PCMAV 2.2b Update Build3 (Gambar)

PCMAV 2.2b Update Build3 been present with the addition of 7 new virus variant identification. For those users PCMAV 2.2b, it is strongly recommended to update immediately, so that your PCMAV can recognize and eradicate the virus even more.

Gambar. One of the troubling things that computer users are infected with the virus when the data files manipulated by the virus, whether it be deleted, in-hidden, or in-encrypt. Similarly, this virus does, is about 84 KB, the virus is made with Delphi programming language. Fortunately, this virus only change the attributes of the files with the extensions *. doc, *. xls, *. jpg, *. mp3, and *. 3gp become super hidden. Then the virus will copy filename duplicate themselves files that have changed attributes earlier. The virus is also mengcopykan himself with the name gambar.exe to some predefined folders. Like most other viruses, this virus has a specific message as a sign of its existence. Virus BACA_DULU_DONG !!!!!!!!!. create BAT file, which contains the following message:

" MAAF YA MAU PINJAM KOMPUTERNYA UNTUK ISTIRAHAT SEBENTAR AJA, BOLEHKAN ?????
JANGAN KHAWATIR KOMPUTER NYA NGAK DIAPA - APAIN DECH
SOAL NYA AQ BARU DATANG DARI TEMPAT YANG JAUH…… MAKLUMLAH MUSAFIR
Oh.. Ya… JADI LUPA NICH KENALKAN NAMAKU ” G3X.B ”
SALAM KENAL BUAT SIAPA SAJA YANG SEDANG AKTIF DI KOMPUTER INI
ADUH JADI NGEREPOTIN NICH, AQ MAU ISTRAHAT DULU YA, DA..AA.AAA
GOOD LUCK FOR YOU ! "

List of virus addition to 2.2b Update PCMAV Build3:
Autoit.ER
Busur.C
CintaKampus
Gambar
Gambar.bat.A
Gambar.bat.B
JunJun
JunJun.bmp
JunJun.inf
JunJun.ini
Kelor
Kemben_Melorot
Meme.E
Mshearts.inf
Mshearts.htm
Mshearts.vbs
Pangeran_Cinta.inf
Pangeran_Cinta.txt
Pangeran_Cinta.vbs
Serviks
Serviks.inf
Serviks.vbs

Download PCMAV 2.2b Update Build3 (Gambar)

Read full story

PCMAV 2.2b Update Build2 (CintaKampus)

PCMAV 2.2b Update Build2 been present with the addition of 8 new virus variant identification. For those users PCMAV 2.2b, it is strongly recommended to update immediately, so that your PCMAV can recognize and eradicate the virus even more.

CintaKampus. Bustling campus activities allows the virus is spreading quickly, and when it spreads, the virus does not care whether you are friend or foe of the maker. Virus CintaKampus theme is carried on campus, created by using Visual Basic and measuring less than 196 KB. This virus contains the timer that detects certain hours, which makes the display screen to be reversed, or execute the Notepad program contains a virus message as follows:

" kok kampus jadi gak ada kegiatan ??
ada apa…?, apa gak butuh perobahan dikampus!
We Love Our Campus!
buat kamoe2 yang ngebaca pesan ini,gimana??
kami harap begitu pula…
jangan biarkan kampus vakum dari kegiatan..
Mari ciptakan kreativitas untuk kemajuan kampus "

List of virus addition to 2.2b Update PCMAV Build2:
Autoit.ER
Busur.C
CintaKampus
JunJun
JunJun.bmp
JunJun.inf
JunJun.ini
Kelor
Kemben_Melorot
Meme.E
Pangeran_Cinta.inf
Pangeran_Cinta.txt
Pangeran_Cinta.vbs
Serviks
Serviks.vbs

Download PCMAV 2.2b Update Build2 (CintaKampus)

Read full story

PCMAV 2.2b + Update Build1 Release

PC Magazine Media 01/2010 has the latest edition published. As always, accompanied by antiviral pride Indonesia, PCMAV which now has reached the release 2.2b. Currently, PCMAV is the only one capable of recognizing antivirus 3096 virus and its variants are reported more widespread in Indonesia.

WHAT'S NEW?
a. UPDATED! Added database identifier and cleaning viruses 20 local / foreign / new variants spread in Indonesia reported. Total 3096 virus and its variants.
b. Improved! Change some names to follow new variant viruses found.

Jun: 2.2b Update PCMAV Build1
Update Build1 comes with the addition of 8 new virus variant identification. For those users PCMAV 2.2b is recommended to update immediately, so that your PCMAV can recognize and eradicate the virus even more.

June The virus is made by using the Microsoft compiler C + +, infected computers will have an information system (My Computer - Properties) to display the logo of this virus, which is taken from oemlogo.bmp and oeminfo.ini files stored in the folder Windows \ System32. Apparently not a local virus.

List of virus addition to 2.2b Update PCMAV Build1:
Autoit.ER
Jun
Jun.bmp
Jun.inf
Jun.ini
Kelor
Kelor.reg
Meme.E

Download PCMAV 2.2b Release

Download PCMAV 2.2b Update Build1

Download PCMAV 2.2b Valkyrie Update Build1 + Clamav (678.670+8 virus)

Read full story

PCMAV 2.2a Update Build4(Kelor)

Update Build4 comes with the addition of 6 new virus variant identification. For those of you 2.2a PCMAV users are strongly encouraged to update immediately, so that you PCMAV can recognize and eradicate the virus even more.

Kelor. Created with Visual Basic, this virus is about 88Kb, the parent file using Excel icon. Message to continue to study this virus appear in an Excel worksheet:

DAFTAR MOTTO ANAK STMIK XXXXXXX

- Belajar dan Pokoknya Belajar
- Lagi-Lagi Belajar
- Tak Ada Kata Untuk Tidak Belajar
- Kapan Sih Kita Berhenti Belajar???
- Belajar Untuk Maju, Maju Untuk Bisa Berada di Depan
- Kalau Berada Di Deretan Terdepan, Pasti Akan Mudah Dilihat Orang
- Kalau Anda Dilihat Orang, Pasti Orang Itu Akan Mencari Tahu Siapa Anda dan Apa Yang Bisa Anda Perbuat

by. Pemangsa Kelor……..(2006.02.0xx)

Also features, the virus also changes the text on the Windows Start button with the nickname maker (Predators Kelor) and the name of a STMIK.

List of virus addition to 2.2a Update PCMAV Build4:
Abzenz
Actualizador
Angelo.D
Angelo.E
Busur.B
Fajr
Hailua
Indaboxa
Jun
Jun.bmp
Jun.inf
Jun.ini
Jview
Kelor
Kelor.reg
Komputeik
Pla
Purwokerto-Raong
Skripsi-Ani
Spiderman5
Wmplayerc.A
Wmplayerc.B
WmplayerC.host
Xnd1.vbs
Xnd1.vbs.inf
Xnd1.vbs.html
Download PCMAV 2.2a Update Build4(Kelor)

Read full story

PCMAV 2.2a Update Build3 (Wmplayerc)

Build3 Update 3 comes with the addition of a new virus variant identification. For those of you 2.2a PCMAV users are strongly encouraged to update immediately, so that you PCMAV can recognize and eradicate the virus even more.

Wmplayerc. This virus is about 66Kb (Wmplayerc.A variant), or 262Kb (Wmplayerc.B variant). Typical example create a shortcut to the folders found on the root drive, while the original folders are hidden himself. In the folder Program Files \ Windows Media Player, will create the file "wmplayerc.exe" which is a file virus.Virus also create folders with names in it too RÊCYCLÊR which contains a virus file named ". Com". PCMAV Update 2.2a Use Build3 to detect the presence of this virus. To membasminya, use PCMAV 2.2b is included on the PC Magazine Media 01/2010 edition that will soon be published.

List of virus addition to 2.2a Update PCMAV Build3:
Abzenz
Actualizador
Angelo.D
Angelo.E
Busur.B
Fajr
Hailua
Indaboxa
Jview
Komputeik
Pla
Purwokerto-Raong
Skripsi-Ani
Spiderman5
Wmplayerc.A
Wmplayerc.B
Wmplayer.host
Xnd1.vbs
Xnd1.vbs.inf
Xnd1.vbs.html

Download PCMAV 2.2a Update Build3 (Wmplayerc)

Read full story

PCMAV 2.2a Update Build2 (Xnd1)

Update Build2 comes with the addition of 7 new virus variant identification. For those of you 2.2a PCMAV users are strongly encouraged to update immediately, so that you PCMAV can recognize and eradicate the virus even more.

Xnd1. General enough message of love made by a virus, one of which is a virus Xnd1 made with this VBScript, is about 10KB. This virus creates a file in the root Defau1t.HTML drive that contains the virus message, but that he also created some virus files with the extension *. vbs.

List of virus addition to 2.2a Update PCMAV Build2:
Abzenz
Actualizador
Angelo.D
Angelo.E
Busur.B
Fajr
Hailua
Indaboxa
Jview
Komputeik
Pla
Purwokerto-Raong
Skripsi-Ani
Spiderman5
Xnd1.vbs
Xnd1.vbs.inf
Xnd1.vbs.html

Download PCMAV 2.2a Update Build2 (Xnd1)

Read full story

PCMAV 2.2a Update Build1 (Indaboxa)

Update Build1 comes with the addition of 10 new virus variant identification. For those of you 2.2a PCMAV users are strongly encouraged to update immediately, so that you PCMAV can recognize and eradicate the virus even more.

Indaboxa. The virus is made using Visual Basic to the size of about 40KB.File-created files on the root drive, among others called "leakage UAN and UAS.exe", "Counter Strike.exe", and other file names that could be inviting the user to run it if unawares. If you view the properties file his Comment on the Version and Company will be listed: INDABOXA.

One characteristic of this virus is to change the registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\ CurrentVersion\Policies\ LegalNoticeText with the message: "ERROR NOT ON YOUR COMPUTER BUT ON YOURSELF". The message will appear when users press CTRL + ALT + DEL to enter into the Windows Log On, or when do want to Log Off and login with another user account.

List of virus addition to 2.2a Update PCMAV Build1:
Abzenz
Angelo
Busur.B
Fajr
Hailua
Indaboxa
Jview
Purwokerto-Raong
Skripsi-Ani
Spiderman5

Download PCMAV 2.2a Update Build1 (Indaboxa)

Read full story

PCMAV 2.2 Release

Together with the publication of the magazine edition 11/2009 PCMedia, PCMAV again present. With labels PCMAV 2.2 PCMAV 3.0251 have been able to detect many viruses that circulated in Indonesia. One is fun, in this version of PCMAV "get along" with Avira that I use on the computer. PCMAV version 2.2 is free of viruses and also Induc free from false alarms Avira. (what about the other anti-virus you use, please fill out the comment below)

But when I try to run the first time I was not PCMAV 2.2 can not walk straight and only stopped when checking the updates via the Internet. For the record my computer is connected to the Internet. Finally I when I turn off its Internet new PCMAV can walk.

PCMAV new in 2.2:

1. UPDATED! Added to the database 71 identifying and cleaning local virus / foreign / new variants spread in Indonesia reported. Total 3025 virus and its variants, including variants Conficker sophisticated viruses that circulated in Indonesia, many well-known in this 2.2 version.
2. Improved! Added a special identifier that can identify the virus are much Induc reported around the world.
3. BUG FIXED! Error detection (false alarms) heuristic on some programs and scripts.
4. Improved! Change some names to follow new variant viruses found.
5. Improved! Fixes some minor bugs and improvisation internal code to ensure that the remains can be PCMAV antivirus Indonesian pride.

DOWNLOAD PCMAV 2.2

Read full story

PCMAV 2.1a Update Build4 (Rinarudy)

Update Build4 comes with the addition of 10 new virus variant identification. For those users PCMAV 2.1A highly recommended to update immediately, so that you PCMAV can recognize and eradicate the virus even more.

Rinarudy. The virus is made using Visual Basic to the size of about 56KB. Will create a virus file in each root drive that he met with Rina_Rudy_Luph_You_Banged.exe name. And create a new folder with the name "Jatimcrew Under Cover" by the contents of the file the same virus. Also create a new folder with the name "LuphRina" with the contents of a file with the name LuphRina.exe. The virus is similar to using Microsoft Word icon to fool the user, so do not get fooled with it. At a certain time, he also displays a black background with red writing that will cover your screen.

List of virus addition to 2.1A PCMAV Update Build4:
Ageia.vbs
Aibo.B
Apong-Valeria.B
Astuty.B
Autoit.EL
Autoit.EL.exe
Autoit.EL.inf
Charis.vbs
Charis.vbs.inf
Darkbot
Foldres.C
GameVB.C
Gdmae.vbs
Geografi
Getrawen.C
Ketik
Kupret
Malingsi.H
Malingsi.H.exe
Malingsi.I
Minerva.C
MoneyMy.C
Nhatquanglan.D
Phim
Phim.inf
Riand.C
Rinarudy
Ronkor.B
Ronkor.txt.B
Shinchan
Shinchan.htt
Shinchan.inf
Shinchan.ini
SmsCinta.vbs.B
Thumbs.vbs.B
Tigdua
Tugas.C
Unindra
Zayus
Zayus.txt

Download PCMAV 2.1a Update Build4 (Rinarudy)

Read full story

PCMAV 2.1a Update Build3 (Riand.C)

Update Build3 comes with the addition of 10 new virus variant identification. For those users PCMAV 2.1A highly recommended to update immediately, so that you PCMAV can recognize and eradicate the virus even more.

Riand.C. Viruses are created using Visual Basic is disguised with a folder-like icon. As show time at 21:00, he will display a message saying "Hey we meet again?" With the Ok button. When the button is clicked, the virus will display the image some men - men with the words "Coming through YEach woi !!!!".

List of virus addition to 2.1A PCMAV Update Build3:
Ageia.vbs
Astuty.B
Charis.vbs
Charis.vbs.inf
Darkbot
Foldres.C
GameVB.C
Gdmae.vbs
Geografi
Getrawen.C
Ketik
Kupret
Malingsi.H
Malingsi.H.exe
Malingsi.I
MoneyMy.C
Nhatquanglan.D
Phim
Phim.inf
Riand.C
Ronkor.B
Ronkor.txt.B
Shinchan
Shinchan.htt
Shinchan.inf
Shinchan.ini
SmsCinta.vbs.B
Thumbs.vbs.B
Tugas.C
Unindra

Download PCMAV 2.1a Update Build3 (Riand.C)

Read full story

PCMAV 2.1a Update Build2 (Charis.vbs)

Update Build2 comes with the addition of 10 new virus variant identification. For those users PCMAV 2.1A highly recommended to update immediately, so that you PCMAV can recognize and eradicate the virus even more.

Charis.vbs. Local virus was created using VBScript with the size of about 6KB. On the drive will have infected autorun.inf file and ch4r15.sys.vbs. The default page of Internet Explorer will be converted into http://ch4r15_15 @ yahoo.co.id, and captionnya be ":: ch4r15::". At the beginning of the script viruses also the phrase "YOU LUCKY OPENING THIS SCRIPT, HAPPY NEW WINDOWS MENEMPUH (ch4r15_15@yahoo.co.id)".

List of virus addition to 2.1A PCMAV Update Build2:
Ageia.vbs
Astuty.B
Charis.vbs
Charis.vbs.inf
Darkbot
Foldres.C
GameVB.C
Gdmae.vbs
Geografi
Kupret
Malingsi.H
Malingsi.H.exe
Malingsi.I
Nhatquanglan.D
Phim
Phim.inf
Ronkor.B
Ronkor.txt.B
SmsCinta.vbs.B
Thumbs.vbs.B

Download PCMAV 2.1a Update Build2 (Charis.vbs)

Read full story

PCMAV 2.1a Update Build1 (Malingsi.H)

Update Build1 comes with the addition of 10 new virus variant identification. For those users PCMAV 2.1A highly recommended to update immediately, so that you PCMAV can recognize and eradicate the virus even more.

Malingsi.H. Back in the new variant of this virus. Characterized by almost no change, use the icon like Microsoft Word. This variant has a size of about 727KB, and on-pack use PE Compact. This virus acts as a bot by using mIRC. Therefore to support the action he will create some support files in the \ Program Files \ mIRC \ IRC Bot. To be active every entry of Windows, these viruses planted on StartUp folder with Adobe Gamma Loader.com name, the name was briefly used by applications like Adobe's who also is usually in the StartUp folder. Obviously, he did this to deceive users. So, pay careful attention to the file name, the original files are usually Adobe with extension. Exe, not. Com.

List of virus addition to 2.1A PCMAV Update Build1:
Darkbot
Kupret
Malingsi.H
Malingsi.H.exe
Malingsi.I
Nhatquanglan.D
Phim
Phim.inf
Ronkor.B
Ronkor.txt.B

Download PCMAV 2.1a Update Build1 (Malingsi.H)

Read full story

PCMAV 2.1a Fixed + Express for Induc

If any of you who use PCMAV 2.1x series along with other antivirus in a PC, and get a warning that the file contains code PCMAV Induc viruses, does not need to worry.

The virus is active ONLY be installed on the computer version of the Delphi compiler is 4-7 on the computer are common among developers / programmers Delphi. In other words, the computer virus generally can not be active. Of virus programmer / developer or a software house that use this Delphi was not lethal as was heralded by some sites.


The virus is made only to infect every application created using Delphi. The way it works is to find out whether the computer is version Delphi 4-7 applications. If there is, he then sought the files for Delphi innate SysConst.pas injected "code" is still really in the form of source code. Then, SysConst.pas files compiled to produce SysConst.dcu files. While the original files in SysConst.dcu-rename the virus becomes SysConst.bak. Files that have been contaminated with the virus can be found in the directory \ Program Files \ Borland \ DelphiX \ Lib, where X shows Delphi version.

What happens if the virus is active?
Of course, every application created using Delphi code will be boarded by this virus. For example when a programmer uses SysUtils unit in the program. But, it is important for you to know that this virus can only spread themselves on your computer if there are 4-7 versions of Delphi, and he's not doing damage, like deleting files or other things. Thus, any programmer that makes software using Delphi that contains the virus code, the software will be detected as a virus by the antivirus, as a result the software in-block and can not be used. And no doubt, has many applications made with Delphi, even though popular, had boarded it. One of including third-party components (third party) from a professional developer PCMAV used by generations of 2.1x.

So how do I clean the computer from this virus?
For now, the action can be done on the infected file is deleted a file compilation of Delphi. Then, do the rebuild again for all applications created with Delphi are infected. But before doing rebuild or recompile, you need to improve SysConst.dcu files that have been infected. Way, simply delete SysConst.dcu file, then copy files SysConst.bak be SysConst.dcu. And let SysConst.bak file, so that your computer is not infected anymore. All these files can be found in the Delphi program directory, default in "\ Program Files \ Borland \ DelphiX \ Lib", where X shows the version of Delphi. The easiest way, do the scan using PCMAV Express for Induc to overcome this virus completely. And lastly, please contact the software manufacturer and let them know that the software had been boarded by Induc virus code.

Once again, no need to worry too much. As long as you're not a programmer / developer using Delphi and Delphi compiler versions on your computer 4-7, then certainly this virus will never be active.

Download PCMAV 2.1 Fixed:





Download PCMAV Express for Induc:

Read full story

PCMAV 2.1 Update Build3 (Viettel)

Update Build3 comes with the addition of 10 new virus variant identification. For you PCMAV 2.1 users are strongly advised to update immediately, so that your PCMAV can recognize and eradicate the virus even more.

Viettel. This virus will drain a victim's computer resources so that was very slow. He uses a folder-like icon in the spread. It was alleged that he came from Vietnam. He will create a master file in the Windows directory with the name of the userinit.exe and System32 with the name system.exe. At the infected computer will have a file with a name in the directory kdcoms.dll Windows.

List of virus addition to PCMAV 2.1 Update Build3:
Aibo
Alva
Autoit.EH
Autoit-Hubbun
Autoit-Hubbun.txt
Bassok
Boas
Busur
Buxto.D
Chelsea
Chelsea.inf
Cortex.B
Fold
GhostyNet.D
HellSpawn
HellSpawn.html
Ilusi.vbs.B
Ilusi.vbs.txt.B
Kepret
Knight.B
Manna
Merlin.bat
Merlin.bat.inf
MoneyMy.B
Peerfrag
Riand.B
Spiderman.B
Viettel.A
Viettel.B
Viettel.C

Download PCMAV 2.1 Update Build3 (Viettel)

Read full story

PCMAV 2.1 Fixed + Express for Induc

If any of you who use PCMAV 2.1x series along with other antivirus in a PC, and get a warning that the file contains code PCMAV Induc viruses, does not need to worry.

The virus is active ONLY be installed on the computer version of the Delphi compiler is 4-7 on the computer are common among developers / programmers Delphi. In other words, the computer virus generally can not be active. Of virus programmer / developer or a software house that use this Delphi was not lethal as was heralded by some sites.

The virus is made only to infect every application created using Delphi. The way it works is to find out whether the computer is version Delphi 4-7 applications. If there is, he then sought the files for Delphi innate SysConst.pas injected "code" is still really in the form of source code. Then, SysConst.pas files compiled to produce SysConst.dcu files. While the original files in SysConst.dcu-rename the virus becomes SysConst.bak. Files that have been contaminated with the virus can be found in the directory \ Program Files \ Borland \ DelphiX \ Lib, where X shows Delphi version.

What happens if the virus is active?
Of course, every application created using Delphi code will be boarded by this virus. For example when a programmer uses SysUtils unit in the program. But, it is important for you to know that this virus can only spread themselves on your computer if there are 4-7 versions of Delphi, and he's not doing damage, like deleting files or other things. Thus, any programmer that makes software using Delphi that contains the virus code, the software will be detected as a virus by the antivirus, as a result the software in-block and can not be used. And no doubt, has many applications made with Delphi, even though popular, had boarded it. One of including third-party components (third party) from a professional developer PCMAV used by generations of 2.1x.

So how do I clean the computer from this virus?
For now, the action can be done on the infected file is deleted a file compilation of Delphi. Then, do the rebuild again for all applications created with Delphi are infected. But before doing rebuild or recompile, you need to improve SysConst.dcu files that have been infected. Way, simply delete SysConst.dcu file, then copy files SysConst.bak be SysConst.dcu. And let SysConst.bak file, so that your computer is not infected anymore. All these files can be found in the Delphi program directory, default in "\ Program Files \ Borland \ DelphiX \ Lib", where X shows the version of Delphi. The easiest way, do the scan using PCMAV Express for Induc to overcome this virus completely. And lastly, please contact the software manufacturer and let them know that the software had been boarded by Induc virus code.

Once again, no need to worry too much. As long as you're not a programmer / developer using Delphi and Delphi compiler versions on your computer 4-7, then certainly this virus will never be active.

Download PCMAV 2.1 Fixed




Download PCMAV Express for Induc:

Read full story

PCMAV 2.1 Update Build2 (HellSpawn)

Update Build2 comes with the addition of 10 new virus variant identification. For you PCMAV 2.1 users are strongly advised to update immediately, so that your PCMAV can recognize and eradicate the virus even more.

HellSpawn. Bericon virus was created with the folder in C + +. The file name following the name of the parent process / services of Windows such as service.exe, winlogon.exe, lsass.exe and smss.exe. There are also other names that allegedly random. In the body there is a database application that is forbidden to run. If the application is included in the blacklist list is run, it will be directly in-kill.

List of virus addition to PCMAV 2.1 Update Build2:
Alva
Autoit.EH
Autoit-Hubbun
Autoit-Hubbun.txt
Bassok
Boas
Busur
Buxto.D
Chelsea
Chelsea.inf
Cortex.B
GhostyNet.D
HellSpawn
HellSpawn.html
Ilusi.vbs.B
Ilusi.vbs.txt.B
Kepret
Knight.B
Manna
Spiderman.B

Download PCMAV 2.1 Update Build2 (HellSpawn)

Read full story

PCMAV 2.1 Update Build1 (GhostyNet.D)

Update Build1 comes with the addition of 10 new virus variant identification. For you PCMAV 2.1 users are strongly advised to update immediately, so that your PCMAV can recognize and eradicate the virus even more.

GhostyNet.D. The virus is believed this is not a local product at the time carried a message will appear false or "fake error" that reads "memory access violation at 0 × 000000EF base address 0 × 000000F0." As if the program crashes when the virus has been residing in memory. He created two new items in the registry Run with the name avpupdt and ctfmon. Master file of this virus resides in the directory C: \ WINDOWS \ system32 \ 1920622684. At the root drive is the operating system, there will be a file named index.html which is the virus message.

List of virus addition to PCMAV 2.1 Update Build1:
Alva
Boas
Chelsea
Chelsea.inf
GhostyNet.D
HellSpawn
HellSpawn.html
Ilusi.vbs.B
Ilusi.vbs.txt.B
Spiderman.B

Download PCMAV 2.1 Update Build1 (GhostyNet.D)

Read full story

PCMAV 2.1 Release

PC Magazine Media 09/2009 has the latest edition published, along with it has been officially released are the pride of Indonesia Antivirus, PCMAV 2.1. In this release, PCMAV can recognize the 2883 virus and its variants are reported more widespread in Indonesia, including virus-nan Conficker AutoIt sophisticated and has many variants.

In the edition, readers will also be presented article Autoit.EE virus that is the latest variant of AutoIt virus that can spread through the help of Yahoo! Messenger, and even now has support GTalk. This new variant also has a function "debug mode" is very interesting for you to know.

Not to forget, also included a special engine that can handle polymorphic viruses Sality type consisting of 4 variants (Sality-302/304/309/400). This virus can infect executable files, and also can act as a trojan.
WHAT'S NEW?
a. UPDATED! Added to the database 70 identifying and cleaning local virus / foreign / new variants spread in Indonesia reported. Total 2883 virus and its variants, including variants of the virus and Sality Conficker nan-polymorphic complex and sophisticated that many circulating in Indonesia has been known in this version 2.1.

b. NEW! Special engine to handle completely to the root - roots of 4 variants of polymorphic viruses Sality (302/304/309/400) are able to infect files. EXE and. SCR, and able to reside in memory as a trojan.

c. Improved! Added a special cleanser that can handle the virus Autoit.EE a lot of spread in Indonesia.

d. Improved! Heuristic engine to detect polymorphic variants of the virus nan-a lot of complex circulating in Indonesia.

e. BUG FIXED! Error detection (false alarms) heuristic on several programs and scripts.

f. Improved! Change a few names of new virus variants which follow found.

g. Improved! Fixes some minor bugs and improvisation internal code to ensure that the remains can be PCMAV antivirus the pride of Indonesia.

DOWNLOAD PCMAV 2.1

Read full story

PCMAV 2.0d Update Build4 (Diar)

Update Build4 present the user with the addition of 10 new virus variants. For you PCMAV 2.0d users are strongly advised to update immediately, so that you PCMAV can recognize and eradicate the virus more. Total virus / variant that can be recognized by PCMAV 2.0d are 40 viruses / variants.

Diar. The virus is made using Visual Basic. Comes with a file size of 124KB, with the icon that masquerade as a folder. In its action, the virus will try to kill this Folder Options, Run, Find, regedit, System Restore, even Safe-Mode. At the infected computer, in the root drive will be a new file with the name "diar_gb.html" and "nitip salam ya ... txt" which contains a message from the creator of the virus.

List of virus addition to PCMAV 2.0d Update Build4:
Arzon.B
Autorunme.F
Cuakep.A
Cuakep.A.bmp
Cuakep.A.inf
Cuakep.A.ini
Cuakep.B
Cuakep.B.bmp
Cuakep.B.inf
Cuakep.B.jpg
Cuakep.C
Cuakep.C.inf
Cuakep.D
Cuakep.D.inf
Cuakep.D.jpg
Cuakep.E
Cuakep.E.inf
Diar
Diar.html
Diar.txt
Gen.VBWG-Cute.E
Istig
Istig.inf
Kryptik
Kryptik.inf
Panik
Shellwdqu
Smansa
Smansa.html
Smansa.inf
SmsLucu.B
SmsLucu.B.inf
TheAnd
TheAnd.inf
TheAnd.txt
Tukang
Tukang.inf
Tukang.txt
Violinist
Violinist.inf

Download PCMAV 2.0d Update Build4

Read full story

PCMAV 2.0d Update Build3 (TheAnd)

Update Build3 present the user with the addition of 30 new virus variants. For you PCMAV 2.0d users are strongly advised to update immediately, so that you PCMAV can recognize and eradicate the virus more.
TheAnd. Virus size 57856 bytes is created using Visual Basic and in-pack use tElock. Icon virus is similar to the standard application icon. During infection, it will create some files. In each root of each drive will be found with the file name and do not forget TheAnd.exe file autorun.inf. In the Windows directory there are files with the name TheAndBaHaRi.ta13. System32 also found in many virus files, one with the name XD FromDeAn.ta13. He will turn off some Windows functions such as regedit, Run, Command Prompt. File message virus can also be found in the Windows directory with the name Opening.txt that contains the message "-TheAnd13.Opening-By: TheAnd13".

List of virus addition to PCMAV 2.0d Update Build3:
Arzon.B
Cuakep.A
Cuakep.A.bmp
Cuakep.A.inf
Cuakep.A.ini
Cuakep.B
Cuakep.B.bmp
Cuakep.B.inf
Cuakep.B.jpg
Cuakep.C
Cuakep.C.inf
Istig
Istig.inf
Kryptik
Kryptik.inf
Panik
Shellwdqu
Smansa
Smansa.html
Smansa.inf
SmsLucu.B
SmsLucu.B.inf
TheAnd
TheAnd.inf
TheAnd.txt
Tukang
Tukang.inf
Tukang.txt
Violinist
Violinist.inf

Download PCMAV 2.0d Update Build3

Read full story

PCMAV 2.0d Update Build2 (Cuakep)

Update Build2 present the user with the addition of 20 new virus variants. For you PCMAV 2.0d users are strongly advised to update immediately, so that you PCMAV can recognize and eradicate the virus more.

Cuakep. The virus that uses a similar image file icon. It was created using Visual Basic. This virus will try to block anti-virus program and some of the features such as Windows Folder Options and System Restore. It is very easy to identify whether the computer is infected with this virus does not, just to see the System Properties, if it looks like what you see in the picture above, most likely your computer has been infected.

List of virus addition to PCMAV 2.0d Update Build2:
Cuakep.A
Cuakep.A.bmp
Cuakep.A.inf
Cuakep.A.ini
Cuakep.B
Cuakep.B.bmp
Cuakep.B.inf
Cuakep.B.jpg
Cuakep.C
Cuakep.C.inf
Istig
Istig.inf
Kryptik
Kryptik.inf
Smansa
Smansa.html
Smansa.inf
Tukang
Tukang.inf
Tukang.txt

Download PCMAV 2.0d Update Build2

Read full story

PCMAV 2.0d Update Build1 (Smansa)

Update Build1 present the user with the addition of 10 new virus variants. For you PCMAV 2.0d users are strongly advised to update immediately, so that you PCMAV can recognize and eradicate the virus more.

SMANSA. Virus that is made with VB when seen on the Explorer with the Details view mode, it will appear as the application icon without the standard, but what if the views with Icons mode, it will appear as a folder. The virus is UPX using this pack, when the infection will create a file with the name Paket.exe and Autorun.inf in the root of each drive that he found. The file is hidden so that the given attributes are not visible with standard Explorer settings. In addition, the infected flash disk drive also will be found a message with the file name-kenangan.html reminded that contains a message from the creator of the virus.

List of virus addition to PCMAV 2.0d Update Build1:
Istig
Istig.inf
Kryptik
Kryptik.inf
Smansa
Smansa.html
Smansa.inf
Tukang
Tukang.txt
Tukang.inf

Download PCMAV 2.0d Update Build1

Read full story

PCMAV 2.0d Release

At the time this release, PCMAV 2.0d able to identify and overcome the virus in 2813, not including variants that are also able to detect, many reported that wide spread in Indonesia, including 3 main variants of the virus Conficker and Autoit, and local virus FullHouse, Yuyun.vbs, and PutriEor . vbs that many now claim.

WHAT NEW?
a. Updated! Added a database and virus cleaning 42 local foreign / new variants have been spread in Indonesia. Total 2813 virus and its variants, including variants of the virus Conficker sophisticated, which many in Indonesia have been circulating in the known versions This 2.0d.

b. Improved! Added a special cleanser that can handle virus PutriEor.vbs that make many changes to the configuration of Windows.

c. Improved! Engine variants heuristik to detect polymorphic viruses and nan-Metamorphic complex of many circulating in Indonesia

d. UPDATES! Optimization engine cleaner Yuyun.vbs handling of virus, to further ensure that the virus has been cleaned thoroughly to the "radical".

e. BuG fixed! Error detection (false alarm) heuristik in some programs and scripts.

f. Improved! Changes the name of some new virus variants to follow the found.

g. Improved! Some minor improvements and bug improvised internal code to ensure that the remains can be PCMAV antivirus India's pride.

DOWNLOAD PCMAV 2.0d

Read full story

PCMAV 2.0c Update Build4 (Autoit varian)

Update Build4 present the user with the addition of 10 new virus variants. For you PCMAV 2.0c users are strongly advised to update immediately, so that you PCMAV can recognize and eradicate the virus more.Total virus known to update Build4 this time is for 42 viruses / variants.

Autoit. Most variants of the virus-based import script using this as a folder-like icon. This virus has the ability to do the auto update to multiple sites. He can also take advantage of Yahoo! Messenger as media distribution intermediaries to send a message with a link to each contact person in the Y! M victims. So, be careful when getting the message of Vietnam in the Yahoo! Your Messenger.

List of virus addition to PCMAV 2.0c Update Build4:
Angelo-Ankrink.C
Autoit.DU
Autoit.DV
Autoit.DW
Autoit.DX
Autoit.DX.inf
Autoit.DY
Autoit.DZ
Autoit.EA
Autoit.EB
Autoit.EC
Autoit.ED
Bluedemons.vbs
Bluedemons.vbs.inf
CeylonSpyNet.D
CeylonSpyNet.E
Gen.VBWG-Cute.D
Getrawen.B
GhostyNet.C
Hitem
Hitem.inf
Ilusi.vbs
Ilusi.vbs.inf
Ilusi.vbs.txt
Juliet
Juliet.inf
Juliet.txt
Lucu.B
Malingsi.F
Mosquitos
Mrx.A
Mrx.B
Nelram
PutriEor.vbs.A
PutriEor.vbs.B
PutriEor.vbs.html.A
PutriEor.vbs.html.B
PutriEor.vbs.inf
PutriEor.vbs.txt
Soundvc
Soundvc.doc
Soundvc.lnk


Download PCMAV 2.0c Update Build4

Read full story

PCMAV 2.0c Update Build3 (Ilusi.vbs)

Update Build3 present the user with the addition of 10 new virus variants. For you PCMAV 2.0c users are strongly advised to update immediately, so that you PCMAV can recognize and eradicate the virus more.

Ilusi.vbs. Virus VBScript creates the file ajum_dnbs_uinsgd_unibi.dll.vbs, autorun.inf, and a message 622270253382.txt, at the root of each drive that he found. These files are given hidden attributes except the message file. In the Windows directory, there are also ajum_dnbs_uinsgd_unibi.dll.vbs file. The easiest ways to identify whether your computer has been infected by this virus or not is to see the System Properties, as the virus is changing into RegisteredOrganization "…….2007……." RegisteredOwner and to "the illusion PanszoreShell32-01."

List of virus addition to PCMAV 2.0c Update Build3:
Angelo-Ankrink.C
Autoit.DU
Autoit.DV
Autoit.DW
Autoit.DX
Autoit.DX.inf
Bluedemons.vbs
Bluedemons.vbs.inf
Getrawen.B
GhostyNet.C
Hitem
Hitem.inf
Ilusi.vbs
Ilusi.vbs.inf
Ilusi.vbs.txt
Juliet
Juliet.inf
Juliet.txt
Lucu.B
Mosquitos
Mrx.A
Mrx.B
Nelram
PutriEor.vbs.A
PutriEor.vbs.B
PutriEor.vbs.html.A
PutriEor.vbs.html.B
PutriEor.vbs.inf
PutriEor.vbs.txt
Soundvc
Soundvc.doc
Soundvc.lnk

Download PCMAV 2.0c Update Build3

Read full story

PCMAV 2.0c Update Build2 (Juliet)

Update Build2 present the user with the addition of 10 new virus variants. For you PCMAV 2.0c users are strongly advised to update immediately, so that you PCMAV can recognize and eradicate the virus more.

Juliet. Virus is a local place a message on the file "\ Documents and Settings \ All Users \ Start Menu \ Programs \ Startup \ Romeo & Juliet.txt". So, the message will appear automatically when Windows starts. This virus uses the folder icon to trick potential victims, is created using VB with the size of about 208KB. Task Manager and Command Prompt also disable by the virus to make havoc.

List of virus addition to PCMAV 2.0c Update Build2:
Angelo-Ankrink.C
Autoit.DU
GhostyNet.C
Hitem
Hitem.inf
Juliet
Juliet.inf
Juliet.txt
Lucu.B
Mosquitos
Mrx.A
Mrx.B
Nelram
PutriEor.vbs.A
PutriEor.vbs.B
PutriEor.vbs.html.A
PutriEor.vbs.html.B
PutriEor.vbs.inf
PutriEor.vbs.txt
Soundvc
Soundvc.doc
Soundvc.lnk

Download PCMAV 2.0c Update Build2

Read full story

PCMAV 2.0c Update Build1 (PutriEor.vbs)

Update Build1 present the user with the addition of 12 new virus variants. For you PCMAV 2.0c users are strongly advised to update immediately, so that you PCMAV can recognize and eradicate the virus more.

PutriEor.vbs. Virus that is one size around 55KB. It was created with VBScript. At the infected computer will have several files to support the virus, for example, on the root drive, I have a file autorun.inf, History_USB.vbs, Lirik2_lagu.vbe, New Text Document.txt, and Love Poetry bwt Putri.html. When the message appears virus (Love Poetry Putri.html bwt), will be accompanied by the music of Beethoven.

List of virus addition to PCMAV 2.0c Update Build1:
Hitem
Hitem.inf
Mosquitos
PutriEor.vbs.A
PutriEor.vbs.B
PutriEor.vbs.html.A
PutriEor.vbs.html.B
PutriEor.vbs.inf
PutriEor.vbs.txt
Soundvc
Soundvc.doc
Soundvc.lnk

Download PCMAV 2.0c Update Build1

Read full story

PCMAV 2.0c Release

At the same time, has released the latest version of PCMAV 2.0c. At the time this release, PCMAV able to identify and overcome the virus in 2771 along with the many reported the variant wide spread in Indonesia, including 3 main variants of the virus and the virus Conficker local Risa is now much suspire, you can find a complete discussion about this virus on the rubric virus in the edition.

Library ClamAV 0.95.1 the latest version has also can be integrated with the perfect, good for Cleaner and RTP. And repair some bugs, such as in the case of certain error Cleaner when RTP is active, and several other improvements and optimizations.

WHAT NEW?
a. Updated! Added a database and virus cleaning 51 local foreign / new variants have been spread in Indonesia. Total 2771 virus and its the variant, including virus variants Conficker a sophisticated, that many circulating in Indonesia is well known in this version 2.0c.

b. Updated! Cleaner and RTP supports the latest generation of engines ClamAV 0.95.

c. Updated! Added khsusus solvents that can handle virus Risa doing a lot of changes to the configuration of Windows.

d. BuG fixed! Cleaner sometimes can not be executed while in RTP is active. This problem is still there due to the process "gantung" in memory.

e. BuG fixed! RTP in Cleaner detects a particular condition (or vice versa) as "virus suspected".

f. BuG fixed! In some conditions and certain computer configurations, RTP sometimes does not want to run and the error message menampikan For first usage or upgrading to newer version..."

g. Improved! Now advanced heuristic engine can be optimized in detect polymorphic variants of the virus spread in many of Indonesia.

h. Improved! Unit Automatic Updates to be more optimized thread safe.

i. BuG fixed! Error detection (false alarm) heuristik in some programs and scripts.

j. Improved! PCMAV.LOG content of the report.

k. Updated! Contents README.TXT conditions.

l. Improved! Changes the name of some new virus variants to follow the found.

m. Improved! Some minor improvements and bug improvised internal code to ensure that PCMAV antivirus can still be proud Indonesia.

Download PCMAV 2.0c

Read full story