HOMEPAGE browser Anda berubah menjadi Sweet-Page.com? Itu "virus" berupa "browser hijacker". Hapus dengan Adware Cleaner ( Adw Cleaner ).
Menurut Malware Tips, laman yang berbagi soal cara menghapus Sweet-Page dan malware lainnya:
"Sweet-Page.com is a browser hijacker, which is promoted via other free downloads, and once installed it will change your browser homepage to sweet-page.com."
Intinya, "virus" malware Sweet-Page.com itu harus dihapus, dibasmi, dibunuh! Caranya:
- Download AdwCleaner di link ini: ADWCLEANER DOWNLOAD LINK (This link will automatically download AdwCleaner on your computer).
- Sebelum install program AdwCleaner, tutup semua program dan browser internet yang sedang dibuka.
- Doble klik ikon AdwCleaner hasil download tadi (proses intall).
- Setelah install selesai, program AdwCleaner akan terbuka.
- Klik tombol Scan
- Selesai scanning, klik tomblol Clean. Bunuh semuanya!
# AdwCleaner v3.212 - Report created 15/06/2014 at 03:15:35
# Updated 05/06/2014 by Xplode
# Operating System : Microsoft Windows XP Service Pack 2 (32 bits)
# Username : Administrator - OPERATOR
# Running from : C:\Documents and Settings\Administrator\My Documents\Downloads\adwcleaner_3.212.exe
# Option : Clean
***** [ Services ] *****
[#] Service Deleted : globalUpdate
[#] Service Deleted : globalUpdatem
[#] Service Deleted : IePluginServices
Service Deleted : WindowsProtectManger
***** [ Files / Folders ] *****
Folder Deleted : C:\Documents and Settings\All Users\Application Data\IePluginServices
Folder Deleted : C:\Documents and Settings\All Users\Application Data\WindowsProtectManger
Folder Deleted : C:\Program Files\globalUpdate
Folder Deleted : C:\Program Files\Skillbrains
Folder Deleted : C:\Program Files\SupTab
Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\globalUpdate
Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\Skillbrains
Folder Deleted : C:\Documents and Settings\Administrator\Application Data\SupTab
Folder Deleted : C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\xn86k0ta.default-1400066354484\Extensions\aba3db73-c9bd-47b3-99c1-ebaf0b0b87ad@c4364137-5195-4339-81dd-ebf2e8579728.com
File Deleted : C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\xn86k0ta.default-1400066354484\user.js
File Deleted : C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineCore.job
File Deleted : C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineUA.job
File Deleted : C:\WINDOWS\Tasks\pricemetertask.job
File Deleted : C:\WINDOWS\Tasks\pricemeterwatcher.job
File Deleted : C:\WINDOWS\Tasks\update-sys.job
File Deleted : C:\WINDOWS\Tasks\d11b6493-533b-4a26-96cd-3aa5f1961736-1.job
File Deleted : C:\WINDOWS\Tasks\d11b6493-533b-4a26-96cd-3aa5f1961736-11.job
File Deleted : C:\WINDOWS\Tasks\d11b6493-533b-4a26-96cd-3aa5f1961736-2.job
File Deleted : C:\WINDOWS\Tasks\d11b6493-533b-4a26-96cd-3aa5f1961736-4.job
File Deleted : C:\WINDOWS\Tasks\d11b6493-533b-4a26-96cd-3aa5f1961736-5.job
File Deleted : C:\WINDOWS\Tasks\d11b6493-533b-4a26-96cd-3aa5f1961736-6.job
File Deleted : C:\WINDOWS\Tasks\d11b6493-533b-4a26-96cd-3aa5f1961736-7.job
***** [ Shortcuts ] *****
Shortcut Disinfected : C:\Documents and Settings\All Users\Start Menu\Programs\Mozilla Firefox.lnk
Shortcut Disinfected : C:\Documents and Settings\All Users\Start Menu\Programs\Google Chrome\Google Chrome.lnk
Shortcut Disinfected : C:\Documents and Settings\Administrator\Start Menu\Programs\Internet Explorer.lnk
Shortcut Disinfected : C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
Shortcut Disinfected : C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Shortcut Disinfected : C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
***** [ Registry ] *****
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0051386.BHO
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKCU\Software\Crossrider
Key Deleted : HKCU\Software\installedbrowserextensions
Key Deleted : HKCU\Software\powerpack
Key Deleted : HKCU\Software\SkillBrains
Key Deleted : HKLM\Software\installedbrowserextensions
Key Deleted : HKLM\Software\SkillBrains
Key Deleted : HKLM\Software\SupDp
Key Deleted : HKLM\Software\SupTab
Key Deleted : HKLM\Software\Wpm
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1
Data Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~1\SupTab\SEARCH~1.DLL
***** [ Browsers ] *****
-\\ Internet Explorer v6.0.2900.2180
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [SearchAssistant]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [CustomizeSearch]
-\\ Mozilla Firefox v29.0.1 (id)
[ File : C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\xn86k0ta.default-1400066354484\prefs.js ]
Line Deleted : user_pref("extensions.aaba3db73c9bd47b399c1ebaf0b0b87adc43641375195433981ddebf2e8579728com51386.51386.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssf[...]
Line Deleted : user_pref("extensions.crossrider.bic", "1469687abc87a4211819cfa0084a201a");
-\\ Google Chrome v35.0.1916.153
*************************
AdwCleaner[R0].txt - [12338 octets] - [21/05/2014 18:46:30]
AdwCleaner[R1].txt - [8153 octets] - [15/06/2014 03:15:19]
AdwCleaner[S0].txt - [11717 octets] - [21/05/2014 18:50:33]
AdwCleaner[S1].txt - [6748 octets] - [15/06/2014 03:15:35]
########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [6808 octets] ##########
Thank you AdwCleaner, special thanks to Malware Tips. Makanya, kata dia nih, jangan sembarangan download dan install software, terutama dari link atau situs gratisan! Hati-hati......!
