Sunday, August 23, 2009

PCMAV 2.1 Fixed + Express for Induc


If any of you who use PCMAV 2.1x series along with other antivirus in a PC, and get a warning that the file contains code PCMAV Induc viruses, does not need to worry.

The virus is active ONLY be installed on the computer version of the Delphi compiler is 4-7 on the computer are common among developers / programmers Delphi. In other words, the computer virus generally can not be active. Of virus programmer / developer or a software house that use this Delphi was not lethal as was heralded by some sites.

The virus is made only to infect every application created using Delphi. The way it works is to find out whether the computer is version Delphi 4-7 applications. If there is, he then sought the files for Delphi innate SysConst.pas injected "code" is still really in the form of source code. Then, SysConst.pas files compiled to produce SysConst.dcu files. While the original files in SysConst.dcu-rename the virus becomes SysConst.bak. Files that have been contaminated with the virus can be found in the directory \ Program Files \ Borland \ DelphiX \ Lib, where X shows Delphi version.

What happens if the virus is active?
Of course, every application created using Delphi code will be boarded by this virus. For example when a programmer uses SysUtils unit in the program. But, it is important for you to know that this virus can only spread themselves on your computer if there are 4-7 versions of Delphi, and he's not doing damage, like deleting files or other things. Thus, any programmer that makes software using Delphi that contains the virus code, the software will be detected as a virus by the antivirus, as a result the software in-block and can not be used. And no doubt, has many applications made with Delphi, even though popular, had boarded it. One of including third-party components (third party) from a professional developer PCMAV used by generations of 2.1x.

So how do I clean the computer from this virus?
For now, the action can be done on the infected file is deleted a file compilation of Delphi. Then, do the rebuild again for all applications created with Delphi are infected. But before doing rebuild or recompile, you need to improve SysConst.dcu files that have been infected. Way, simply delete SysConst.dcu file, then copy files SysConst.bak be SysConst.dcu. And let SysConst.bak file, so that your computer is not infected anymore. All these files can be found in the Delphi program directory, default in "\ Program Files \ Borland \ DelphiX \ Lib", where X shows the version of Delphi. The easiest way, do the scan using PCMAV Express for Induc to overcome this virus completely. And lastly, please contact the software manufacturer and let them know that the software had been boarded by Induc virus code.

Once again, no need to worry too much. As long as you're not a programmer / developer using Delphi and Delphi compiler versions on your computer 4-7, then certainly this virus will never be active.

Download PCMAV 2.1 Fixed




Download PCMAV Express for Induc:
Read full story

PCMAV 2.1 Update Build2 (HellSpawn)


Update Build2 comes with the addition of 10 new virus variant identification. For you PCMAV 2.1 users are strongly advised to update immediately, so that your PCMAV can recognize and eradicate the virus even more.

HellSpawn. Bericon virus was created with the folder in C + +. The file name following the name of the parent process / services of Windows such as service.exe, winlogon.exe, lsass.exe and smss.exe. There are also other names that allegedly random. In the body there is a database application that is forbidden to run. If the application is included in the blacklist list is run, it will be directly in-kill.

List of virus addition to PCMAV 2.1 Update Build2:
Alva
Autoit.EH
Autoit-Hubbun
Autoit-Hubbun.txt
Bassok
Boas
Busur
Buxto.D
Chelsea
Chelsea.inf
Cortex.B
GhostyNet.D
HellSpawn
HellSpawn.html
Ilusi.vbs.B
Ilusi.vbs.txt.B
Kepret
Knight.B
Manna
Spiderman.B

Download PCMAV 2.1 Update Build2 (HellSpawn)
Read full story

Friday, August 21, 2009

PCMAV 2.1 Update Build1 (GhostyNet.D)


Update Build1 comes with the addition of 10 new virus variant identification. For you PCMAV 2.1 users are strongly advised to update immediately, so that your PCMAV can recognize and eradicate the virus even more.

GhostyNet.D. The virus is believed this is not a local product at the time carried a message will appear false or "fake error" that reads "memory access violation at 0 × 000000EF base address 0 × 000000F0." As if the program crashes when the virus has been residing in memory. He created two new items in the registry Run with the name avpupdt and ctfmon. Master file of this virus resides in the directory C: \ WINDOWS \ system32 \ 1920622684. At the root drive is the operating system, there will be a file named index.html which is the virus message.

List of virus addition to PCMAV 2.1 Update Build1:
Alva
Boas
Chelsea
Chelsea.inf
GhostyNet.D
HellSpawn
HellSpawn.html
Ilusi.vbs.B
Ilusi.vbs.txt.B
Spiderman.B

Download PCMAV 2.1 Update Build1 (GhostyNet.D)
Read full story

PCMAV 2.1 Release


PC Magazine Media 09/2009 has the latest edition published, along with it has been officially released are the pride of Indonesia Antivirus, PCMAV 2.1. In this release, PCMAV can recognize the 2883 virus and its variants are reported more widespread in Indonesia, including virus-nan Conficker AutoIt sophisticated and has many variants.

In the edition, readers will also be presented article Autoit.EE virus that is the latest variant of AutoIt virus that can spread through the help of Yahoo! Messenger, and even now has support GTalk. This new variant also has a function "debug mode" is very interesting for you to know.

Not to forget, also included a special engine that can handle polymorphic viruses Sality type consisting of 4 variants (Sality-302/304/309/400). This virus can infect executable files, and also can act as a trojan.
WHAT'S NEW?
a. UPDATED! Added to the database 70 identifying and cleaning local virus / foreign / new variants spread in Indonesia reported. Total 2883 virus and its variants, including variants of the virus and Sality Conficker nan-polymorphic complex and sophisticated that many circulating in Indonesia has been known in this version 2.1.

b. NEW! Special engine to handle completely to the root - roots of 4 variants of polymorphic viruses Sality (302/304/309/400) are able to infect files. EXE and. SCR, and able to reside in memory as a trojan.

c. Improved! Added a special cleanser that can handle the virus Autoit.EE a lot of spread in Indonesia.

d. Improved! Heuristic engine to detect polymorphic variants of the virus nan-a lot of complex circulating in Indonesia.

e. BUG FIXED! Error detection (false alarms) heuristic on several programs and scripts.

f. Improved! Change a few names of new virus variants which follow found.

g. Improved! Fixes some minor bugs and improvisation internal code to ensure that the remains can be PCMAV antivirus the pride of Indonesia.

DOWNLOAD PCMAV 2.1
Read full story

Sunday, August 9, 2009

PCMAV 2.0d Update Build4 (Diar)


Update Build4 present the user with the addition of 10 new virus variants. For you PCMAV 2.0d users are strongly advised to update immediately, so that you PCMAV can recognize and eradicate the virus more. Total virus / variant that can be recognized by PCMAV 2.0d are 40 viruses / variants.

Diar. The virus is made using Visual Basic. Comes with a file size of 124KB, with the icon that masquerade as a folder. In its action, the virus will try to kill this Folder Options, Run, Find, regedit, System Restore, even Safe-Mode. At the infected computer, in the root drive will be a new file with the name "diar_gb.html" and "nitip salam ya ... txt" which contains a message from the creator of the virus.

List of virus addition to PCMAV 2.0d Update Build4:
Arzon.B
Autorunme.F
Cuakep.A
Cuakep.A.bmp
Cuakep.A.inf
Cuakep.A.ini
Cuakep.B
Cuakep.B.bmp
Cuakep.B.inf
Cuakep.B.jpg
Cuakep.C
Cuakep.C.inf
Cuakep.D
Cuakep.D.inf
Cuakep.D.jpg
Cuakep.E
Cuakep.E.inf
Diar
Diar.html
Diar.txt
Gen.VBWG-Cute.E
Istig
Istig.inf
Kryptik
Kryptik.inf
Panik
Shellwdqu
Smansa
Smansa.html
Smansa.inf
SmsLucu.B
SmsLucu.B.inf
TheAnd
TheAnd.inf
TheAnd.txt
Tukang
Tukang.inf
Tukang.txt
Violinist
Violinist.inf

Download PCMAV 2.0d Update Build4
Read full story

Monday, August 3, 2009

PCMAV 2.0d Update Build3 (TheAnd)


Update Build3 present the user with the addition of 30 new virus variants. For you PCMAV 2.0d users are strongly advised to update immediately, so that you PCMAV can recognize and eradicate the virus more.
TheAnd. Virus size 57856 bytes is created using Visual Basic and in-pack use tElock. Icon virus is similar to the standard application icon. During infection, it will create some files. In each root of each drive will be found with the file name and do not forget TheAnd.exe file autorun.inf. In the Windows directory there are files with the name TheAndBaHaRi.ta13. System32 also found in many virus files, one with the name XD FromDeAn.ta13. He will turn off some Windows functions such as regedit, Run, Command Prompt. File message virus can also be found in the Windows directory with the name Opening.txt that contains the message "-TheAnd13.Opening-By: TheAnd13".

List of virus addition to PCMAV 2.0d Update Build3:
Arzon.B
Cuakep.A
Cuakep.A.bmp
Cuakep.A.inf
Cuakep.A.ini
Cuakep.B
Cuakep.B.bmp
Cuakep.B.inf
Cuakep.B.jpg
Cuakep.C
Cuakep.C.inf
Istig
Istig.inf
Kryptik
Kryptik.inf
Panik
Shellwdqu
Smansa
Smansa.html
Smansa.inf
SmsLucu.B
SmsLucu.B.inf
TheAnd
TheAnd.inf
TheAnd.txt
Tukang
Tukang.inf
Tukang.txt
Violinist
Violinist.inf

Download PCMAV 2.0d Update Build3
Read full story
 

Labels

what is PCMAV?

PCMAV is an antivirus program developed by Indonesian Software Developer (PCMedia Magazine). PCMAV is distributed bundled with PCMedia Magazine. PCMAV is a free software for personal use or non-commecial use. For Commercial Use, You need to have the PCMedia Magazine to use this software.

Distributting and Using PCMAV is legal for personal and non-commercial!

PC Media Antivirus PCMAV Download Update © 2009 PCMAV is an antivirus program developed by Indonesian Software Developer (PCMedia Magazine).