June 2009

Remove Sandra Dewi Bugil Virus W32/Sadra.A

Sandra Dewi Bugil….? This is not p**n! this is an computer virus! 😛 but surely this is a noob virus creator *again*

sandra_dewi

Virus characteristic:

  • Virus size 132kb
  • Virus file type “application”
  • Virus extension .exe
  • Using images icon

Sandra Dewi Bugil Virus has been created using visual basic, If virus success on infected your system he will created some files:

  • \Sandra Dewi Bugil.exe (In all root drive)
  • \Documents and Settings\%user%\Start Menu\Programs\Startup\Sandra Dewi Bugil.exe
  • \WINDOWS\Sandra Dewi Bugil.exe
  • \WINDOWS\system32\ Sandra Dewi Bugil.exe
  • Creating duplicate virus on all folder in removable drive/usb.

This virus will show message when your computer active, the easiest way to know is you’re system infected by this virus.

sandradewibugil-virus-1

This virus will blocking some windows function to make him hard to removed.

  • Disable Folder Options
  • Disable Registry Editor
  • Disable Search/Find
  • Disable Command Prompt
  • Disable Task Manager
  • Disable Control Panel
  • Disable Msconfig/System Configuration Utility
  • Disable Right Click on Desktop
  • Disable “All Programs” on Start Menu
  • Disable Log Off/Turn Off

Read More »Remove Sandra Dewi Bugil Virus W32/Sadra.A

Remove MaHaDeWa VBS.Autorun.AM

Look… Another lame virus maker… this virus not dangerous at all but it surelly can make you a little anger when your computers slow down and some configuration changed. Mahadewa virus has been created using visual basic scripting (not visual basic) it can simple deactivated by easily rename/deleted wscript.exe in your system32 folders.

This lame virus maker really noob hehehe.. he’s created a BIG size virus, LOL! usually virus has small size to help them spreaded fast but this one really crazy he have a BIG size that make me laugh really hard today.

mahadewa-1

Wait! I think I know this virus creator here’s him!

fat-blogger

Hahaha… I just joking don’t take it seriously people…

How to know your computer infected by mahadewa virus:

1. Your internet explorer header changed.

mahadewa-2

2. Your internet explorer start page changed to “http://webkom”

3. Your computer name and organization changed.

Read More »Remove MaHaDeWa VBS.Autorun.AM