My Opinion

Paid to kill

By brokencode ⋅ March 22, 2007 ⋅  Email This Post ⋅  Print This Post ⋅ Post a comment

Yes I just paid by someone to kill :D I’m a virus assasin. The virus has made me mad. View days ago I found this kinda sax virus, but I was give up :( Don’t know how or what to do next, and also I didn’t have much time. Few hours ago my friend asked me to visit his office to see that there was something wrong to his computer. Yes, it’s you again saxer ! I think it is the latest variant of ‘fenomenal’ local virus, spread itself by infected moveable disk.

It disable user to logon windows. When user click his account to logon, it logoff itself, and you’ll never ever can logon to windows.

Starting by exploring files in hard disk using miniXP (fabulous program!) to search something strange inside. Begun at system folder and root folder. I found something strange, an executable file placed in a hidden folder c:\recycled called svchost.exe. It was not its proper place. Deleted the file and restarted, logon succesfully but it was still trying to call the main file. It must be called by a string in registry, and I search for it placed in Winnt folder named shell string to call c:\recycled\svchost.exe.

Cleaning complete and sterillized !

Tags: Private