04 Agustus 2009

[Komputer] Menghapus Virus RVHOST.EXE


Coba cara berikut:
  • Matikan system restore
  • Kalau di antivirus anda ada fitur Resident Shield, nonaktifkan dulu
  • Download ANSAV terbaru, install dan gunakan untuk scan pc anda
  • Scan selesai, lanjutkan dengan "fix registry"
  • Masuk ke regedit, kalau nemu yang berikut delete aj
*HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\"YahooMessenger" = "C:\WINDOWS\system32\RVHOST.exe
*HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\"YahooMessenger" = "%System%\RVHOST.exe
*HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\WorkgroupCrawler\Shares shared\New Folder.exe
*HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\WorkgroupCrawler\Shares\"shared" = "[shared drive]New Folder.exe"
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\"shell" = "explorer.exe RVHOST.exe"
  • Tutup regedit
  • Masuk tool > folder option > view. Klik "Show Hidden Files and Folders", uncheck "Hide Protected Operating System Files". Apply > OK
  • Cari file dibawah ini & kalau nemu force delete (shift + del)
*C:\WINDOWS\System32\cscript.exe
*C:\WINDOWS\System32\setting.ini
  • Run msconfig > Startup > disable entry "rvhost.exe" klik OK & restart

Tidak ada komentar:

Posting Komentar