25 Des 2011

How To Remove a Virus From Facebook Chat


Will my computer get infected once I clicked the link ?
No ! Unless you download some files from the link. (Currently they use drive-by method)
HOW TO FIX!
If your computer is infected and can’t access to Facebook , please refer to Method 1.

Method 1 :

Windows operating systems contain a file called ‘hosts’ that will force resolution of your domain name.

1. Open the hosts file
- Go to the Start menu and choose Run. Type the following in the Run dialog box:

For Windows NT and Windows 2000
C:\winnt\system32\drivers\etc
Windows XP, Windows Vista or Windows 7
C:\Windows\System32\drivers\etc

Click the OK button (This should open a window with several files in it.)
Find the file called ‘hosts’ and double–click it. If prompted, specify that you would like to choose a program to open the file withfrom a list of programs.

2. Choose ‘Notepad’ from the list of available programs.

- Edit and save the hosts file

The contents of your hosts file should look something like this
Find the line with the word facebook.com (example: “127.0.0.1 http://www.facebook.com” )
Remove it.
Close the hosts file and save it when prompted.

Method 2 :

1.Start Task Manager

2.Kill these processes:
  • fbtre6.exe
  • mstre6.exe

Delete these registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Run\”systray” = “c:\windows\mstre6.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Run\”systray” = “C:\Windows\fbtre6.exe”
HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Explorer\Navigating;
Method:

Launch the Registry Editor. Press the Start button and then click Run. Type in regedit into the Open: field. Then click on the OK button.

New window will be pop out and type regedit. click Ok



Find the virus file by following the below steps
HKEY_LOCAL_MACHINE > SOFTWARE > Microsoft > Windows > Current Version > Run > ”systray”
To make sure before you delete, delete the value that consist “c:\windows\mstre6.exe” and press delete.

Warning : DO NOT SIMPLY DELETE! YOU COMPUTER MAY NOT ABLE TO BOOT UP.

3. Delete these files:
C:\\Windows\\fbtre6.exe
C:\\Windows\\fmark2.dat


==  BAHASA INDONESIA  ==


Bagaimana menghapus Virus Facebook Chat "hi. bagaimana kabarmu? "
Berbagi halaman ini dengan teman dan keluarga, jika Anda peduli tentang mereka.
Contoh Chat:

"Hi. bagaimana kabarmu? "
* Jika Anda membalas, itu akan mengirimkan Anda: *
"Ingin tertawa? :) "
* Jika Anda membalas lagi, itu akan mengirimkan Anda: *
"Ini adalah Anda pada video))? Ingin melihat?)"
* Jika Anda membalas lagi, itu akan mengirimkan Anda * link virus

Contoh situs :

Apakah komputer saya terinfeksi setelah saya mengklik link itu?
Tidak! Kecuali Anda men-download beberapa file dari link. (Saat ini mereka menggunakan drive-dengan metode)
CARA UNTUK FIX!
Jika komputer Anda terinfeksi dan tidak dapat mengakses ke Facebook, silakan merujuk ke Metode 1.

Metode 1:

Sistem operasi Windows yang memiliki file bernama 'host' yang akan memaksa resolusi nama domain Anda.

1. Buka file hosts
- Buka menu Start dan pilih Run. Ketik berikut di kotak dialog Run:


Untuk Windows NT dan Windows 2000
C: \ winnt \ system32 \ drivers \ etc
Windows XP, Windows Vista atau Windows 7
C: \ Windows \ System32 \ drivers \ etc

Klik tombol OK (ini harus membuka jendela dengan beberapa file di dalamnya.)
Cari file yang disebut 'host' dan double-klik. Jika diminta, menentukan bahwa Anda ingin memilih sebuah program untuk membuka file withfrom daftar program.

2. Pilih 'Notepad' dari daftar program yang tersedia.
- Mengedit dan menyimpan file host

Isi file host Anda harus terlihat seperti ini
Cari baris dengan facebook.com kata (contoh: "127.0.0.1 http://www.facebook.com")
Hapus itu.
Tutup host file dan menyimpannya saat diminta.

Metode 2:
1.Start Task Manager

2.Kill proses ini:
fbtre6.exe
mstre6.exe


Hapus nilai registry ini:
HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Current Version \ Run \ "systray" = "c: \ windows \ mstre6.exe"
HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Current Version \ Run \ "systray" = "C: \ Windows \ fbtre6.exe"
HKEY_CURRENT_USER \ AppEvents \ Skema \ Apps \ Explorer \ Menavigasi;
metode:


Jalankan Registry Editor. Tekan tombol Start dan kemudian klik Jalankan. Ketik regedit ke Terbuka: lapangan. Kemudian klik pada tombol OK.


Jendela baru akan muncul keluar dan ketik regedit. klik Ok



Find the virus file by following the below steps
HKEY_LOCAL_MACHINE > SOFTWARE > Microsoft > Windows > Current Version > Run > ”systray”
To make sure before you delete, delete the value that consist “c:\windows\mstre6.exe” and press delete.

Warning : DO NOT SIMPLY DELETE! YOU COMPUTER MAY NOT ABLE TO BOOT UP.

3. Delete these files:
C:\\Windows\\fbtre6.exe
C:\\Windows\\fmark2.dat