Restui. It is a worm measuring about 140 KB with no in-pack, made with Visual Basic programming language, and have the icon resembling Microsoft Excel spreadsheets. Creating duplicate files itself by mimicking Excel files (*. xls extension) were found, while the original files will be stored in the folder WINDOWS \ system32 \ MB.With still keep the original files, the worm is able to display a spreadsheet when the user executes the actual worm file, this is done for the unsuspecting user. The possibility still there are bugs in the programming of this worm that can harm the user, because there are times when some Excel files are copied by the worm to the folder WINDOWS \ System32 \ MB will be broken and sized 0 bytes, if this happens, the worm only displays a blank spreadsheet.
This worm also replicate themselves by name and EXCEL.BAT restui.exe in the folder WINDOWS \ System32 \ MB, the same folder with the original Excel files owned by users that is hidden. At some point, he will delete the files with extension *. exe files contained on a removable disk. Although there is a gap because the worm does not check if the extension is to use capital letters. Thus, files with extension *. EXE, *. eXe, *. exe, and so long as it contains capital letters, are not deleted by this worm.
To eradicate this virus or another virus variant, PCMAV Update 3.0.3 Build1 been present with the addition of 31 new virus variant identification. For those users PCMAV 3.0.3, it is strongly recommended to update immediately, so that you PCMAV can recognize and eradicate the virus more.
List of virus addition to 3.0.3 Update PCMAV Build1:
74BE16.exe
74BE16.exe.Dropper.exe.A
74BE16.exe.Dropper.exe.B
74BE16.exe.fne.A
74BE16.exe.fne.B
74BE16.exe.fne.C
74BE16.exe.fne.D
74BE16.exe.fne.E
74BE16.exe.fne.F
74BE16.exe.fne.G
74BE16.exe.fnr.A
74BE16.exe.fnr.B
Aibo.C
Anti
Anti.doc
Autoit.EY
Autoit.EZ
Autoit.EZ.cmd
Autoit.EZ.inf
Autoit.FA
CekVirus
DosenBlagu
Hswdc.B
Iklan
KillMe
Malingsi.R
Malingsi.S
Malingsi.S.ini
Metamorpica
Minerva.D
Restui
Download PCMAV 3.0.3 Update Build1 (Restui: Menyembunyikan File Excel)
