Registry Repair

Di siang yang mendung surabaya terasa lumayan sejuk apalagi ditambah liburan minggu tenang n gag ada kuliah, maknyus dah... hehehheh :D
Setelah pikir-pikir sebentar, rasanya bosan gag ada kegiatan..
Sambil menyeruput secangkir kopi panas, sluuurp... ahh.. uenak! hahahhaaa.....

Hasil dari pikir-pikir dan nyeruput secangkir kopi panas tadi akhirnya timbul keinginan untuk berbagi, hahah... formal banget jadinya, bhuakakakk :))

Tetepe aja deh, temen - temen semua pastinya pernah kan dapet permasalahan dengan komputernya yang memakai sistem operasi windows xp khususnya.
Nah, disini aku pengen kasi solusi bagi temen - temen yang sistem windowsnya habis kena virus ato emang lagi kena, hehheh
Dalam beberapa variant virus menginfeksi komputer korbannya dengan mematikan semua program vital sistem, seperti command prompt, regedit/registry, task manager, dll. Nah itu semua bisa kita kembalikan lagi menjadi normal seperti sedia kala dengan cara meng-injeksi regedit. Tapi gimana kalo registrynya juga di disable? hahhah...moodyaaar!

Semua tetap bisa kita perbaiki dengan jalan kita bikin script injeksi dari luar untuk meng-injeksi registrynya. Nah, untuk itu akan aku beri sedikit script buat temen-temen dan hanya tinggal copy-paste n save as ajah, hehheh

OK, this is it.... hehhee

============ Copy setelah garis ini ============

[Version]
Signature="$Chicago$"
Provider=fian_0275

[DefaultInstall]
AddReg=UnhookRegKey
DelReg=del

[UnhookRegKey]
HKCU,Software\Microsoft\Internet Explorer\Main, Window Title,0, "INTERNET EXPLORER"
HKLM, Software\Classes\batfile\shell\open\command,,,"""%1"" %*"
HKLM, Software\Classes\comfile\shell\open\command,,,"""%1"" %*"
HKLM, Software\Classes\exefile\shell\open\command,,,"""%1"" %*"
HKLM, Software\Classes\piffile\shell\open\command,,,"""%1"" %*"
HKLM, Software\Classes\regfile\shell\open\command,,,"regedit.exe "%1""
HKLM, Software\Classes\scrfile\shell\open\command,,,"""%1"" %*"
HKLM, Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN,CheckedValue,0x00010001,2
HKLM, Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN,DefaultValue,0x00010001,2
HKLM, Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL,CheckedValue,0x00010001,1
HKLM, Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL,DefaultValue,0x00010001,2
HKLM, Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\HideFileExt,CheckedValue,0x00010001,1
HKLM, Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\HideFileExt,DefaultValue,0x00010001,1
HKLM, Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\HideFileExt,UncheckedValue,0x00010001,0
HKLM, Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden,CheckedValue,0x00010001,0
HKLM, Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden,DefaultValue,0x00010001,0
HKLM, Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden,UncheckedValue,0x00010001,1
HKLM, Software\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell,0, "Explorer.exe"
HKLM, SYSTEM\ControlSet001\Control\SafeBoot, AlternateShell,0, "cmd.exe"
HKLM, SYSTEM\CurrentControlSet\Control\SafeBoot, AlternateShell,0, "cmd.exe"

[del]
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System, Disableregistrytools
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableTaskMgr
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, NoClose
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, NoDrives
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, NoControlPanel
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, NoSetTaskbar
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, NoSMHelp
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, NoFind
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, NoFolderOptions
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, NoRecentDocumentsMenu
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, NoRun
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, NoViewContextmenu
HKCU, Software\Microsoft\Windows\CurrentVersion\Run, smss.exe
HKLM, Software\Microsoft\Windows\CurrentVersion\Run, csrss.exe
HKLM, Software\Microsoft\Windows\CurrentVersion\Run, alg.exe
HKLM, Software\Microsoft\Windows\CurrentVersion\Run, GilaKomputer.exe
HKLM, Software\Microsoft\Windows\CurrentVersion\Run, svchost.exe
HKLM, Software\Microsoft\Windows\CurrentVersion\Run, cttfmon.exe
HKLM, Software\Microsoft\Windows\CurrentVersion\Run\User
HKLM, Software\Microsoft\Windows\CurrentVersion\Winlogon, LegalNoticeCaption
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion, RegisteredOrganization
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion, RegisteredOwner

==================== Selesai bro ====================

Untuk script diatas di save as menjadi ektensi *.inf yaah...
Untuk ngejalaninnya berikut caranya, contoh:
Filenya repair.inf, klik kanan file tersebut lalu pilih install lalu OK dehhh.... hehheh

Script tersebut Insya Allah akan selalu aku up date untuk beberapa variant virus barunya, hehehh...

Gud luck yah broo... ^^

regard,

fian_0275