This time-bomb virus will deleted all your data in your hard-disk and flash-disk  including system files for each file founded on date 12-13 around 8-9 AM each month. If you got this message in your computer then you have infected by this Deadlock Virus.

deadlock-1

This virus has strange master files, I don’t know why this virus creator choose apache.exe (popular web server) and mysql.exe (popular database) if users familiar with computer process they will found out this master files easily. Deadlock has been compressed by petite 2.x. with size 80KB, using application icon.

deadlock-2

Spreading Technique:

No autorun.inf, Deadlock using desktop.ini then folder.htt to execute flashguard.exe, so… if you’re infected by this virus each folder will contains this 3 files.

  1. Desktop.ini
  2. Folder.htt
  3. Flashguard.exe

deadlock-4

deadlock-5

Virus Affect:

This virus will deleted all files, not only data or document, virus will removing them all. If this happen to you I really don’t have smart solution for this… You can try using recovery programs, badly this programs not free. Maybe you can try to searching for free recovery programs, Anyway in my experience not all recovery programs working 100% sometimes you can’t get back lost files in 100% if you lost it in long time ago (ex: 1 year ago).

Virus also will deleted system files and make your computers fails to start, consult with your OS vendor how to fix this (In windows XP there is repair tools from CD but don’t know other) if there is no repair tools you have no choice to reinstall your OS then recover back your lost files.

HOW TO:Remove DeadLock Virus Manually:

1. Disable System Restore when in cleaning process.

2. Kill active virus in computer background, use process explorer kill process with name “apache.exe” and “mysql.exe“.

deadlock-6

3. To prevent virus active back when you’re in cleaning process I suggest you to register this files into “software restriction police“.

Start -> Run -> Type “SECPOL.MSC” then following this images after that apply to make sure this new rules working.

deadlock-7

deadlock-8

deadlock-9

deadlock-10

NOTE: If you’re not using Windows XP Professional,2003 server,vista,2008 you can skip this step.

4. Repair your registry using repair.inf right click on files then click install.

[Version]
Signature=”$Chicago$”
Provider=Nobody

[DefaultInstall]
AddReg=UnhookRegKey
DelReg=del

[UnhookRegKey]
HKLM, Software\CLASSES\batfile\shell\open\command,,,”"”%1″” %*”
HKLM, Software\CLASSES\comfile\shell\open\command,,,”"”%1″” %*”
HKLM, Software\CLASSES\exefile\shell\open\command,,,”"”%1″” %*”
HKLM, Software\CLASSES\piffile\shell\open\command,,,”"”%1″” %*”
HKLM, Software\CLASSES\regfile\shell\open\command,,,”regedit.exe “%1″”
HKLM, Software\CLASSES\scrfile\shell\open\command,,,”"”%1″” %*”
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell,0, “Explorer.exe”
HKLM, SYSTEM\ControlSet001\Control\SafeBoot, AlternateShell,0, “cmd.exe”
HKLM, SYSTEM\ControlSet002\Control\SafeBoot, AlternateShell,0, “cmd.exe”
HKLM, SYSTEM\CurrentControlSet\Control\SafeBoot, AlternateShell,0, “cmd.exe”
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, NoDriveTypeAutoRun,0x000000ff,255
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer, NoDriveTypeAutoRun,0x000000ff,255

[del]
HKCU, Software\Microsoft\Windows\CurrentVersion\Run, apache
HKLM, Software\Microsoft\Windows\CurrentVersion\Run, mysql

5. Delete Master files on:

  • %SYSTEMROOT%/system32/apache.exe
  • %SYSTEMROOT%/system32/mysql.exe

6. Scan with updated antivirus programs to make sure your computer clean, you can use Norman mallware cleaner for free, download it from here.

DONE, if you meet problem let’s discuss it in here :D

Similar Posts:

    Digg Del.icio.us StumbleUpon Reddit Twitter RSS

  • vprotect application has encountered a problem and needs to close
  • VProtect Application has encountered a problem
  • VProtect Application has stopped working
  • smartp exe no disk
  • cara menghilangkan smartp exe no disk
  • atasi virus window no disk
  • vprotect application has encountered
  • vprotect application
  • windows no disk virus
  • deadlock
  • how to fix vprotect
  • virus creator
  • cara menghilangkan svchost exe
  • bagaimana mengatasi write protection pada komputer
  • cara mengatasi error microsoft office profesional plus 2010 encontered an error during setup
  • cara menghilangkan smartp exe
  • MENGHILANGKAN cmd exe - NoDisk ILANGKAN
  • menghapus virus xp
  • cara menghilangkan virus shortcut
  • solusi eror smart exe-no disk
  • virus active desktop recovery
  • penyebab virus serverx
  • smartp exe - no disk
  • remove autorun exe virus
  • vprotect application startup
  • perbaiki flashdisk virus shortcut
  • svchost exe-Write Protect Error
  • cara atasi desktop ini
  • cara menghapus privacy protection
  • cara mengatasi caution: this hard disk may be infected by virus
  • brone exe
  • cara mengatasi privacy protection has found 1
  • cara memperbaiki error BEX
  • Cara mengatasi iexplore Exe-no disk pada pc
  • IEXPLORE EXE NO DISK
  • menghilangkan window protektion in 2 cd
  • menghilangkan sedoparking
  • keluar tulisan iexplorer exe - not disk
  • how to fix VProtect Application has encountered a problem and needs to close
  • download free software untuk menghapus virus SHORCUT
  • menghilangkan smartp exe no disk
  • membasmi virus no disk there is no disk in the drive
  • mengatasi masalah windows xp no disk
  • donwload sofwer mengatasi mengatasi firus syorcut
  • masalah external hard disk win32
  • masalah iexplore exe
  • menghilangkan pesan there is no disk in the drive
  • menghilangkan Privacy Protection
  • cara repair win32 pada windows 7 32bit
  • mengatasi windows explorer not working
  • mengatasi smartp exe - no disk
  • IEMonitor exe-No Disk
  • iexplore exe no disk cara
  • menghapus virus desktop ini
  • MENGHAPUS VIRUS MELALUI CMD
  • kenapa sisitim windows not respon program
  • mengatasi virus exe
  • mengatasi office 2010 encountered an error during setup
  • mengatasi virus cmd-exe
  • iemonitor exe - no disk
  • menghapus virus windows-no disk dari regedit
  • mengatasi there no disk
  • mengatasi there is no disk
  • mengatasi masalah windows cannot open this program because it has been prevented by a restriction policy open even
  • menghilangkan there is no disk
  • memperbaiki iexplore exe no disk
  • cara menghilangkan virus shortcut dalam memory card
  • cara menghilangkan windows file protection
  • cara menghilangkan windows-no disk
  • menghilangkan virus reycicle di mmc
  • cara menghilangkan vprotect application
  • menghilangkan virus smartp exe
  • menghilangkan virus winsta
  • menghilangkan virus svchost
  • mengatasi flashdisk ke protect virus win32
  • cara menilankan martp exe
  • mengatasi laptop yang not responding ketika membuka microsoft office 2010
  • cara ngilangin virus short curt
  • cara menghilangkan virus ms dos
  • menghilangkan there is no disk in the drive
  • cara menghilangkan virus privacy protection
  • protect flashdisk from virus
  • vprotect error message
  • sofwer untuk menghapus virus
  • perintah vprotect application has stopped working
  • vprotect application has encoutered a problem
  • virus yang menghilangkan data dalam folder
  • vírus creator
  • winlogon exe app cara nak
  • svchost exe no disk pada windows 7
  • smartp exe
  • windows no disk ketika bika program
  • WINDOWS FILE PROTECTION MENGHILANGKAN
  • windows explorer has stopped working windows 7 bagaimana cara
  • vprotect app
  • serverx exe - no disk
  • smartp exe no disk pda win7
  • smartp exe-no disk di laptop
  • smartp exe-no disk
  • penghilang virus shortcut
  • Cara mematikan privacy protection
  • cara membuka windows cannot open this program because it has been prevented by a software restriction police melalui user admin
  • cara mematikan firus lewat perintah cmd pada windows7
  • cara memperbaiki icon di desktop
  • cara mengatasi program windows has been prevented by a software restrictoin policy
  • cara menghilangkan iexplore exe-no disk
  • cara me remove flash disk yang to protect
  • cara kill virus shortcut
  • cara hilangkan tanda internet explorer has stopped working
  • cara memperbaiki external installer has stopped working
  • cara memperbaiki flashdisk
  • Cara menghapus Desktop Ini
  • cara menghilangkan desktop ini
  • cara menghapus file dengan cmd
  • cara delete virus svhost exe
  • cara menghapus virus autorun
  • cara atasi memori card file protection
  • cara menghapus exe - no disk
  • cara menghapus virus RECYLER di flashdisk
  • cara menghilangkan pesan internet explorer has been stopped working di regedit
  • cara mengatasi there is no disk in the drive
  • cara menghilangkan brone exe
  • cara menghilangkan cmd exe there is no disk in the drive
  • bulu bebek shortcut 2kb
  • Cara mengatasi masalah aplication has encountered a problem and needs to close pada xp
  • cara mengatasi deadlock windows
  • cara menghilangkan virus desktop ini
  • cara menghilangkan virus di komputer yang membandel
  • cara menghilangkan smart exe dari desktop
  • cara memperbaiki tampilan icon desktrop
  • cara menghilangkan privacy protection
  • cara mengatasi muncul tulisan microsoft office professional plus 2010 encountered error during setup
  • cara mengatasi file microsoft word dengan pesan error docx is not a valid win32 application
  • cara mengatasi iemonitor - no disk
  • cara mengatasi iexplorer exe no disk
  • cara mengatasi virus di mmc
  • cara mengatasi windows cannot open this program because it has
  • cara mengatasi komputer iexplore exe
  • cara mengatasi komputer muncul peringatan svchost exe
  • cara mengatasi local disk yang not responding
  • cara mengatasi logon exe di dekstop
  • cara mengatasi virus
  • cara mengatasi tulisan program has stoped working
  • cara mengatasi these is no disk in the drive
  • cara mengatasi windows cannot open this program
  • cara mengatasi flshdisk yg removable
  • cara mengatasi window not drive
  • cara mengatasi vprotect application has stopped working
  • cara mengatasi vprotect application has encountered
  • cara mengatasi virus windows-no disk
  • cara mengatasi Windows can check online for a solution to the problem
  • cara mengatasi virus there is no disk in the drive
  • cara mengatasi virus recycle
  • cara mengatasi flash disk yang blank
  • cara mengatasi virus memory card
  • cara mengatasi flashdisk write protect windows 7
  • cara mengatasi virus icon pada win 7
  • cara mengatasi virus application has stop working check online for solution
  • cara mengatasi there no disk in the drive
  • cara mengatasi komputer eroor dengan pesan autorun not configure
  • cara mengatasi memory card yang write protected
  • cara mengatasi restrictions
  • cara mengatasi microsoft office plus 2010 encountered an error during setup
  • cara mengatasi microsoft office profesional plus 2010 encountered an error during setup di windows 7
  • cara mengatasi problem event name: bex
  • Cara mengatasi problem BEX pada windows7
  • cara mengatasi microsoft office professional plus 2007 encountered an error during setup
  • Cara mengatasi msalah dekstop stop working
  • Cara mengatasi pesan iexplore no disk pada window seven
  • cara mengatasi pc hilang short cut
  • cara mengatasi muncul windows no disk
  • cara mengatasi memory card yang not responding
  • cara mengatasi scvhost exe
  • Cara mengatasi Serverx exe - No Disk
  • cara mengatasi there is no disk svchost
  • cara mengatasi masalah mysql win 32 yang error
  • Cara mengatasi masalah problem BEX
  • cara mengatasi masalah the disk cannot be written
  • cara mengatasi there is no disk
  • cara mengatasi svchost exe
  • cara mengatasi restriction di windows 7
  • cara mengatasi smartp exe - no disk
  • cara mengatasi SMARTP exe
  • cara mengatasi SMART exe - no Disk pada pc
  • cara mengatasi masalah windows file protection
  • cara mengatasi serverx exe muncul pada windows xp
  • cara mengatasi notebook keluar pesan SMARTP exe-no disk
  • cara mengatasi windows cannot solution
  • cara menghilangkan virus di microsoft office
  • cara menghilangkan smartp exe-no disk
  • cara menghilangkan smartp exe - no disk
  • cara menghilangkan smartp
  • cara menghilangkan SMART exe - No Disk
  • cara menghilangkan serverx no
  • cara menghilangkan serverx exe
  • cara menghilangkan protec copy pada win 7
  • cara menghilangkan pesan windows file protection
  • cara menghilangkan pesan windows disc protection
  • cara menghilangkan pesan there was a problem pada komputer
  • cara menghilangkan pesan there is no disk in the drive pada laptop

If you're new here, you may want to subscribe to my RSS feed. You may copy or publish this article to your blog or other site as long you give credit link back to this site article. Thanks for visiting my blog!


This entry was posted on Saturday, August 15th, 2009 at 10:00 PM and is filed under Computer And Internet, Miscellaneous, Tips & Trick. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.