autorun.inf

Simple Way To Protect Your Removable Device From Autorun Virus

If your computers has been infected by virus it’s usually will generate autorun.inf file on your removable device. In most case this file will created with attributes hidden and read-only. Removable device with high possibilities to infected and spreading the virus are flashdisks and memory cards. Sometimes when you’re using removable device on infected computers you will spread it to another computers without know what you’re doing. In this very short tips & trick article I would like to give an simple and easy tips & trick to protect your removable device got infected and spreading the virus. Follow this… Read More »Simple Way To Protect Your Removable Device From Autorun Virus

Remove MaHaDeWa VBS.Autorun.AM

Look… Another lame virus maker… this virus not dangerous at all but it surelly can make you a little anger when your computers slow down and some configuration changed. Mahadewa virus has been created using visual basic scripting (not visual basic) it can simple deactivated by easily rename/deleted wscript.exe in your system32 folders.

This lame virus maker really noob hehehe.. he’s created a BIG size virus, LOL! usually virus has small size to help them spreaded fast but this one really crazy he have a BIG size that make me laugh really hard today.

mahadewa-1

Wait! I think I know this virus creator here’s him!

fat-blogger

Hahaha… I just joking don’t take it seriously people…

How to know your computer infected by mahadewa virus:

1. Your internet explorer header changed.

mahadewa-2

2. Your internet explorer start page changed to “https://webkom”

3. Your computer name and organization changed.

Read More »Remove MaHaDeWa VBS.Autorun.AM

RELATED SEARCH TERMS:

Microsoft.lnk Shortcut Virus? Worm:PIF/Starter.A

Hello everyone sorry for late update this blog, I have been really very busy analyze forex market and grown my another business, busy IRL also… 😀

Now my story…….

Last week my cousins tell me in his office he got strange virus. He said there is lot shortcut in desktop an computers running slow. How actually some newbie out there know exactly which one real programs/folders and which one shortcut? Don’t say you’re not noob! almost many people not take to much attention on this simple different, that’s why with simple social technique virus maker can win beating yourself! 😛

LOOOOOOOOOOOOKKKKKKKK!!!!!!

shortcut

To know when your computer infected by this virus there is 4 important point:

  1. In your “My Documents” folder there is file named “database.mdb“.
  2. There is clone folder with extension .lnk maximum 5 first folder arranged by name, rules until second sub folders.
  3. There is files Autorun.inf, Thumb.db, Microsoft.lnk in each root drive and folders, rules until second sub folders. (You might not see them because it’s set hidden)
  4. Your Registry Editor is disabled.

This virus master actually in “My Document” folder named “database.mdb” Wait… you will know why this is called as virus master. Actually virus will created clone for folder using “wscript.exe” execution. wscript.exe is microsoft windows based script host programs.

Read More »Microsoft.lnk Shortcut Virus? Worm:PIF/Starter.A

RELATED SEARCH TERMS: