Beware of Virus "Deadlock",

Be a positive message with the words that inspire patriotism। However, do not be tempted sweet words that brought a new local computer virus called Deadlock. See the message below. Free our country from Terrorism Indonesia, anarchist, and collusion, corruption & nepotism in the Government of the Republic of Indonesia (Civil, military & police) and the catch, fight and given the punishment? Without exception. Clean us from Portitusi Affairs, Social Gambling and Crime. free ourselves from poverty, misery and injustice! Democratic Party together? SBY & Boediono, Indonesia Joint Building Fair, & Makmur Sejahtera Top Names of Indonesia Prince DEADLOCK I? M Everyone, No one but I? M Everything, but nothing I? M Everywhere, but nowhere If your computer suddenly displays a picture with the message (see image 1), you are advised to immediately take action. Section, your computer has a virus attack on and off. The virus will display the message in the desktop has been taken over. Usually this message appears only in the time specified. Along with the emergence of this message, then all the files in all drives will be deleted, including the program and the Windows file system. So if you see this message on your computer, it is likely already too late because the more data on your computer will be destroyed. Apparently in this virus bisunya save computer time bomb in the victim that will be activated in accordance with the specified time. Peak, on 12 and 13 later, Deadlock will make your computer truly deadlock alias destroyed all the data, good data on the entire hard drive, flash, and files so that Windows displays the message "NTLDR is Missing". Identify the characteristics The virus is still in the family into a Visual Basic program using compressed with Petite 2.x with size around 80 KB. The icons used are not clearly shown, to use the icons and possible applications derived from one of the cities in Kalimantan (Samarinda). If the virus is active on the computer, it will create some files that will run on the computer when switched on. - C:-Windows-system32-apache.exe - C:-Windows-system32-mysql.exe Elections name apache mysql and possibilities aimed disguise himself as a popular programs and Apache Mysql. So that the file can be activated automatically when the computer switched on, it will make some string in the registry below: -HKEY_LOCAL_MACHINE-SOFTWARE-Microsoft-Windows-CurrentVersion-Run -mysql = C:-Windows-system32-mysql.exe -HKEY_CURRENT_USER-SOFTWARE-Microsoft-Windows-CurrentVersion-Run -apache = C:-Windows-system32-apache.exe This virus is quite canny in trick users. Users will not be suspicious if the computer has actually been infected because there are no signs that the virus normally done by other local, like to disable Task Manager / msconfig / regedit or Folder Options, in addition to the file that is created is also suspicious because it is not as though the program Apache and Mysql. New users aware that the computer has been infected with the virus at the time of late, the usual message that will appear from the creator of the virus, which was then followed by the emergence of the message "Windows File Protection error." This indicates that there is a program that seeks to remove the Windows file system. This virus will be activated automatically every time a user access a drive / flash disk using the Windows autorun with fruit to make 3 files, namely: - [Desktop.ini] which contains the script to run the file [folder.htt] - [Folder.htt], contains a script file to run the main [flashguard.exe] - [Flashguard.exe] is a master file that will run on. Flash media is one of the most widely used by the user. This will be used by some even may be spelled out all the virus to spread itself. This is also done by the virus akan Deadlock with how to create some of the following files. -Desktop.ini -Folder.htt -Flashguard.exe Time bomb Virus Deadlock like time bomb that will destroy the target computer at the time that has been determined. This virus will run each aksinya around 12-13 at 08.00-09.00 each month with the delete all files / DATA FILE INCLUDING WINDOWS SYSTEM is in the drive, including all the flash media using the command cmd.exe / c del / f / s / q / a and cmd.exe / c rd / s / q so that, if the computer is restarted, it will appear the message "error". So, how best to address them, do not forget to make back-up data. To prevent virus infection, you are advised to use anti-virus program can detect this virus with both. According Vaksincom Lab tests, this virus is detected by Norman as Deadlock has not been detected by existing antivirus majority in both antiviral and local anti-foreign. Norman Endpoint Protection detects virus Deadlock as Tibs.DKKR. If you want your data to be victims of this Deadlock again, never re-install the OS to your hard drive that contains your data is lost. Perform data recovery process by using the important application data recovery, and the correct method. If you reinstall the OS to your hard drive that contains the data you want to save, it is possible the success of recovery will be very low.