Tak perlu restore atau format HDD...
Ikut steps kat bawah:
1- Start>RUN
2- CMD
3- Kat CMD, type "Taskkill /T /IM "RVHOST.EXE"
4- Bukak "Notepad"
5- Kat Notepad copy semua yg kat bawah pastu paste
On Error Resume Next
Set shl = CreateObject("WScript.Shell")
Set fso = CreateObject("scripting.FileSystemObject")
shl.RegDelete "HKEY_CURRENT_USER\Software\Microsoft\Windows\Curr entVersion\Policies\System\DisableRegistryTools"
shl.RegDelete "HKEY_CURRENT_USER\Software\Microsoft\Windows\Curr entVersion\Policies\System\DisableTaskMgr"
shl.RegDelete
6- save notepad as "Enable.VBS". Pastikan tukar "file type" kepada "All"
7- double click "Enable.VBS"
8- Start>Run. Type "Regedit" dan ENTER
9- Edit registry seperti kat bawah
Kat left panel, double-click yg kat bawah::
HKEY_CURRENT_USER>Software>Microsoft>
Windows>CurrentVersion>Run
Kat right panel, cari dan delete:
Yahoo Messengger = "%System%\RVHOST.exe"
Kat left panel, double-click:
HKEY_CURRENT_USER>Software>Microsoft>Windows>
CurrentVersion>Policies>Explorer
Kat right panel, caro dan delete:
NofolderOptions = "1"
Restoring Modified Entries from the Registry
Kat left panell, double-click:
HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows NT>
CurrentVersion>Winlogon
Kat right panel, cari:
Shell = "Explorer.exe RVHOST.exe"
Right-click kat value name dan select Modify. Tukar value kepada: "Explorer.exe"
Kat right panel, double-click:
HKEY_LOCAL_MACHINE>SYSTEM>CurrentControlSet>
Services>Schedule
Pastu cari entry kat right panel:
NextAtJobId = "2"
Right click kat value name dan select Modify. Tukar value data kepada:
1
Close Registry Editor.
DeleteMalware File(s)
Right-click Start<Search atau My Computer<Search
Search:
AT1.JOB
Browse My Computer, pastu ENTER
Kalau jumpa SHIFT+DELETE.