C:\Windows \mds.sys
C:\Windows \mdt.sys
C:\Windows \winbrd.jpg
C:\Windows \net.exe
C:\Windows \infocard.exe
Setelah itu Delete juga di bagian registrasy :start:run:regedit;
[HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Run]
“Firewall Administrating”=”C:\\WINDOWS\\infocard.exe” “Administrating Firewall” = “C: \ WINDOWS \ \ infocard.exe”
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run]
“Firewall Administrating”=”C:\\WINDOWS\\infocard.exe” “Administrating Firewall” = “C: \ WINDOWS \ \ infocard.exe”
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Terminal Server \ Install \ Software \ Microsoft \ Windows \ CurrentVersion \ Run] “Administrating Firewall” = “C: \ WINDOWS \ \ infocard.exe”
[HKEY_LOCAL_MACHINE \ SYSTEM \ ControlSet001 \ Services \ SharedAccess \ Parameters \ FirewallPolicy \ StandardProfile \ AuthorizedApplications \ List]
“C:\\Documents and Settings\\\\Desktop\\IM56245.JPG-www.myspace.com.exe”=”C:\\WINDOWS\\infocard.exe:*: Enabled:Firewall Administrating” “C: \ Documents and Settings \ \ [b] [/ b] \ \ Desktop \ \ IM56245.JPG-www.myspace.com.exe” = “C: \ WINDOWS \ \ infocard.exe: *: Enabled: Firewall Administrating ”
[HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Services \ SharedAccess \ Parameters \ FirewallPolicy \ StandardProfile \ AuthorizedApplications \ List]
“C:\\Documents and Settings\\\\Desktop\\IM56245.JPG-www.myspace.com.exe”=”C:\\WINDOWS\\infocard.exe:*: Enabled:Firewall Administrating” “C: \ Documents and Settings \ \ [b] [/ b] \ \ Desktop \ \ IM56245.JPG-www.myspace.com.exe” = “C: \ WINDOWS \ \ infocard.exe: *: Enabled: Firewall Administrating ”
[HKEY_USERS \ S-1-5-21-117609710-764733703-1957994488-1003 \ Software \ Microsoft \ Windows \ CurrentVersion \ Run]
“Firewall Administrating”=”C:\\WINDOWS\\infocard.exe” “Administrating Firewall” = “C: \ WINDOWS \ \ infocard.exe”
Share This Thread