Tech Pinoy Support » Spyware and Viruses http://techpinoysupport.com Online Help and Support for Techie Pinoys Tue, 28 Dec 2010 07:26:54 +0000 http://wordpress.org/?v=2.9.2 en hourly 1 Cory Aquino’s Death Used to Spread Another FAKEAV – by Trendmicro http://techpinoysupport.com/cory-aquino%e2%80%99s-death-used-to-spread-another-fakeav-by-trendmicro http://techpinoysupport.com/cory-aquino%e2%80%99s-death-used-to-spread-another-fakeav-by-trendmicro#comments Wed, 05 Aug 2009 07:55:19 +0000 Dens http://techpinoysupport.com/?p=92 Cory Aquino’s Death Used to Spread Another FAKEAV Read more: http://blog.trendmicro.com/cory-aquino%e2%80%99s-death-used-to-spread-another-fakeav/#ixzz0NIE9r9I0Cory Aquino’s Death Used to Spread Another FAKEAV, more info to this post please visit  http://blog.trendmicro.com/?p=18632

Share and Enjoy:
  • Digg
  • Sphinn
  • del.icio.us
  • Facebook
  • Mixx
  • Google Bookmarks
  • MisterWong
  • MySpace
  • NewsVine
  • Reddit
  • RSS
  • Technorati
  • Tipd
  • Twitter
]]> http://techpinoysupport.com/cory-aquino%e2%80%99s-death-used-to-spread-another-fakeav-by-trendmicro/feed 0 How to remove Madforelmo malware http://techpinoysupport.com/how-to-remove-madforelmo-malware http://techpinoysupport.com/how-to-remove-madforelmo-malware#comments Sun, 31 May 2009 17:14:58 +0000 Dens http://techpinoysupport.com/?p=25 “Madforelmo!”, you can view this at windows taskbar when you are infected with samok.vbs malware. This is a variant of sowar.vbs where your task manager and folder options where disabled plus no more run command and registry editing is disabled.

You will be annoyed when this malware changed your “Open” command in the right click menu to “b-b2g” and “Explore” command to “Owned” when you right click a drive or folder.

Registry Entries:

  • The newly created Registry Values are:
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shell\explore]
    • (Default) = “Owned!”
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shell\open]
    • (Default) = “b-b2g”
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    • autoMe = “wscript.exe “%Windir%\samok.vbs”"


    • You can find the technical specifications of the virus here

How to Remove the malware manually:

1.  Google and download the tools to enable the taskmanager (Download Here) and  regedit (Download here) and Download combofix 2.  Restart the computer in Safe Mode (press F8 before the Windows Startup Screen and Select Safe Mode)

3.  Select the Administrator Account

4. Copy the tools that enable taskmanager and regedit to Desktop and double click to run

5. Copy combofix to desktop and double-click it to  run  program  (follow the combofix instruction)

6. After the combofix had remove malware in your PC, kindly click to Tools>Folder Options

*If Folder Options is not found, run regedit in the RUN command or at the command prompt, changed the values of this keys from 1 to 0

  • [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
    • NoFolderOptions = 0
    • NoRun = 0

7. Click View Tab>Click Show Hidden Files and Folders

8. Browse to C:\Windows\

9. Find the file samok.vbs and Delete the file

10. Run Regedit to Cleanup the Registry (to run Regedit click RUN Type Regedit or in the command prompt type Regedit

Change these Keys to return to defaul AM and PM

  • [HKEY_CURRENT_USER\Control Panel\International]
    • s1159 = “b-b2g” changed to “am”
    • s2359 = “madforelmo” changed to “pm”

Please search this registry entries:

  • [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shell\explore]
    • (Default) = “Owned!” -> Removed the value
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shell\open]
    • (Default) = “b-b2g” -> Removed the value
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    • autoMe = “wscript.exe “%Windir%\samok.vbs”" -> Removed the entry

Restart Your Computer.

Share and Enjoy:
  • Digg
  • Sphinn
  • del.icio.us
  • Facebook
  • Mixx
  • Google Bookmarks
  • MisterWong
  • MySpace
  • NewsVine
  • Reddit
  • RSS
  • Technorati
  • Tipd
  • Twitter
]]> http://techpinoysupport.com/how-to-remove-madforelmo-malware/feed 43 Tune-up your PC http://techpinoysupport.com/tune-up-your-pc http://techpinoysupport.com/tune-up-your-pc#comments Wed, 20 May 2009 02:11:45 +0000 Dennis http://idewmesh.com/tech_blog/?p=13 I went home last night ready to ride the wave of the internet but I still have very slow internet connection from Bayantel DSL (ISP in the Philippines). I have 768 kbps subscription and still experiencing having a 128 kbps internet connection. I’m fun of downloading torrents to get some files from the net. I keep sending text to Bayantel Help Desk, you can text them . After a few hours I have 512 kbps by testing my internet speed at www.speedtest.net. I’m not satisfied because with the speed, so I installed another internet speed boosting software. I wasn’t good enough because my PC went nuts and it’s back to slow moving machine. :( I keep searching the internet and found this product Tune-up Utilities 2009. I installed it and good enough their lots of warnings I get. I realized that I had vulnerabilities that was not detected by my Russian forces (sounds cold war huh..), it is my Kaspersky Internet Security. The security issue was I was hacked with so many opened packets, (sounds technical..), with few minutes of tweaking and running wizards. My DESKTOP PC had risen, the internet is back to its lightning speed (hahhaha…). I can’t believe in my own eyes, the speed of my PC is back (it’s almost 3 months suffering this dilemma). So a quick review of Tune-up utilities features are:

  • Increase PC Performance

Are the programs on your PC running sluggish?
Click here to see how you can increase PC performance without expensive hardware!

  • Solve Problems Quickly and Simply

Do your programs crash regularly? Have you lost data?
Click here to find out how you can get rid of these problems!

  • Customize Your Windows PC

Want your PC to reflect your personality?
Click here to find out how you can customize Windows With TuneUp Utilities!

  • Clean Up Your Windows PC!

Want to extend the life of your Windows PC without having to perform tiresome maintenance?
Click here to find out how TuneUp Utilities can help you simplify these basic tasks.

  • Easy Optimization Whenever You Start Your Windows PC!

Click here to get a system overview and recommendations for maintenance every time you log onto your Windows PC.

  • Useful Additional Tools

Comfortable tinkering with your Windows PC and want to know how you can optimize it on your own?
Click here to find out how you can repair and maintain your system on your own!

Share and Enjoy:
  • Digg
  • Sphinn
  • del.icio.us
  • Facebook
  • Mixx
  • Google Bookmarks
  • MisterWong
  • MySpace
  • NewsVine
  • Reddit
  • RSS
  • Technorati
  • Tipd
  • Twitter
]]> http://techpinoysupport.com/tune-up-your-pc/feed 0