Aikelyu Scripts Infection Removal

[junmar4]

---

what if gi disable sa virus ang task manager bro unya dili ka maka sulod sa registry kay gi disable pud sa virus and also gi tang2x ang folder options. unsa on man paagi para makuha ang virus nga dili i reformat?

try downloading third party regedit and task manager tools. sample ana naa sa patheticcockroach.com, se3arch lang didto.

kanang KH2000.dll.vbs ug Funny UST Scandal.avi.EXE tol kahibaw mo unsaon pagtang2?

pareho ra na sila. ang name ra ang giusab ana.

[erwin_rommel]

try downloading third party regedit and task manager tools. sample ana naa sa patheticcockroach.com, se3arch lang didto.

thanks bro, very useful tools :mrgreen:

[ed_ebs]

what if gi disable sa virus ang task manager bro unya dili ka maka sulod sa registry kay gi disable pud sa virus and also gi tang2x ang folder options. unsa on man paagi para makuha ang virus nga dili i reformat?

ENABLING REGEDIT:
================================================== =================================
'Enable/Disable Registry Editing tools
'© Doug Knox - rev 12/06/99
Option Explicit
'Declare variables
Dim WSHShell, n, MyBox, p, t, mustboot, errnum, vers
Dim enab, disab, jobfunc, itemtype
Set WSHShell = WScript.CreateObject("WScript.Shell")
p = "HKCU\Software\Microsoft\Windows\CurrentVersion\Po licies\System\"
p = p & "DisableRegistryTools"
itemtype = "REG_DWORD"
mustboot = "Log off and back on, or restart your pc to" & vbCR & "effect the changes"
enab = "ENABLED"
disab = "DISABLED"
jobfunc = "Registry Editing Tools are now "
'This section tries to read the registry key value. If not present an
'error is generated. Normal error return should be 0 if value is
'present
t = "Confirmation"
Err.Clear
On Error Resume Next
n = WSHShell.RegRead (p)
On Error Goto 0
errnum = Err.Number
if errnum <> 0 then
'Create the registry key value for DisableRegistryTools with value 0
WSHShell.RegWrite p, 0, itemtype
End If
'If the key is present, or was created, it is toggled
'Confirmations can be disabled by commenting out
'the two MyBox lines below
If n = 0 Then
n = 1
WSHShell.RegWrite p, n, itemtype
Mybox = MsgBox(jobfunc & disab & vbCR & mustboot, 4096, t)
ElseIf n = 1 then
n = 0
WSHShell.RegWrite p, n, itemtype
Mybox = MsgBox(jobfunc & enab & vbCR & mustboot, 4096, t)
End If

SAVE THIS AS ANYNAME.vbs and run.

================================================== =======================================


ENABLING TASK MANAGER
================================================== =========================
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\System]
"DisableTaskMgr"=dword:00000000

[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Group Policy Objects\LocalUser\Software\Microsoft\Windows\Curre ntVersion\Policies\System]
"DisableTaskMgr"=dword:00000000
"**del.DisableTaskMgr"=" "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\policies\system\]
"DisableTaskMgr"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"DisableCAD"=dword:00000000

SAVE THIS AS ANYNAME.reg and run.

================================================== ===============

[ed_ebs]

only. the red highlighted text are to be included in the file..
hope this would help.

[ed_ebs]

what if gi disable sa virus ang task manager bro unya dili ka maka sulod sa registry kay gi disable pud sa virus and also gi tang2x ang folder options. unsa on man paagi para makuha ang virus nga dili i reformat?

ENABLING THE FOLDER OPTIONS
================================================== ====
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer]
"NoFolderOptions"=dword:0000000
[HKEY_CURRENT_USER\Software\Policies\Microsoft\Inte rnet Explorer\Restrictions]
"NoBrowserOptions"=dword:00000000

save the highlighted text as ANYNAME.reg and run

[ed_ebs]

epektibo gyud kaau mga bro ang pinaka taas nga post if subayon gyud ug tarong..
it really works... kay ako pc na infect na ani once.

[kohaku]

i have encountered this script a lot of times but can't seem to find any wscript.exe in the task manager
but i have this software i downloaded from

http://leerz25.sitesled.com/files/to...R.by.Leerz.zip.

it's called TAGA.LIPA.NOOB.KILLER by leerz
hope it will work for you, just google it....

[ed_ebs]

up.. basin naay na infected napud ani.. ) buhion sa nako ang thread ha.