Langkah PRAKTIS Membasmi VIRUS CNN - Lakukan proses pembersihan pada mode “safe mode” Matikan service virus yang aktif. Untuk mematikan service virus lakukan langkah berikut
: Klik [ start ] - Klik [ Run ] - Ketik [ Services.msc ] - Klik kanan
service CbEvtSvc.exe kemudian pilih Properties - Pastikan pada menu
“Services status” = Started - Pada kolom [ startup type ] pilih
“Disable” - Klik “Ok”. Perbaiki registry windows
yang telah diubah oleh virus, Silahkan salin script di bawah ini pada
program notepad kemudian simpan dengan nama repair.inf, jalankan file
tersebut dengan cara sebagai berikut ini : Klik kanan repair.inf - Klik Install,....
[Version]
Signature=”$Chicago$”
Provider=Vaksincom Oyee
[DefaultInstall]
AddReg=UnhookRegKey DelReg=del [UnhookRegKey] HKLM,
Software\CLASSES\batfile\shell\open\command,,,”"”%1?” %*” HKLM,
Software\CLASSES\comfile\shell\open\command,,,”"”%1?” %*” HKLM,
Software\CLASSES\exefile\shell\open\command,,,”"”%1?” %*” HKLM,
Software\CLASSES\piffile\shell\open\command,,,”"”%1?” %*” HKLM,
Software\CLASSES\regfile\shell\open\command,,,”regedit.exe “%1?” HKLM,
Software\CLASSES\scrfile\shell\open\command,,,”"”%1?” %*” HKLM,
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell,0,
“Explorer.exe” HKCU, Control Panel\Desktop, ConvertedWallpaper,0, “”
HKCU, Control Panel\Desktop, OriginalWallpaper,0, “” HKCU, Control
Panel\Desktop, SCRNSAVE.EXE,0, “” HKCU, Control Panel\Desktop,
Wallpaper,0, “” HKCU, Software\Microsoft\Internet
Explorer\Desktop\General, BackupWallpaper,0, “” HKCU,
Software\Microsoft\Internet Explorer\Desktop\General, Wallpaper,0, “”
[del]
HKLM, Software\Microsoft\Windows\CurrentVersion\Run, lphc7nvj0e52e
HKLM, Software\Microsoft\Windows\CurrentVersion\Run, services HKLM,
Software\Microsoft\Windows\CurrentVersion\Run, SMrhc3nvj0e52e HKLM,
Software\Microsoft\Windows\CurrentVersion\Run, rhc3nvj0e52e.exe HKCU,
Software\Microsoft\Windows\CurrentVersion\Policies\System,
NoDispBackgroundPage HKCU,
Software\Microsoft\Windows\CurrentVersion\Policies\System,
NoDispScrSavPage HKLM, SYSTEM\CurrentControlSet\Services\6127a5e3
HKLM, SYSTEM\ControlSet002\Services\6127a5e3 HKLM,
SYSTEM\ControlSet001\Services\6127a5e3 HKLM,
SYSTEM\ControlSet001\Services\CbEvtSvc HKLM,
SYSTEM\ControlSet002\Services\CbEvtSvc HKLM,
SYSTEM\CurrentControlSet\Services\CbEvtSvc HKLM,
SYSTEM\ControlSet001\Services\CbEvtSvc HKLM,
SYSTEM\CControlSet002\Services\CbEvtSvc HKLM,
SOFTWARE\Microsoft\software notifier HKLM,
software\Microsoft\Windows\CurrentVersion\Uninstall\rhc3nvj0e52e HKLM,
software\rhc3nvj0e52e HKLM, software\Microsoft\Windows\CurrentVersion,
rhc3nvj0e52e HKLM, software\Microsoft\Windows\CurrentVersion\Internet
Settings\User Agent\Post Platform HKLM, SOFTWARE\Microsoft\Software
Notifier HKLM, SYSTEM\ControlSet001\Services\125c1fb5 HKLM,
SYSTEM\ControlSet002\Services\125c1fb5 HKLM,
SYSTEM\CurrentControlSet\Services\125c1fb5