They never been stop spreading their knowledge…. and we also never let them alive forever. This is the article how to remove amburadul virus for all varian no need for antivirus program you can simply clean it using manual technique.
The simple way to know if your computer infected by this virus is you will see JPEG files with aplication extension. Now let’s start to remove it!
1. Unplug your infected computer from your network to stop this virus spreading.
2. Disable “System Restore” when in cleaning process.
3. Kill the virus process using power tools “currprocess” kill all process with icon JPG.
4. Repair your registry that already changed by the virus using this code:
[Version]
Signature=”$Chicago$”
Provider=Nobody
[DefaultInstall]
AddReg=UnhookRegKey
DelReg=del
[UnhookRegKey]
HKLM, Software\CLASSES\batfile\shell\open\command,,,”"”%1″” %*”
HKLM, Software\CLASSES\comfile\shell\open\command,,,”"”%1″” %*”
HKLM, Software\CLASSES\exefile\shell\open\command,,,”"”%1″” %*”
HKLM, Software\CLASSES\piffile\shell\open\command,,,”"”%1″” %*”
HKLM, Software\CLASSES\regfile\shell\open\command,,,”regedit.exe “%1″”
HKLM, Software\CLASSES\scrfile\shell\open\command,,,”"”%1″” %*”
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell,0, “Explorer.exe”
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\HideFileExt, UncheckedValue,0×00010001,0
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\HideFileExt,CheckedValue,0×00010001,1
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\HideFileExt,DefaultValue,0×00010001,1
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden, UncheckedValue,0×00010001,1
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden, CheckedValue,0×00010001,0
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden, DefaultValue,0×00010001,0
HKCU, Software\Microsoft\Internet Explorer\Main, Start Page,0, “about:blank”
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\HideFileExt, type,0, “checkbox”
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden, type,0, “checkbox”
HKCU, Control Panel\International, s1159,0, “AM”
HKCU, Control Panel\International, s2359,0, “PM”
HKLM, SYSTEM\ControlSet001\Control\SafeBoot, AlternateShell,0, “cmd.exe”
HKLM, SYSTEM\CurrentControlSet\Control\SafeBoot, AlternateShell,0, “cmd.exe”
HKCU, Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced, ShowSuperHidden,0×00010001,1
HKCU, Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced, SuperHidden,0×00010001,1
HKCU, Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced, HideFileExt,0×00010001,0
[del]
HKCU, Software\Microsoft\Internet Explorer\Main, Window Title,
HKLM, SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore, DisableConfig
HKLM, SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore, DisableSR
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kspoold.exe
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kspool.exe
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rstrui.exe
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wscript.exe
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mmc.exe
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\HokageFile.exe
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Rin.exe
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Obito.exe
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cmd.exe
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SMP.exe
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskkill.exe
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tasklist.exe
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KakashiHatake.exe
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Britney Spears-CLN.exe
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Britney Spears-RTP.exe
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\boot.exe
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\HOKAGE4.exe
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Britney Spears
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Britney Spears
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Ansav.exe
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Setup.exe,debugger
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Instal.exe, debugger
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Install.exe,debugger
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\procexp.exe
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msiexec.exe
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Ansavgd.exe
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegistryTools
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, NoFind
HKLM, SOFTWARE\Policies\Microsoft\Windows\Installer, DisableMSI
HKLM, SOFTWARE\Policies\Microsoft\Windows\Installer, LimitSystemRestoreCheckpointing
HKCR, exefile, NeverShowExt
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Run, PaRaY_VM
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ConfigVir
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Run, NviDiaGT
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Run, NarmonVirusAnti
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Run, AVManager
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System, EnableLUA
5. Delete the master virus in %systemroot%\system32\~A~m~B~u~R~a~D~u~L~ before you do this you have to make hiden files become visible.
Then deleted this file list:
csrcc.exe
smss.exe
lsass.exe
services.exe
winlogon.exe
Paraysutki_VM_Community.sys
msvbvm60.dll
Drive:\Autorun.inf
Drive:\FoToKu xx-x-*.exe, where x show the date when virus active
Drive:\Friendster Community.exe
Drive:\J3MbataN K4HaYan.exe
Drive:\MyImages.exe
Drive:\PaLMa.exe
Drive:\Images
To make sure your computer clean you can check scan your computer using your favorite antivirus programs.
Done, have a nice day 
SIMILAR POST :
- Remove W32/VBWorm.QXE (bulubebek)
- Stop Virus Stargate
- 6 Step to: Remove Jengkol Virus
- Remove MaHaDeWa VBS.Autorun.AM
Incoming search terms:
- photo-t432e jpeg exe
- cara membersihkan trojan dari windows 7 starter
- the system cannot find the file specified ayodance
- menghapus direktory internet download manager
- photo-t432e jpeg
- application not found pada disk E
- problem with shorcut artinya
- ayodance the system cannot find the file specified
- membasmi virus sality
- Mengembalikan registry karena virus
- menghapus winlogos
- cara membuka memory card yg tidak tampil
- Cara memperbaiki net exe error win7
- found debugger on your memory maksudnya gmn?
- ouc exe no disk
- penyebab the path is too deep
- photo-t432e
- rgedit terkena virus
- software pencari varian virus
- update cara memperbaiki flash rusak
- almanahe remover
- apa penyebab flashdisk error cannot specified find
- cara atasi virus shortcut
- cara hapus sality virus
- cara hapus virus short cut
- cara matikan microsoft has stopped working
- cara membasmi virus shortcut
- cara memperbaiki file mmc yang corup
- cara memperbaiki flasdik yang terkena virus w32
- cara memperbaiki hardisk
- cara menghapus virus lewat cmd
- cara mengtasi software yang tidak valid dengan syistem 32
- cmd hilang
- kenapa selalu keluar there is no disk in the drive
- membuka billing yang terkena virus
- membuka fd terproteck
- mengaktifkan anti virus yang di protect oleh virus
- mengatasi mmc write protect
- menghilangkan write protection
- mmc rusak kena virus
- salty101 exe
- virus
- antivirus diblok virus
- apa itu virus sality 101
- apa kerosakan pada laptop windows selalu corrupt
- arti winlogos
- bagaimana cara memgatasi problem windows
- bagaimana cara memulihkan data yang terkena virus autorun
- billing ecafepro terkena virus
- buka folder not responding windows xp
- buka mmc keblokir kena virus
- cara atasi fd yang minta format
- cara atasi windows disabl exe
- cara delet polder yg kg bs di delet
- cara enable task manager akibat conficker
- cara format flashdisk lewat cmd
- cara format mmc di cmd
- Cara hapus rundll 32
- cara hapus virus autorun d memory tanpa scan
- Cara hapus virus di mmc
- Cara hapus virus shortcut laptop
- cara hapus virus sistem shutdown
- cara hilangin virus yang tidak bisa di hapus di flasdisk
- cara jitu menghilangkan write protec
- cara mematikan rtp
- cara membasmi virus almahe b
- cara membasmi virus amburadul
- cara membasmi virus HKEY-CLASSES_ROOT
- cara membasmi virus ink
- cara membasmi virus sality
- cara membasmi virus trojan
- Cara membersihkan registry yang terinfeksi virus
- cara membersihkan virus amburadul
- cara membersihkan virus di bb
- cara membersihkan virus di laptop windows xp
- cara membersihkan virus flash disk
- cara membersihkan virus memory card
- cara membersihkan virus sality 101 di flashdisk
- cara membuat virus dan cara menghilanginya
- cara membuka cmd yang terkena virus
- cara membuka data di laptop yg terblokir
- cara membuka flashdisk yang terprotect virus
- cara memperbaiki download manager yang terprotec
- cara memperbaiki explore exe terkena trojan
- cara memperbaiki fd rusak
- cara memperbaiki File Format Is Not Valid
- cara memperbaiki flashdisk yang minta di format
- cara memperbaiki flashdisk yang terkena write protect
- cara memperbaiki laptop windows rusak
- Cara memperbaiki MMC eror
- Cara memperbaiki mmc yg rusak
- cara memperbaiki sofware yg rusak
- cara memperbaiki win32 yang di protec virus
- Cara mencari file yang error
- cara menformat usb di internet
- cara meng hilangkan virus ms dos
- cara mengatasi antivirus di blokir virus
- cara mengatasi antivirus program has been stopped
- cara mengatasi file regedit exe yang invalid
- Cara mengatasi memory could not be read di komputer
- cara mengatasi photo-t432e jpeg exe
- cara mengatasi shortcut pada mmc
- cara mengatasi virus shortcut
- cara mengembalikan billing expoler error
- Cara menghapus file yang failed di IDM
- cara menghapus idm di laptop
- cara menghapus polder yang susah
- cara menghapus rundill
- cara menghapus virus aadrive32 exe
- cara menghapus virus lewat bios
- cara menghapus virus t432e
- cara menghapus virus winlogon
- cara menghilangkan lsass
- cara menghilangkan pesan stopped working saat buka exe
- cara menghilangkan system shutdown DI:/system32/service exe
- cara menghilangkan virus jpeg exe
- cara scan virus jpag
- Clean menghapus file
- clean service exe virus muncul
- delete ansav that write protected
- explorer exe hilang windows 7 program di maximize tak tampak
- fix shortcut setelah kena virus lnk
- google di blok virus
- hapus sality tanpa menghapus program
- hapus virus lnk lewat cmd
- hardis kena virus shortcut
- Hkey_local_machine\sofware\ terinfeksi virus
- invalid win32 aplication saat membuka file mp3
- kena winlogon gimana atasin
- Kenapa cmd gak bisa di buka di laptop
- kenapa windows stop working
- meatasi rundll
- melihat file jpg dg cmd pada memori card
- membasmi virus sality dan ink
- membuka task manager yang kena blok
- memory card kena virus
- memperbaiki billing server
- memperbaiki fd dengan regedit
- memperbaiki fike kena virus html
- memperbaiki flash disk
- memperbaiki memory card yang terkena virus
- memperbaiki registy shell32 yang kena virus
- memperbaiki rundll32 pada saat shutdown
- memperbaiki rundll32 yang not responding
- memperbaiki win32 window 7 xp
- mencari data yang hilang pada memory card
- MENCARI FILE YANG HILANG DI FLASDIS
- mengatasi blackberry selalu bufering
- mengatasi komputer selalu minta restart
- mengatasi mmc yang protect
- mengatasi problem with shorcut
- mengatasi the system cannot find the file specified ayodance
- mengatasi virus amburadul
- mengembalikan photo yang rusak terkena virus
- menghapus sality 101 di harddisk external
- menghapus virus vbs di mmc
- menghapus virus winlogon exe
- menghilangkan aadrive32 exe
- Msconfig tidak bisa di buka
- patcher ayodance the system cannot find the file specified
- penghancur sality
- penyebab memori atau disk tidak terbaca
- Perbaikan windows xp yg kena virus
- photo-t432e jpg
- photo-t432e jpg exe
- privacy protection muncul blok komputer
- repair shortcut * lnk
- reparing short cut rusak
- sality 101 registry
- software pembasmi aadrive32 exe
- Software penghapus empty registry
- solusi hardisk external disable
- Solusi regedit yang di block administrator
- solusi run dll error
- task manager ada pesan "the system cannot find the file specified"
- Tips menghapus virus flashdisc dari dos
- virus amburadul
- virus sality 101 selalu membuat shortcut dos dengan ekstension pif
- virus shortcut hilang
- virus yg merusak pencarian google
- w32/vbworm beau
- # menghapus error winlogon exe
- * exe hilang
- aadrive32 exe adalah virus alman
- aadrive32 exe no disk
- aadrive32 exe-application error
- administrator di blok virus
- administrator muncul winlogon
- akibat dari control panel dan task manager not responding
- akibat virus alman
- akibat winlogon exe terhapus
- aktifkan administator karena disable
- aktifkan task manager
- amburadul blog
- amburadul removal
- anti hkey class server 32
- anti virus buat virus sality
- anti virus buat virus shortcut
- anti virus memperbaiki sality
- anti virus plasdisk
- anti virus registry winlogon terinfeksi
- anti virus short cut dan fike terkunci
- anti virus yang bisa menghapus virus shortcut
- anti virus yang selalu uptudate
- anti virus yang tidak menghapus data
- antivirus avg penyebab billing server tidak terbaca
- antivirus buat basmi * pif
- antivirus diblok
- antivirus mengatasi mmc yang write protection
- antivirus pembasmi alman
- antivirus pembasmi rundll32
- antivirus pembunuh winlogon
- antivirus portable untuk menghapus virus amburadul
- antivirus tidak bisa diinstal
- antivirus yang bisa memulihkan file
- apa arti vprotec
- apa penyebab debug di ayodance
- apa penyebab trackpad error
- apa sebab the application or dll is not a valid windows image
- apa yang dimaksud ms-dos function bagaimana mengatasinya apabila tidak valid
- apakah deep freeze yang bisa membuat task manager tidak bisa dibuka
- apakah vprotect application
- aplikasi flashdisk error 0
- aplikasi memformat flashdisk rusak dengan w7
- aplikasi mmc fixer
- aplikasi pembersih windows
- aplikasi untuk membuka file yang tidak bisa tampil karena virus pada flash disc
- aplikasi untuk membuka flash disk yang terkunci
- Aplikasi untuk membuka mmc kena protect
- aplikasi untuk mengembalikan file yang telah dimakan virus
- aplikasi untuk menyembuhkan system windows xp yg terkena virus
- application error drive tidak bisa dibuka
- arti dari not valid win32
- arti doc is not a valid win32 application
- arti notifikasi there is no disk in the drive
- arti pesan is not valid win32 application
- arti setup exe is not valid win32 application
- arti the application is not valid windows image
- artinya not a valid win32 application
- atasi A PHP Error was encountered
- atasi antivirus rusak
- atasi explorer exe - application error the memory could not be written
- ATASI FAIL WINDOW XP YANG HILANG
- ATASI FLASHDISK WRITE PROTECTED
- atasi microsoft window eror
- atasi pc shutdown hang
- atasi pesan error boot rundll saat buka card memory
- atasi pesan rundll saat buka card memory
- Atasi tidak bisa start up karena telah hapus winlog
- atasi trackpad rusak pada blackberry
- atasi windos7 stater blank
- atasi write disk protek di pc
- autorun program diblokir window 7
- ayo dance online problem cannot find specific file
- ayodance gak bisa autostart
- ayodance patcher the system cannot find the file specified
- ayodance solusi The system Cannot find The file specified
- ayodance tidak bisa dibuka
- bagaimana cara matikan autoplay dengan regedit
- bagaimana cara melihat virus autorun terinfeksi yang hiden
- bagaimana cara melumpuhkan virus dari komputer dengan norman anti virus
- bagaimana cara membuka file jpeg not valid
- bagaimana cara membunuh virus dalam facebook
- bagaimana cara membunuh virus sality
- bagaimana cara mengaktifkan anti virus
- bagaimana cara mengaktifkan IDM yang di blok
- bagaimana cara mengatasi jika system32 terhapus
- bagaimana cara mengatasi virus shutdown 60 seconds
- Bagaimana cara mengembaliin sorcat y ke detek virus
- bagaimana cara menghapus virus di memori yang susah hilang
- Bagaimana caranya menghilangkan Privacy protection
- BAGAIMANA MANGHILANGKAN VIRUS TANPA ANTI VIRUS
- bagaimana mengaktifkan antialman setelah di downlod
- bagaimana mengatasi aadrive32 exe-application error
- bagaimana mengatasi rundll32 exe aplication error
- bagaimana mengatasi windows can chek
- bagaimana meremove deep preeze
- bagaimana remove virus folder shotcut
- bagamana mengatasi IDM yang di blokir
- basmi sality 101
- basmi virus komputer tanpa software indonesian
- basmi virus membuat disabled administrator
- basmi virus total manual
- belajar menghapus virus recycler dan shorcut pada flasdisk
- bersihkan file doc terkena virus
- bersihkan virus amburadul
- bila muncul ouc exe there is no disk
- billing error kena scan virus
- billing error terkena firus
- billing tidak dimakan virus
- bios billing protect aplikasi windows
- blog cara menemukan data-data yang hilang pada flash disk
- buat virus deep freeze lewat cmd
- buka all program minta delet di win 7
- buka file mp3 di c muncul not a valid win32 application windows xp
- buka shortcut folder yg kna virus
- buka task manager yang terblokir virus
- buku panduan belajar bikin anti virus yang bagus
- buku panduan menghapus virus di antivirus avg 10 0
- c:/ is not a valid win32 application artinya
- cannot find the specified file ayodance
- cannot remove folder tanpa software
- cannot remove folder the directory is not empty di flashdisk
- cannot remove folder the directory is not empty kenapa
- cara aktifkan regisrty yang di disable administrator
- cara antisipasi blok idm
- cara atasi failed to start application
- cara atasi flash disc yang minta format
- cara atasi flashdisk di protec virus
- cara atasi idm ke blok
- cara atasi laptop tidak bisa baca file reg
- cara atasi registry error
- cara atasi st5unst is necesary
- cara atasi super hidden
- cara atasi system32
- cara atasi windows 7 yang tidak bisa diinstal anti software
- cara atasi winlogs
- cara balikin run cmd diws 7
- cara basmi virus short cut 1 2 3 4
- cara basmi virus shortcut
- cara basmi virus tanpa softwere
- cara bersihkan jpg exe
- cara betulin program mp3 yang kena virus exe
- cara blok idm portable
- cara buang file invalid ms dos function
- cara buang malmware dalam windows 7
- cara buang virus sality 101 secara manual
- cara buat virus secara manual
- cara buka client billing exploler yang terkunci
- cara buka client billing expoler 2007 terkunci
- cara buka file jpeg yang rusak
- cara buka file kena virus
- cara buka file yg rusak kena virus
- cara buka gambar hidden di bb
- cara buka hard disk setelah hidden Dari anti virus
- cara buka hidden picture bb
- Cara buka laptop pada saat dibuka cannot boot sehabis menginstal skinpack
- cara buka mmc yang rusak
- cara buka regedit yg kena virus
- cara buka task manager yang terkunci secara permanen pada windows xp
- cara buka task manager yg d blok virus
- cara buka vcd yg di protect
- cara copy file yang jika dibuka muncul tulisan youll need to provide administrator permission to copy this file
- cara delete registry lewat dos
- cara delete virus di task manager
- cara delete virus new hour varian
- cara disable antivirus norman
- cara enabelkan msconfig
- cara format flash lewat cmp
- cara format flashdisk yang di blok
If you're new here, you may want to subscribe to my RSS feed. You may copy or publish this article to your blog or other site as long you give credit link back to this site article. Thanks for visiting my blog!
Did you know?
Tag cloud
Blogs Statistic
Subscribe my feed
July 21st, 2008 at 2:14 PM
Thanks for this article, my computer got infected by this virus but I already cleaned it using this tips.
July 22nd, 2008 at 5:18 AM
My cybercafe is also subject to these viruses could eventually eradicated also hehe, nice to meet you.
July 24th, 2008 at 3:11 AM
I just know there is new virus…
July 24th, 2008 at 3:12 AM
thanks for the tips .., I will try first ..
July 24th, 2008 at 5:30 AM
This virus not only internet cafe just happened yesterday I got finished I write here how to tackle the virus it: D
August 11th, 2008 at 4:27 AM
Hi nice work! Good luck.
August 19th, 2008 at 9:16 PM
I’ve tried to do all the instructions above to remove the virus in shambles, but when I restart my laptop, the virus appeared again, even that all my antivirus installed and up to date, lost all. How do I deal with it, please …., I wait an answer as soon as possible.
Regards Eko
August 20th, 2008 at 2:03 PM
the possibility eko Alman contaminated with the virus that attacks files with ektension .exe try to download norman antivirus or antivirus that can detect this virus and then scan Alman total laptop flash disk (if using) just started the cleaning process. just a suggestion, I cleaned the virus in shambles yesterday was just using the tools of ANSAV without significant problems.
good luck:)
August 22nd, 2008 at 2:19 AM
Thank for answer, I do use AVG 8, PCMAV 1.6, and the actual ANSAV happens all good clean virus on drive C, D and Flash disk, the virus was also detected Alman. But I was surprised when I restart, all my anti-virus and install missing file structure on my laptop back as when I turn on earlier. (use anti-virus norman I have not tried)
simply this: I do like the above instructions, can be installed anti-virus scan to clean my files in my document or delete some files / folders I delete. but after I restart, all returned. so as if the arrangement of files and the viruses still appear as before after the restart. I arrived …., stressful if you address some surabaya I’ll come for help. For a friend or anyone who can advise him I wait for an answer. (Just do not re-used in the install). Thanks severe
August 22nd, 2008 at 2:33 PM
DH eko, apparently because the virus was re-master is still there or he still has executes autorun file so every computer restart the virus again re-establish its structure, especially if contaminated with other viruses it should be thoroughly cleaned. try to note the windows startup or service usually try to cover herself virus2 on that part … oh yes my advice should be cleaned before it Alman virus when it convinced a new clean Alman began cleaning his shambles virus
to note possible:
1. system restore service for cleaning help in non-switch.
2. make sure the computer is not installed deepfreeze program or imaging such as that every restart will return to the initial conditions.
3. check windows service startup or start any active windows.
4. note and delete the file autorun.inf which usually make the main weapon as a generator of the virus in Indonesia are mostly from the root drive using eg in c: \ d: \ and that is the case most of the flash.
5. Do not use the flash while the time to make sure where to start when the computer virus is a source of clean and infected in the flash again enter the main problem is obvious from the flash.
6. if possible during the cleaning process should not open another application that is not important.
If not successful eco also be able to contact a computer expert around surabaya I can not help because I am located in the malang …
August 23rd, 2008 at 1:50 AM
Thanks a heavy, my laptop there deepfreeze. Later I will try your instructions above, if you must know the address where Malang, please sms only at 0358-7648650. If I’ve tried the suggestions of you still not able to, I want to ask for help to come to the place you all acquaintances. My position on Nganjuk so away from Surabaya or Malang almost the same. One more information I provide, my laptop as if it only works in memory, so when I save files, delete files or folders, install programs, etc., after the restart will return to the original structure. You for your attention I have to say many thanks.
August 26th, 2008 at 4:40 PM
deepfreeze his first shutdown mode in THAWED new virus is first cleaned first and then Alman in shambles, when it’s finished restart your computer in convincing the new virus is gone again deepfreeze at the switch. simple problem’s all because there deepfreeze behind it, although the cleaning of millions of times if the process is still active deepfreeze’ll never be clean.
OK so it was not necessary Kemalang make it clear that he he would be acquaintances
September 8th, 2008 at 12:43 AM
to enable regedit? currproses can not run
information please
September 9th, 2008 at 10:51 PM
to enable regedit crude way (not recommended, use at your own risk) can use the following ways:
Start> Run> cmd> type:
reg delete HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ System
confirmation Yes
If the command prompt on the block also can use an alternative way, save the code below to any names, but use the extension. Reg then double click.
REGEDIT4
[HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ System] “DisableRegistryTools” = dword: 00000000
October 6th, 2008 at 5:25 AM
Istanto a kind … I have a problem about the virus mainly Amburadul.B Amburadul …
I’ve tried all the way over …
But there is a problem I encounter ..
I’ve run a virus deadly cproses then they will be, then why:
1. regedit, cmd same maxi administrator disabled (because the virus is not it?) Then I have to do?
2. I’ve tried using the save way use format. Reg, but still registry di’disable’kan by viruses .. Administrators do have control panel on the block too …
Please Enlightenment …..
I am waiting a reply …
October 6th, 2008 at 10:15 AM
Edu cpc DH,
Varian amburadul.A or amburadul.B actually not much different .. everything can be solved with a way above the origin followed by good will.
1. To fix the problem in the registry that the virus just use the fox above code in the save as repair.inf or whatever name it is important extension. Inf right click and click install if you have not tried the restart function computer.
2. if registry is still disable the command prompt and disable also still possible cpc Edu could make a batch file with the extension. bat with a line to delete some parts of the registry in the way, how easy enough to search on google would have home care.
If you still can not I can fix FREE but maybe the father should have a brother in the poor could easily dicontact order. Please note also for the startup and services may be less rigorous father.
Regards,
Istanto
October 9th, 2008 at 9:11 AM
Well … Thanks a lot … Oh yes, I’m not fathers yet, i’m still 17 years old … Hahaha …;-)
Thx a lot …
thank for this good …
Success is always …
October 13th, 2008 at 12:55 AM
ask for help …!
its my computer explorer can not open, can only enter the program through task manager (run), cmd + msconfig can not.
Why??
thanks
October 14th, 2008 at 3:49 AM
Clearly, the registry is damaged by a virus, just short of his registry in shambles, it happened after trying to clean the virus in shambles? if yes did I ever have 1 case after trying to clean a laptop from a friend in shambles virus exactly the case with you, the explorer does not autoload when windows start and do not associate files bener … I try to fix first. inf registry + associates Registry (search on google there) my new code import the above, the laptop back to normal even faster
… first tried many paths to roma ..
December 22nd, 2008 at 12:52 PM
greetings to all,
I want to ask the moderator, all the administrative tools can not be running, there is missing text switches / s my computer was infected by shambles, what’s the solution?
THz b4
December 30th, 2008 at 11:31 PM
thank you for the information
February 8th, 2009 at 9:03 AM
Ok this is a virus. although I also hit. so we fight to ask questions and learn to find a cure. may also make up some anti-virus prevention and let them be creative … as this virus for people who love pictures like that. if in his view of the image. eat that picture might he said. ok just for that once again congratulations for creating. survivors can also create a window format could’ve ha ha …. how Joking.
February 8th, 2009 at 9:17 AM
Oh yes so I format it. after completion can not shut down the lights on still dim. monitor is also dim. What the shambles or from another reply. so the second format OK
February 25th, 2009 at 8:56 AM
I got it but explorer still open when the file association is justified ????????????? just seen the box it out the windows explorer start up
February 26th, 2009 at 1:36 AM
Mmmhh .. try in check at startup in msconfig in the registry
March 14th, 2009 at 9:31 PM
ouch ……. how this boss??
restore the system application and others can not open??
March 15th, 2009 at 6:47 AM
@fadly = because of it?
June 5th, 2009 at 7:19 AM
How to remove a virus w32.hakagan?
Thanks
June 7th, 2009 at 12:16 AM
This is the information that I really need. Thanks so much!
July 30th, 2009 at 8:09 PM
I got Sality.AQ W32,,,
if I make norman clean,. exe file to be corrupted ….
there are suggestions that powerful anti-malware can be cleaned without damaging this .exe files?
July 31st, 2009 at 2:13 AM
first time I had it all clean. exe file corrupted (not know if I can at repair) and I throw on the new content. try searching on the repair. exe I’ll help you find ….
August 6th, 2009 at 12:38 PM
I want to ask, my laptop got a virus, the virus I do not know what, because if the I restart or shutdown laptop not boting or response bios, usually in the press repeated it again a new power to live, ok thanks ….. …….
August 6th, 2009 at 2:51 PM
@ pradiksa: I’ve been asked directly to enginer norman, norman mallware you download the latest cleaner can fix. exe is the damaged sality
@ ogaldino: Could be a virus but it was not you who is corrupt OS / computer hardware you are in trouble, because I’ve been able to shutdown Patcher problems in 98 cases of the same windows server 2003. You wear what windows OS? try to check on his website about the shutdown microsoft Patcher. If you’ve installed the patch still does not mean that the virus may try to check the condition …
August 10th, 2009 at 3:38 AM
Thank you… although not yet .. hopefully try not to ..
laptop + external hard disk virus taxable limit.exe
indication of any online 1-7 hours of direct morning outside the limit of 15 minutes and then shutdown …
can you help me?
Thank you …
August 10th, 2009 at 6:02 AM
I’ll write a complete removal of viruses when I have time limit.exe references in:
http://forums.techguy.org/malware-removal-hijackthis-logs/653928-limit-exe-shutdown-15-minutes.html
October 10th, 2010 at 8:37 AM
i like yhis solution
December 28th, 2010 at 3:44 AM
how do when a virus is installed and registry system block 32 ?
December 31st, 2010 at 6:43 PM
get some tools to unlocked your registry.