Remove Worm VBS/Cryf.A, Shemale by CRY
VBS/Cryf.A was created using visual basic scripting (not visual basic), first case happen on my cyber cafe on date 18 July 2009 it spreading from user flash disk and try to infected all PC in my network.
I’m not sure why so much Indonesian virus maker using lot of this VBS technique (maybe they know without msvbvm.dll VBS can executed on a lot target), Since I write about VBS article long long time ago (I forget maybe around year 2003-2005) in jasakom website with title “VBS sederhana yang berbahaya” many people has try to manipulate that simple code to become advanced code. Now I’m fell really stupid by share that Article to public…
How to know if you’re infected by this worm VBS/Cryf.A:
1.First time your computer turned on it will open web browser and show this pictures.
2. VBS/Cryf.A will change your web browser start page become:
3. There is folder “album bokep” (in Indonesian language this mean p**n) in all folder.
4. VBS/Cryf.A will change your system properties become like this:
5. Change file type .lnk become “movie clip”
6. It will control your DVD/CD-rom by make it open and close to make you panic.
Read More »Remove Worm VBS/Cryf.A, Shemale by CRY
RELATED SEARCH TERMS:
- how to remove thumbs db files in cmd
- how to remove thumbs db files in cmd
- menghapus VBS Encrypted A
- dhemale sem virus
- regedit in cmd
- معÙ†ى شÙŠميل
- noghtyamerica
- mengatasi svchost exe no disk please insert disk
- cara mengatasi not enough memory to run word
- penanganan worm
- hapus vbs encrypted a
- menghapus VBS Encrypted A
- dhemale sem virus
- regedit in cmd
- معÙ†ى شÙŠميل
- noghtyamerica
- mengatasi svchost exe no disk please insert disk
- cara mengatasi not enough memory to run word
- penanganan worm
- hapus vbs encrypted a