WheeQo.web.id

Well this happen yesterday in my campus, I forget what the virus’ name is, but this virus caused the folders to be “super hidden” and show folder icons that contain virus (application type). It seems I got successfully delete the virus after install NIS 2009 then repair the registry and clean the remaining virus file (see my old post).
But after the virus is gone, I can’t run file with extension .exe, .com, .reg, or maybe other extensions.

How To Fix

After googling I found this web.

• I download the exefix_xp.com file.
• After that boot to Safe Mode with Command Prompt,
• run the file and it worked!

Update: About the exefix_xp.com file here is the result about the file scanned in www.virustotal.com: scan result
File exefix_xp.com received on 11.23.2008 00:03:57 (CET)
Current status: finished
Result: 3/37 (8.11%)

The Virus Crime

There are a lot of virus nowadays, resulting various infection to the computer. Recently I got my friend’s computer got infected by virus. Even she has installed antivirus, but the virus still can penetrate the antivirus defense after activated since she plugged the infected flash disk into the computer. And the virus create these problems:

1. Disable Task Manager, Regedit, Folder Options, Run, Find, Msconfig, cmd, install
2. Create .exe file from .doc, .txt, and .jpg files and “super hidden” source files
3. Disable .exe files so that I can’t run/install any program
4. The virus also active in Safe Mode

Counter Attack

To counter attack the virus, I prepare the weapons to fight it: BartPE CD, HijackThis, good Anti Virus with the latest update, .inf file with code. Read more…