7 Steps For Eradicate OjanBlank Virus

Local virus OjanBlank quite disturbing and potentially dangerous. This virus infiltrate from an external device that connects via USB port, like USB flash or portable hard drive.

When infecting a computer, this virus will do various things. These include monitoring whether the victim komoputer connected to the internet, turn off Windows Firewall, and send the data from the victim's computer to the virus creator. Here are the steps as outlined by the analyst for delete antivirus from Vaksincom:

1. Disconnect the network connection / internet.

2. Turn off System Restore
* Right-click My Computer, select Properties.
* Select the System Restore tab, give the checklist option Turn off System restore
* Click Apply, click OK.

3. Turn off the virus (with Command Prompt).

* Click Menu [Start] à [All Programs] à [Accessories] à [Command Prompt]
• In Command Prompt, type the command "tasklist (this is to see the process of active virus that is" WinGUI.exe or junx.exe)
* Once the process determines the active virus, turn off the virus by running / type taskkill command as follows:
Taskill o / f / im WinGUI.exe, or
Taskill o / f / im junx.exe


4. Windows Registry Repair

Fix Windows Registry that has been in the modification of the virus with the following steps:
a. Copy the script below using notepad:

[Version]

Signature = "$ Chicago $"
Provider = Vaksincom Oyee
[DefaultInstall]
AddReg = UnhookRegKey
DelReg = del
[UnhookRegKey]
HKLM, Software \ CLASSES \ batfile \ shell \ open \ command ,,,"""% 1 ""% * "
HKLM, Software \ CLASSES \ comfile \ shell \ open \ command ,,,"""% 1 ""% * "
HKLM, Software \ CLASSES \ exefile \ shell \ open \ command ,,,"""% 1 ""% * "
HKLM, Software \ CLASSES \ piffile \ shell \ open \ command ,,,"""% 1 ""% * "
HKLM, Software \ CLASSES \ regfile \ shell \ open \ command,,, "regedit.exe"% 1 ""
HKLM, Software \ CLASSES \ scrfile \ shell \ open \ command ,,,"""% 1 ""% * "
HKLM, SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Winlogon, Shell, 0, "Explorer.exe"
HKLM, SYSTEM \ ControlSet001 \ Control \ SafeBoot, AlternateShell, 0, "cmd.exe"
HKLM, SYSTEM \ CurrentControlSet \ Control \ SafeBoot, AlternateShell, 0, "cmd.exe"
HKLM, SOFTWARE \ Classes \ exefile \ DefaultIcon ,,,""% a "%"
[Del]

HKLM, SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run, Microsoft Word Agents
HKLM, SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run, Microsoft Office Agents

b. Save the file with the name repair.inf. Use the Save As Type option to All Files to avoid mistakes.
c. Right-click the file repair.inf, then select Install
d. Restart the computer.

5. Remove the parent file and duplicate files created by virus OjanBLANK, where the file has the following characteristics:

* File Size 224 KB
* Extension exe
* Having a MS Word icon
* Type the application file.

6. Delete the trojan file and companion files virus, which is as follows:
* C: \ WINDOWS \ system32 \ MSWINSCK.OCX
* C: \ WINDOWS \ system32 \ ijl11.dll
* C: \ WINDOWS \ system32 \ ms.exe
* C: \ WINDOWS \ system32 \ b.doc

7. For optimal cleaning and prevent reinfection, which should use an updated antivirus and recognize this virus very well.

Read more »

Tips open the PDF files that infected with viruses

Quoted from newest Kaspersky laboratory with topic "Information Security Threats in the First Quarter of 2010", now Adobe products is the main target of hackers. This is because the ability of the prevalence and multi-platform Adobe products. Among the many types of viruses, spyware and malware threats are detected, the family is the most popular Exploit.Win32.Pdfka with the percentage of 42.97 percent. This malware takes advantage of the weak side of Adobe Reader and Adobe Acrobat.

When coupled, Exploit.Win32.Pidief and Exploit.Win32.Pdfka targeting Adobe products with a total of 47.5 percent or about half of all attacks are detected. Detected attacks spread through the PDF document that contains Javascript that without the knowledge or consent from users to download and bring the rest of the malware directly from the internet.

Among the ten vulnerabilities of the most common software detected on users' computers during the first three months of the year 2010, three vulnerabilities found in Adobe products, six are found in Microsoft products, and the one found in Sun product.

All three programs targeting the vulnerabilities that Adobe was found on 23.37 percent, 17.87 percent and 15.27 percent of all computers are checked. The first vulnerability and last critical vulnerability that allows hackers to take complete control over the system remotely.

In addition, Adobe products user are often unaware of the potential threat posed, for example when opening a PDF file from an unknown sender. This report highlights the fact that many users of Adobe products do not install the patch that is designed to remove the software vulnerability and thus remain vulnerable to attacks.

One of the vulnerabilities in Adobe's products became public knowledge since three years ago has had a patch that is available all the time. This shows that there are still many users who do not update their software. To overcome this problem, on 13 April ago, Adobe released an automatic update that runs in the background. Developers are expected to help reduce the number of unpatched applications that look so attractive to cyber criminals.

Read more »

Virus Life is Beautiful Just Gossip

The information that said for users email must be careful with virus "Life is Beautifulinternet search result, the "" just gossip. The message is just a lie news that made someone's to spread spam. From the Life is Beautiful" have been spread since 2002. The spread spam were found in many language from English, Portuguese, Spanish, French, German, and China.

"Please forget any message related about "Life is Beautiful" and do not forward again, George Koris said the maker Symantec's Norton in the company's Web site. The warning had been issued by Symantec since February 13th, 2007 ago or five years since the message "Life is Beautiful" to be hot news on the internet.

However, an email with "Life is Beautiful" is starting to spread again in many Asian countries like Japan, Korea, Singapore, Indonesia, Taiwan and others Asian countries. As claimed by Symantec manufacturers, if you find an email with the "Life is Beautiful", then ignore and do not be forwarded to your friends, because the message is just a gossip.

Read more »

How to restore the Folder Options That Hidden By Virus

When my computer is exposed to the virus some time yesterday, then Folder Options menu also eliminated the virus. When I successfully eradicate the virus, but Folder Options menu not display in Control Panel or Tools menu in Windows Explorer.

This makes me uncomfortable, so I had time to think about re-install my Windows. But before reinstall, I find the tips to make the Folder Options menu can be retrieved. And after searching on the internet, on how to retrieve the Folder Options menu, I tried and finally succeeded, then I am interested to share the tips here. Well let's get start.

Actually, to hide or display the Folder Options menu, we can do to make changes in Windows Registry. So, if you want to remove the Folder Options menu, you just add 1 value in Registry. The way this is done by viruses to hide the Folder Options menu. And to restore the Folder Options menu is hidden by the virus, I delete the value that created by the virus. And here are the steps to remove the value that created by a virus for display Folder Options menu.

1. Open Registry Editor with click Start > Run and type "regedit" (without the quotes) and press Enter.
2. In Registry window, open the key "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Policies\Explorer\".
3. On the right side of the window, find the value named "NoFolderOptions". This Value that causes the Folder Options menu not appearing in Windows Explorer and in Control Panel.
4. Change the value with 0 (zero) or delete this value.
5. Close the Registry Editor window and restart your computer.
   

Steps above are a way to restore the Folder Options menu is hidden by the virus. I hope, the tips on how to restore the Folder Options menu that hidden by this virus useful for us. If you have experiences or questions about how to restore the Folder Options menu that hidden by the virus, please send via the comment box.

Read more »

New Virus Password Thieves Facebook users

The Facebook spammers currently meets the internet with messages that have been contaminated with the virus. Estimated, the virus threatening about 400 million Facebook users all over in the world in targeting to steal bank passwords and collecting other sensitive information. Email tells the recipient that the Facebook acount password have been reset, and tell to click on "attachment" to obtain permission "new login", explained by McAfee Inc the anti-virus software maker

If the attachment is opened, then some kind of malicious software will be download automatic, including the steals passwords program, McAfee said this week.
The hacker has been targeting Facebook users, and send them messages contaminated by internal electronic mail system owned by the company's own social network. With the new attack, they use regular internet e-mail to spread malicious software.

Facebook representatives said that the company could not comment on specific cases, but stated improvement status submitted by the that company and warned Facebook users to delete the electronic mail and warn their friends.

McAfee warns that the hackers send tens of millions the spam to the whole of Europe, the United States and Asia since the action began last tuesday March 30th. Dave Marcus, McAfee's Director of Communications and Malware Research Affairs, said he expected the hackers will succeed to infect millions of computers.

"With Facebook as your allure, as many as 400 million people potentially click on the attachment. If only 10 percent successful, then 40 million people become virus victims," he said. Writing in an e-mail reads "Facebook password reset confirmation customer support", Marcus said.

Read more »

how to restore files or folders are hidden by the virus

My computer when infected by virus and that makes me more confused is the virus hides important files or folders. So, when I want to do a backup before reinstall, file or folder I found difficult. I try some antivirus programs like Avira personal, Kaspersky, AVG and more, I thing the virus has entered into memory, the virus can not be resolved and my files or folders that hidden by can not be found.

Apparently, I know the viruses that infect my computer is a local virus, so I use local antivirus. Thankfully, the virus could be exterminated, so I do not need to reinstall my computer. But strangely, the important files and folders still do not visible. After nearly half a day, find out about this incident, finally I met with an article about how to restore files or folders are hidden by the virus. This is because some viruses are giving hidden attributes and system in files or folders that infected.

After I knew the cause, and I was able to restore files or folders that hidden by the virus, so I share the tips. The trick is to manage the computer displays the files or folders hidden and system attributes its through the folder options. Here are tips to restore a file or folder that had been hidden by the virus, please refer to either:

1. Open you Windows Explorer
2. Click Tools menu and then Folder Options
3. In Folder Options window, uncheck the "Show hidden files and folder". The function this option for display hidden files or folders atribute.
4. Then, to display file system attributes, remove the check mark (grass) on the option "Hide protected operating system files (Recommende)."
5. Click OK to save the change and close Folder Options window
   

Now, check the your files or folders are hidden by virus. Has appeared in windows explorer? If you have, see that files or folders. The files or folders will be visible only faintly. Files and folders will not be shown if you copy it to another computer without doing the settings in folder options. To do this, you need a software. The software that you need is works to change the attributes of a file or folder. One of the software which I think is very good enough is Attribute Changer.

With using Attribute Changer software, you can change the files or folders attribute with one click. You simply right-click a file or folder, then select Change attribute. In the window Attribute Changer choose the appropriate attribute. So you can restore files and folders are hidden by viruses, then the set of attributes to normal and remove the check mark on the hidden and system option.

Read more »

Tips for open Registry Editor that locked by virus

After previous article how to restore files or folders are hidden by the virus, sometimes a virus that attacks the computer, often locking Registry Editor. Why should the Registry Editor are first key to open? As we know, most viruses will be locked important tools in the windows system, such as Task Manager, Folder options, the Control Panel, CMD and other tools. The viruses locked important tools in windows system for not easy to be erased. Meanwhile to restore the Task Manager, Folder options, Control Panel or CMD, we have to change settings in the registry editor. If the registry editor are locked, how can we solve this problem?

Seeing the above problems, then the first time we have to do is to re-activate registry editor which is locked by a virus. How can I do? I have a practical steps to open the registry editor that locked by a virus. I use VB Script or VBS. Maybe many peoples ask why I use a VB Script because there are have other ways such as using a Registration Entries (reg) or Command Prompt to open the Registry Editor. I once tried using Registration Entries (reg) and Command Prompt to open the Registry Editor but could not open the registry editor and when I use the reg file appears a message "Registry editing has disabled by your administartor".

But, when I use the VB Script that message does not appear and the Registry Editor that locked by a virus can I open. To create a VB Script, we can make it with Notepad, and here is the steps to create a VB Script with the Notepad to open the Registry Editor that locked by viruses.

• Open Notepad, you can type "Notepad" in Run menu (Without the quotes)
• In Notepad window, type the following command:
  

  dim b
  set b = createObject ("WScript.Shell")
  PolSys = "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\"
  rdw = "REG_DWORD"
  b.Regwrite PolSys & "DisableRegistryTools", "0", rdw

• And then Save with menu File> Save As
  
• In Save As window, select All Files in the Save As Type option and give the extension ". vbs" to name the file. For example give the file name "EnableRegedit.vbs". Click OK for save and close Notepad.
  

Now, you have a VB Script file for opening Registry Editor that locked by virus. You just double click for open VB Script file and for open Registry Editor type "regedit" in Run Menu. If the Registry Editor can't open, please correct the notepad command above. I hope tips for open Registry Editor that locked by viruses above usefull for us. If you have any questions about tips for open Registry Editor that locked by virus, please send in comment form.

Read more »

Free Download Avira Antivirus Personal v.10

The new version of Avira AntiVirus Personal has been completed released, its Avira AntiVirus Personal version 10. Now Avira AntiVirus Personal 10 can be downloaded for free. Avira AntiVirus is one antivirus that I use since 5 years ago. I like use Avira antivirus because Avira is very good to cleaning virus and this program is very simple and not need large memory. And here is features of Avira AntiVirus Personal version 10.

Avira Personal Antivirus v10 comes with some secure features for protect our computer or laptop from viruses, spyware, adware and other destructive computer programs. In addition, the Avira AntiVir Personal v.10 also equipped with several features such as Anti-Rootkits, Anti-Dialer, Anti-Phishing, Anti-Spyware, and has a quick removal feature with just clicking a button.

If you not ever to trying Avira Personal Antivirus, maybe in the last version from Avira is good choice for you. And the Avira Antivirus Personal v10 can be downloaded for free in all countries. For free download Avira Antivirus Personal v.10

Read more »