Kembalikan Task Manager

Lagi lagi virus bikin pusing namun dengan sedikit trik dari kami gimana caranya
balikin  task manager dengan notepad dan sedikit kerja keras :

copy script di bawah ini ke notepad lalu simpan dengan ekstensi inf (*.inf)
misalnya : baliktaskmanager.inf




















[Version]
Signature="$Windows NT$"
Provider=WardanaPro

[DefaultInstall]
AddReg=Write
DelReg=Delete

[Write]
HKCR, .bat,,,"batfile"
HKCR, .cmd,,,"cmdfile"
HKCR, .js,,,"jsfile"
HKCR, .vbs,,,"VBSfile"
HKCR, .reg,,,"regfile"
HKCR, .exe,,,"exefile"
HKCR, .scr,,,"scrfile"
HKCR, .com,,,"comfile"
HKCR, .pif,,,"piffile"

HKCR, batfile\shell\open\command,,,"""%1"" %*"
HKCR, cmdfile\shell\open\command,,,"""%1"" %*"
HKCR, JSFile\shell\open\command,,,"%SystemRoot%\System32\WScript.exe ""%1"" %*"
HKCR, VBSFile\Shell\open\command,,,"%SystemRoot%\System32\WScript.exe ""%1"" %*"
HKCR, regfile\shell\open\command,,,"regedit.exe "%1""
HKCR, exefile\shell\open\command,,,"""%1"" %*"
HKCR, comfile\shell\open\command,,,"""%1"" %*"
HKCR, piffile\shell\open\command,,,"""%1"" %*"

HKCR, batFile\Shell\Edit\Command,,,"%SystemRoot%\System32\Notepad.exe %1"
HKCR, cmdFile\Shell\Edit\Command,,,"%SystemRoot%\System32\Notepad.exe %1"
HKCR, JSFile\Shell\Edit\Command,,,"%SystemRoot%\System32\Notepad.exe %1"
HKCR, VBSFile\Shell\Edit\Command,,,"%SystemRoot%\System32\Notepad.exe %1"
HKCR, regFile\Shell\Edit\Command,,,"%SystemRoot%\System32\Notepad.exe %1"

HKCR, batfile\DefaultIcon,,,"%SystemRoot%\System32\shell32.dll,-153"
HKCR, cmdfile\DefaultIcon,,,"%SystemRoot%\System32\shell32.dll,-153"
HKCR, JSFile\DefaultIcon,,,"%SystemRoot%\System32\WScript.exe,3"
HKCR, VBSfile\DefaultIcon,,,"%SystemRoot%\System32\WScript.exe,2"
HKCR, exefile\DefaultIcon,,,"%1"
HKCR, comfile\DefaultIcon,,,"%SystemRoot%\System32\shell32.dll,2"

HKCR, batfile, FriendlyTypeName,0, "MS-DOS Batch File"
HKCR, cmdfile, FriendlyTypeName,0, "Windows NT Command Script"
HKCR, JSFile, FriendlyTypeName,0, "@%SystemRoot%\System32\wshext.dll,-4804"
HKCR, VBSFile, FriendlyTypeName,0, "@%SystemRoot%\System32\wshext.dll,-4802"
HKCR, ScrFile, FriendlyTypeName,0, "Screen Saver"
HKCR, comfile, FriendlyTypeName,0, "MS-DOS Application"
HKCU, Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced, ShowSuperHidden,0x00010001,1
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell,0, "Explorer.exe"
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Userinit,0, "@%SystemRoot%\system32\userinit.exe"
HKLM, SYSTEM\CurrentControlSet\Control\Session Manager, BootExecute,0, "autocheck autochk *"
HKLM, SYSTEM\CurrentControlSet\Control\Session Manager\Environment, ComSpec,0, "%SystemRoot%\system32\cmd.exe"
HKLM, SYSTEM\CurrentControlSet\Control\SafeBoot, AlternateShell,0, "cmd.exe"
HKLM, SYSTEM\CurrentControlSet\Services\PugPlay, ImagePath,0, "%SystemRoot%\system32\services.exe"
HKLM, SYSTEM\CurrentControlSet\Services\srservice, ImagePath,0, "%SystemRoot%\system32\svchost.exe -k netsvcs"
HKLM, SYSTEM\CurrentControlSet\Services\MSIServer, ImagePath,0, "%SystemRoot%\system32\msiexec.exe /V"
HKLM, SYSTEM\ControlSet001\Control\SafeBoot, AlternateShell,0, "cmd.exe"
HKLM, SYSTEM\ControlSet002\Control\SafeBoot, AlternateShell,0, "cmd.exe"
HKLM, SYSTEM\CurrentControlSet\Control\SafeBoot, AlternateShell,0, "cmd.exe"

HKLM, Software\Microsoft\Windows\CurrentVersion\Policies\System, legalnoticetext,0, ""
HKLM, Software\Microsoft\Windows\CurrentVersion\Policies\System, legalnoticecaption,0, ""


[Delete]
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, NoFind
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, NoRun
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, NoDesktop
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, NoFileAssociate
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, NoFolderoptions
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, NoFileMenu
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, NoDrives
HKCU, SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer, NoTrayContextMenu
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableCMD
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegistryTools
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableTaskMgr
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system, DisableTaskmgr
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system, NoFolderoptions
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer, NoTrayContextMenu
HKLM, Software\Microsoft\Windows\CurrentVersion\Policies\WinOldApp, Disabled

HKCR, batfile, NeverShowExt
HKCR, cmdfile, NeverShowExt
HKCR, VBSFile, NeverShowExt
HKCR, JSFile, NeverShowExt
HKCR, exefile, NeverShowExt
HKCR, comfile, NeverShowExt
HKCR, pifile, NeverShowExt
HKCR, scrfile, NeverShowExt

HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cmd.exe
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedit.exe
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedt32.exe
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\TaskMgr.exe
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\attrib.exe
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\install.exe, Debugger
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\setup.exe, Debugger
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Taskkill.exe
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\TaskList.exe


Lalu klik kanan terus klik install seperti gambar di bawah ini : 




Selamat mencoba seeeepppp!