Saturday, February 28, 2009

Tips for Overcoming Golden Ghost Virus

End - the end of this internet world by the emergence of local dikejutkan latest virus variants, the golden ghost.

For you are infected with this virus should be careful - careful as it will change the default Internet browser page to explore your site www.pl * YB * y.com (censor so safe:))

When this virus is grown locally with very rapidly. The virus not only local now only create duplicate files, menginfeksi data (ms office) and hide the file. But it is also menginfeksi executable file (exe). And distribution not only through flash, but is capable menginfeksi via email, can even chat through the media such as IRC and so on.

Golden Ghost virus created by using Visual Basic and compressed using UPX. This virus has the size of 1312 mb and using Windows media player icon to trick users.

There this feature - if you characterize the virus infected golden ghost:

1. show error message "16 bit MS-DOS subsystem" when the computer switched on and also appears every few minutes.

2. Change the name of the owner to "GoldenGhost"

3. Change the owner of the organization to "GoldenGost.Inc"

4. When booting the windows menu to appear "GoldenGhost Was Here"

5. Internet explorer home page changes to www.pl * YB * y.com

6. When the menu appears podići GoldenGhost was here and if selected the computer will restart.

7. Each time a user copy and paste the contents of text file, then the text will change to desahan "oohhh ... aughhhh ... yessss .. babbby ...!"

8. The virus will attempt to delete all files berekxtensi *. mov, *. wmv, *. 3gp, *. avi, *. mpg, *. mpeg in the flash disk.

The spread of the virus is classified as advanced as it is able to spread through IRC chat and media are trying to join to a number of channels such as Jakarta, Medan, malang, Bandung, Yogyakarta, Solo, Semarang with first connect to a server as follows:
punch.va.us.dal.net, rumble.fl.us.dal.net, mozilla.se.eu.dal.net, swiftco.wa.us.dal.net, haarlem.nl.eu.undernet.org, plasa.id.allnetwork.org.

once connected, will send the Golden Ghost pesan2 among others:
nick, free indonesian picture s * x, duble click url
nick, there's new info neh, marshanda, Agnes monica, Dian sastro, C i the interest rate b * gil, liat for the photos, double click url
indonesian artist nude, double click url
nick, indo artist magazine pl * YB * y, double click the URL
nick, like the artist magazine liat pl * y * YB indo, indonesian nick fr * rn * ep, double click url
ce indo nation, double click

so if you chat and find pesan2 is, it is not Rejeki, but disaster:)

but how to overcome if it is currently terlanjur "Rejeki" through the chat?

in fact update norman virus control can be overcome. even have a file that can improve the virus by diinjeksi golden ghost.
To get it, you can download here:

Download antivirus norman
Download Removal tool


Other related articles :


- Prevent the virus from active autorun.inf with USB Firewall


- Beware, virus attacks' Hopeless' in First Year


- 10 Tips for Securing Computer When Vacation


- Tips for Reducing Risks are Computer Virus


- 7 Step to eradicate virus' K0pL4xZ '


- 4 Step Virus Prevention Conficker



source : various sources

0 comments: