Video Tutorial Samba & Sendmail

Tutorial Samba

Link : http://youtu.be/1567C4xpU54

Tutorial Sendmail

Link : http://youtu.be/S3tPziFCUm8

How to remove Win32.Mebroot.U manually

1. First, Boot your computer into safe mode to close all running processes.
2. Don't forget to back up your system before making any changes for future restore job when necessary.
3. Remove these Win32.Mebroot.U files:

1. %UserProfile%\Application Data\PAV
2. %UserProfile%\Local Settings\Temp\kjkkklklj.bat

4. Open Registry Editor to delete the following registry entries:

1. HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce 'SelfdelNT'
2. HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon 'Shell'='%UserProfile%\Application Data\antispy.exe'
3. HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce
4. HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\SimpleShlExt
5. HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run '[random string]'
6. HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings 'ProxyServer' = 'http=127.0.0.1:5555'
7. HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings 'ProxyOverride' = ' '

5. It is possibly for Win32.Mebroot.U to load by hiding within the system WIN.INI file and the strings "run=" and "load=". So you must check carefully in order to thoroughly remove it from your computer.

6. It is necessary for you to clean the IE temporary files where the original carrier may store.

Or you can download malware removal here:
Win32/Mebroot removal

Win32.Elkern A/B/C - Download Remover

Download the following three files ( rmelkern.exe, rmvirus32.nt, rmvirus.dos) and run the rmelkern.exe file.

You can also specify the disks (or partitions) to heal as a command parameters, e.g. : "rmelkern C: D: ". If the command is used without parameters, it heals all disks (partitions) on computer.

Successful running of the removerrequires administrator rights. For proper functionality of the remover it is necessary to save the rmvirus32.nt and rmvirus.dos into the same folder as rmelkern.exe. After the healing process please run the rmelkern.exe again to make sure your computer is virus-free.

Download the following three files here:

rmelkern.exe

rmvirus32.nt

rmvirus.dos

Worm.Lovsan

When the timeout message appears that you will be disconnected in some time period, please click on START button -> RUN and type this command here:
SHUTDOWN -a
and click OK then. The timeout will be stopped then and you will be able to download and install the security patch to your operating system.

• You have to download and install the security patch to your operating system first (it repairs a bug in the DCOM RPC). You can find it on Microsoft internet pages.

• Run the registry editor (START -> RUN -> type REGEDIT and click on OK button) and find this registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

• Please right click on the name "windows auto update" and choose REMOVE/DELETE.
• After this please reboot your computer to the "Save mode with command prompt" and type here these commands:
  CD WINDOWS (enter)
  CD SYSTEM32 (enter)
  DEL MSBLAST.EXE (enter)
• Then run your antivirus likes AVG, MSE, or Avira to complete remove virus and check virus.
  

I-Worm/Bugbear.C - Removal Tool

Download the remover rmbugbear.exe and run it on infected computer. Then restart your PC normally and run the rmbugbear.exe.

If the infected computer is connected to LAN, it is neccessary to disconnect this computer from LAN before removing the virus and re-establish the connection in the moment when ALL computers in LAN are cleaned.

Exceptions:
If you are using Windows ME or Windows XP operating systems, there might be a problem in removing infected files from the _Restore folder (Windows ME) or System Volume Information folder (Windows XP). For the correct removal of these infected files, it is necessary to disable the system restore function.

download removal tools here:

remover rmbugbear.exe

Vcleaner (Virus Cleaner)

Download the remover (Vcleaner) vcleaner.exe. Restart your computer in Safe mode and run the remover on the infected computer. Vcleaner removal utility will detect and remove following viruses:

• I-Worm/Stration
• Worm/Generic.FX
• Agent.A-AN
• BackDoor.Agent.A-Z, AA-BG
• Downloader.Agent.AS
• I-Worm/Atak.A-I
• Bagle.DA-IU
• I-Worm/Bagle.A-Z, AA-JD
• I-Worm/Bugbear.D
• I-Worm/Mytob.A-GC
• I-Worm/Netsky.A-Z, AA-AD
• I-Worm/Sasser.A-F
• I-Worm/Zafi.A-E
• PSW.Bispy.A-E
• Win32/Gaelicum
• Win32/Hidrag

Note: Some viruses can stop the action during the removal process. In this case rename the vcleaner.exe to some different exe file (e.g. something.exe). Restart your computer in Safe mode (recommended) and run the remover on the infected computer.

download vcleaner here:

Vcleaner.exe

SVX Backdoor (LOP.AH/Backdoor.Generic3.SVX) - Trojan Remover

Download two files (rmbg3svx.exe and rmbg3svx.nt) and run the rmbg3svx.exe file (Trojan Removal Tool). Then restart your PC normally and run rmbg3svx.exe.

Successful running of the trojan horse remover requires administrator rights. For proper functionality of this free removal tool it is necessary to save the rmbg3svx.nt into the same folder as rmbg3svx.exe.

download the following two files :

rmbg3svx.exe

rmbg3svx.nt