Kepalaku kok senut-senut….

My friend come to me and asking me why his PC (windows XP) is so slow? And his antivirus program announce it found new viruses all the time…. And another symptom are :

• Can’t open task manager (CTRL+alt+del >> task manager)
• No “Search” menu on start program
• No “run” menu on start program
• Can’t open Regedit

Be careful.. if your PC have symptom like this, probably it infected by “LOREN” Virus

How it can be active??
The virus will duplicate the file like “parent folder”, if you click it, the virus will distribute. The virus also change the folder “C:\Windows” to be hidden, and make new file (virus File) maned WINDOWS.exe, which the icon just same as WINDOWS FOLDER

How to Clean It??

• Boot using XP CD or another Boot Disk, for win XP disk :
• Use Windows XP CD to boot
• Choose Repair.
• Choose console (go to C:\ prompt)
• delete folder 1205 by type “del C:\windows\system32\12053” followed by enter
• Eject the XP disk, and restart the PC
• Open “Windows Explorer” , type on the address bar : c:\windows\system32
• Find file and double click : cmd.exe
• On the “Command prompt” type “c:\regedit” then enter
• Delete the registry with “12053”, example, delete the :c:\\windows\system32\12053\svchost.exe
• Check on registry as follow :
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
• HKEY_CURRENT_USER \SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
• HKEY_CURRENT_USER \SOFTWARE\Microsoft\Windows NT\CurrentVersion\Policies\Explorer
• HKEY_CURRENT_USER \SOFTWARE\Microsoft\Windows NT\CurrentVersion\Run

SEMOGA SUKSES-GOOD LUCK!!