Kaejadia ini merupakan pertama kali saat saya mengupdate windows vista saya. Saat setelah selesai update..muncul semacam security internet, pertama saya kaget kok banyak virusnya dan banyak sekali jenis trojan. saat itu antivirus saya pun ga bisa muncul alias disable...buseeet. Tp berkat google...everything is ok dalam beberapa jam komputer saya kembali normal tanpa instal ulang ....anda jg bermasalah dengan VISTA INTERNET SECURITY 2011?
ok saya jelaskan dengan kopi paste saat saya menemukan artikel dari microsoftnya.
Read this:
Read the info below from Bleepingcomputers about MALWARE
Antivirus Vista 2010, Win 7 Antispyware 2010, and XP Internet Security 2010 are new rogues that are exactly the same program, but are shown with different names and interfaces depending on the version of Windows that it is run on. After I wrote this guide, I was told that this rogue goes under quite a few different names, which I have listed below:
· Antivirus Vista 2010
· Vista Antispyware 2010
· Vista Guardian
· Vista Antivirus Pro
· Vista Internet Security
· Vista Internet Security 2010
· XP Guardian
· XP Antivirus Pro
· XP AntiSpyware 2010
· XP Internet Security
· XP Internet Security 2010
· Antivirus XP 2010
· Antivirus Win 7 2010
· Win7 Guardian
· Win 7 Antivirus Pro
· Win 7 Antispyware 2010
· Win 7 Internet Security
· Win 7 Internet Security 2010
http://www.bleepingcomputer.com/virus-removal/remove-antivirus-vista-2010
Follow their instruction on how to remove it at above link, using Malwarebytes.
Download, install, update and scan with each of the two programs below to check for/remove Malware/spyware.
If necessary, do all the above work in Safe Mode with Networking.
To get into Safe Mode with Networking, tap F8 right at Power On / Startup, and use UP arrow key to get to Safe Mode with Networking from list of options, then hit ENTER.
Read all info below before starting:
http://www.malwarebytes.org/mbam.php
Malwarebytes is as the name says, a Malware Remover!
Download the Free Version from the link above.
Download, install, update and scan once a fortnight.
How to use Malwarebytes after it is installed:
1. Open Malwarebytes > Click on the Update Tab across the top> get the latest updates.
2. On the Scanner tab, make sure the Perform full scan option is selected and then click on the Scan button to start scanning your computer
3. MBAM will now start scanning your computer for malware. This process can take quite a while.
4. When the scan is finished a message box will appear
5. You should click on the OK button to close the message box and continue with the Malware removal process.
6. You will now be back at the main Scanner screen. At this point you should click on the Show Results button.
7. A screen displaying all the malware that the program found will be shown
8. You should now click on the Remove Selected button to remove all the listed malware. MBAM will now delete all of the files and registry keys and add them to the programs quarantine. When removing the files, MBAM may require a reboot in order to remove some of them. If it displays a message stating that it needs to reboot, please allow it to do so. Once your computer has rebooted, and you are logged in, please continue with the rest of the steps.
9. When MBAM has finished removing the malware, it will open the scan log and display it in Notepad. Review the log as desired, and then close the Notepad window.
10. You can now exit the MBAM program.
http://www.spybot.info/en/index.html
Spybot Search & Destroy 1.6.2 is a very good, FREE Anti-Spyware Program.
Download, install and update it.
Once installed > Right-click on its Desktop Icon > Run as Admin
Then SCAN with it.
Update it, and scan your System once a fortnight.
Important re: Safe Mode
If you happen to find a problem that you can’t uninstall / delete, reboot the computer, and go into Safe Mode.
To get into Safe Mode, tap F8 right at Power On / Startup, and use UP arrow key to get to Safe Mode from list of options, then hit ENTER.
RESCAN your computer with your Anti-Virus, Malwarebytes and Spybot S & D while in Safe Mode.
If unable to install above Programs in Normal Mode:
Sometimes Trojans, Viruses, Malware, etc stop you installing and/or updating Programs to remove them.
If that happens, reboot into Safe Mode with Networking (from F8 list of Startup Options), and install, update and scan from there.
jika anda bermasalah dengan bahasa inggris silahkan translate dengan google
berikut saya kopi pastekan artikel yang lain semoga banyak membantu.
Vista Internet Security 2011 is a malicious program, which belongs to the category of rogue anti-spywares but pretends to be legitimate. Associated with other malwares that all change their names according to the Operating System they find on the infected PC, it can be also named as Win 7 Internet Security 2011 or XP Internet Security 2011 where all its variants will look and act similarly. These malwares will display the same scary pop-ups alerts and notifications telling about viruses detected and then will offer purchasing “licensed” removal tool for fixing everything. However, this “full” version of Vista Internet Security 2011 is nothing but scam which needs to be eliminated just like its trialware!
You must remove Vista Internet Security 2011 for a number of reasons. First of all, this malware mostly comes secretly through the backdoor of the system. Being distributed with a help of Trojans, Vista Internet Security 2011 also uses their help for making some useful system modifications that additionally make this malware to launch after every computer’s reboot. Typically, Vista Internet Security 2011 infects those machines that are poorly protected, so keep in mind that you MUST use reputable anti-spyware every day to protect yourself from such dangerous viruses.
Once it settles down, Vista Internet Security 2011 starts displaying various system security notifications and will interrupt you with those pop-up ads, alerts and warnings every time you will start browsing the web. For example:
System danger!
Your system security is in danger. Privacy threats detected. Spyware, keyloggers or Trojans may be working the background right now. Perform an in-depth scan and removal now, click here.
Internet Explorer alert. Visiting this site may pose a security threat to your system!
Possible reasons include:
- Dangerous code found in this site's pages which installed unwanted software into your system.
- Suspicious and potentially unsafe network activity detected.
- Spyware infections in your system
- Complaints from other users about this site.
- Port and system scans performed by the site being visited.
Things you can do:
- Get a copy of Vista Antispyware 2011 to safeguard your PC while surfing the web (RECOMMENDED)
- Run a spyware, virus and malware scan
- Continue surfing without any security measures (DANGEROUS)
Though it warns you about some insecure activity detected, you must be more than hundred percent sure that this program tries only to steal your money. You should never buy its recommended “full” version! You will never get your system back to normal and ultimately protected as it says but will even open the backdoor of the system for more viruses. Vista Internet Security 2011 is a scam which must be removed just after finding it on board. So, don’t believe its information given and remove Vista Internet Security 2011 with all its related files.
NOTE!!! Try this serial code that may help you to disable Vista Internet Security 2011: 1145-17884799-7733. This and the order number 21197673 should also work for earlier versions of this type of parasites. After typing them, you should become able to use your anti-spyware, if it fails follow the guide written below. Be aware that these numbers are expected to change in the near future!
a) Burn these programs to CD or write them to USB disk. You can use your MP3 player, or smartphone if it has storage functions. This parasite does not spread through USB at the moment:
1. Spyware Doctor or an automatic removal tool below. Update Spyware Doctor and run a full system scan.
2.You might want to download Hitman Pro or Malwarebytes as alternate scanners. Though you are likely to be able to download them later on.
b) Boot normally. Wait for Vista Internet Security 2011 to launch, and run exeregfix.reg . This should allow launching legitimate programs
c) Delete or remove the files that are mentioned in our files box. You can use Spyware Doctor to identify the infected files and additional infections or automatic Vista Internet Security 2011 removal tool. Do not forget update it before scanning. Remove what it finds.
d) Scan with Spyware Doctor and secondary tools and reboot your PC. This should fully get rid of XP Guard.
FORUM:Related files: %UserProfile%Local SettingsApplication DataopRSK, %UserProfile%Local SettingsApplication Datapw.exe, %UserProfile%Local SettingsApplication DataMSASCui.exe, %UserProfile%AppDataLocalopRSK, %UserProfile%AppDataLocalpw.exe, %UserProfile%AppDataLocalMSASCui.exe
Vista Internet Security 2011 properties:
• Connects itself to the internet
• Hides from the user
• Stays resident in background
Automatic Vista Internet Security 2011 removal:
remover for Vista Internet Security 2011
Vista Internet Security 2011 manual removal:
Kill processes:pw.exe MSASCui.exe
HELP:Delete registry values:
HKEY_CURRENT_USERSoftwareClassespezfile
HKEY_CLASSES_ROOTpezfile
HKEY_CURRENT_USERSoftwareClasses.exeshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "%1" %*
HKEY_CURRENT_USERSoftwareClassespezfileshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "%1" %*
HKEY_CLASSES_ROOT.exeshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "%1" %*
HKEY_CLASSES_ROOTpezfileshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "%1" %*
HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetFIREFOX.EXEshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "C:Program FilesMozilla Firefoxfirefox.exe"
HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetFIREFOX.EXEshellsafemodecommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "C:Program FilesMozilla Firefoxfirefox.exe" -safe-mode
HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetIEXPLORE.EXEshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "C:Program FilesInternet Exploreriexplore.exe"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center "AntiVirusOverride" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center "FirewallOverride" = "1"
Delete files:
%UserProfile%Local SettingsApplication DataopRSK %UserProfile%Local SettingsApplication Datapw.exe %UserProfile%Local SettingsApplication DataMSASCui.exe %UserProfile%AppDataLocalopRSK %UserProfile%AppDataLocalpw.exe %UserProfile%AppDataLocalMSASCui.exe
Other programs to remove Vista Internet Security 2011:
• Malwarebytes Anti Malware - Review - Download• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download
Postingan
0 komentar:
Posting Komentar