Announcement

Announcement Module
Collapse
No announcement yet.

setelah kena virus, registry ma msconfignya ga bisa balik lagi

Page Title Module
Move Remove Collapse
X
Conversation Detail Module
Collapse
  • Filter
  • Time
  • Show
Clear All
new posts

  • setelah kena virus, registry ma msconfignya ga bisa balik lagi

    Hi guys..... kemarin kompi gw kena virus lafatih, trus gw scan pake ANSAV32 update 31 Januari, dah ilang sih tuh virus. Tapi registry ma msconfignya ga bisa balik lagi, dia kebuka pake notepad. Gw dah coba pake Advanced Windows Care V2 Pro, but kaga' balik juga registrynya. Ada yg tau ga gw harus pake software apa lagi????? help please.....

  • #2
    Re: Help me Please !!!

    Originally posted by blitz_05 View Post
    Hi guys..... kemarin kompi gw kena virus lafatih, trus gw scan pake ANSAV32 update 31 Januari, dah ilang sih tuh virus. Tapi registry ma msconfignya ga bisa balik lagi, dia kebuka pake notepad. Gw dah coba pake Advanced Windows Care V2 Pro, but kaga' balik juga registrynya. Ada yg tau ga gw harus pake software apa lagi????? help please.....
    Masalahnya dimana ? Kalau Windows dan program yg error kan bisa instal ulang lagi. Kalo data kan bisa di backup dulu ke CD....

    Comment


    • #3
      Re: Help me Please !!!

      Masalahnya gimana caranya regitry ma msconfig di kompi gw bisa normal lagi ga kebuka pake notepad. Gw penah kena virus moonlight n kasusnya sama, trus gw pake Advanced Windows Care V2 Pro, tapi registry ma msconfignya balik seperti sedia kala. tapi yg ini kaga bisa normal lagi

      Comment


      • #4
        Re: Help me Please !!!

        Originally posted by blitz_05 View Post
        Masalahnya gimana caranya regitry ma msconfig di kompi gw bisa normal lagi ga kebuka pake notepad. Gw penah kena virus moonlight n kasusnya sama, trus gw pake Advanced Windows Care V2 Pro, tapi registry ma msconfignya balik seperti sedia kala. tapi yg ini kaga bisa normal lagi
        Bro coba dech loe pake Registry workshop 2.5.1 ato Killer Machine buat kembalikan registry!!!
        Coba donlot Registry Workshop 2.40 di sini .... Moeghan

        Untuk Killer Machinet donlot disini ... Moeghan

        Comment


        • #5
          Re: Help me Please !!!

          Originally posted by blitz_05 View Post
          Masalahnya gimana caranya regitry ma msconfig di kompi gw bisa normal lagi ga kebuka pake notepad. Gw penah kena virus moonlight n kasusnya sama, trus gw pake Advanced Windows Care V2 Pro, tapi registry ma msconfignya balik seperti sedia kala. tapi yg ini kaga bisa normal lagi
          Coba pake file reg.inf yg ada di forum ini. Kayaknya pernah lihat deh..Tinggal klik kanan install.

          Comment


          • #6
            Re: Help me Please !!!

            [Version]

            Signature="$Chicago$"

            Provider=Vaksincom



            [DefaultInstall]

            AddReg=UnhookRegKey

            DelReg=del



            [UnhookRegKey]

            HKLM, Software\CLASSES\exefile\shell\open\command,,,"""%1"" %*"

            HKLM, Software\CLASSES\batfile\shell\open\command,,,"""%1"" %*"

            HKLM, Software\CLASSES\comfile\shell\open\command,,,"""%1"" %*"

            HKLM, Software\CLASSES\exefile\shell\open\command,,,"""%1"" %*"

            HKLM, Software\CLASSES\piffile\shell\open\command,,,"""%1"" %*"

            HKLM, Software\CLASSES\regfile\shell\open\command,,,"regedit.exe "%1""

            HKLM, Software\CLASSES\scrfile\shell\open\command,,,"""%1"" %*"

            HKLM, SYSTEM\ControlSet001\Control\SafeBoot, AlternateShell,0, "cmd.exe"

            HKLM, SYSTEM\ControlSet002\Control\SafeBoot, AlternateShell,0, "cmd.exe"

            HKLM, SYSTEM\CurrentControlSet\Control\SafeBoot, AlternateShell,0, "cmd.exe"

            HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell,0, "Explorer.exe"

            HKCU, Control Panel\International, s1159,0, "AM"

            HKCU, Control Panel\International, s2359,0, "PM"

            HKLM, SOFTWARE\Classes\exefile,,,"Application"

            HKCU, Control Panel\Desktop,SCRNSAVE.EXE ,0,



            [del]

            HKCU, Software\Microsoft\Windows\CurrentVersion\Policies \System

            HKCU, Software\Microsoft\Windows\CurrentVersion\Run, 4k51k4

            HKCU, Software\Microsoft\Windows\CurrentVersion\Run, MSMSGS

            HKCU, Software\Microsoft\Windows\CurrentVersion\Policies \Explorer, NoFolderOptions

            HKLM, Software\Microsoft\Windows\CurrentVersion\Run, System Monitoring

            HKLM, Software\Microsoft\Windows\CurrentVersion\Policies \Explorer, NoFolderOptions

            HKLM, Software\Microsoft\Windows\CurrentVersion\Policies \System, DisableRegistryTools

            HKLM, Software\Microsoft\Windows\CurrentVersion\Policies \System, DisableTaskMgr

            HKLM, SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore,DisableSR

            HKLM, SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore, DisableConfig

            HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Run, System Monitoring

            HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\policies \system, DisableCMD

            HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, LegalNoticeText

            HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, LegalNoticeCaption

            HKLM, SOFTWARE\Policies\Microsoft\Windows\Installer, LimitSystemRestoreCheckpointing

            HKLM, SOFTWARE\Policies\Microsoft\Windows\Installer, DisableMSI

            HKLM, SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore, DisableConfig

            HKLM, SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore, DisableSR

            tuh simpan di reg.inf
            buat benerin dari brontok sih...

            Comment


            • #7
              Re: Help me Please !!!

              [Version]

              Signature="$Chicago$"

              Provider=Vaksincom



              [DefaultInstall]

              AddReg=UnhookRegKey

              DelReg=del



              [UnhookRegKey]

              HKLM, Software\CLASSES\batfile\shell\open\command,,,"""%1"" %*"

              HKLM, Software\CLASSES\comfile\shell\open\command,,,"""%1"" %*"

              HKLM, Software\CLASSES\exefile\shell\open\command,,,"""%1"" %*"

              HKLM, Software\CLASSES\piffile\shell\open\command,,,"""%1"" %*"

              HKLM, Software\CLASSES\regfile\shell\open\command,,,"regedit.exe "%1""

              HKLM, Software\CLASSES\scrfile\shell\open\command,,,"""%1"" %*"

              HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell,0, "Explorer.exe"

              HKLM, SYSTEM\ControlSet001\Control\SafeBoot, AlternateShell,0, "cmd.exe"

              HKLM, SYSTEM\ControlSet002\Control\SafeBoot, AlternateShell,0, "cmd.exe"

              HKLM, SYSTEM\CurrentControlSet\Control\SafeBoot, AlternateShell,0, "cmd.exe"

              HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer \Advanced\Folder\SuperHidden, UncheckedValue,0x00010001,1

              HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, userinit,0, C:\WINDOWS\System32\userinit.exe ,



              [del]

              HKCU, Software\Microsoft\Windows\CurrentVersion\Policies \System,DisableRegistryTools

              HKCU, Software\Microsoft\Windows\CurrentVersion\Policies \Explorer,NoFolderOptions

              HKCU, Software\Microsoft\Windows\CurrentVersion\Policies \WinOldApp

              HKCU, Software\Microsoft\Windows\CurrentVersion\Run,T170 2521TT4

              HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Run,T70Z 516

              HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Msconfig.exe

              HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedit.exe

              HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cmd.exe

              HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe

              HKCU, Software\VB and VBA Program Settings




              Copy ke notepad, simpan jadi repair.inf
              Gue pernah ngalamin hal yg sama, pasti bisa.

              Comment


              • #8
                Re: Help me Please !!!

                HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Msconfig.exe

                HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedit.exe

                HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cmd.exe

                HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe


                Ini bagian yg penting untuk mengembalikan regedit, config, cmd, & taskmgr ke semula.

                Comment


                • #9
                  Re: setelah kena virus, registry ma msconfignya ga bisa balik lagi

                  Repair your windows registry with this software

                  GWinRegRec 1.0.0 Beta 7

                  http://d.turboupload.com/d/1506499/G...eta_7.exe.html

                  Have a nice day

                  Comment


                  • #10
                    Re: setelah kena virus, registry ma msconfignya ga bisa balik lagi

                    O..ya guys... gw pnya 1 permasalahan lg neh. File dokumen (*.doc) ter-Super Hidden smuanya. N gw dah coba masuk ke registry HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr ent Version\Explorer\Advanced\Folder\Superhidden, but smuanya normal aja. tapi knapa file .doc-nya masih ga bisa dirubah ya attribute hiddennya?

                    Comment


                    • #11
                      Re: setelah kena virus, registry ma msconfignya ga bisa balik lagi

                      ATTRIB -s -h *.doc /s /d di folder file yang di hidden....

                      Comment


                      • #12
                        Re: setelah kena virus, registry ma msconfignya ga bisa balik lagi

                        Thank's bro.... gw baru inget. Abis gw dah puyeng duluan seh.....

                        Comment

                        Working...
                        X