Virus YUYUN-2

alat-alat

1. Total commander dapat
didownload disini

Persiapan.

1. matikan autorun CD dan flash disk. caranya seperti ini

2. Mematikan wscript.exe.

wscript.exe adalah program window yang digunakan untuk menjalankan script. Agar virusnya tidak lagi aktif di memory, maka harus dimatikan dahulu. Caranya: tekan ctrl+alt+del untuk masuk TASK MANAGER, lalu cari wscrip.exe pada tab Processes , klik kanan kemudian pilih : End Process Tree dan tekan YES

3. buka total commander. di “configuration/option/display” centang “show hidden/system files”

4. buka drive flash disk anda, misal “e:/” lihat di root folder apakah ada file autorun.inf yang ada tanda seru berwarna merahnya

4. untuk memastikan autorun.inf anda adalah virus, maka lihat isinya. caranya . klik KANAN autorun.inf.

b. TEKAN ctrl+Q

c. lihat isi kolom sampingnya. bila ada tulisan thumb.db atau tulisan ngaco lainnya yang bukan milik anda “lain ceritanya kalau anda memang pembuat virus”, berarti itu virus.

Kalau nggak salah virus ini ada tulisannya “yuyun v.1″ atau “www.muslimah.or.id”

d. kalau ada virusnya berarti anda teruskan ke langkah 5. kalau nggak ya… selesai.

menghapus file buatan Yuyun (autorun.inf; thumb.db;*.lnk)

5. lakukan pencarian di “command/search” atau tekan Ctrl+F7

6. di kotak “search for” tulis “autorun.inf;thumb.db;*.lnk;database.mdb;*.tmp“. Pilih search in “local harddisk”. tambahkan juga drive flash disk anda bila perlu

7. centang “find text:” isi dengan “Wscript.exe //e:VBScript” INGAT!. ini harus diisi, sebab kalau tidak file penting anda akan HILANG

8. klik “start search”

9. setelah pencarian selesai.. klik “feed to listbook”

10.klik “Mark/select all” dan tekan F8

membersihkan registry

11. langkah terakhir adalah membersihkan registry. Buka registry dari start/run tulis: regedit. Kalau di disable, silahkan hidupkan dengan cara yang telah dijelaskan di bagian lain blog ini. Tekan CTRL+F untuk mencari kata “Wscript.exe //e:VBScript ”. Delete lah key yang ada tulisannya tersebut. dengan menekan tombol F3 sampai seluruh key yang mengandung kata tersebut habis.

Mendelete file-file buatan yuyun

File yang yuyun buat ada beberapa, yaitu :
%UserProfile%Local Settings/Temp/[Random].tmp
%UserProfile%Local Settings/Temp/auto.exe
%UserProfile%Local Settings/Temp/Yuyun.Q
UNTUK KETIGA FILE TERSEBUT, DARIPADA SUSAH NYARI LEBIH BAIK DELETE SAJA SEMUA FILE DI FOLDER TEMP
%UserProfile%My Documents/database.mdb
DELETE FILE INI BILA TIDAK TERDETEKSI DI SEARCH SEBELUMNYA
%Windir%:Microsoft Office Update for Windows XP.sys
DELETE FILE INI DI C:/WINDOWS
%UserProfile%Local Settings/Temp/v.doc
FILE INI TIDAK BERBAHAYA, HANYA PESAN YANG DIBUAT OLEH PEMBUAT VIRUS
Sedangkan registry yang diganti, adalah seperti ini:
HKEY_CURRENT_USER/Software/MicrosoftWindows/CurrentVersion/Run/ ”Explorer” = “Wscript.exe //e:VBScript “%UserProfile%My Documents/database.mdb””
HKEY_LOCAL_MACHINESOFTWARE/MicrosoftWindows/
CurrentVersion/Run/ “WinUpdate” = “Wscript.exe //e:VBScript “%Windir%:Microsoft Office Update for Windows XP.sys””
DELETE REGISTRY TERSEBUT
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem “DisableRegistrytools” = 1
ENABLEKAN REGISTRY DULU DENGAN CARA SEPERTI INI
Kalau nggak mau susah, ternyata McAfee update terbaru sudah mampu menanganinya secara otomatis. Saya menggunakan AVG dan masih belum mampu.
catatan :
%userprofile% maksudnya di document and settings/username
%windir% maksudnya c:/windows (atau di drive mana anda tempatkan folder windows)

Saya sarankan menggunakan Total Commander untuk membuka flashdisk dengan opsi “show hidden file” karena anda dapat dengan cepat mendeteksi adanya virus ini; yang ditandai dengan adanya tulisan autorun.inf dan thumb.db

Menghapus yuyun dari flashdisk

untuk menghapus yuyun dari flash disk, caranya lebih sederhana, karena yuyun hanya muncul sebagai file autorun.inf dan thumb.db dan *.lnk di setiap folder. Dengan demikian caranya sebagai berikut:
Pastikan bahwa komputer anda sudah bebas virus, atau kalau mau membiarkan komputernya ditangani oleh orang lain, minimal virusnya tidak jalan di memori. Matikan wscrip.exe dari memori seperti langkah 2 diatas
Lakukan prosedur 3 sampai 6, tapi di langkah 6, hanya tuliskan di “search for” - “autorun.inf;thumb.db;*.lnk”.
kerjakan langkah 7-10.
cek ulang dan selesai

Read More......

virus YUYUN download version

Read More......

A bout JA Teline III-Part2

MODUL JA TELINE III for Joomla 1.5.x


mod_jabulletin_j15.zip:
This module covers the default joomla mostread and latest modules. It supports options to show date, image.

mod_jamegamenu.zip:
DESCLOGINFORM

mod_janews2.zip:
JA News II module version 1.0.1 come with JA Teline II. JA News Frontpage should be installed to used with this module. JA News Frontpage is a part of JA News packages (JA News + JA News frontpage = JA News 1.3 and released with JA Teline II). For Userguide, please visit http://www.joomlart.com/forums/showthread.php?t=11946

mod_janews_fp_j15.zip:
Rearrange frontpage contents (article choose to display on frontpage) of Joomla into Headline layouts like news portal. You can choose among 2 options layout JA News Frontpage is a part of JA News packages (JA News + JA News frontpage = JA News 1.3 and released with JA Teline II). For Userguide, please visit http://www.joomlart.com/forums/showthread.php?t=11946


mod_janewsticker.zip:
JA News Sticker module allows display of article's title from sections or categories. You can configure the setttings in the right pane. Mutiple options for animations are also added, choose any one. If you are using this module on Teline III template, then the default module position is "headlines".

mod_jatabs_j15.zip:
Create a ja tab with module, content ...

mod_jawidget_stock.zip:
JA Stock Widget to show current status oc various stocks. The data is updated from Google finance, ''http://www.google.com/finance''. Default multiple Stocks can be set in the backend settings. However, User can use the frontend settings option to override these values.

mod_jawidget_weather.zip:
JA Weather Widget Module, to show multiple weather conditions of any city. A Default city can be configured to show to all users. However, the default setting can be customized by the site user from frontend to a city of his choice.

mod_switter_j15.zip:
JA Twitter is a Twitter module that let you display twittes from User or both User and Friends, allow display twitter account information, display friends.

plg_jabookmark_j15.zip:
JA Bookmark Plugin for Joomla! 1.5. Help your visitors promote your site and allows any visitor to bookmark your pages easily with many popular services. In ''Auto Mode'' You Can turn off the Bookmark button from any article by adding custom tag {jabookmark off} . In ''Manual'' Mode, To add the button into an article, add custom tag {jabookmark} in the article content. DONOT unpublish this plugin if you are in ''Manual mode'' of integration option. That will render the custom tag {jabookmark} to be read as normal text.

plg_jacomment.zip:
Plugin to integrate noticeable commenting systems (i.e. DisQus, IntenseDebate, JS-Kit). It creates comment form into each article.

plg_japopup.zip:
JA Popup plugin supports many types of content display using above frame work like ajax, iframe, youtube video, image, slideshow.
Depending on each type you select, you declare japopup tab in your content (i.e. module, article) to {japopup type="iframe" content="http://www.google.com" width="500" height="400" }Load a sample iFrame{/japopup}
You can use may type to load the content
1. ajax: loading external page or html content via ajax method
2. iframe: loading external page or html content via iframe method
3. youtube: loading youtube video
4. image: loading a specified images
5. slideshow: loading a group of images via a slideshow
The best showcase of JA Popup is used in JA Teline III. Visit JoomArt forum for full detailed userguide.
http://www.joomlart.com/forums/forumdisplay.php?f=165
(You need to be a Licensed Member of JA Template Club to view the forum content)

plg_jathumbnail.zip:
This plugin is used to generate Auto Thumbnail in Joomla Articles. This must be properly configured to make the best use out of it. Below are important note.
In the ' Integration Mode ' on the parameter list on the right:
• ''Auto'' mode: All joomla article will have this feature enable. To turn off plugin for specific article, use the {jathumbnail off} in that article.
• ''Manual'' mode: You must you [jathumbnail] somewhere in the joomla content to enable this plugin for that article.
• ''Disable'' mode: Disable the Thumbnail generation (DO NOT use the Disable feature of Joomla if you have used the tag {jathumbnail} or {jathumbnail off} already. It will be parsed as normal text.
The Manual mode is recommended for site with less images, the Auto mode is for site with massive volumn of images

plg_jazin.zip:
This plugin will find all available section and categories in your Joomla site and create all menu items link to such section/categories. Once created, menus item will be set to publish status. You can delete or unpublish unnecessary menus. The menu will be recreated if you choose "Update Setting" = Yes and click SAVE/APPLY. Go to http://www.joomlart.com/forums/showthread.php?p=49647 for more information

plg_system_jawidget.zip:
JA Widget Base is the core plugin to get services from third party API.
As of current version, this is use to get service from Google API.
Both JA Weather module and JA Stock module need this plugin to function. Your can find more at Google API homepage
Keep check updates at JoomlArt.com because we are considering to support other google api services for Joomla such as: Google Maps, Google Translation..

plg_usersetting.zip:
JA User Setting Plugin supports module to display information compatibly with user configuration. This plugin deals with logic of recording user configuration via guest cookies and member database. JA User setting also handles the display of configuration form in xml file or other form created within tmpl folder of module. For using, insert the tag {jausersetting modid=yourmoduleid group=yourgroup idReload=yourid} into layout.
Eg: In JA Teline III, the Usersetting are used in:
1. JA News 2: user can set the layout order of the news categories, setting number of item, columns for each sections.
2. Mobile/Desktop View Mode (one feature of JA Template Framework): user can switch to Mobile (Iphone, Handheld..) or desktop view. If user use Iphone and he want to view the website in desktop mode, he click to switch and next time he visit website again, it will load desktop view for him.
3. JA Weather Modules: If vistor lives in London but he want to know weather information for New York then he change the city. JA usersetting will write that information into cookies (not login) or database (logged in) and load New York weather forcast whenever he visit the website.
4. JA Stock Modules:: Load the specified favorite stock symbols based on user settings (similar to JA Weather module)

Read More......