Internet Security

Another virus that threatens the computer users is FullHouse virus. Characteristic of this virus is to create one additional drive with the name FullHouse Drive.

The virus is made using Visual Basic programming language. In the conduct action, it will make the drive in the Desktop, My computer and Control Panel that will show the image “Han Ji Eun” artist in the beautiful series Full House while it’s being opened.

To clean the virus, see the following steps:

Scan virus that is located in the directory C: RECYCLER with antivirus that can detect this virus with both. Vaksincom use Norman Security Suite.

After the scan is completed, there are files with virus deleted files status (defered) means the file will be removed when the windows restart

-Click the Close button Clean ago at the time of the Norman Security Suite also will ask the computer to restart

To renormalize registry that has been created by the virus, open Notepad then copy the script below:

[Version]

Signature=”$Chicago$”
Provider=Vaksincom Oyee
[DefaultInstall]
AddReg=UnhookRegKey
DelReg=del
[UnhookRegKey]
HKCR, batfileshellopencommand,,,”"”%1″” %*”
HKCR, comfileshellopencommand,,,”"”%1″” %*”
HKCR, exefileshellopencommand,,,”"”%1″” %*”
HKCR, piffileshellopencommand,,,”"”%1″” %*”
HKCR, lnkfileshellopencommand,,,”"”%1″” %*”
HKCR, scrfileshellopencommand,,,”"”%1″” %*”
HKCU, SoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced,
HKLM, SOFTWAREClassesexefileDefaultIcon,,,”"%1″”
HKLM, SOFTWAREClassesexefile,,,”Application”
HKLM, SoftwareCLASSESexefileshellopencommand,,,”"”%1″” %*”
HKLM, SoftwareCLASSESregfileshellopencommand,,,”regedit.exe “%1″”

[del]

HKLM, SOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorerRun, Task
Manager
HKCU, SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerRun, Manager Task
HKCR, exefile, NeverShowExt
HKCR, CLSID{10020D75-0000-0000-C000-000000000000}
HKLM, SOFTWAREClassesCLSID{10020D75-0000-0000-C000-000000000000}

Save-as “repair.inf” select Save As Type choose All Files

Run-repair.inf with a right click and select install

-Delete the file created by the virus with the following characteristics:
File type “application”
Extension “exe”
Size 168 kb

-To facilitate the process of searching the files of virus use “Search Windows”
with the filter *. exe files that have a size of 168 KB and the date modified
pertanggal 7/8/2008

Next-delete “FullHouse Drive” on the Desktop, My Computer and Control
Panel

Recovery-Folder on the Flash Disk that has been in the Hidden

To re-display the hidden folder on the flash. Use
command “attrib” in the command prompt.
Click “Start”
Click “Run”
Type “CMD”, then press the “Enter”

-Move the directory to position Flash Disk drive, eg the type E
the E: and press “enter”

-Then type the command attrib-s-h-r / s / d and press the
“enter