mei_mdn wrote:jd storynya,
kompi saya rusak,
di kompi saya ad program "MS ReMOVAL TOOL"
trus kompi saya gak bisa dibuat buka program ap2, cuma bsa dibuat bka my computr,
mohon bantuanny, thanks..
MS ReMOVAL TOOL adalah program antispyware palsu, yang malah membuat komputer kita tersisipi virus / spyware / trojan,,biasanya program ini akan mengeluarkan pesan seperti ini (yang bertanda trojan / spyware / virus telah berhasil menginfeksi komputer anda
- PESAN dari MS REMOVAL:
"MS Removal Tool Warning
Intercepting programs that may compromise your private and harm your system have been detected on your PC. Click here to remove them immediately with MS Removal Tool."
"MS Removal Tool Warning
Your PC is infected with dangerous viruses. Activate antivirus protection to prevent data loss and avoid the theft of your credit card details. Click here to activate protection."
"MS Removal Tool
Some critical system files of your computer were modified by malicious program. It may cause system instability and data loss."
Cara Menghapus atau Remove MS Removal Tool - Anti Spyware Palsu :
1. Masuk Kedalam Windows Safe Mode With Network Connection.
2. Jika anda terkoneksi internet, Download Aplikasi Anti Spyware asli seperti Spyware Hunter, Malwarebytes dan sebagainya.
3. Install aplikasi Anti Spyware yang baru di download tadi.
4. Scan Computer anda dengan Anti Spyware tersebut.
5. Jika cara tersebut tidak ampuh, coba restore setting computer anda ke waktu sebelum MS Removal Tool - Anti Spyware Palsu di install.
Cara Manual Menghapus MS Removal Tool :
1. Masuk Kedalam SafeMode, kemudian masuk ke registry Editor (Regedit)
2. Cari key-key berikut kemudian hapus :
HKCU/Software/Microsof/Windows/CurrentVersion/Run/"[nama acak]. Exe"
HKCU/Software/Microsoft/Windows/CurrentVersion/Run/"[nama acak]"
HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/Association/"LowRiskFileTypes" = '/{hq: /s s:/ogn: / uyu: /dyd:/ cu: /BNL: /ble: / sdf: / lrh: / iul: / iulm: / FhG: / clq: / kqf: / `wh: / lqf: / lqdf: / lnw: / lq2: / l2t: / v` w: / RBS: '
HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/Attachment/"SaveZoneInformation" = '1 '
HKCU/Software/Microsoft/Internet Explorer/Download/"CheckExeSignatures" = 'no'
HKCU/Software/Microsoft/Internet Explorer/Main/"UseFormSuggest" = 'yes'
HKCU/Software/Microsoft/Windows/CurrentVersion/Internet Settings/"WarnonBadCertRecving" = '0 '
HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/System/"DisableTaskMgr" = '1 '
3. Cari File-file Berikut kemudian Hapus
Win XP/2000 : C:/Documents and Settings/All Users/Application Data/[nama acak].exe
misal : j85fFkgrx29kv.exe
4. Win 7/Vista : C:/ProgramData/[nama acak].exe
misal : j85fFkgrx29kv.exe
semoga beruntung ..
Indeks
Bagi Smua Guest/Member dari Forum Spasa.info di mohon untuk menyebarkan forum ini kepada Seluruh masyarakat Spasa dari yang kecil, besar, tua, muda 
