This time-bomb virus will deleted all your data in your hard-disk and flash-disk  including system files for each file founded on date 12-13 around 8-9 AM each month. If you got this message in your computer then you have infected by this Deadlock Virus.

deadlock-1

This virus has strange master files, I don’t know why this virus creator choose apache.exe (popular web server) and mysql.exe (popular database) if users familiar with computer process they will found out this master files easily. Deadlock has been compressed by petite 2.x. with size 80KB, using application icon.

deadlock-2

Spreading Technique:

No autorun.inf, Deadlock using desktop.ini then folder.htt to execute flashguard.exe, so… if you’re infected by this virus each folder will contains this 3 files.

  1. Desktop.ini
  2. Folder.htt
  3. Flashguard.exe

deadlock-4

deadlock-5

Virus Affect:

This virus will deleted all files, not only data or document, virus will removing them all. If this happen to you I really don’t have smart solution for this… You can try using recovery programs, badly this programs not free. Maybe you can try to searching for free recovery programs, Anyway in my experience not all recovery programs working 100% sometimes you can’t get back lost files in 100% if you lost it in long time ago (ex: 1 year ago).

Virus also will deleted system files and make your computers fails to start, consult with your OS vendor how to fix this (In windows XP there is repair tools from CD but don’t know other) if there is no repair tools you have no choice to reinstall your OS then recover back your lost files.

HOW TO:Remove DeadLock Virus Manually:

1. Disable System Restore when in cleaning process.

2. Kill active virus in computer background, use process explorer kill process with name “apache.exe” and “mysql.exe“.

deadlock-6

3. To prevent virus active back when you’re in cleaning process I suggest you to register this files into “software restriction police“.

Start -> Run -> Type “SECPOL.MSC” then following this images after that apply to make sure this new rules working.

deadlock-7

deadlock-8

deadlock-9

deadlock-10

NOTE: If you’re not using Windows XP Professional,2003 server,vista,2008 you can skip this step.

4. Repair your registry using repair.inf right click on files then click install.

[Version]
Signature=”$Chicago$”
Provider=Nobody

[DefaultInstall]
AddReg=UnhookRegKey
DelReg=del

[UnhookRegKey]
HKLM, Software\CLASSES\batfile\shell\open\command,,,”””%1″” %*”
HKLM, Software\CLASSES\comfile\shell\open\command,,,”””%1″” %*”
HKLM, Software\CLASSES\exefile\shell\open\command,,,”””%1″” %*”
HKLM, Software\CLASSES\piffile\shell\open\command,,,”””%1″” %*”
HKLM, Software\CLASSES\regfile\shell\open\command,,,”regedit.exe “%1″”
HKLM, Software\CLASSES\scrfile\shell\open\command,,,”””%1″” %*”
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell,0, “Explorer.exe”
HKLM, SYSTEM\ControlSet001\Control\SafeBoot, AlternateShell,0, “cmd.exe”
HKLM, SYSTEM\ControlSet002\Control\SafeBoot, AlternateShell,0, “cmd.exe”
HKLM, SYSTEM\CurrentControlSet\Control\SafeBoot, AlternateShell,0, “cmd.exe”
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, NoDriveTypeAutoRun,0x000000ff,255
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer, NoDriveTypeAutoRun,0x000000ff,255

[del]
HKCU, Software\Microsoft\Windows\CurrentVersion\Run, apache
HKLM, Software\Microsoft\Windows\CurrentVersion\Run, mysql

5. Delete Master files on:

  • %SYSTEMROOT%/system32/apache.exe
  • %SYSTEMROOT%/system32/mysql.exe

6. Scan with updated antivirus programs to make sure your computer clean, you can use Norman mallware cleaner for free, download it from here.

DONE, if you meet problem let’s discuss it in here :D

Similar Posts:

    Digg Del.icio.us StumbleUpon Reddit Twitter RSS

vprotect application has encountered a problem and needs to close, VProtect Application has encountered a problem, VProtect Application has stopped working, smartp exe no disk, atasi virus window no disk, cara menghilangkan smartp exe no disk, vprotect application has encountered, windows no disk virus, vprotect application, deadlock, how to fix vprotect, virus creator, cara menghilangkan svchost exe, cara menghilangkan smartp exe, bagaimana mengatasi write protection pada komputer, cara mengatasi error microsoft office profesional plus 2010 encontered an error during setup, menghapus virus xp, MENGHILANGKAN cmd exe - NoDisk ILANGKAN, cara menghilangkan virus shortcut, solusi eror smart exe-no disk, perbaiki flashdisk virus shortcut, penyebab virus serverx, vprotect application startup, virus active desktop recovery, smartp exe - no disk, remove autorun exe virus, svchost exe-Write Protect Error, menghilangkan window protektion in 2 cd, brone exe, cara memperbaiki error BEX, cara menghapus privacy protection, cara mengatasi caution: this hard disk may be infected by virus, Cara mengatasi iexplore Exe-no disk pada pc, cara atasi desktop ini, cara mengatasi privacy protection has found 1, IEXPLORE EXE NO DISK, download free software untuk menghapus virus SHORCUT, keluar tulisan iexplorer exe - not disk, menghilangkan sedoparking, how to fix VProtect Application has encountered a problem and needs to close, menghilangkan smartp exe no disk, mengatasi office 2010 encountered an error during setup, masalah external hard disk win32, iexplore exe no disk cara, masalah iexplore exe, mengatasi masalah windows xp no disk, membasmi virus no disk there is no disk in the drive, mengatasi masalah windows cannot open this program because it has been prevented by a restriction policy open even, menghilangkan Privacy Protection, menghilangkan pesan there is no disk in the drive, mengatasi laptop yang not responding ketika membuka microsoft office 2010, donwload sofwer mengatasi mengatasi firus syorcut, iemonitor exe - no disk, mengatasi windows explorer not working, IEMonitor exe-No Disk, mengatasi virus exe, mengatasi virus cmd-exe, mengatasi there no disk, menghapus virus desktop ini, mengatasi there is no disk, kenapa sisitim windows not respon program, mengatasi smartp exe - no disk, menghapus virus windows-no disk dari regedit, MENGHAPUS VIRUS MELALUI CMD, cara ngilangin virus short curt, cara menghilangkan windows-no disk, mengatasi flashdisk ke protect virus win32, cara menghilangkan windows file protection, menghilangkan virus svchost, menghilangkan there is no disk, cara menghilangkan vprotect application, cara menghilangkan virus privacy protection, menghilangkan there is no disk in the drive, cara repair win32 pada windows 7 32bit, cara menghilangkan virus shortcut dalam memory card, menghilangkan virus smartp exe, memperbaiki iexplore exe no disk, cara menilankan martp exe, cara menghilangkan virus ms dos, menghilangkan virus reycicle di mmc, menghilangkan virus winsta, serverx exe - no disk, windows explorer has stopped working windows 7 bagaimana cara, WINDOWS FILE PROTECTION MENGHILANGKAN, smartp exe-no disk di laptop, smartp exe-no disk, penghilang virus shortcut, vprotect application has encoutered a problem, smartp exe no disk pda win7, perintah vprotect application has stopped working, winlogon exe app cara nak, svchost exe no disk pada windows 7, smartp exe, protect flashdisk from virus, windows no disk ketika bika program, virus yang menghilangkan data dalam folder, vírus creator, vprotect error message, vprotect app, sofwer untuk menghapus virus, cara menghapus file dengan cmd, cara mengatasi muncul tulisan microsoft office professional plus 2010 encountered error during setup, cara menghapus exe - no disk, Cara menghapus Desktop Ini, cara atasi memori card file protection, cara menghilangkan pesan internet explorer has been stopped working di regedit, cara menghapus virus RECYLER di flashdisk, cara memperbaiki flashdisk, cara menghilangkan virus di komputer yang membandel, bulu bebek shortcut 2kb, cara menghilangkan brone exe, cara mengatasi there is no disk in the drive, cara mengatasi program windows has been prevented by a software restrictoin policy, cara menghilangkan cmd exe there is no disk in the drive, cara menghilangkan desktop ini, cara menghapus virus autorun, cara menghilangkan iexplore exe-no disk, cara memperbaiki external installer has stopped working, cara mematikan firus lewat perintah cmd pada windows7, cara menghilangkan privacy protection, cara mengatasi deadlock windows, cara delete virus svhost exe, cara menghilangkan virus desktop ini, cara hilangkan tanda internet explorer has stopped working, cara membuka windows cannot open this program because it has been prevented by a software restriction police melalui user admin, cara memperbaiki icon di desktop, cara kill virus shortcut, Cara mengatasi masalah aplication has encountered a problem and needs to close pada xp, cara menghilangkan smart exe dari desktop, cara memperbaiki tampilan icon desktrop, Cara mematikan privacy protection, cara me remove flash disk yang to protect, cara mengatasi virus application has stop working check online for solution, cara mengatasi Windows can check online for a solution to the problem, cara mengatasi vprotect application has stopped working, cara mengatasi virus, cara mengatasi there is no disk, cara mengatasi svchost exe, cara mengatasi window not drive, cara mengatasi vprotect application has encountered, cara mengatasi tulisan program has stoped working, cara mengatasi these is no disk in the drive, cara mengatasi virus di mmc, cara mengatasi there no disk in the drive, cara mengatasi virus icon pada win 7, cara mengatasi virus memory card, cara mengatasi virus recycle, cara mengatasi there is no disk svchost, cara mengatasi virus there is no disk in the drive, cara mengatasi virus windows-no disk, cara mengatasi smartp exe - no disk, cara mengatasi SMARTP exe, cara mengatasi memory card yang not responding, cara mengatasi masalah windows file protection, cara mengatasi masalah the disk cannot be written, Cara mengatasi masalah problem BEX, cara mengatasi masalah mysql win 32 yang error, cara mengatasi logon exe di dekstop, cara mengatasi local disk yang not responding, cara mengatasi komputer muncul peringatan svchost exe, cara mengatasi komputer iexplore exe, cara mengatasi iexplorer exe no disk, cara mengatasi iemonitor - no disk, cara mengatasi flshdisk yg removable, cara mengatasi flashdisk write protect windows 7, cara mengatasi flash disk yang blank, cara mengatasi file microsoft word dengan pesan error docx is not a valid win32 application, cara mengatasi explorer exe application error tidak mucul ke dekstop, cara mengatasi memory card yang write protected, cara mengatasi microsoft office plus 2010 encountered an error during setup, cara mengatasi microsoft office profesional plus 2010 encountered an error during setup di windows 7, cara mengatasi problem event name: bex, cara mengatasi SMART exe - no Disk pada pc, cara mengatasi serverx exe muncul pada windows xp, Cara mengatasi Serverx exe - No Disk, cara mengatasi scvhost exe, cara mengatasi restrictions, cara mengatasi restriction di windows 7, cara mengatasi komputer eroor dengan pesan autorun not configure, Cara mengatasi problem BEX pada windows7, cara membuang internet explorer 8 beta dari windows xp, Cara mengatasi pesan iexplore no disk pada window seven, cara mengatasi pc hilang short cut, cara mengatasi notebook keluar pesan SMARTP exe-no disk, cara mengatasi muncul windows no disk, Cara mengatasi msalah dekstop stop working, cara mengatasi microsoft office professional plus 2007 encountered an error during setup, cara mengatasi executable has stopped working windows 7, cara mengatasi windows vprotection application, cara menghilangkan smartp, cara menghilangkan SMART exe - No Disk, cara menghilangkan serverx no, cara menghilangkan serverx exe, cara menghilangkan protec copy pada win 7, cara menghilangkan pesan windows file protection, cara menghilangkan pesan windows disc protection, cara menghilangkan pesan there was a problem pada komputer, cara menghilangkan pesan there is no disk in the drive pada laptop, cara menghilangkan pesan there is no disk in the drive, cara menghilangkan pesan serverx exe-no disk di destop

If you're new here, you may want to subscribe to my RSS feed. You may copy or publish this article to your blog or other site as long you give credit link back to this site article. Thanks for visiting my blog!