Friday, March 20, 2009

VBS.Runauto Cleaning instruction

Maybe you had or had not even know about the virus VBS.RunAuto. The virus may disrupt the very most computer users. This virus spreads very quickly, because the virus is spread using the weaknesses of the autorun system on a user's computer.
Most computer users in Indonesian, know less about the characters the computer virus. And the use of USB drives are very large. So, many developers of the virus used that to spread them virus.
Ok, if your computer has been infected by this virus. You can clean the virus using the following way.

  1. Disable System Restore (Windows Me/XP).
  2. Update the virus definitions.
  3. Run a full system scan.
  4. Open registry editor and delete or restore any values added to the registry.

  • Navigate to and delete the following entries:

    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\"autorun" = "autorun.exe"

  • Restore the following registry entries to their original values, if required:
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\"Userinit" = "userinit.exe,autorun.bat"
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\"ShowSuperHidden" = "0"
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\"Hidden" = "2"

1 comment:

  1. weits......ilmu komputer jaringannya keren nih...ooopppsss nyambung gag yah