alexa-tracking

Main Content

1024
1024
KASKUS
51
244
https://www.kaskus.co.id/thread/509f3ca0572acf8734000000/tolongin-ane-gan-gimana-cara-menghapus-v9-portal-site
tolongin ane gan, gimana cara menghapus v9 portal site ?
tolongin ane gan, ane tekena virus v9, awalnya ane nginstal foxit reader dan setalah itu semua browser di ambil alih oleh v9 portal site

plis mohon bantuan agan agan dan para master yang tau gimana caranya ngapus virus v9 di kompie ane. terima kasih.
scan pke antivir udah gk bisa yaa ? instal ulanf utau masuk lewat safe mod coman promt





Quote:jual Pulsa via LibertyReserve MURAH GAN !!!
Quote:Original Posted By Xduck
scan pke antivir udah gk bisa yaa ? instal ulanf utau masuk lewat safe mod coman promt


ane uda scan pake eset tapi ga ke detect, ribet ya virus satu ini sampe instal ulang emoticon-Mewek
thanks gan.

coba scan pke combofix gan.

Combofix
Spoiler for ComboFix:
jadi V9 portal itu virus ya emoticon-Belo
pantesan ane gk pernah instal apapun emoticon-Hammer (S)

@agan gober, udah slesai scan trus ane upplod di http://virusklinik.net/paste/47
langkah slanjutnya gimana gan, ini barusan ane coba kok tetep redirect ke V9 lagi yah emoticon-Bingung (S)
Quote:Original Posted By TheReal9
jadi V9 portal itu virus ya emoticon-Belo
pantesan ane gk pernah instal apapun emoticon-Hammer (S)

@agan gober, udah slesai scan trus ane upplod di http://virusklinik.net/paste/47
langkah slanjutnya gimana gan, ini barusan ane coba kok tetep redirect ke V9 lagi yah emoticon-Bingung (S)


passwordnya apaan gan?
sekalian minta link installernya dnk gan.
Quote:Original Posted By kocak_gober


passwordnya apaan gan?
sekalian minta link installernya dnk gan.


waduh.. ling instaler yg ane uplod td ya gan emoticon-Bingung (S)
Spoiler for cekidot:


prosesnya gimana gan, maaf ane nyubi gak tau emoticon-Bingung (S)
Quote:Original Posted By TheReal9


waduh.. ling instaler yg ane uplod td ya gan emoticon-Bingung (S)
Spoiler for cekidot:


prosesnya gimana gan, maaf ane nyubi gak tau emoticon-Bingung (S)


link installer foxit reader yg TS bilang, klo ente kena dari mana?

bikin log OldTimer ListIt [OTL]
Spoiler for OldTimer ListIt (OTL):
Quote:Original Posted By kocak_gober


link installer foxit reader yg TS bilang, klo ente kena dari mana?

bikin log OldTimer ListIt [OTL]
Spoiler for OldTimer ListIt (OTL):


sama gan, dari foxit reader juga
kyknya sih dari sini, lupa juga ane http://www.foxitsoftware.com/downloads/
padahal udah ane uninstal
Quote:Original Posted By TheReal9


sama gan, dari foxit reader juga
kyknya sih dari sini, lupa juga ane http://www.foxitsoftware.com/downloads/
padahal udah ane uninstal


ini bukan virus sih gan, dia cuma bikin static home page ke situsnya termasuk di new tab. dan agan sendiri yang menginstallnya saat menginstall foxit.emoticon-Big Grin

tolongin ane gan, gimana cara menghapus v9 portal site ?

dibikin entry registry berikut:
Quote:IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?utm_source=b&utm_...&ts=1352703097
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.v9.com/?utm_source=b&utm_...&ts=1352703097
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?utm_source=b&utm_...&ts=1352703097
IE - HKCU\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
IE - HKCU\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = [url]http://search.v9.com/web/?q={searchTerms}
FF - prefs.js..browser.search.defaultenginename: "v9"
FF - prefs.js..browser.search.order.1: "v9"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.search.selectedEngine: "v9"
FF - prefs.js..browser.startup.homepage: "http://www.v9.com/?utm_source=b&utm_medium=fox&from=fox&uid=132775_67584_2526552579_267123711_482ADD9B&ts=1352704594"
FF - user.js - File not found
[/url]

membuat folder dan file berikut:
Quote:C:\Program Files\newtabs
C:\WINDOWS\System32\Newtabs_v9.dll


cara bersihinnya gampang.
buka OTL. Bagian Custom scans/fixes masukkan baris berikut. Klik Run Fix.
klik ok buat restart komputernya.

Quote:
:OTL
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?utm_source=b&utm_...&ts=1352703097
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.v9.com/?utm_source=b&utm_...&ts=1352703097
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?utm_source=b&utm_...&ts=1352703097
IE - HKCU\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
IE - HKCU\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = [url]http://search.v9.com/web/?q={searchTerms}[/url]
FF - prefs.js..browser.search.defaultenginename: "v9"
FF - prefs.js..browser.search.order.1: "v9"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.search.selectedEngine: "v9"
FF - prefs.js..browser.startup.homepage: "http://www.v9.com/?utm_source=b&utm_medium=fox&from=fox&uid=132775_67584_2526552579_267123711_482ADD9B&ts=1352704594"
FF - user.js - File not found

:Files
C:\Program Files\newtabs
C:\WINDOWS\System32\Newtabs_v9.dll

:Commands
[purity]
[emptytemp]
[emptyjava]
[emptyflash]
[Reboot]
bentar gan, tadi kan ane udah jalanin programnya OTL, udah ane uplod juga

Quote:cara bersihinnya gampang.
buka OTL. Bagian Custom scans/fixes masukkan baris berikut. Klik Run Fix.
klik ok buat restart komputernya.


yg step ini udah, hilang sih V9 nya
cmn pas ane buka ctrl+t jadi muncul lagi gan emoticon-Sorry

oiya td juga muncul notepad lagi gan
isinya "All processes killed dll..."
Quote:Original Posted By TheReal9
bentar gan, tadi kan ane udah jalanin programnya OTL, udah ane uplod juga

trus ini mksudnya gimana gan emoticon-Bingung (S)
Spoiler for bingung:


bikin entry registry caranya gimana gan emoticon-Hammer (S)
sama buat foldernya dan file yg manual gitu ya?

______________________


yg step ini udah, hilang sih V9 nya
cmn pas ane buka ctrl+t jadi muncul lagi gan emoticon-Sorry[/QUOTE]

dia nyamar jadi plugins/exttention proxy plus.
tinggal unisntall aja plugins tersebut di IE, firefox dan chrome.
gan gober maaf ane masih bingung nih emoticon-Frown

Spoiler for :
Quote:Original Posted By TheReal9
gan gober maaf ane masih bingung nih emoticon-Frown

Spoiler for :


lho kok jadi ribet begitu.
klo ente pke firefox. klik tools - add-ons - extention. cari proxy tool. uninstall.
di chrome klik settings - extention. cari proxy tool. uninstall.
Quote:Original Posted By kocak_gober


lho kok jadi ribet begitu.
klo ente pke firefox. klik tools - add-ons - extention. cari proxy tool. uninstall.
di chrome klik settings - extention. cari proxy tool. uninstall.


astaga emoticon-Ngakak

agan gak bilang dari tadi sih, uda bisa ni emoticon-Embarrassment
thanks gan ingpohnya, problem solved emoticon-shakehand

maaf cmn bisa ngasih +1 tar malem yah emoticon-Big Grin
emoticon-Ngacir
makaNya dibaca tuh tiap kali instalasi program jangan maen Agree..Next..Next..Next..Next..Finish.
Quote:Original Posted By kocak_gober


lho kok jadi ribet begitu.
klo ente pke firefox. klik tools - add-ons - extention. cari proxy tool. uninstall.
di chrome klik settings - extention. cari proxy tool. uninstall.


big thanks gan, ane uda berhasil nih, manjur amir info nya gan emoticon-Smilie

Quote:Original Posted By ngalebok
makaNya dibaca tuh tiap kali instalasi program jangan maen Agree..Next..Next..Next..Next..Finish.


oke, thanks masukan nya gans, lain kali ga next next terus deh emoticon-Ngakak (S)

Makasih Gan

udah berhasil di remove gan....thanks alot ya...

ane juga ngalamin yg serupa gan, nginstall kaga pake baca lagi, langsung next-finish.emoticon-Ngakak
Quote:Original Posted By kocak_gober


lho kok jadi ribet begitu.
klo ente pke firefox. klik tools - add-ons - extention. cari proxy tool. uninstall.
di chrome klik settings - extention. cari proxy tool. uninstall.


aku blum brazil bro.....yg di uninstall apa ya?