Perlihatkan Tulisan

Seksi ini mengijinkan Anda untuk melihat semua tulisan yang dibuat oleh anggota ini. Catatan bahwa Anda hanya bisa melihat tulisan yang dibuat dalam area di mana Anda memiliki akses terhadapnya.


Topik - Kodoktua

Halaman: [1]
1
halo tim smadav

bagaimana cara membersihkan new heur.lowrep (Cloudnet) ini ya?

- Setiap menscan pc dengan Smadav atau software AV lainnya, setelah beberapa saat software akan terclose dan terdelete sehingga harus diinstal ulang kembali software AV tersebut termasuk Smadav
- entah permasalahan windows atau akibat virus ini pc tidak bisa masuk ke safemode walaupun di restart melalui msconfig
- semua aplikasi MS Office tidak bisa terhubung dengan printer, walaupun aplikasi pdf printer
- pc sudah jelas lebih terasa berat

di tab one virus by user ada 4 aplikasi yaitu:
mrt.exe (process)
csrss.exe (process)
cloudnet.exe (process)
cloudnet.exe (startup)

ini hasil log dari quick scan SMADAV:

==============================
Log File of Smadav 2018 Rev. 11.9
==============================

Scanning Results :
=> Time & Date : 10:10:20, on 07-03-2018
=> Finishing Time : 24 minutes,44 seconds
=> Folder Scanned :30982
=> File Scanned : 186509
=> File Detected : 2
=> File Cleaned : 0
=> File Skipped : 0
=> Value Scanned : 1441
=> Value Detected: 1
=> Value Fixed: 0
=> Path Scanned: 0
=> Path Hidden: 0
=> Path Unhidden: 0

==============================
Before Scanning
==============================
Suspected Paths :
=> Fine(Level 1) as  : 1 Process
   -F:\Program Files\TxGameAssistant\AppMarket\QMEmulatorService.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Windows\SysWOW64\NLSSRV32.EXE
=> Fine(Level 1) as  : 1 Process
   -C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Windows\System32\certutil.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe
=> Fine(Level 1) as  : 1 Process, 1 Startup
   -C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe
=> Fine(Level 1) as  : 1 Process, 1 Startup
   -C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
=> Fine(Level 1) as  : 1 Process
   -C:\ProgramData\DatacardService\DCSHelper.exe
=> Fine(Level 1) as  : 1 Process, 1 Startup
   -C:\Program Files\CCleaner\CCleaner.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Windows\rss\csrss.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
=> Fine(Level 1) as  : 1 Process, 1 Startup
   -C:\Users\nke\AppData\Roaming\Spotify\SpotifyWebHelper.exe
=> Fine(Level 1) as  : 1 Process, 1 Startup
   -C:\Users\nke\AppData\Roaming\EpicNet Inc\CloudNet\cloudnet.exe
=> Fine(Level 1) as  : 1 Process
   -SmadavProtect64.exe
=> Fine(Level 1) as  : 1 Startup
   -C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
=> Fine(Level 1) as  : 1 Startup
   -C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe
=> Fine(Level 1) as  : 1 Startup
   -C:\Users\nke\Documents\app\Internet Download Manager IDM 6.21 Build 14 Final Incl. Crack [ATOM]\Crack\IDMan.exe
=> Fine(Level 1) as  : 1 Startup
   -C:\Program Files (x86)\Trojan Remover\Trjscan.exe

Running Processes :
=> N/A
=> N/A
=> N/A
=> N/A
=> C:\Windows\System32\wininit.exe
=> N/A
=> N/A
=> N/A
=> N/A
=> N/A
=> C:\Windows\System32\svchost.exe
=> F:\Program Files\TxGameAssistant\AppMarket\QMEmulatorService.exe
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\svchost.exe
=> N/A
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\svchost.exe
=> N/A
=> C:\Windows\System32\svchost.exe
=> C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
=> C:\Windows\System32\taskeng.exe
=> C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
=> N/A
=> N/A
=> N/A
=> N/A
=> C:\Windows\SysWOW64\NLSSRV32.EXE
=> N/A
=> N/A
=> C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
=> N/A
=> C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe
=> N/A
=> C:\Windows\windefender.exe
=> N/A
=> N/A
=> C:\Windows\System32\svchost.exe
=> N/A
=> N/A
=> N/A
=> C:\Windows\System32\taskeng.exe
=> N/A
=> C:\Windows\explorer.exe
=> C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
=> C:\Windows\System32\taskeng.exe
=> C:\Program Files (x86)\SMADAV\SMΔRTP.exe
=> C:\Windows\System32\cmd.exe
=> N/A
=> C:\Windows\System32\certutil.exe
=> N/A
=> C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe
=> N/A
=> C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe
=> C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
=> C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
=> C:\ProgramData\DatacardService\DCSHelper.exe
=> N/A
=> N/A
=> C:\Program Files\CCleaner\CCleaner.exe
=> C:\Windows\rss\csrss.exe
=> C:\Windows\System32\svchost.exe
=> C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
=> C:\Windows\System32\SearchIndexer.exe
=> N/A
=> C:\Users\nke\AppData\Roaming\Spotify\SpotifyWebHelper.exe
=> C:\Users\nke\AppData\Roaming\EpicNet Inc\CloudNet\cloudnet.exe
=> C:\Windows\System32\svchost.exe
=> SmadavProtect64.exe
=> C:\Windows\System32\SearchProtocolHost.exe
=> C:\Windows\System32\SearchFilterHost.exe
=> C:\Program Files (x86)\SMADAV\SMΔRTP.exe

==============================
After Scanning
==============================
Suspected Paths :
=> Fine(Level 2) as  : 2 Process
   -C:\Windows\rss\csrss.exe
=> Fine(Level 1) as  : 1 Process
   -F:\Program Files\TxGameAssistant\AppMarket\QMEmulatorService.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Windows\SysWOW64\NLSSRV32.EXE
=> Fine(Level 1) as  : 1 Process
   -C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe
=> Fine(Level 1) as  : 1 Process, 1 Startup
   -C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe
=> Fine(Level 1) as  : 1 Process, 1 Startup
   -C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
=> Fine(Level 1) as  : 1 Process
   -C:\ProgramData\DatacardService\DCSHelper.exe
=> Fine(Level 1) as  : 1 Process, 1 Startup
   -C:\Program Files\CCleaner\CCleaner.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
=> Fine(Level 1) as  : 1 Process, 1 Startup
   -C:\Users\nke\AppData\Roaming\Spotify\SpotifyWebHelper.exe
=> Fine(Level 1) as  : 1 Process
   -SmadavProtect64.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Users\nke\AppData\Local\Temp\csrss\mrt.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Users\nke\AppData\Local\Temp\csrss\smb\XVznwLpQBvZ\Eternalblue-2.2.0.exe
=> Fine(Level 1) as  : 1 Startup
   -C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
=> Fine(Level 1) as  : 1 Startup
   -C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe
=> Fine(Level 1) as  : 1 Startup
   -C:\Users\nke\Documents\app\Internet Download Manager IDM 6.21 Build 14 Final Incl. Crack [ATOM]\Crack\IDMan.exe
=> Fine(Level 1) as  : 1 Startup
   -C:\Users\nke\AppData\Roaming\EpicNet Inc\CloudNet\cloudnet.exe
=> Fine(Level 1) as  : 1 Startup
   -C:\Program Files (x86)\Trojan Remover\Trjscan.exe

Running Processes :
=> N/A
=> N/A
=> N/A
=> N/A
=> C:\Windows\System32\wininit.exe
=> N/A
=> N/A
=> N/A
=> N/A
=> N/A
=> C:\Windows\System32\svchost.exe
=> F:\Program Files\TxGameAssistant\AppMarket\QMEmulatorService.exe
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\svchost.exe
=> N/A
=> C:\Windows\System32\svchost.exe
=> C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
=> C:\Windows\System32\taskeng.exe
=> C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
=> N/A
=> N/A
=> N/A
=> N/A
=> C:\Windows\SysWOW64\NLSSRV32.EXE
=> N/A
=> C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
=> N/A
=> C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe
=> N/A
=> C:\Windows\windefender.exe
=> N/A
=> N/A
=> C:\Windows\System32\svchost.exe
=> N/A
=> N/A
=> N/A
=> C:\Windows\System32\taskeng.exe
=> N/A
=> C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
=> C:\Program Files (x86)\SMADAV\SMΔRTP.exe
=> C:\Windows\System32\cmd.exe
=> N/A
=> N/A
=> C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe
=> N/A
=> C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe
=> C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
=> C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
=> C:\ProgramData\DatacardService\DCSHelper.exe
=> C:\Program Files\CCleaner\CCleaner.exe
=> C:\Windows\rss\csrss.exe
=> C:\Windows\System32\svchost.exe
=> C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
=> C:\Windows\System32\SearchIndexer.exe
=> N/A
=> C:\Users\nke\AppData\Roaming\Spotify\SpotifyWebHelper.exe
=> SmadavProtect64.exe
=> C:\Program Files (x86)\SMADAV\SMΔRTP.exe
=> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
=> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
=> C:\Windows\System32\svchost.exe
=> N/A
=> N/A
=> N/A
=> N/A
=> N/A
=> N/A
=> N/A
=> N/A
=> N/A
=> N/A
=> N/A
=> N/A
=> C:\Users\nke\AppData\Local\Temp\csrss\mrt.exe
=> C:\Windows\rss\csrss.exe
=> N/A
=> N/A
=> N/A
=> N/A
=> N/A
=> C:\Windows\System32\svchost.exe
=> C:\Windows\explorer.exe
=> N/A
=> C:\Users\nke\AppData\Local\Temp\csrss\smb\XVznwLpQBvZ\Eternalblue-2.2.0.exe
=> N/A

Detected Virus :
=> New Heur.LowRep(cloudnet)
   -Detected Process [Killed]
   -C:\Users\nke\AppData\Roaming\EpicNet Inc\CloudNet\cloudnet.exe
=> New Heur.LowRep(cloudnet)
   -Infected File
   -C:\Users\nke\AppData\Local\Temp\csrss\cloudnet.exe

Infected Registry Values :
=> CloudNet
   -HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
   -New Heur.Startup Suspected Virus Value

Halaman: [1]