Cara Mudah Berantas Virus Cinta

Jakarta - Virus lokal bernama Siggen yang bertemakan cinta akan memblokir seluruh file berekstensi .zip, .rar dan .exe. Tujuannya, agar aplikasi antivirus tidak dapat mengapus program jahat ini.

Namun setelah mengetahui ciri komputer yang terjangkit, ternyata ada beberapa cara sederhana untuk membasmi virus tersebut. Seperti yang dalam keterangan yang diterima detikINET dari vaksincom, Kamis (30/6/2011). Caranya dimulai dengan:

1. Matikan proses virus yang aktif di memori. Sebagai informasi virus ini dibuat dengan menggunakan program Visual Basic (VB), sehingga relatif mudah untuk mematikan proses virus yang sedang aktif dengan menggunakan tools KillVB. Silahkan download tools tersebut di alamat berikut.

2. Perbaiki registry yang sudah di ubah oleh virus. Virus ini cukup banyak melakukan perubahan pada registry Windows, untuk mempercepat proses perbaikan copy script di bawah ini pada program notepad kemudian simpan dengan nama REPAIR.INF. Install file tersebut dengan cara :

klik kanan REPAIR.INF
Kemudian pilih [INSTALL]

Berikut script yang harus disalin:

[Version]

Signature="$Chicago$"
Provider=Vaksincom Oyee

[DefaultInstall]
AddReg=UnhookRegKey

DelReg=del
[UnhookRegKey]

HKLM, SoftwareCLASSESbatfileshellopencommand,,,"""%1"" %*"
HKLM, SoftwareCLASSEScomfileshellopencommand,,,"""%1"" %*"
HKLM, SoftwareCLASSESexefileshellopencommand,,,"""%1"" %*"
HKLM, SoftwareCLASSESpiffileshellopencommand,,,"""%1"" %*"
HKLM, SoftwareCLASSESregfileshellopencommand,,,"regedit.exe "%1""
HKLM, SoftwareCLASSESscrfileshellopencommand,,,"""%1"" %*"
HKLM, SOFTWAREClasses.zip,,, "winzip"
HKLM, SYSTEMControlSet001ControlSafeBoot, AlternateShell,0, "cmd.exe"
HKLM, SYSTEMControlSet002ControlSafeBoot, AlternateShell,0, "cmd.exe"
HKLM, SYSTEMCurrentControlSetControlSafeBoot, AlternateShell,0, "cmd.exe"

[del]

HKCU, SoftwarenoF i T r I on Computer
HKLM, SYSTEMCurrentControlSetServicesnoF i T r I on Computer
HKLM, SYSTEMControlSet001ServicesnoF i T r I on Computer
HKLM, SOFTWAREMicrosoftWindowsCurrentVersionApp ManagementARPCachenoF i T r I on Computer
HKLM, SOFTWAREMicrosoftWindowsCurrentVersionRun, AudioSystem.exe
HKCU, SoftwarePoliciesMicrosoftWindowssystem, DisableCMD
HKCU, SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer, NoClose
HKCU, SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer, NoFind
HKCU, SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer, NoFolderOptions
HKCU, SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer, NoControlPanel
HKCU, SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer, NoRun
HKCU, SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer, NosaveSettings
HKCU, SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer, NoStartMenuMorePrograms
HKCU, SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer, NoViewContextMenu
HKCU, SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer, NoViewonDrive
HKCU, SoftwareMicrosoftWindowsCurrentVersionPoliciesSystem, DisableMsConfig
HKCU, SoftwareMicrosoftWindowsCurrentVersionPoliciesSystem, DisableRegistryTools
HKCU, SoftwareMicrosoftWindowsCurrentVersionPoliciesSystem, DisableTaskMgr
HKCU, Control PanelDesktop,SCRNSAVE.EXE
HKLM, SOFTWAREMicrosoftWindowsCurrentVersionRun, AudioSystem.exe
HKLM, SOFTWAREnoF i T r I on Computer
HKLM, SOFTWAREPoliciesMicrosoftWindowsInstaller, DisableMSI
HKLM, SOFTWAREPoliciesMicrosoftWindowsInstaller, LimitSystemRestoreCheckPointing
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Options000.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsAhnlab.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsansavd.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsattrib.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsAvas.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsAVG.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsCcapp.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionscclaw.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsccleaner.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsCleaner.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionscleanmgr.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsDriverDetective.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsDriverScanner.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsFixinstall.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsfolderlockbox_setup.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsFree Fire Screensaver.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsHunter.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsinstall.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsinstall_flash_player.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsISUNIST.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsKaspersky.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionskeygen.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionslimeware.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsLNKSTUB.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsmobsync.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsMSOOBE.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsmsra.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsNAPSTAT.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsNETSETUP.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsNip.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsNipsvc.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsNiu.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsNjeeves.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsNOD32krn.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsNOD32kui.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsNorman.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsNorton.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsNvccf.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsNvcoas.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsNvcod.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsNvcsched.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsPanda.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsPCMAV.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsPCMV-RTP.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsppclean.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsProcexp.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsregdir.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsRestore my files.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsrminstall.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsRSTRUI.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsSecurityConfig.exe.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionssetup.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsSmadav 2009 Rev. 3.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsSmaRTP.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsSophos.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionssymantec.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsst5unst.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionssupercleaner.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsTask.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsTaskkill.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionstasklist.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionstfnotice.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsTiny.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsTrend.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsTrendAntiVirus.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsTrojan Hunter.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsTrojan.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsTrojanHunter.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsTweakUi.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsUnins.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsUnins000.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsUninst.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsUninstall.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsunlocer.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsunlocker.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsUNWISE.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsUpd.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsUpdate.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsV2iBrowser.exe.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsVProConsole_.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsWinHIIP.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsunwise32.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsyoutubesetup.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsypsr.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsypsrru.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsZanda.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsZlh.exe
HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsZoneLabs.exe

3. Munculkan seluruh file yang disembuyikan oleh Windows dengan cara Folder Option, lalu ke tabulasi View kemudian centangkan opsi show hidden files and folder.

4. Hapus file yang dibuat oleh virus termasuk di USB Flash. Untuk mempercepat proses penghapusan, Anda dapat menggunakan fungsi Search/Find dari Windows dengan kata kunci *.exe dan *.scr. Tapi ingat, jangan sampai salah menghapus file.

File yang dibuat oleh virus ini memiliki ciri-ciri, berukuran 76 KB, tidak menyertakan icon, tipe file Application atau Screen Saver. Setelah itu kemudian hapus file berikut ini:

• OBE.sacura [semua drive]
• Autorun.inf [semua drive]
• Folder [-], semua drive
• Folder [Kasihku], semua drive
• Folder [Koleksi ScreenSaver], semua drive
• C:WINDOWSsystem32blank.htm
• C:Documents and Settings%user%http_www.patah-hati.com

Untuk pembersihan optimal, sebaiknya scan dengan menggunakan antivirus yang up-to-date, atau bisa menggunakan tools gratis Dr.Web CureIt yang bisa didapat melalui link berikut.


(eno/ash)