This time-bomb virus will deleted all your data in your hard-disk and flash-disk including system files for each file founded on date 12-13 around 8-9 AM each month. If you got this message in your computer then you have infected by this Deadlock Virus.
This virus has strange master files, I don’t know why this virus creator choose apache.exe (popular web server) and mysql.exe (popular database) if users familiar with computer process they will found out this master files easily. Deadlock has been compressed by petite 2.x. with size 80KB, using application icon.
Spreading Technique:
No autorun.inf, Deadlock using desktop.ini then folder.htt to execute flashguard.exe, so… if you’re infected by this virus each folder will contains this 3 files.
- Desktop.ini
- Folder.htt
- Flashguard.exe
Virus Affect:
This virus will deleted all files, not only data or document, virus will removing them all. If this happen to you I really don’t have smart solution for this… You can try using recovery programs, badly this programs not free. Maybe you can try to searching for free recovery programs, Anyway in my experience not all recovery programs working 100% sometimes you can’t get back lost files in 100% if you lost it in long time ago (ex: 1 year ago).
Virus also will deleted system files and make your computers fails to start, consult with your OS vendor how to fix this (In windows XP there is repair tools from CD but don’t know other) if there is no repair tools you have no choice to reinstall your OS then recover back your lost files.
HOW TO:Remove DeadLock Virus Manually:
1. Disable System Restore when in cleaning process.
2. Kill active virus in computer background, use process explorer kill process with name “apache.exe” and “mysql.exe“.
3. To prevent virus active back when you’re in cleaning process I suggest you to register this files into “software restriction police“.
Start -> Run -> Type “SECPOL.MSC” then following this images after that apply to make sure this new rules working.
NOTE: If you’re not using Windows XP Professional,2003 server,vista,2008 you can skip this step.
4. Repair your registry using repair.inf right click on files then click install.
[Version]
Signature=”$Chicago$”
Provider=Nobody
[DefaultInstall]
AddReg=UnhookRegKey
DelReg=del
[UnhookRegKey]
HKLM, Software\CLASSES\batfile\shell\open\command,,,”””%1″” %*”
HKLM, Software\CLASSES\comfile\shell\open\command,,,”””%1″” %*”
HKLM, Software\CLASSES\exefile\shell\open\command,,,”””%1″” %*”
HKLM, Software\CLASSES\piffile\shell\open\command,,,”””%1″” %*”
HKLM, Software\CLASSES\regfile\shell\open\command,,,”regedit.exe “%1″”
HKLM, Software\CLASSES\scrfile\shell\open\command,,,”””%1″” %*”
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell,0, “Explorer.exe”
HKLM, SYSTEM\ControlSet001\Control\SafeBoot, AlternateShell,0, “cmd.exe”
HKLM, SYSTEM\ControlSet002\Control\SafeBoot, AlternateShell,0, “cmd.exe”
HKLM, SYSTEM\CurrentControlSet\Control\SafeBoot, AlternateShell,0, “cmd.exe”
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, NoDriveTypeAutoRun,0x000000ff,255
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer, NoDriveTypeAutoRun,0x000000ff,255
[del]
HKCU, Software\Microsoft\Windows\CurrentVersion\Run, apache
HKLM, Software\Microsoft\Windows\CurrentVersion\Run, mysql
5. Delete Master files on:
- %SYSTEMROOT%/system32/apache.exe
- %SYSTEMROOT%/system32/mysql.exe
6. Scan with updated antivirus programs to make sure your computer clean, you can use Norman mallware cleaner for free, download it from here.
DONE, if you meet problem let’s discuss it in here 😀
Similar Posts:
- HOW TO: Remove Facebook Virus W32/Obfuscated.D2!genr
- Remove W32/VBWorm.QXE (bulubebek)
- Remove virus AMBURADUL (all varian)
- Remove MaHaDeWa VBS.Autorun.AM
RELATED SEARCH TERMS:
- smartp exe no disk
- smartp exe no disk
- cara menghilangkan smartp exe no disk
- cara menghilangkan smartp exe no disk
- windows no disk virus
- windows no disk virus
- cara menghilangkan svchost exe
- cara menghilangkan svchost exe
- cara menghilangkan virus shortcut
- solusi eror smart exe-no disk
- cara menghilangkan virus shortcut
- cara menghilangkan smartp exe
- cara menghilangkan smartp exe
- solusi eror smart exe-no disk
- perbaiki flashdisk virus shortcut
- menghilangkan window protektion in 2 cd
- IEXPLORE EXE NO DISK
- IEXPLORE EXE NO DISK
- perbaiki flashdisk virus shortcut
- smartp exe - no disk
- menghilangkan window protektion in 2 cd
- smartp exe - no disk
- cara kill virus shortcut
- smartp exe-no disk
- Cara mengatasi masalah aplication has encountered a problem and needs to close pada xp
- svchost exe no disk pada windows 7
- menghapus virus desktop ini
- mengatasi masalah windows cannot open this program because it has been prevented by a restriction policy open even
- menghilangkan smartp exe no disk
- penghilang virus shortcut
- donwload sofwer mengatasi mengatasi firus syorcut
- cara hilangkan tanda internet explorer has stopped working
- penghilang virus shortcut
- bulu bebek shortcut 2kb
- svchost exe no disk pada windows 7
- cara menghilangkan virus desktop ini
- cara memperbaiki external installer has stopped working
- cara menghilangkan pesan internet explorer has been stopped working di regedit
- bulu bebek shortcut 2kb
- mengatasi virus cmd-exe
- cara kill virus shortcut
- cara hilangkan tanda internet explorer has stopped working
- cara delete virus svhost exe
- serverx exe - no disk
- cara menghilangkan virus desktop ini
- Cara mengatasi masalah aplication has encountered a problem and needs to close pada xp
- mengatasi virus cmd-exe
- cara menghilangkan brone exe
- donwload sofwer mengatasi mengatasi firus syorcut
- cara menghilangkan brone exe
- serverx exe - no disk
- cara menghilangkan pesan internet explorer has been stopped working di regedit
- cara delete virus svhost exe
- mengatasi masalah windows cannot open this program because it has been prevented by a restriction policy open even
- cara memperbaiki external installer has stopped working
- cara menghilangkan iexplore exe-no disk
- menghapus virus desktop ini
- cara menghilangkan iexplore exe-no disk
- menghilangkan smartp exe no disk
- smartp exe-no disk
- download removal deadlock
- betulin flashdisk shortcut run
- mengatasi data hilang di mmc
- serverx exe no disk solutions
- penyebab windows file protection
- hilangkan virus shortcut
- virus recycle exe windows 7 cara basmi
- cara mengatasi komputer muncul peringatan svchost exe
- TRIK MENGATASI FILE EXE YG DISERANG VIRUS DI WINDOWS 7
- cara nanganin svchost exe no disk
- serverx exe - no disk solution
- cara membuka lock taskbar
- cara membuang virus untuk window XP version 5 1 2600
- how trt remove short cuts on a flash disk
- cara cepat memperbaiki virus shortcut windows xp
- windows no disk basmi
- menghilangkan tanda f autorun inf di flashdisk
- hapuskan virus shortcut
- cara mengatasi virus windows-no disk
- cara smartp exe - no disk
- cara mengatasi logon exe di dekstop
- cara membuang virus recycler
- cara set ms dari cmd
- menghilangkan virus internet shortcurt
- kenapa billing explorer has encountered a problem
- cara mengatasi scvhost exe
- cara menghilangkan windows batch di local disk d
- cara mengatasi cmd exe di windows 7
- cara atasi smart exe no disk yang muncul terus
- nak hilangkan virus yang reject cd
- cara menghilangkan iexplore exe - no disk
- penyebab smart exe no disk pada windows 7
- perbaiki winlogon exe encountered a problem
- winlogon exe encountered a problem and needed to closed
- billing explorer has encountered error and need to close
- buang jqs exe
- skrip menghilangkan desktop ini
- cara iemonitor exe - no disk
- menghilangkan virus desktop ini di windows 7
- cara mengatasi SMARTP exe
It is a pleasure to sit at work. Escape from this boring work. Relax, and read the information written here:).
I Got shortcut virus….damn…i try to remove them as u teach…i hope.i give u know later…when i finished.thx alot
waaaah bos , saya ikutin cara boss dngan merubah MKLM kaya yg d contohin bos di atas kok , pc sya jadi aneh !!
smua shortcut nya ga bsa dibuka ! knpa tu yah ??
tolongin doooong…. please solusunya ???
smua shortcut klo d klik , kluarnya kya gini “open with” msuk register jga sma kluarnya “open with” jaga
tolong dong…
don’t copy from articles it’s contains wrong quote… copy from here http://www.istanto.net/wp-content/uploads/2009/08/repair.inf
Simply wish to say your article is as amazing. The clearness in your publish is simply cool and that i could assume you
are a professional on this subject. Well with your permission
let me to seize your feed to keep updated with imminent
post. Thank you 1,000,000 and please carry on the rewarding
work.
I am regular visitor, how are you everybody?
This piece of writing posted at this site
is genuinely fastidious.
Hello There. I discovered your blog the use of msn. That is a very well written article.
I’ll be sure to bookmark it and come back to learn more of your useful info.
Thanks for the post. I’ll certainly return.
Everyone loves what you guys tend to be up too.
Such clever work and coverage! Keep up the excellent
works guys I’ve you guys to my own blogroll.
Pingback: Google
Pingback: Google