Welcome Guest ( Log In | Register )

Outline · [ Standard ] · Linear+

Virus/Malware JambanMu.com and Flash.10.exe, need help in removing this malware

views
     
cipherz6
post Nov 16 2007, 09:32 AM

Getting Started
**
Junior Member
104 posts

Joined: May 2007
From: Shah Alam, Selangor


QUOTE(duncan880409 @ Oct 4 2007, 10:49 PM)
ya, wat i can know, brontok n jamban is from info, thier purpose i really dunno, if somebody can share tis?>
*
Brontok (the name) came from a certain Indonesia's dialect. Translated into Bahasa Melayu, it means, Berontak @ Memberontak;

In English; Rebel, Rebellious (I guess)


"Brontok Virus came from Indonesia. It arrives as an attachment of e-mail named kangen.exe. When Brontok is first run, it copies itself to the user's application data directory. It then sets itself to start up with Windows, by creating a registry entry in the HKLM\Software\Microsoft\Windows\CurrentVersion\Run registry key. It disables the Windows Registry Editor and modifies Windows Explorer settings. It removes the option of "Folder Options" in the Tools menu so that the hidden files, where it is concealed, are not easily accessible to the user. It also turns off Windows firewall. In some variants, when a window is found containing certain strings in the window title, the computer reboots. Using its own mailing engine, it sends itself to email addresses it finds on the computer, even faking the own user's email address as the sender. The computer also restarts when trying to open MS Dos in Windows and Downloading Files from the Internet. It also pop ups an Internet browser which is located in the my pictures folder."


Hidden Message in Indonesian (and some broken English). When translated, this reads:

"[By: H [REMOVED] Community] -- stop the collapse in this country --
1. Try the Hoodlums, the Smugglers, the Bribers, the gamblers, & drugs
Port (Send to "Nusakambangan") --
2.Stop Free Sex, Abortion, & Prostitution
3.Stop (sea and river pollution), forest burning, & wild hunting.
4.SAY NO TO DRUGS!!! - THE END IS NEAR -

Inspired by: (Spizaetus Cirrhatus) that is almost extinct [By: H [REMOVED] unity --"


From Wikipedia Check it for more info



Before this Brontok, now jamban, Indonesian now days really maju lah
laugh.gif

This post has been edited by cipherz6: Nov 16 2007, 09:41 AM
cipherz6
post Nov 16 2007, 10:38 AM

Getting Started
**
Junior Member
104 posts

Joined: May 2007
From: Shah Alam, Selangor


QUOTE(hafiez @ Nov 16 2007, 10:35 AM)
the purpose is simple i guess. to make other people suffer because of certain important program being disable. and they (who the sick developer) think that they're really brilliant because a lot of people suffer because of them. well, famous because of the virus. have you all heard surat utk edelin virus? the joke program.
*
surat utk edelin virus? care to story a lil bit.. wanna know smile.gif


 

Change to:
| Lo-Fi Version
0.0166sec    0.32    6 queries    GZIP Disabled
Time is now: 8th December 2025 - 12:40 AM