/removir/Rem_Tinutuan_B.zip<br /><br /><br /> Nama Virus : My_Service<br /> Keterangan :<br /><br /> # Icon Virus : Folder, Ukuran : 30 KB , File Ext : .exe<br /> # Membuat file berikut ini :<br /> # ?:\WINDOWS\lsass.exe<br /> # ?:\WINDOWS\services.exe<br /> # ?:\WINDOWS\smss.exe<br /> # ?:\WINDOWS\WINDOWS.exe<br /> # ?:\windows operation.exe<br /> # ?:\WINDOWS\system32\services.com<br /> # ?:\WINDOWS\system32\cmd.com<br /> # ?:\WINDOWS\win.com<br /> # ?:\WINDOWS\cmd.com<br /> # ?:\Documents and Settings\USER\Local Settings\Application Data\system.com<br /> # ?:\WINDOWS\system32\auto.bat<br /> # Loader : HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Ini Service Ku ==> ?:\WINDOWS\system32\services.com<br /><br /> Removir : http://www.macancrew.net/removir/Rem_My_Service.zip<br /><br /><br /> Nama Virus : mig2<br /> Keterangan :<br /><br /> # Icon Virus : Folder, Ukuran : 129 KB , File Ext : .exe<br /> # Membuat file berikut ini :<br /> # Membuat Folder mig2 di tiap drive yg berisi New Folder.exe dan Folder.htt<br /> # Membuat File ke tiap drive dengan nama : Data %USER%.exe<br /> # ?:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Startup\Startup .exe<br /> # ?:\WINDOWS\system32\IExplorer.exe<br /> # ?:\WINDOWS\system32\GroupPolicy\Machine\Scripts\Startup\Startup .exe<br /> # ?:\WINDOWS\WINDOWS .exe<br /> # ?:\WINDOWS\mig2 .exe<br /> # ?:\Documents and Settings\Default User\Start Menu\Programs\Startup\Startup .exe<br /> # ?:\Documents and Settings\All Users\Start Menu\Programs\Startup\Empty .exe<br /> # ?:\Documents and Settings\All Users\Start Menu\Programs\Startup\Startup .exe<br /> # ?:\Documents and Settings\[USER]\Local Settings\Application Data\WINDOWS\WINLOGON.EXE<br /> # ?:\Documents and Settings\[USER]\Local Settings\Application Data\WINDOWS\CSRSS.EXE<br /> # ?:\Documents and Settings\[USER]\Local Settings\Application Data\WINDOWS\SERVICES.EXE<br /> # ?:\Documents and Settings\[USER]\Local Settings\Application Data\WINDOWS\LSASS.EXE<br /> # ?:\Documents and Settings\[USER]\Local Settings\Application Data\WINDOWS\SMSS.EXE<br /> # ?:\Documents and Settings\[USER]\Local Settings\Application Data\WINDOWS\SERVICES .exe<br /> # ?:\Documents and Settings\[USER]\Local Settings\Application Data\WINDOWS\LSASS .exe<br /> # ?:\Documents and Settings\[USER]\Local Settings\Application Data\WINDOWS\WINLOGON .exe<br /> # ?:\Documents and Settings\[USER]\Local Settings\Application Data\WINDOWS\CSRSS .exe<br /> # ?:\Documents and Settings\[USER]\Start Menu\Programs\Startup\Startup .exe<br /> # Loader : HKCU\Software\Microsoft\Windows\CurrentVersion\Run\MSMSGS ==> ?:\Documents and Settings\[USER]\Local Settings\Application Data\WINDOWS\WINLOGON.EXE\"<br /> # Loader : HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Service[USER] ==> ?:\Documents and Settings\[USER]\Local Settings\Application Data\WINDOWS\SERVICES.EXE<br /> # Loader : HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Logon[USER] ==> ?:\Documents and Settings\[USER]\Local Settings\Application Data\WINDOWS\CSRSS.EXE<br /> # Loader : HKLM\Software\Microsoft\Windows\CurrentVersion\Run\System Monitoring ==> ?:\Documents and Settings\[USER]\Local Settings\Application Data\WINDOWS\LSASS.EXE<br /><br /> Removir : http://www.macancrew.net/removir/Rem_Mig2.zip<br /><br /><br /> Nama Virus : Buff-exe<br /> Keterangan :<br /><br /> # Icon Virus : Folder, Ukuran : 53 KB , File Ext : .exe<br /> # Membuat file berikut ini :<br /> # C:\buff.exe<br /> # ?:\WINDOWS\system32\algserv.exe<br /> # ?:\WINDOWS\system32\svcmain.exe<br /> # ?:\WINDOWS\system32\vrsserv.exe<br /> # Loader : HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\wmserv ==> ?:\WINDOWS\system32\svcmain.exe<br /> # Loader : HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\algserv ==> ?:\WINDOWS\system32\algserv.exe<br /><br /> <br /><br /><br /> Nama Virus : Bangsat_A<br /> Keterangan :<br /><br /> # Icon Virus : Folder, Ukuran : 105 KB , File Ext : .exe<br /> # Membuat file berikut ini :<br /> # ?:\WINDOWS\security\System.exe<br /> # ?:\Documents and Settings\[USER]\Local Settings\Application Data\smss.exe<br /> # ?:\Documents and Settings\[USER]\Local Settings\Application Data\services.exe<br /> # ?:\Documents and Settings\[USER]\Local Settings\Application Data\lsass.exe<br /> # ?:\Documents and Settings\[USER]\Local Settings\Application Data\inetinfo.exe<br /> # ?:\Documents and Settings\[USER]\Local Settings\Application Data\csrss.exe<br /> # ?:\Documents and Settings\[USER]\Local Settings\Application Data\winlogon.exe<br /> # ?:\Documents and Settings\[USER]\Templates\DIA 54TR10.com<br /> # Loader : HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Remove 54tr10 ==> ?:\Documents and Settings\[USER]\Local Settings\Application Data\smss.exe<br /> # Loader : HKLM\Software\Microsoft\Windows\CurrentVersion\Run\New Anti Virus ==> ?:\WINDOWS\Security\System.exe<br /><br /><br /><br /> Nama Virus : Flu_Ikan<br /> Keterangan :<br /><br /> # Icon Virus : Folder, Ukuran : 76 KB<br /> # Membuat File berikut ini :<br /> c:\WINDOWS\FishDemon.exe<br /> c:\WINDOWS\Help\(Nama file Random) mis : D85U68N85U.exe, J66T74E84B.exe, L78V76Q86N.exe <br /> c:\WINDOWS\system32\config\(Nama file Random) mis : D85U68N85U.exe, J66T74E84B.exe, L78V76Q86N.exe <br /> c:\aliases.ini<br /> c:\script.ini<br /> c:\Documents and Settings\[CURRENT_USER]\My Documents\Flu-Ikan.htm<br /> # Loader di Msconfig : <br /> - kebodohan <br /> - pemalas <br /> - mulut_besar <br /> - otak_udang <br /> # Men-Disable Klik-Kanan di Desktop & Windows Explorer<br /> # Mengganti Tampilan Desktop Dengan ID Romantic Devil.R<br /><br /><br /> Nama Virus : ABG-Aceh<br /> Keterangan :<br /><br /> # Icon Virus : Folder, Ukuran : 220 KB <br /> # Membuat File berikut ini :<br /> C:\Program Files\Service.exe<br /> C:\ABG-Aceh.exe<br /> # Berusaha membuat File berikut ini :<br /> D:\ABG-Aceh.exe<br /> E:\ABG-Aceh.exe<br /> F:\ABG-Aceh.exe<br /> G:\ABG-Aceh.exe<br /> H:\ABG-Aceh.exe<br /> # Loader di Msconfig : <br /> - Service App (memanggil C:\Program Files\Service.exe)<br /><br /><br /><br /><br /> Nama Virus : SHELLYNT<br /> Keterangan :<br /><br /> # Icon Virus : Setup/Installer, Ukuran : 23 KB <br /> # Membuat File berikut ini :<br /> - C:\WINDOWS\Config\smss.exe<br /> - C:\WINDOWS\system32\config\systemprofile\Local Settings\services.exe<br /> - C:\WINDOWS\system32\Rundll.exe<br /> - C:\fix.com<br /> - C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe.pif<br /> - C:\WINDOWS\check.pif<br /> # Copy File ke Flashdisk dengan nama :<br /> - Computer.exe (Dengan Icon File Setup/Installer)<br /> # Loader di Msconfig : <br /> - Shellynt<br /> - Fault<br /> # Mengubah Label Drive C:\ menjadi SHELLYNT<br /><br /><br /><br /> Nama Virus : Sensasi.A.5tr10<br /> Keterangan :<br /><br /> # Icon Virus : Folder, Ukuran : 38 KB <br /> # Membuat File berikut ini :<br /> C:\Documents and Settings\USER\Local Settings\Application Data\csrss.exe<br /> C:\Documents and Settings\USER\Local Settings\Application Data\inetinfo.exe<br /> C:\Documents and Settings\USER\Local Settings\Application Data\lsass.exe<br /> C:\Documents and Settings\USER\Local Settings\Application Data\services.exe<br /> C:\Documents and Settings\USER\Local Settings\Application Data\smss.exe<br /> C:\Documents and Settings\USER\Local Settings\Application Data\winlogon.exe<br /> C:\WINDOWS\system32\Svchos.exe<br /> C:\Documents and Settings\USER\Templates\54TR10 AJA.com<br /> C:\WINDOWS\system32\USER\'s Setting.scr<br /> C:\Documents and Settings\USER\Start Menu\Programs\Startup\Start.pif<br /> # Loader di Msconfig : <br /> - ADie suka kamu <br /> - SaTRio ADie X <br /><br /><br /><br /><br /> Keterangan :<br /><br /> # Icon Virus : Folder, Ukuran : 58 KB <br /> # Membuat File berikut ini :<br /> C:\Documents and Settings\USER\Desktop\Windows Explorer.exe<br /> C:\Documents and Settings\USER\Start Menu\Programs\Startup\Romantic-Devil.R.exe<br /> C:\Documents and Settings\USER\Templates\csrss.exe<br /> C:\Documents and Settings\USER\Templates\inetinfo.exe<br /> C:\Documents and Settings\USER\Templates\lsass.exe<br /> C:\Documents and Settings\USER\Templates\services.exe<br /> C:\Documents and Settings\USER\Templates\smss.exe<br /> C:\Documents and Settings\USER\Templates\winlogon.exe<br /> C:\WINDOWS\CintaButa.exe<br /> C:\WINDOWS\eksplorasi.exe<br /> C:\WINDOWS\FirstLove.exe<br /> C:\WINDOWS\KesenjanganSosial.exe<br /> C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\csrss.exe<br /> C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\inetinfo.exe<br /> C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\lsass.exe<br /> C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\services.exe<br /> C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\smss.exe<br /> C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\winlogon.exe<br /> # Loader di Msconfig : <br /> - SysDiaz <br /> - SysYuni <br /> - SysRia <br /> - SysDokterGila <br /> - DllHost<br /> - Pluto <br /><br /><br /><br /> Nama Virus : Kantuk<br /> Keterangan :<br /><br /> # Icon Virus : Microsoft Word, Ukuran : 56 KB <br /> # Membuat file berikut ini :<br /> # C:\WINDOWS\system32\system.exe<br /> # Copy File ke Flashdisk dengan nama :<br /> - Kantuk.exe (Dengan Icon Microsoft Word)<br /> # Loader : HKLM\Software\Microsoft\Windows\CurrentVersion\Run\SymRun ==> C:\WINDOWS\System32\system.exe<br /><br /><br /><br /> Nama Virus : NewInfo<br /> Keterangan :<br /><br /> # Icon Virus : Folder, Ukuran : 324 KB<br /> # Membuat file berikut ini :<br /> # c:\WINDOWS\system32\lsvrss.exe<br /> # Copy File ke Flashdisk dengan nama :<br /> - DocumentFolder.exe<br /> - NewInfo.htm<br /> # Loader : HKLM\Software\Microsoft\Windows\CurrentVersion\Run\SysIDstr ==> c:\WINDOWS\system32\lsvrss.exe<br /> # Loader : HKCU\Software\Microsoft\Windows\CurrentVersion\Run\DocumentInfo ==> c:\WINDOWS\system32\lsvrss.exe<br /><br /><br /><br /> Nama Virus : My Song.mp3<br /> Keterangan :<br /><br /> # Icon Virus : mp3, Ukuran : 60 KB <br /> # Membuat file berikut ini :<br /> # c:\WINDOWS\system32\moviex.exe<br /> # c:\WINDOWS\system32\sysconf.dlI<br /> # c:\WINDOWS\system32\system.dlI<br /> # c:\WINDOWS\system32\COMCTL32.PID<br /> # Copy File ke Flashdisk dengan nama :<br /> - My Song.mp3.exe (Dengan Icon Mp3)<br /> # Loader : HKLM\Software\Microsoft\Windows\CurrentVersion\Run\SysData ==> C:\WINDOWS\System32\moviex.exe<br /><br /><br /><br /> Nama Virus : LayOut.htt<br /> Keterangan :<br /><br /> - Icon : notepad, Ukuran : 103 KB<br /> - Membuat file Windowsdir taskmgr.exe <br /> - Membuat file layout.htt<br /> - Membuat file system.exe <br /><br /><br /><br /><br /> Nama Virus : Gadis Unmul<br /> Keterangan :<br /><br /> - Icon : Folder, Ukuran : 72 KB<br /> - Membuat file c:\unmul_gadis_pesan@@@.doc<br /> - Membuat file [%WINDOWS%]\system\tsunnammii__B.exe<br /> - Membuat file [%WINDOWS%]\tsunnammii__B.exe<br /> - Membuat file [%SYSTEM%]\[%USERNAME%].exe<br /> - Menambahkan My Document di Control Panel<br /> - Menambahkan My Document di Desktop<br /> - Menambahkan gadis_unmul di Startup<br /><br /><br /><br /> Nama Virus : Borlas / Animasi<br /> Keterangan :<br /><br /> - Icon : Flash, Ukuran : 410KB<br /> - Membuat file animasi.exe di semua drive<br /> - Membuat file WindowsDir java\classes\Animasi.exe<br /> - Membuat file WindowsDir security\Animasi.exe<br /> - Membuat file WindowsDir resources\Oghie.exe<br /> - Membuat file WindowsDir pchealth\Animasi.exe<br /> <br /><br /><br /> Nama Virus : MooNlight<br /> Keterangan :<br /><br /> - Membuat file [%WINDOWS%]\java\CLASES\BIN\csrss.exe<br /> - Membuat file [%WINDOWS%]\Systask.exe<br /> - Membuat file [%WINDOWS%]\system32\APPLOG\Sys\Winlogon.exe<br /> - Membuat file [%WINDOWS%]\system32\run32dll.exe<br /> - Membuat file [%WINDOWS%]\Brico.cmd<br /> - Membuat file [%WINDOWS%]\COMMAND\SETRAMD.cmd<br /> - Membuat file [%WINDOWS%]\system32\MySqld-nt.cmd<br /> - Membuat file [%WINDOWS%]\system32\remotesp.cmd<br /> - Membuat file c:\windows.scr Dengan Icon Folder<br /> - Folder [%WINDOWS%] asli di Hidden<br /> - Semua Folder di Flashdisk di Hidden<br /> - Membuat File scr di Flashdisk dengan nama folder-folder di Flashdisk<br /> <br /><br /> Nama Virus : Shuriken3<br /> Keterangan :<br /><br /> - Membuat file windows.exe di direktori windows<br /> - Membuat loader di msconfig dengan item PROGRAM yang memanggil [%<br /> window%]\windows.exe<br /> - Membuat file (dengan icon folder) disemua folder di drive selain C:\ dengan ukuran 224 KB<br /><br /><br /><br /> Nama Virus : Patah Hati<br /> Keterangan :<br /><br /> - Icon Virus : Folder, Ukuran : 88 KB<br /> - Membuat file berikut ini di windows<br /> c:\Program Files\Microsoft Office\Temp.exe<br /> c:\WINDOWS\Help\user logon.exe<br /> c:\WINDOWS\hkcmd.exe<br /> c:\WINDOWS\system\Aku Bisa Tanpamu.exe<br /> c:\WINDOWS\system\Aku Kecewa.exe<br /> c:\WINDOWS\system\Dibalas Dengan Dusta.exe<br /> c:\WINDOWS\system\ISASS.exe<br /> c:\WINDOWS\system\Kau Pikir Kaulah Segalanya.exe<br /> c:\WINDOWS\system\LNETINFO.exe<br /> c:\WINDOWS\system\mr.abram\'s.exe<br /> c:\WINDOWS\system\Sejauh Mungkin.exe<br /> c:\WINDOWS\system\Tak Seperti Dulu.exe<br /> c:\WINDOWS\system\Viva Elektro.exe<br /> c:\WINDOWS\system.exe<br /> c:\WINDOWS\system32\Patah_07065.exe<br /> c:\WINDOWS\security\krnl32.bat<br /> - Membuat file [My Documents.exe] di Desktop<br /> - Membuat file [My Documents.exe] di Start Menu<br /> - Membuat file [System startup.pif] di Start Up<br /> - Membuat loader di msconfig dengan item [patah hati],[user logon]dan [HotKeysCmds]<br /><br /><br /><br /> Nama Virus : Ambon Manise<br /> Keterangan :<br /><br /> - Icon Virus : Folder, Ukuran : 42 KB<br /> - Membuat file berikut ini di windows<br /> c:\WINDOWS\SVCHOST.EXE<br /> c:\WINDOWS\system\SVCHOST.EXE<br /> c:\WINDOWS\system32\EBRR.EXE<br /> c:\WINDOWS\system32\mmtask.exe<br /> - MengCopy file ke Flashdisk dengan nama :<br /> Data.exe<br /> Jangan Dihapus.exe<br /> Agnes Monica.exe<br /> Bekas Pacar.exe<br /> Oh Cantiknya.exe<br /> Penting!!!.exe<br /> Dokumen Kerja.exe<br /> Gambar.exe<div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/38872205-117111729363081678?l=kurniawanantivirus.blogspot.com' alt='' /></div><img src="http://feeds.feedburner.com/~r/KurniawansAntiVirus/~4/X4iuFFGL4Pg" height="1" width="1"/>http://feedproxy.google.com/~r/KurniawansAntiVirus/~3/X4iuFFGL4Pg/indonesians-antivirus.htmlnoreply@blogger.com (Kurniawan)0http://kurniawanantivirus.blogspot.com/2007/02/indonesians-antivirus.htmltag:blogger.com,1999:blog-38872205.post-117111706964343200Sat, 10 Feb 2007 14:16:00 +00002007-02-10T06:22:36.253-08:00May be someone need this antivirus...<br /><br />Virus Name : Tinutuan_B<br /><br /><br /># Virus Icon: JPEG/ACDSee 7.0, size: 44 KB<br />I guess it is from the milu.bat<br /><br /># will create this files :<br /># ?:\WINDOWS\system32\ganemo45.exe<br /># ?:\WINDOWS\system32\Kota-Tinu.exe<br /># ?:\WINDOWS\system32\kangkung45.exe<br /># ?:\WINDOWS\system32\sambiki45.exe<br /># ?:\WINDOWS\system32\drivers\gedi.exe<br /># ?:\Documents and Settings\USER\Local Settings\winfile.exe<br /># ?:\Documents and Settings\USER\My Documents\My Pictures\My Pictures.exe<br /># ?:\Documents and Settings\USER\My Documents\My Music\My Music.exe<br /># ?:\WINDOWS\system32\3D Screen Saver.scr<br /># ?:\WINDOWS\system32\MCR Screen Saver.scr<br /># ?:\WINDOWS\system32\Romantic Rapshody Saver.scr<br /># ?:\WINDOWS\system32\Laskar Cinta Saver.scr<br /># ?:\WINDOWS\system32\3D Animation Saver.scr<br /># ?:\Documents and Settings\USER\Start Menu\Programs\Startup\milu.bat<br /># ?:\TINUTUAN.TXT<br /># Loader : Winlogon Shell ==> ?:\WINDOWS\system32\drivers\gedi.exe<br /># Loader : HKLM\Software\Microsoft\Windows\CurrentVersion\Run\message ==> ?:\WINDOWS\System32\config\smss.cmd<br /># Loader : HKCU\Software\Microsoft\Windows\CurrentVersion\Run\manado-kota-tinutuan ==> ?:\WINDOWS\System32\Kota-Tinu.exe<br /><br />Removir : http://www.macancrew.net/removir/Rem_Tinutuan_B.zip<br /><br />****<br />Kill the loader<br />-Gedi.exe<br />-smss.cmd<br />-Kota-Tinu.exe<br /><br />*** QUICKLY RESTART<br />- delete all files<br />-fix all the registry<br /><br />* Winlogon Shell<br />-HKLM/SOFTWARE/MICROSOFT/WIndows NT/CurrentVersion/WinLogon<div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/38872205-117111706964343200?l=kurniawanantivirus.blogspot.com' alt='' /></div><img src="http://feeds.feedburner.com/~r/KurniawansAntiVirus/~4/X2658WARAf8" height="1" width="1"/>http://feedproxy.google.com/~r/KurniawansAntiVirus/~3/X2658WARAf8/tinutuanb-antivirus.htmlnoreply@blogger.com (Kurniawan)1http://kurniawanantivirus.blogspot.com/2007/02/tinutuanb-antivirus.htmlen-usnonadult