Thursday, August 12, 2010

cara mengembalikan registry yang rusak pada windows xp akibat virus

cara mengembalikan registry yang rusak pada windows xp akibat virus :

buka notepad dan copy teks dibawah ini :
================================================== ==
[Version]
Signature="$Chicago$"
Provider=Vaksincom Oyee

[DefaultInstall]
AddReg=UnhookRegKey
DelReg=del

[UnhookRegKey]
HKLM, Software\CLASSES\batfile\shell\open\command,,,"""% 1"" %*"
HKLM, Software\CLASSES\comfile\shell\open\command,,,"""% 1"" %*"
HKLM, Software\CLASSES\exefile\shell\open\command,,,"""% 1"" %*"
HKLM, Software\CLASSES\piffile\shell\open\command,,,"""% 1"" %*"
HKLM, Software\CLASSES\regfile\shell\open\command,,,"reg edit.exe "%1""
HKLM, Software\CLASSES\scrfile\shell\open\command,,,"""% 1"" %*"
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell,0, "Explorer.exe"
HKLM, SYSTEM\ControlSet001\Control\SafeBoot, AlternateShell,0, "cmd.exe"
HKLM, SYSTEM\ControlSet002\Control\SafeBoot, AlternateShell,0, "cmd.exe"
HKLM, SYSTEM\CurrentControlSet\Control\SafeBoot, AlternateShell,0, "cmd.exe"
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer \Advanced\Folder\SuperHidden, UncheckedValue,0x00010001,1
HKLM, SOFTWARE\Microsoft\Command Processor, AutoRun,0,
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer \Advanced\Folder\Hidden\SHOWALL, CheckedValue, 0x00010001,1
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer \Advanced\Folder\Hidden\SHOWALL, DefaultValue, 0x00010001,2
HKCU, Software\Microsoft\Command Processor, AutoRun,0,

[del]

HKCU, Software\Microsoft\Windows\CurrentVersion\Policies \System, DisableRegistryTools
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies \System, DisableTaskMgr
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies \Explorer, NoFolderOptions
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies \Explorer, NOFind
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies \Explorer, NORun
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies \WinOldApp
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\PAYXX.exe
HKCU, Software\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer \Advanced\Folder\Hidden\HideFileExt
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer \Advanced\Folder\Hidden\ShowFullPath
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer \Advanced\Folder\Hidden\ShowFullPathAddress
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer \Advanced\Folder\Hidden\SuperHidden
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies \Explorer, NoFolderOptions
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies \System, DisableRegistryTools
================================================== ==

simpan file dengan Save as kemudian tambahkan ekstensi .inf misal (repair.inf) jalankan file tersebut

semoga bermanfaat
sumber http://indofiles.org/showthread.php?t=7219

3 comments:

Dini Nuris said...

Tidak bisa dijalankan gan, bentuknya dokumen bukan instalasi

Dini Nuris said...

ga bisa gan, bentuknya dokumen/teks bukan instalasi/setup

Unknown said...

Anjing loe, itu kode hapus registry , buat error komputer. SEMOGA JALANMU DIPERSULIT. AAMIIN