DeadLock

yesterday i got news from facebook vaksin.com, they publication new article about new virus and also they called Deadlock A.K.A Tibs.DKKR. I suggestion you must really be care full with this virus cause you can lost all data and also your windows can be damaged with message "NTLDR is missing".

message from this virus..
Bebaskan Negeri kami Indonesia dari Terorisme, Anarkis, dan KKN (Kolusi, Korupsi & Nepotisme) pada Kubu Pemerintahan Republik Indonesia (Sipil, TNI & Polisi) serta Tangkap, Berantas dan Penjarakan – Tanpa Kecuali. Bersihkan Negeri kami dari Portitusi, Perjudian dan Kejahatan Sosial. Merdekakan diri kami dari Kemiskinan, Kesengsaraan dan Ketidakadilan! Bersama Partai Demokrat – SBY & BOEDIONO, Bersama Membangun Indonesia Adil, Makmur & Sejahtera

Atas Nama Bangsa Indonesia

Pangeran DEADLOCK

I’m Everyone, but NoOne
I’m Everything, but NoThing
I’m Everywhere, but NoWhere

if this virus active so will created 2 file and running when computer is on
  • C:\Windows\system32\apache.exe
  • C:\Windows\system32\mysql.exe
this virus really clever deceive user, user will not suspicious when computer got infected with this virus, because this virus not "Disable Task Manager","MSConfig","Regedit" and "Folder Option" like mostly virus.

DeadLock spreading using flash disk media,
in flash disk DeadLock using file
  • "Desktop.ini"
  • "Folder.htt"
  • "flashguard.exe"
and abuse autorun windows

Maybe now you must deactivated you windows autorun
in Run menu type gpedit.msc, in treeview select "Computer Configuration"->"Administrative Template"->"System" and goto value in right side and look in "Turn Off Autoplay" and double click. Choose "Enable" and in combo "Turn Off Autoplay On" select "All Drives"

and more important don't forget always update your antivirus definition

if you need more information go there

Comments