Pick-out the File
Infecter, Viruses, Trojans, Worms, Bugs, Spyware, Scareware, etc
from your machine!

BEST
OF THE BEST
| Antivirus | Special Antivirus Tools | Spyware Tools | Scareware Tools |
| History Removing Tools | Antivirus Utility Tools |
this website existing by
..::
yudi.jeeran.com ::..
click Here to Refresh

Anti Virus Removing
Tools
1. Detect, Clean & Delete
Operating
System:
AS/400, S/390, Windows & UNIX
License: Freeware
Author:
Trendmicro
Housecall
Specification: This
self-extracting archive is a stand-alone fix package. It Replaces
the traditional fix tool by addressing a wide variety of system
infections rather than a specific malware infection.
Untuk mencegah worm tidak meng-corupt filenya, cara kerja
softwere ini ialah meng-unzip sendiri pada saat beraksi, setelah
selesai melakukan tugasnya, beberapa file kembali menghilang
masuk kembali kedalam file induknya...:) baca readme.
Engine File sysclean.com download terlebih dahulu file ini, tetapi file tersebut
hanya dapat berfungsi jika Anda juga mendownload bagian keduanya
yaitu:
Pattern File IptXXX.zip download dan extract zip file tersebut pada satu folder yang
telah Anda siapkan bersama dengan sysclean.com
yang telah Anda download sebelumnya, kemudian double click sysclean.com.
Or you can also free virus scan online for your machine powered by 
2. Detect & Delete
File
antiloader.zip (2 KB)
Operating
System: mIRC
16 & 32 bit for Windows 9X, ME, NT, 2000, XP, 2003.
License: Freeware
Author:
B4L1^5UN5ET Script
©2000
Specification:
Add On (script
tambahan) only for mIRC chat. Detect and delete spam file, worm
file, etc.
Script ini hanya dapat di extract pada folder mIRC Anda saja,
script akan autoscan pada saat setiap Anda mengaktifkan
mIRC.exe dan jika ditemukan adanya file yang tidak diinginkan,
maka file yang bersangkutan langsung auto deleting
dengan DOS Prompt. Anda dapat mencobanya dengan me-loading
script tersebut (baca ReadMeFirst.txt) kemudian sisipkan sebuah
dummy file worm and inviter misal: server.ini pada folder mIRC Anda, kemudian bukalah
mIRC.exe maka script Anda akan men-detect dan menghapus
file tersebut.
Powered by 
back to top

Special Anti Virus
Removing Tools
1.
(spaces-cleaner.zip |
67kb)

Operating
System: Windows
License: Freeware
Author:
SoftWin SRL ©2001
Specification:
Special
for PE, SPACES & FUNLOVE.4009, Detect & Reboot
2.
Anti
REGEDIT patch worm RONTOKBRO.N (repair.inf | 1kb)

Operating
System: Windows
License: Freeware
Author:
YudiAntiVirus
©2005
Powered by 
Specification:
1. Tidak dpt di Run - regedit dan Run - msconfig
2. Timbul <nama
folder>.exe di hampir
setiap folder yg berupa icon berbentuk Folder pula.
- misal: under folder my document ada
file my
document.exe berbentuk icon Lambang Folder, atau yg paling mudah under Desktop akan ada icon file desktop.exe
berupa gambar Folder spt shortcut ke Desktop pada layar Destop Anda.
3. Pada PC yang terinfeksi kebanyakan tidak dapat mengakses
website antivirus.
4. File yang terinfeksi Rontokbro.N mempunyai
ukuran sebesar 42kb dengan icon folder tetapi dengan extension
EXE, jika
dijalankan akan membuat beberapa file yaitu:
- C:\Windows dengan nama file
eksplorasi.exe (hidden)
- C:\Windows\shellnew dengan nama
sempalong.exe (hidden)
- C:\WINDOWS\system32 dengan nama
%username"s Setting.scr (hidden)
- C:\Documents and
Settings\%user%\Local Settings\Application Data dengan
nana file:
- Bron.tok-x-y, dimana x dan y menunukan angka
- Loc.Mail.Bron.Tok, berisi alamat email yang diperoleh
dari komputer yang terinfeksi
- Ok-SendMail-Bron-tok, berisi email yang berhasil
dikirim
- csrss.exe
- inetinfo.exe
- Kosong.Bron.Tok.txt
- lsass.exe
- NetMailTmp.bin
- services.exe
- smss.exe
- Update.3.Bron.Tok.bin
- winlogon.exe
- C:\Documents and
Settings\bagle\Start Menu\Programs\Startup nama file
- C:\Documents and
settings\%Users%\Templates
- Membuat file pada setiap folder
dimana file ini mempunyai nama yang sama dengan folder
tersebut dengan ciri-ciri
- Icon yang digunakan berupa
Folder
- Ukuran file 42 Kb
- Ekstension .EXE
- Rontokbro juga akan melakukan
perubahan pada file C:\AUTOEXEC.BAT dengan menambahkan baris perintah PAUSE
- Agar Rontokbro dapat
aktif begitu komputer dinyalakan, ia akan membuat
registry beberapa registry key yaitu:
- Bron-Spizaetus
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
- Tok-Cirrhatus
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
- Shell dengan value
Explorer.exe C:\Windows\Eksplorasi.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon,
- DisableRegistryTools =1
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
- DisableCMD
Pada registry
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
- Selain menambahkan
string pada registry key, virus in juga akan
menambahkan option di menu [startup] pada
msconfig.
Solusi Pembersihan
Worm RONTORKBRO.N / Cleaning Solution Worm RONTOKBRO.N :
Setelah file repair.inf selesai di download - extract,
1. Klik kanan pd file Repair.inf - klik Install
2. Masuk ke Safe
Mode dengan cara Restart
PC - hit F8 pada saat booting & Pilih Save Mode
3. Dlm keadaan Save
Mode sekalipun worm ini masih
aktif, coba
sekali lagi instal file repair.inf tersebut
3. Tekan - Ctrl&Alt+Del
4. Pada Windows
Task Manager di kiri atas klik
- File - New Task (Run...)
ketik: Explorer
5. Tutup Windows Task Manager
6. Klik Start - Run - ketik: Regedit
atau Msconfig
7. Klik Start - Run - ketik: c:\autoexec.bat - Hapus kata: "PAUSE"
Dan jika telah
bisa Run - Regedit dan Run - Msconfig, barulah kita tinggal
menghapus semua register tentang worm tsb di Regedit (Register
Editor) hingga benar-benar bersih. Selanjutnya baca
petunjuk penghapusan powered
by vaksin.com atau baca petunjuk
dlm bahasa Inggris powered
by trendmicro.com
Worm RONTOKBRO.A |
B | C | D | E | M | N | Overviev,
Solution, Technical Details & Statistic
Worm
RONTOKBRO.F | H | I | J | L | Q | Overviev,
Solution, Technical Details & Statistic
Powered by

Tapi
sepertinya virus Worm Rontokbro & Trojan Kangen memang ada
kaitannya karena Rontokbro mendownload Kangen.exe
Language:
Bahasa
Indonesia
Platform:
Windows
Description:
Upon
execution, this Trojan drops a copy of itself as KANGEN.EXE in
the Windows system folder. It displays a scrolling text in the
Windows Taskbar. It also disables Windows tools, such as Task
Manager and Registry Editor.
Screenshot
Trojan
KANGEN.* alias KAGEN.*

Pada Trojan KANGEN di
varian berikutnya tertulis text:
Saat cinta
menuntunmu, ikutlah dengannya walaupun jalan yang kautempuh
berliku dan terjal. Dan saat sayapnya merangkulmu, serahkan
seluruh dirimu padanya walaupun pedang-pedang yang ada dibalik
sayapnya akan melukaimu...
- Trojan KANGEN from Kahlil Gibran -
Trojan
KAGEN.A | B | C | Overviev,
Solution, Technical Details & Statistic
Powered by

Language:
Bahasa
Indonesia
Platform:
Windows NT,
2000, XP
Description:
Upon
execution, this Trojan drops a copy of itself as WINWORD.EXE in
the Windows system folder. It displays a scrolling text in the
Windows Taskbar. It also disables Windows tools, such as Task
Manager and Registry Editor.
Description
created: Jul.
12, 2005 12:39:54 AM GMT -0800
Text:
- betapa merindunya dirimu, kan hadirnya diriku;
- dan belai lembut kasihmu;
- didalam hari-harimu, bersama lagi;
- jangan katakan cinta;
- katamu kau tak kuasa melawan gejolak didalam dada;
- kau bertanya padaku, kapan aku akan kembali lagi;
- kau katakan padaku, saat ini;
- kau tuliskan padaku, kata cinta;
- ku akan datang, ...........hacked by :
- ku akan pulang, melepas semua kerinduan;
- kuingin dalam pelukmu;
- kutrima suratmu, tlah kubaca dan aku mengerti;
- menahan rasa ingin jumpa;
- menambah beban rasa;
- percayalah padaku akupun rindu kamu;
- saat bersama dirimu;
- saat kau ada disisiku;
- semakin membuatku tak berdaya;
- semua kata rindumu;
- sudah simpan saja sedihmu itu;
- takkan kulupa slamanya;
- yang manis dalam suratmu;
- yang membara menahan rasa, pertemuan kita nanti;
- yang terpendam.....;
Trojan
KANGENIE.A Overviev,
Solution, Technical Details & Statistic
Powered by 
back to top

Spyware Removing
Tools
1.
(aawsepersonal.exe | 2,789kb)

Screenshot:

Operating
System: Windows
License: Freeware
Author:
Lavasoft
Specification:
Detect
& cleaned malware from file and regedit
Powered
by 
Only
for Scareware
Removing Instruction, PS Guard & Troj. Smitfraud Killer , after download
this Application, click here to continue the
Instruction
2. (sdinstall02.exe | 4,356kb)

Screenshot:

Operating
System: Windows
License: Freeware
Author:
PC Tools
Specification:
Spyware Doctor is a
top-rated malware & spyware removal utility that detects, removes and
protects your PC from thousands of potential spyware, adware,
trojans, keyloggers, spybots and tracking threats. Protect your privacy and
computing habits from prying eyes and virtual trespassers with
the help of Spyware Doctor.
Provides three-way spyware protection for your PC through
real-time threat blocking, advanced system scanning and
immunization against known browser infections. This is one of the
many reasons why the award-winning Spyware Doctor has been chosen
by millions of users to protect their PCs against spyware,
adware, trojans, keyloggers, spybots and other tracking threats.
Powered
by 
back to top

History Removing Tools
1.
(contentcleaner.zip | 247kb)

Operating
System: Windows
License: Freeware
Author:
Safe
Guard
Specification:
clean
for Adult, Drugs, Gambling, Violence history from your machine
Powered by 
2.

Operating
System: Windows
License: Freeware
Author:
YudiAntiVirus
©2005
Specification:
is a regedit
script that will get rid of all links to Trojan-HTML-Spy
Smithfraud
and PS Guard, this tool will also
clean out the contents of temp forders. It will also run disk
cleanup folder the Temporary Internet Files as well as empty the
Recycle bin. And then reboot
and your screen back to green again (default).
Powered
by
Only
for Scareware
Removing Instruction, PS Guard & Troj. Smitfraud Killer , after download
this Application, click here to continue the
Instruction
3. (cwshredder.zip |
221 kb)

Operating
System: Windows
License: Freeware
Author:
Trendmicro
Specification:
detect and
delete CWS (Cool Web Search) from your machine
Powered by 
back to top

Anti Virus Utility
Tools
1. Copyright (C)
1998-2004 Mark Russinovich (ProcessExplorerNt.zip
| 558 kb)
Screenshot:

Operating
System: Windows
License: Freeware
Author:
Sysinternals
Specification:
detect
any files running, good to know when any malware run on your
machine.
Powered by 
2. Copyright (C)
1998-2004 Mark Russinovich (Spybotsd14.exe |
4.80 Mb)
Operating
System: Windows
License: Freeware
Author:
PepiMK
Software
Specification:
Detect and
remove a multitude of adware files and modules from your
computer. Spybot also can clean program and Web-usage tracks from
your system, which is especially useful if you share your
computer. Modules chosen for removal can be sent directly to the
included file shredder, ensuring complete elimination from your
system. For advanced users, it allows you to fix Registry
inconsistencies related to adware and to malicious program
installations. The handy online-update feature ensures that
Spybot always has the most current and complete listings of
adware, dialers, and other uninvited system residents.
Version 1.4
has the first native multi-installation scanner, is noticeably
faster than version 1.3 during scans, and has improved the tools
and updated the interface.
3. Copyright (C)
1998-2004 Mark Russinovich (Spybotsd14.exe |
4.80 Mb)
Operating
System: Windows
License: Freeware
Author:
Promosoft
Specification:
Free Registry
Fix is Registry-cleaning software. It will safely clean and
repair Windows Registry problems with a few clicks and enable you
to enjoy a cleaner and more efficient PC. The Registry is the
nerve center of your PC, and problems with the Windows Registry
are a common cause of Windows crashes and error messages. With
this download all demo users also will get one chat-support
session with a Microsoft Certified Engineer for any Windows
problems you may have. Version 3.0 may include unspecified updates,
enhancements, or bug fixes.
back to top

Scareware Removing
Instruction
What is PS Guard?
PS Guard is what I like to call Scare Ware
similar to the SmithFraud Trojan, IGuard and others. There
are literally hundreds of fake anti-spy and anti-virus software
that will infect your system and then try and trick (or even
black mail) you into using there terrible tools that are usually
spyware or trojans.
How can I remove PS Guard?
Adaware can not remove it. If you
uninstall it, it comes back on boot up, it disables your Task
Manager so you can monitor or end the process. PS Guard is a next generation malware. Malware like PS Guard and Smithfraud are hidden in
temp files and in the registry in duplicate and written to
install other versions of them selves upon reboot. To Remove PS
Guard, follow the simple step below.
Required
Tools:
Here we go, PS Guard Removal
WARNING: anything in
the Remember that malware is often embedded in your registry.
When ever you delete or modify registry you as you could possibly
do irreparable damage to your operating system. MUST be cautious
STEP 1. BOOT into
"SAFEMODE With Networking"
Getting into Safe Mode on Window is easy.
Reboot your computer and HIT the F8
Funtion Key like crazy
If it doesnt, work try again. The system should ask you
what mode you want to boot in. You want "Safe Mode with
Networking
MORE ON SAFE MODE
STEP 2. DOWNLOAD THE
TOOLS (Adaware and SMITREM)
Adaware - Adaware will NOT clean
PS Guard off of your system; it will get rid of all the minor
malware, links, cookies and spyware your system has more than
likely gathered. Download it from here --> Ad-aware SE
Personal
YudiAntivirus History & Temporary Files
Cleaner is a regedit script that will get rid of all
links to Trojan-HTML-Spy Smithfraud and PS Guard. --> SmitRem (folder
downloaded to your desktop)
STEP 3. GET RID OF PS
GUARD
Run Adaware scan.
Open the smitRem folder, then double click the RunThis.bat
file. There will be a series of instructions. Read carefully and
wait for the tool to complete and disk cleanup to finish.
Then auto REBOOT.
STEP 4. SCAN FOR PS
GUARD. (must use Internet Explorer for this scan)
Panda Active SCAN
Trend Micro SCAN
WAYS To PREVENT THIS
TYPE OF FROM INFECTING YOUR SYSTEM:
1) Update your operating system firewall,
Anti-Virus (from reputable Secure your system.
Use a NAT, Updated and
browser. DO NOT USE INTERNET EXPLORER UNLESS YOU HAVE TO. USE FIREFOX.
2) Don't surf with an Admin Account. Admin
accounts have elevated priviledges so any malware that gets
installed on your system will have those same priviledges. Use
your administrator account only to download and install software.
3) Limit your visits to "bad" sites.
Bad sites include PORN, warez, crack, black hat hacker, and
Casino sites. Many of these sites are just lures to get your
system infected.
How to manually remove PS Guard?
If for some insane reason you want to remove ps
guard manually from every line in the registry. Check out the
code in the Smitrem script.
Get the PS Guard Serial?
Don't do it. Do not pay for it Do not use it.
Chances are serial and warez sites it how you got the application
load on there in the first place. DO NOT get the serial for PS
"spyware" Guard, Do NOT use it.
Removed PS Guard but computer still slow?
Spyware and malware is like roaches. If you see one in
your home chances are you've got more and its because your dirty
as hell. How do you fix your slow computer? Use Ad-aware SE,
remove your cookies, remove your temp files, defrag your
hardrive, use other tools to
see if your computer is infected with other malware.
back to top

Dengan mendownload salah
satu atau semua software di atas, juga dapat mendetect, cleaning,
atau deleting file terutama file yang benar² menjadi biang
keladi virus, trojan, worm dan lainnya, semoga berhasil...
Selamat mencoba... :))
this website dedicate just
for you,
hormat saya,
yudi.jeeran.com
[back to
main menu]





© The ultimate yudiantivirus site index since
2005
back to top