PC Media Antivirus PCMAV Download Update

PCMAV 3.1 Update Build2 (Amis: Menyamar Sebagai File Mp3)

2010-07-21T23:36:00.000-07:00

Amis. Trick with the technique of social engineering malware is still a powerful weapon for the user running it, as has been done by this worm. With applications like Winamp icon and make the files appear to have the extension *. mp3, a glimpse of the worm file is a regular mp3 files that are ready to listen. But if the user is well aware, this worm files easily recognizable from the type, size, and display properties that appear when the mouse cursor is directed to that file (as shown). worm was created by using Visual Basic programming language, measuring approximately 22 KB in a state in-pack. When active, he will close the applications that have a caption such as:
- pcmav
- process
- master
- utility
- hijack
- patrol
- firewall
- detect

To protect itself, the worm also disable the Command Prompt, Regedit, Folder Options, and hide the file extension. The worm also manipulate the registry so that when users access msconfig.exe, which came out just notepad.exe application.

The worm will mimic the name of every file *. mp3 files found, and create duplication worm like mp3 files to trick users. Fortunately, the original mp3 is not removed by this worm. The worm also creates a VBScript file with the name menol.vbs mounted on Start - All programs - Startup that serves to activate the files of the parent worm.

At the root drive, hard drive or on removable disk, it will create duplicate files by name AMIS.exe.

List of virus addition to PCMAV 3.1 Update Build2:
Amis
Amis.vbs
Autoit-ReplaceIcon
BHP
BlackLove.D
Blagu
Brontok-Joseray.J
Brontok-Joseray.J.bin
Dewasa
FaLoNgel
FaLoNgel.htm
FaLoNgel.ocx
Flyff666.vbs.B
Hasmi.B
Hasmi.B.ini
Malingsi.T
Malingsi.T.ini
Malingsi.T.mrc
Malingsi.T.sys.A
Malingsi.T.sys.B
Malingsi.T.sys.C
Malingsi.T.sys.D
Malingsi.T.sys.E
Malingsi.T.sys.F
Malingsi.T.sys.G
Malingsi.T.sys.H
Malingsi.U
Nebula
P0et-Death-Drive.A
P0et-Death-Drive.A.inf
P0et-Death-Drive.A.ini
P0et-Death-Drive.A.txt
P0et-Death-Drive.B
QGS
QGS.dll
QGS.hosts
QGS.inf
QGS.lnk
Senseii.vbs
Senseii.vbs.ini.A
Senseii.vbs.ini.B
Senseii.vbs.vbs.A
Senseii.vbs.vbs.B
Senseii.vbs.vbs.C
Senseii.vbs.vbs.D

Download PCMAV 3.1 Update Build2 (Amis: Menyamar Sebagai File Mp3)

PCMAV 3.1 Update Build1 (FaLoNgel: Beranak Pinak Dalam Hard Drive)

2010-07-15T23:31:00.000-07:00

FaLoNgel. See screenshot above, the presence of this worm is clear easy to know, because he manipulates certain registry that causes the icons that appear on the desktop and start menu to be larger than the default size. But cleaning is not an easy matter, because it will breed in the hard drive is making thousands of files. Worse, he can delete the files with extensions such as *. doc, *. html, *. htm, *. db, *. ocx and replace it with a duplicate of this worm.Worm created using Visual Basic programming language, size about 35 KB in a state in-pack. He will disable Comand Prompt, Task Manager, Regedit, and also change some colors display in Windows. Windows folder will be filled with artificial worms With the HTML file name FaLoNgelXXXX.htm where XXXX is the number in the thousands.

In a few *. ocx file which is the worm file, there is a message as follows:

FaLoNgelß

Kami tidak akan mengaktifkan antivirus,
Maupun program ini.
Karena file ini telah dikuasai
virus FaLoNgel.

Fandy Love Angel

List of virus addition to PCMAV 3.1 Update Build1:
Autoit-ReplaceIcon
BHP
BlackLove.D
Brontok-Joseray.J
Brontok-Joseray.J.bin
Dewasa
FaLoNgel
FaLoNgel.htm
FaLoNgel.ocx
Flyff666.vbs.B
Hasmi.B
Hasmi.B.ini
Malingsi.T
Malingsi.T.ini
Malingsi.T.mrc
Malingsi.T.sys.A
Malingsi.T.sys.B
Malingsi.T.sys.C
Malingsi.T.sys.D
Malingsi.T.sys.E
Malingsi.T.sys.F
Malingsi.T.sys.G
Malingsi.T.sys.H
Malingsi.U
Nebula
QGS
QGS.dll
QGS.hosts
QGS.inf
QGS.lnk
Senseii.vbs
Senseii.vbs.ini.A
Senseii.vbs.ini.B
Senseii.vbs.vbs.A
Senseii.vbs.vbs.B
Senseii.vbs.vbs.C
Senseii.vbs.vbs.D

Download PCMAV 3.1 Update Build1 (FaLoNgel: Beranak Pinak Dalam Hard Drive)

PCMAV 3.1 Ragnarok Released

2010-07-10T23:17:00.000-07:00

Having attended the latest edition of PC Magazine Media 08/2010 with Super DVD 8 GB, which also include antivirus pride Indonesia, PCMAV 3.1. Currently, PCMAV is the only one capable of recognizing antivirus 3327 virus and its variants are reported more widespread in Indonesia.

Immediately get Ragnarok PCMAV 3.1 has been enhanced only from a PC Media magazine 08/2010 which had been published. Immediately a message and get in the stall / nearest agent.

Technical questions please delivered directly to the editors of PC Media via e-mail you have read and understand the contents of README.TXT. And we will be grateful if you could take the time to make comments limited to the use PCMAV 3.1 as an input in its development.

WHAT'S NEW? / CHANGE-LOG

* ADDED! Added database and cleaning virus 35 local / foreign / new variants have been spread in Indonesia. Total 3327 virus and its variants that are circulating in Indonesia is well known in version 3.1 is the core engine PCMAV.

* ADDED! PCMAV can now run on Windows Vista & 7 64-bit full.

* ADDED! Removal special engine to clean thoroughly and AIBO Deathdrive virus variants are widespread in Indonesia.

* Improved! Change of name of the virus found a new variant.

* FIXED! Repair logs in Windows Vista & 7 64-bit.

* Improved! Fixes some minor bugs and improved the internal code to ensure that antivirus PCMAV remain the pride of Indonesia.

Download PCMAV 3.1 Ragnarok Released

PCMAV 3.0.3 Update Build4 (Senseii: Menyembunyikan Drive C)

2010-07-06T23:11:00.000-07:00

Senseii. Malware type VB Script worm is sized around 59 KB, have quite a lot of payload, such as displaying a message like the picture at start Windows, or hide drives C through manipulation of the registry, causing drive C is not visible in Windows Explorer.Worm will spread on a removable disk with senseii.vbe and desktop.vbs name, do not miss a autorun.inf file in order to run the worm automatically if autorun is active.

Some worms and companionnya duplicate files will also be created with the name:

c: \ windows \ EXPL0RER.vbs
c: \ windows \ system \ WinUpdt.vbs
c: \ antivirus.vbs
c: \ regedit.vbs

and much more. Although the drive C is not visible, but you can still access it via the Command Prompt. On the desktop, it also will create a file called Do not click.ini containing the text:

w32 s@ipud1n adalah virus tiruan dari virus yg pernah ada ingin tau siapa yang buat tiruanya yang jelas bukan kamu kan? [credits] senseii c45 sekolah di playgroup terkenal di Cirebon

List of virus addition to 3.0.3 Update PCMAV Build4:
74BE16
74BE16.exe.A
74BE16.exe.B
74BE16.fne.A
74BE16.fne.B
74BE16.fne.C
74BE16.fne.D
74BE16.fne.E
74BE16.fne.F
74BE16.fne.G
74BE16.fnr.A
74BE16.fnr.B
Aibo.C
Anti
Anti.doc
Autoit.EY
Autoit.EZ
Autoit.EZ.cmd
Autoit.EZ.inf
Autoit.FA
Autoit-ReplaceIcon
BHP
BlackLove.B
Brontok-Joseray.J
Brontok-Joseray.J.bin
CekVirus
DosenBlagu
Flyff666.vbs.B
Hasmi.B
Hasmi.B.ini
Hswdc.B
Iklan
KillMe
Malingsi.R
Malingsi.S
Malingsi.S.ini
Malingsi.T
Malingsi.T.ini
Malingsi.T.mrc
Malingsi.T.sys.A
Malingsi.T.sys.B
Malingsi.T.sys.C
Malingsi.T.sys.D
Malingsi.T.sys.E
Malingsi.T.sys.F
Malingsi.T.sys.G
Malingsi.T.sys.H
Malingsi.U
Metamorpica
Minerva.D
MyDoom.B
Nebula
QGS
QGS.dll
QGS.hosts
QGS.inf
QGS.lnk
Restui
Senseii.vbs
Senseii.vbs.ini.A
Senseii.vbs.ini.B
Senseii.vbs.vbs.A
Senseii.vbs.vbs.B
Senseii.vbs.vbs.C
Senseii.vbs.vbs.D

Download PCMAV 3.0.3 Update Build4 (Senseii: Menyembunyikan Drive C)

PCMAV 3.0.3 Update Build3 (TolakBHP: Menyuarakan Protes Lewat Worm)

2010-06-29T23:04:00.000-07:00

TolakBHP. Malware was created with various motifs, such as this one worm, which displays a message reject the commercialization of education. Messages such as in the picture above will appear when the worm is executed, and each time the infected computer to start Windows. There are two options button, if selected is the "Agree to Reject BHP" the message is closed, but if the choice is "No! Brow ", then the computer will shutdown by itself. This worm spreads on the root drive and removable disk with the file name: Reject BHP.flv.exe, measuring approximately 656 KB, created with Visual Basic programming language, without in-pack, and have the icon resembles a Media Player file.

This worm will place duplicate itself on Windows startup with the name SYSTEM.exe.

List of virus addition to 3.0.3 Update PCMAV Build3:
74BE16
74BE16.exe.A
74BE16.exe.B
74BE16.fne.A
74BE16.fne.B
74BE16.fne.C
74BE16.fne.D
74BE16.fne.E
74BE16.fne.F
74BE16.fne.G
74BE16.fnr.A
74BE16.fnr.B
Aibo.C
Anti
Anti.doc
Autoit.EY
Autoit.EZ
Autoit.EZ.cmd
Autoit.EZ.inf
Autoit.FA
Autoit-ReplaceIcon
Brontok-Joseray.J
Brontok-Joseray.J.bin
CekVirus
DosenBlagu
Flyff666.vbs.B
Hasmi.B
Hasmi.B.ini
Hswdc.B
Iklan
KillMe
Malingsi.R
Malingsi.S
Malingsi.S.ini
Malingsi.T
Malingsi.T.ini
Malingsi.T.mrc
Malingsi.T.sys.A
Malingsi.T.sys.B
Malingsi.T.sys.C
Malingsi.T.sys.D
Malingsi.T.sys.E
Malingsi.T.sys.F
Malingsi.T.sys.G
Malingsi.T.sys.H
Metamorpica
Minerva.D
MyDoom.B
Nebula
QGS
QGS.dll
QGS.hosts
QGS.inf
QGS.lnk
Restui
TolakBHP

Download PCMAV 3.0.3 Update Build3 (TolakBHP: Menyuarakan Protes Lewat Worm)

PCMAV 3.0.3 Update Build2 (Autoit-ReplaceIcon: Worm Dengan Icon yang Beragam)

2010-06-21T22:57:00.000-07:00

Autoit-ReplaceIcon. This unique Worm Autoit script-based and has the ability polymorphic. File size can vary, so too autorun.inf file that was created. Even the language information when the right click - Properties - Version - Language, also may vary in each of the worm file is created. Filename worm that spreads through the disk media also appeared random, although always with extension *. exe and consists of 6 characters. For example:
brgzdt.exe
civfap.exe
hissyn.exe
naigpy.exe
uxjxhp.exe

Uniquely, the icons used are also varied, some examples of the worm files with different icons that look like the picture above. Name Autoit-ReplaceIcon taken from one of the object function (ImageList_ReplaceIcon) that read the body of the worm. Files that are active in memory named csrcs.exe (located at the locations WINDOWS \ System32), at first glance looks like a Windows system file csrss.exe property.

List of virus addition to 3.0.3 Update PCMAV Build2:
74BE16
74BE16.exe.A
74BE16.exe.B
74BE16.fne.A
74BE16.fne.B
74BE16.fne.C
74BE16.fne.D
74BE16.fne.E
74BE16.fne.F
74BE16.fne.G
74BE16.fnr.A
74BE16.fnr.B
Aibo.C
Anti
Anti.doc
Autoit.EY
Autoit.EZ
Autoit.EZ.cmd
Autoit.EZ.inf
Autoit.FA
Autoit-ReplaceIcon
CekVirus
DosenBlagu
Hasmi.B
Hasmi.B.ini
Hswdc.B
Iklan
KillMe
Malingsi.R
Malingsi.S
Malingsi.S.ini
Malingsi.T
Malingsi.T.ini
Malingsi.T.mrc
Malingsi.T.sys.A
Malingsi.T.sys.B
Malingsi.T.sys.C
Malingsi.T.sys.D
Malingsi.T.sys.E
Malingsi.T.sys.F
Malingsi.T.sys.G
Malingsi.T.sys.H
Metamorpica
Minerva.D
MyDoom.B
Restui

Download PCMAV 3.0.3 Update Build2 (Autoit-ReplaceIcon: Worm Dengan Icon yang Beragam)

PCMAV 3.0.3 Update Build1 (Restui: Menyembunyikan File Excel)

2010-06-08T20:26:00.000-07:00

Restui. It is a worm measuring about 140 KB with no in-pack, made with Visual Basic programming language, and have the icon resembling Microsoft Excel spreadsheets. Creating duplicate files itself by mimicking Excel files (*. xls extension) were found, while the original files will be stored in the folder WINDOWS \ system32 \ MB.

With still keep the original files, the worm is able to display a spreadsheet when the user executes the actual worm file, this is done for the unsuspecting user. The possibility still there are bugs in the programming of this worm that can harm the user, because there are times when some Excel files are copied by the worm to the folder WINDOWS \ System32 \ MB will be broken and sized 0 bytes, if this happens, the worm only displays a blank spreadsheet.

This worm also replicate themselves by name and EXCEL.BAT restui.exe in the folder WINDOWS \ System32 \ MB, the same folder with the original Excel files owned by users that is hidden. At some point, he will delete the files with extension *. exe files contained on a removable disk. Although there is a gap because the worm does not check if the extension is to use capital letters. Thus, files with extension *. EXE, *. eXe, *. exe, and so long as it contains capital letters, are not deleted by this worm.

To eradicate this virus or another virus variant, PCMAV Update 3.0.3 Build1 been present with the addition of 31 new virus variant identification. For those users PCMAV 3.0.3, it is strongly recommended to update immediately, so that you PCMAV can recognize and eradicate the virus more.

List of virus addition to 3.0.3 Update PCMAV Build1:
74BE16.exe
74BE16.exe.Dropper.exe.A
74BE16.exe.Dropper.exe.B
74BE16.exe.fne.A
74BE16.exe.fne.B
74BE16.exe.fne.C
74BE16.exe.fne.D
74BE16.exe.fne.E
74BE16.exe.fne.F
74BE16.exe.fne.G
74BE16.exe.fnr.A
74BE16.exe.fnr.B
Aibo.C
Anti
Anti.doc
Autoit.EY
Autoit.EZ
Autoit.EZ.cmd
Autoit.EZ.inf
Autoit.FA
CekVirus
DosenBlagu
Hswdc.B
Iklan
KillMe
Malingsi.R
Malingsi.S
Malingsi.S.ini
Metamorpica
Minerva.D
Restui

Download PCMAV 3.0.3 Update Build1 (Restui: Menyembunyikan File Excel)

PCMAV 3.0.3 Ragnarok Release

2010-06-08T19:02:00.000-07:00

Have attended the latest edition of PC Magazine Media 07/2010 with Super DVD 8 GB, which also include antivirus pride Indonesia, PCMAV 3.0.3. Currently, PCMAV is the only one capable of recognizing antivirus 3292 virus and its variants are reported more widespread in Indonesia.

WHAT'S NEW? / CHANGE-LOG

* UPDATED! Added database and cleaning virus 46 local / foreign / new variants have been spread in Indonesia. Total 3292 virus and its variants that are circulating in Indonesia is well known in the version 3.0.3 is the core engine PCMAV.

* UPDATED! Removal special engine to thoroughly clean the virus variants YM-InfoCard, breakfast, Allya.vbs, Titian, Felisha, and Hasmi widespread in Indonesia.

* Improved! Folder "quarantine" is only created if there are quarantined file, and automatically removed if there are no files in it.

* FIXED! Bug on the Close button [X] is * not * function to close PCMAV.

* FIXED! Bug on Tree labels that can be * changed *.

* FIXED! Bug progress bar that * appear * when scanning right-click a file.

* FIXED! Bug * appears * error display when the computer is turn-off while PCMAV is working.

* Improved! PCMAV can run on Windows Vista & 7 64-bit (experimental).

* UPDATED! Change of name of the virus found a new variant.

* Improved! Fixes some minor bugs and improved the internal code to ensure that antivirus PCMAV remain the pride of Indonesia.

Download PCMAV 3.0.3 Ragnarok Release

PCMAV 3.0.2 Update Build4 (Metamorpica: Perusak Sistem Operasi)

2010-05-31T22:52:00.000-07:00

Metamorpica. The worm created by using Visual Basic programming language, size 460 KB with no in-pack. At first glance seem like a simple VB program, which even still use the default icon Visual Basic applications. But if you run it, very detrimental effects. This worm will replicate itself by copying all the files on your hard disk name, and delete the original file. This process is done recursively, and be fatal because it will also delete important files that are not protected, including files used by the operating system, so you must restore the system by system restore or reinstall. With this payload, the worm is less potential to spread widely through the exchange of disc media, because the host will be crippled under their control in a short time. But stay alert because the malware files can also be spread by other means, such as via the Internet / file sharing.

Some of the registry will be changed by this worm, when you access the menu Folder Options - View, will have the option "Folder Options connected with f & i worm", if you choose this option, a warning will appear containing the message:

"Thank you for using the product in the country! The virus is made for citizens of Indonesia, can eradicate the virus itself Using Antivirus">. From the creator of the virus: F4nd1 3rd14n54 "

To eradicate this virus or another virus variant, PCMAV Update 3.0.2 Build4 been present with the addition of 13 new virus variant identification. For those users PCMAV 3.0.2, it is strongly recommended to update immediately, so that you PCMAV can recognize and eradicate the virus more.

List of virus addition to 3.0.2 Update PCMAV Build4:
74BE16.exe
74BE16.exe.Dropper.exe.A
74BE16.exe.Dropper.exe.B
74BE16.exe.fne.A
74BE16.exe.fne.B
74BE16.exe.fne.C
74BE16.exe.fne.D
74BE16.exe.fne.E
74BE16.exe.fne.F
74BE16.exe.fne.G
74BE16.exe.fnr.A
74BE16.exe.fnr.B
Anti
Anti.doc
Autoit.EX
Autoit.EX.bat
Autoit.EX.inf
Autoit.EY
Autoit.EZ
Autoit.EZ.cmd
Autoit.EZ.inf
Autoit.FA
AwaN.A
AwaN.B
Bohia
Bohia.dll
Bohia.url.A
Bohia.url.B
Bohia.url.C
Bohia.url.D
Bohia.url.E
Bohia.url.F
DosenBlagu
Geografi.C
Hswdc.A
Hswdc.B
Iklan
Malingsi.P
Malingsi.Q
Malingsi.Q..mrc
Malingsi.Q.dll.A
Malingsi.Q.dll.B
Malingsi.Q.dll.C
Malingsi.Q.ini
Malingsi.R
Malingsi.S
Malingsi.S.ini
Metamorpica
Minerva.D
Petani
Rieysha-Jogja.C
Rieysha-Jogja.C.vbs.A
Rieysha-Jogja.C.vbs.B
Rieysha-Lokal.B
Rieysha-Lokal.B.bat
Rieysha-Lokal.B.htm
RinaRudy.B
Salxls.C
Sarap
Sesiana.vbs.A
Sesiana.vbs.A.inf
Sesiana.vbs.B
YM-Infocard.A
YM-Infocard.A.jpg
YM-Infocard.B
YM-Infocard.C
YM-lnfocard.D

Download PCMAV 3.0.2 Update Build4 (Metamorpica: Perusak Sistem Operasi)

PCMAV 3.0.2 Update Build3 (Minerva.D: Worm Berbentuk Game)

2010-05-24T18:47:00.000-07:00

Minerva.D. Playing games is fun, but what if the game itself was actually a worm? Minerva.D an example of a worm-shaped game. Created with FreeBASIC compiler, in-pack with UPX and size 333 KB, this worm save some games that are displayed randomly every time dijalankan.Game shown Minerva is a game created with Flash, such as Hangman, Mario Bros., Noughts and crosses, PinWheel , and others. At first glance there is nothing strange, but like most other malware, he would manipulate the registry and is active in memory at startup of Windows.

Spreading technique utilizing a removable disk storage media, it will replicate itself under the name Minerva game.exe and New_Games.exe on a removable disk. Another characteristic is to create sound files with WAV format called TOENG.WAV and ROGER.WAV in the folder Windows \ Media.

To eradicate this virus or another virus variant, PCMAV Update 3.0.2 Build3 been present with the addition of 10 new virus variant identification. For those users PCMAV 3.0.2, it is strongly recommended to update immediately, so that you PCMAV can recognize and eradicate the virus more.

List of virus addition to 3.0.2 Update PCMAV Build3:
Anti
Anti.doc
Autoit.EX
Autoit.EX.bat
Autoit.EX.inf
Autoit.EY
Autoit.EZ
Autoit.EZ.cmd
Autoit.EZ.inf
Autoit.FA
AwaN.A
AwaN.B
Bohia
Bohia.dll
Bohia.url.A
Bohia.url.B
Bohia.url.C
Bohia.url.D
Bohia.url.E
Bohia.url.F
DosenBlagu
Geografi.C
Hswdc.A
Hswdc.B
Iklan
Malingsi.P
Malingsi.Q
Malingsi.Q..mrc
Malingsi.Q.dll.A
Malingsi.Q.dll.B
Malingsi.Q.dll.C
Malingsi.Q.ini
Malingsi.R
Malingsi.S
Malingsi.S.ini
Minerva.D
Petani
Rieysha-Jogja.C
Rieysha-Jogja.C.vbs.A
Rieysha-Jogja.C.vbs.B
Rieysha-Lokal.B
Rieysha-Lokal.B.bat
Rieysha-Lokal.B.htm
RinaRudy.B
Salxls.C
Sarap
Sesiana.vbs.A
Sesiana.vbs.A.inf
Sesiana.vbs.B
YM-Infocard.A
YM-Infocard.A.jpg
YM-Infocard.B
YM-Infocard.C
YM-lnfocard.D

Download PCMAV 3.0.2 Update Build3 (Minerva.D: Worm Berbentuk Game)

PCMAV 3.0.2 Update Build2 (Anti)

2010-05-18T16:50:00.000-07:00

Anti. Viruses are created with Delphi programming language, is about 481 KB with no on-pack. He uses icons similar to those commonly used by Real Player file (extension *. rm). Adverse effects thereof is to delete video files with the extension tertentu.Saat active, the virus will create some files, among others:

Windows\soundvc.exe
\windows\system32\anti.exe
C:\anti.doc

Files that are known to be deleted by this virus is a file with extension *. 3gp, *. rm and *. wmv. Anti.doc file created on drive C virus is a Microsoft Word file containing the virus message, namely:

mode BAIK ON
1. stop RIBUT = akan men9ambil alih sistem suara di-waktu sholat
2. stop PORNO = akan men9hapus file2 y9 di-identifikasi porno

mode KEJAM ON
1. …blablabla…
2. …wekekekek…

jika men9halangi mode BAIK ON maka mode KEJAM ON akan di-eksekusi

“jan9an mencela karena 7an virus BAIK
mun9kin dosa 9ue buat VIRUS ini
9a’ sebesar dosa lho y9 slalu n9umpat 9ue dari belakan9
maaf klo ini SALAH”

To eradicate this virus or another virus variant, PCMAV Update 3.0.2 Build2 been present with the addition of nine new virus variant identification. For those users PCMAV 3.0.2, it is strongly recommended to update immediately, so that you PCMAV can recognize and eradicate the virus more.

List of virus addition to 3.0.2 Update PCMAV Build2:

Anti
Anti.doc
Autoit.EX
Autoit.EX.bat
Autoit.EX.inf
AwaN.A
AwaN.B
Bohia
Bohia.dll
Bohia.url.A
Bohia.url.B
Bohia.url.C
Bohia.url.D
Bohia.url.E
Bohia.url.F
Geografi.C
Hswdc.A
Hswdc.B
Iklan
Malingsi.P
Malingsi.Q
Malingsi.Q..mrc
Malingsi.Q.dll.A
Malingsi.Q.dll.B
Malingsi.Q.dll.C
Malingsi.Q.ini
Petani
Rieysha-Jogja.C
Rieysha-Jogja.C.vbs.A
Rieysha-Jogja.C.vbs.B
Rieysha-Lokal.B
Rieysha-Lokal.B.bat
Rieysha-Lokal.B.htm
RinaRudy.B
Salxls.C
Sarap
Sesiana.vbs.A
Sesiana.vbs.A.inf
Sesiana.vbs.B
YM-Infocard.A
YM-Infocard.A.jpg
YM-Infocard.B
YM-Infocard.C
YM-lnfocard.D

Download PCMAV 3.0.2 Update Build2 (Anti)

PCMAV 3.0.2 Update Build1 (YM-Infocard)

2010-05-11T16:15:00.000-07:00

YM-InfoCard. Recently, a widespread worm spreads through Messenger (YM). On computers that are infected, the virus will send a message like in the picture above to the entire list of friends, and the message provides a link of interest to the user to click on it. Domain listed on the links can vary, but all leads to the image.php file. If the link is clicked, then a file named IMGXXXXX.JPG-www.myspaces.com.exe will be downloaded (xxxxx is a series of numbers that also vary).

Although there are a confirmation of whether to download the EXE file, it appeared that quite a lot of users are not vigilant and keep downloading it, even run the file so that the computer go into korban.Sampai today, PCMAV team has received 4 (four) YM-variant InfoCard with different file size: 73 KB, 99 KB, 103 KB and 164 KB. a variant written in Visual Basic programming language, and others with FreeBASIC, without in-pack. Icon uses the icon-type image to outwit users who may think that file is an image file.

Although most of the reported link no longer active, but it is possible there are new links and variants that continue to spread. Of the variants that have been found, one of the characteristics of this worm is to create a duplicate of himself to the WINDOWS \ infocard.exe, and activate it in memory, this process is visible in Task Manager.

The name of the file that created this worm is infocard.exe or lnfocard.exe (diff in his first letter, the letter "i" and "l"), depending on the type of variants. In addition to the Windows folder, YM-InfoCard also replicate themselves by the name of the file C: \ d.exe, Program Files \ lnfocard.exe, also create a file Windows \ winbrd.jpg, and an empty file with the name Windows \ mds.sys and Windows \ mdt.sys.

Spread via YM has also been done another worm like Autoit. Although there are no damaging effects inflicted on the infected computer, but which quickly spread to watch.

To eradicate this virus or another virus variant, PCMAV Update 3.0.2 Build1 been present with the addition of 35 new virus variant identification. For those users PCMAV 3.0.2, it is strongly recommended to update immediately, so that you PCMAV can recognize and eradicate the virus more.

List of virus addition to 3.0.2 Update PCMAV Build1:
AwaN.A
AwaN.B
Bohia
Bohia.dll
Bohia.url.A
Bohia.url.B
Bohia.url.C
Bohia.url.D
Bohia.url.E
Bohia.url.F
Geografi.C
Hswdc:EXE_PE32
Malingsi.P
Malingsi.Q
Malingsi.Q..mrc
Malingsi.Q.dll
Malingsi.Q.dll
Malingsi.Q.dll
Malingsi.Q.ini
Rieysha-Jogja.C
Rieysha-Jogja.C.vbs.A
Rieysha-Jogja.C.vbs.B
Rieysha-Lokal.B
Rieysha-Lokal.B.bat
RinaRudy.B
Salxls.C
Sarap
Sesiana.vbs.A
Sesiana.vbs.A.inf
Sesiana.vbs.B
YM-Infocard.A
YM-Infocard.A.jpg
YM-Infocard.B
YM-Infocard.C
YM-lnfocard.D

Download PCMAV 3.0.2 Update Build1 (YM-Infocard)

PCMAV 3.0.2 Ragnarok

2010-05-08T22:10:00.000-07:00

Have attended the latest edition of PC Magazine Media 06/2010 with Super DVD 8 GB, which also includes antivirus pride of Indonesia, PCMAV 3.0.2. Currently, PCMAV is the only antivirus software that is able to recognize the 3246 virus and its variants are reported much spread in Indonesia.

Immediately get PCMAV Ragnarok 3.0.2 has been enhanced only from PC Magazine Media 06/2010 has risen. Immediately a message and get on the kiosk nearest dealer.

WHAT IS NEW?

* Updated! Added a database identifier and cleaning virus 22 local / foreign / new variant of the reported spread in Indonesia. Total 3246 virus and its variants are circulating in Indonesia has been known in the version 3.0.2 is the core engine PCMAV.

* Improved! Special engine to thoroughly clean Brontok virus variants are still spreading in Indonesia.

* Updated! Module settings for memory usage that is more reliable for multithread environment.

* Updated! Setting a more efficient memory usage dikala idle.

* BUG FIXED! No more confirmation when pressing the exit button when detecting a file with context menu.

* BUG FIXED! Some non-active timer function has now been removed.

* Updated! Changes name to follow a new variant viruses were found.

* Improved! Some minor bug fixes and improvements to ensure that the internal code can still be antivirus PCMAV Indonesian pride.

Download PCMAV 3.0.2 Ragnarok

PCMAV 3.0.1 Update Build4 (Malingsi.Q)

2010-05-02T22:04:00.000-07:00

Malingsi.Q. This virus has been known for a long time, but it is still spreading with different variants. This time the size of about 685 KB, and as in previous variants that have been found, the virus was packed with PE Compact, created with Visual Basic programming language, and uses similar to Microsoft Word icon. Spreading technique is to change the *. doc file attributes that the discovery that a super hidden, then the virus will be disguised by the name of the file. Users who are not alert can be fooled by the icon used Microsoft Word viruses.

Characteristic of this virus is to install itself with the name Adobe Gamma Loader.com on Startup. Also, hiding a virus located in the folder Program Files \ Microsoft Office \ OFFICE11, files created in these folders include: jwiegh.dll, PUB60SP.mrc, remote.ini, services.exe, yofc.dll, etc. another.

----------------

To eradicate this virus or another virus variant, Build4 PCMAV Update 3.0.1 is now available with the addition of 10 new virus variant identification. For those users PCMAV 3.0.1, it is strongly recommended to update immediately, so that you PCMAV can recognize and eradicate the virus even more.

List of virus addition to 3.0.1 Update PCMAV Build4:
Abzenz.B
Autoit.EW
Autoit.EW.ini
AwaN.A
AwaN.B
Bohia
Bohia.dll
Bohia.url.A
Bohia.url.B
Bohia.url.C
Bohia.url.D
Bohia.url.E
Bohia.url.F
Dots.vbs
Forever
Forever.dll
Forever.hosts
Forever.inf
GadiHot.E
GadiHot.E.txt
Geografi.C
Hswdc
Malingsi.O
Malingsi.O.dll
Malingsi.O.dll
Malingsi.O.dll
Malingsi.O.exe
Malingsi.O.ini
Malingsi.O.mrc
Malingsi.P
Malingsi.Q
Malingsi.Q..mrc
Malingsi.Q.dll
Malingsi.Q.dll
Malingsi.Q.dll
Malingsi.Q.ini
Pengantin_Baru
Rieysha-Jogja.C
Rieysha-Jogja.C.vbs.A
Rieysha-Jogja.C.vbs.B
RinaRudy.B
Salxls.C
Saphira.B
Saphira.B.sys
Sarap
Sesiana.vbs.A
Sesiana.vbs.A.inf
Sesiana.vbs.B
Xcrack
Xcrack.inf

Donwload PCMAV 3.0.1 Update Build4 (Malingsi.Q)

PCMAV 3.0.1 Update Build3 (Rieysha-Jogja.C)

2010-04-25T17:45:00.000-07:00

Rieysha-Jogja.C. The virus is made with Delphi, measuring around 449 KB and use the icon like Microsoft Word. Including very diligent to create duplicate files virus with various names and files scattered on the C drive, the folder C: \ Windows, C: \ Windows \ system, C: \ Windows \ System32, C: \ Windows \ Help, or removable disk. The name of the file that was created, among others:
ajang_overclocking.exe
algoritma_dan_pemrograman_virus.exe
cara_cara_cepet_dapet_duit.exe
daftar_koruptor_indonesia.exe
duduk_diem_dapet_duit_kalo_perlu_tidur.exe
jogja_berhati_nyaman.exe
kopi_jos_enak_tenan.exe
penguji_keamanan_operating_sistem.exe
makan_gratis_tapi_cuci_piring.exe
hardiskmu_penuh_virus.exe

And much more. This virus also creates other virus type VBScript, with names such klik2x.vbs, keperawananku.sys.vbs, X-Code Magazine1.vbs, or recycle.vbs. A VBScript file with the name kisah_tragis_gebi.vbs also created, if executed, this script displays an animation of text in Notepad and automatically save it with a rieysha.txt. Animated text that is displayed stating:

Sayang kapan kamu kembali ke indonesia? apa kamu kembali dengan hatimu yang dulu?

———————————————-

To eradicate this virus or another virus variant, Build3 PCMAV Update 3.0.1 is now available with the addition of eight new virus variant identification. For those users PCMAV 3.0.1, it is strongly recommended to update immediately, so that you PCMAV can recognize and eradicate the virus even more.

List of virus addition to 3.0.1 Update PCMAV Build3:

Abzenz.B
Autoit.EW
Autoit.EW.ini
AwaN
Bohia
Bohia.dll
Bohia.url.A
Bohia.url.B
Bohia.url.C
Bohia.url.D
Bohia.url.E
Bohia.url.F
Dots.vbs
Forever
Forever.dll
Forever.hosts
Forever.inf
GadiHot.E
GadiHot.E.txt
Hswdc
Malingsi.O
Malingsi.O.dll
Malingsi.O.dll
Malingsi.O.dll
Malingsi.O.exe
Malingsi.O.ini
Malingsi.O.mrc
Malingsi.P
Pengantin_Baru
Rieysha-Jogja.C
Rieysha-Jogja.C.vbs.A
Rieysha-Jogja.C.vbs.B
Saphira.B
Saphira.B.sys
Sarap
Sesiana.vbs.A
Sesiana.vbs.A.inf
Sesiana.vbs.B
Xcrack
Xcrack.inf

Download PCMAV 3.0.1 Update Build3 (Rieysha-Jogja.C)

PCMAV 3.0.1 Update Build2 (AwaN)

2010-04-20T16:59:00.000-07:00

AwaN. For most programmers, Visual Basic Classic (version 6.0 or below) is still a favorite, including a local maker for viruses. One of the viruses created with Visual Basic is the cloud type worms, with size around 36 KB, without in-pack.

Icon used this virus is quite unique, namely the eye icon image. As can be seen as shown below:

Awan Icon

The virus will create AwaN.exe file on the Windows folder, and create a file containing the text Read Dong.txt:
============================================
# File Ini dibuat oleh Program
# Tanggal : 4/16/2010
# Jam : 12:40:27 PM
# Komputer anda sudah tertular virus saya
# tenang aja kok virus nya gak bahaya
# Cuma ngigit dikit, he… he … he…
============================================

The dates and hours listed were taken from an infected computer system. He also infects flash disks and create file AwaN.exe. Election eye icon by virus makers is not without significance, most likely due to this virus has the ability to peer programs are run and stored in a file named AwaN.dll. Sample contents are as follows:

4:20:44 PM 4/16/2010
Size: .0 MB
*** PROGRAMS OPENED ***

4:20:26 PM Process Monitor – Sysinternals: www.sysinternals.com PROCMON_WINDOW_CLASS
4:20:29 PM Shell_TrayWnd
4:20:30 PM Start Menu DV2ControlHost
4:20:31 PM Run #32770
4:20:33 PM Untitled – Notepad Notepad
4:20:36 PM Save As #32770

———————————————-

To eradicate this virus or another virus variant, Build2 PCMAV Update 3.0.1 is now available with the addition of 10 new virus variant identification. For those users PCMAV 3.0.1, it is strongly recommended to update immediately, so that you PCMAV can recognize and eradicate the virus even more.

List of virus addition to 3.0.1 Update PCMAV Build2:

Abzenz.B
Autoit.EW
Autoit.EW.ini
AwaN
Bohia
Bohia.dll
Bohia.url.A
Bohia.url.B
Bohia.url.C
Bohia.url.D
Bohia.url.E
Bohia.url.F
Dots.vbs
Forever
Forever.dll
Forever.hosts
Forever.inf
GadiHot.E
GadiHot.E.txt
Malingsi.O
Malingsi.O.dll
Malingsi.O.dll
Malingsi.O.dll
Malingsi.O.exe
Malingsi.O.ini
Malingsi.O.mrc
Pengantin_Baru
Saphira.B
Saphira.B.sys
Sarap
Xcrack
Xcrack.inf

Download PCMAV 3.0.1 Update Build2 (AwaN)

Download PCMAV 3.0.1 Release

2010-04-16T05:18:00.000-07:00

PCMAV 3.0.1 Ragnarok April May 2010 edition, re-issue of PC Media Free portable anti-virus that is the mainstay of their PCMAV, PCMAV this time April-May 2010 edition is labeled 3.0.1 Ragnarok and able to detect the virus means that 3224 is going to make your computer more safe from the damned virus.

Several changes were made in PCMAV 3.0.1
Updated! Added a database identifier and cleaning 60 local virus / foreign / new variant of the reported spread in Indonesia. Total 3224 virus and its variants are circulating in Indonesia has been known in the version 3.0.1 is the core engine PCMAV.
FIXED! PCMAV.exe-unpack file in order to avoid false alarms from multiple antivirus heuristics engine outside. The result, now PCMAV.exe file size larger than previous versions.
FIXED! Right-click function “Scan with PCMAV” is now able to walk properly.
FIXED! In some cases the error message “GetTask / GetHandleJob”. Now been repaired.
FIXED! -Folder tree structure which does not remember the previous choices have been fixed.
FIXED! Valkyrie writing that still emerge have been adjusted.
FIXED! Caption on the menu Quarantine has now been adapted to the new version.
FIXED! File information has been adapted to this new version.
Improved! Changes name to follow a new variant viruses were found.
Improved! Some minor bug fixes and improvements of internal code to ensure that the equipment can be antivirus PCMAV Indonesian pride.

Virus Forever: PCMAV 3.0.1 Update Build1
Forever. Is a virus that is made with Visual Basic programming language, in-pack and generate size around 68 KB.

He uses the folder icon and create a virus file on your hard drive with the path and file name Windows \ system32 \ system.exe and Windows \ userinit.exe. In addition, it also makes the file Windows \ kdcoms.dll that contains the string "Do not worry! I Will protect your computer. "Without quotes.

Viruses also to block access to sites using the file Windows \ system32 \ drivers \ etc \ hosts had made, a list of sites that is blocked is:
download.f-secure.com
mirror02.gdata.de
download.avg.com
spftrl.digitalriver.com
www.grisoft.cz
download1us.softpedia.com
download.softpedia.com
www.bitdefender.co.uk
www.bitdefender.com
virusscan.jotti.org
bkav.com.vn
www.bkav.com.vn
download.com.vn
www.download.com.vn
9down.com
www.9down.com
download.eset.com
www.download.com
www.symantec.com
www.bitdefender.com.vn
www.kaspersky.com
cmcinfosec.com

List of these sites also look at body of the virus that has been in-unpack as shown. To spread, viruses make use removable disks and create file forever.exe, System Volume Information.exe, Romantic.exe (specially created in a subfolder found in the virus), and the autorun.inf that will execute forever.exe.

To eradicate this virus or another virus variant, Build1 PCMAV Update 3.0.1 is now available with the addition of 23 new virus variant identification. For those users PCMAV 3.0.1, it is strongly recommended to update immediately, so that you PCMAV can recognize and eradicate the virus even more.

List of virus addition to 3.0.1 Update PCMAV Build1:
Abzenz.B
Autoit.EW
Autoit.EW.ini
Dots.inf
Dots.vbs
Forever
Forever.dll
Forever.hosts
Forever.inf
GadiHot.E
GadiHot.E.txt
Malingsi.O
Malingsi.O.dll
Malingsi.O.dll
Malingsi.O.dll
Malingsi.O.exe
Malingsi.O.ini
Malingsi.O.mrc
Pengantin_Baru
Saphira.B
Saphira.B.sys
Xcrack
Xcrack.inf

Download PCMAV 3.0.1 Release

Download PCMAV 3.0.1 Update Build1

PCMAV 3.0 Update Build4 (Pengantin_Baru)

2010-03-27T00:24:00.000-07:00

PCMAV 3.0 Update Build4 have been present with the addition of 10 new virus variant identification. For those users PCMAV 3.0, it is strongly recommended to update immediately, so that you PCMAV can recognize and eradicate the virus even more.
Pengantin_Baru. The virus is created with Visual Basic, on-pack and generate approximately the size of 16 KB. He uses Windows Media Player icon to trick users into running the virus file. On a removable disk that encountered him, he makes a file named "Baru.exe Bride." In order for active viruses every time you log in Windows, the virus program installed itself on startup by the name sistem.pif, and manipulating the following registry:

HKLM \ Software \ Microsoft \ Windows \ CurrentVersion \ Run \ disksys
HKCU \ Control Panel \ Desktop \ SCRNSAVE.EXE

Some of the files created by the virus:
WINDOWS \ MSConfig.exe
WINDOWS \ system32 \ cedit.com
WINDOWS \ system32 \ flower.scr

At the Windows Logon, the virus displays a message that read:

FREEZY!!!, KUTUNGGU JANDAMU !!!

List of virus addition to Build4 PCMAV 3.0 Update:
Alcxsntr
Alcxsntr.inf
AngeloCaliber.C
Aurel_666
Autoit.EV
Autoit.EW
Autoit.EW.ini
BigBang
BlackMoron.B
Dots.inf
Dots.vbs
EsTeh
EsTeh.exe.A
EsTeh.exe.B
EsTeh.exe.C
EsTeh.exe.D
EsTeh.ico.A
EsTeh.ico.B
EsTeh.ico.C
EsTeh.ico.D
EsTeh.ico.E
EsTeh.ico.F
EsTeh.ico.G
EsTeh.inf
Exel
Exel.bat
F3ndhi
F3ndhi.inf
Flu_B0k3p.A
Flu_B0k3p.A.htm
Gasak.A
Gasak.A.bat
Gasak.A.reg.A
Gasak.A.reg.B
Gasak.B
Gasak.B.reg
Gasak.C
LoveStory.C
Lucu.D
M3Reincarnation.B
Malingsi.L
Malingsi.L.dll
Malingsi.L.exe
Malingsi.M
Malingsi.N
Malingsi.N.dll.A
Malingsi.N.dll.B
Malingsi.N.dll.C
Malingsi.N.dll.D
Malingsi.N.exe
Malingsi.N.ini
Malingsi.N.mrc
Malingsi.O
Malingsi.O.dll
Malingsi.O.dll
Malingsi.O.dll
Malingsi.O.exe
Malingsi.O.ini
Malingsi.O.mrc
Mshearts.vbs.B
Nhac_moi
Nhac_moi.inf
Pengantin_Baru
Smanda
Smanda.txt
Test-Eicar-File.B
Winlogon
Winlogon.inf
Xcrack
Xcrack.inf
Xevil.sys.vbs
Xevil.sys.vbs.inf
Xj9_Athl0n
Xj9_Athl0n.inf

Download PCMAV 3.0 Update Build4 (Pengantin_Baru)

PCMAV 3.0 Update Build3 (Dots)

2010-03-22T00:14:00.000-07:00

PCMAV 3.0 Update Build3 have been present with the addition of 11 new virus variant identification. For those users PCMAV 3.0, it is strongly recommended to update immediately, so that you PCMAV can recognize and eradicate the virus even more.

Dots. This virus-sized 5 KB, and created using VBScript. Because the form of text files, program code with VBScript language can be directly analyzed in the body of the virus, although the virus makes it difficult to read by giving the variable names that look random. At each root drive that are detected, these viruses replicate themselves by name System32.sys.vbs, also creates a file called autorun.inf file is a virus. One characteristic of these viruses is to add a title caption Internet Explorer browser with the inscription:

.::selamat datang di komputer DOTS::.

List of virus addition to Build3 PCMAV 3.0 Update:.
Alcxsntr
Alcxsntr.inf
AngeloCaliber.C
Aurel_666
Autoit.EV
Autoit.EW
Autoit.EW.ini
BigBang
BlackMoron.B
Dots.inf
Dots.vbs
EsTeh
EsTeh.exe.A
EsTeh.exe.B
EsTeh.exe.C
EsTeh.exe.D
EsTeh.ico.A
EsTeh.ico.B
EsTeh.ico.C
EsTeh.ico.D
EsTeh.ico.E
EsTeh.ico.F
EsTeh.ico.G
EsTeh.inf
Exel
Exel.bat
F3ndhi
F3ndhi.inf
Flu_B0k3p.A
Flu_B0k3p.A.htm
Gasak.A
Gasak.A.bat
Gasak.A.reg.A
Gasak.A.reg.B
Gasak.B
Gasak.B.reg
Gasak.C
LoveStory.C
Lucu.D
M3Reincarnation.B
Malingsi.L
Malingsi.L.dll
Malingsi.L.exe
Malingsi.M
Malingsi.N
Malingsi.N.dll.A
Malingsi.N.dll.B
Malingsi.N.dll.C
Malingsi.N.dll.D
Malingsi.N.exe
Malingsi.N.ini
Malingsi.N.mrc
Mshearts.vbs.B
Nhac_moi
Nhac_moi.inf
Smanda
Smanda.txt
Test-Eicar-File.B
Winlogon
Winlogon.inf
Xevil.sys.vbs
Xevil.sys.vbs.inf
Xj9_Athl0n
Xj9_Athl0n.inf

Download PCMAV 3.0 Update Build3 (Dots)

PCMAV 3.0 Update Build2 (Smanda)

2010-03-14T00:07:00.000-08:00

PCMAV 3.0 Update Build2 have been present with the addition of 13 new virus variant identification. For those users PCMAV 3.0, it is strongly recommended to update immediately, so that you PCMAV can recognize and eradicate the virus even more.

Smanda. The virus is made using Visual Basic programming language, the size of approximately 30 KB in a state in-pack. These viruses replicate themselves by the name of the file, among others:

- My Photo.exe
- Infected WITH GT.exe
- Terminate.exe
- Monitoring.exe
- User Internet.exe
- Smanda.exe
- Dont kill me.exe
- Sampit.exe
- Tragedi.exe East, and others.

Especially for Photo.exe My files, will be created on the root drive that is found from drive C to Z. He also created GT.txt Readme file that contains text and ASCII art as shown.

List of virus addition to Build2 PCMAV 3.0 Update:
Alcxsntr
Alcxsntr.inf
AngeloCaliber.C
Aurel_666
Autoit.EV
BigBang
BlackMoron.B
EsTeh
EsTeh.exe.A
EsTeh.exe.B
EsTeh.exe.C
EsTeh.exe.D
EsTeh.inf
Exel
Exel.bat
F3ndhi
F3ndhi.inf
Flu_B0k3p.A
Flu_B0k3p.A.htm
Gasak.A
Gasak.A.bat
Gasak.A.reg.A
Gasak.A.reg.B
Gasak.B
Gasak.B.reg
Gasak.C
LoveStory.C
Lucu.D
M3Reincarnation.B
Malingsi.L
Malingsi.L.dll
Malingsi.L.exe
Malingsi.M
Malingsi.N
Malingsi.N.dll.A
Malingsi.N.dll.B
Malingsi.N.dll.C
Malingsi.N.dll.D
Malingsi.N.exe
Malingsi.N.ini
Malingsi.N.mrc
Mshearts.vbs.B
Nhac_moi
Nhac_moi.inf
Smanda
Smanda.txt
Test-Eicar-File.B
Winlogon
Winlogon.inf
Xevil.sys.vbs
Xevil.sys.vbs.inf
Xj9_Athl0n
Xj9_Athl0n.inf

Download PCMAV 3.0 Update Build2 (Smanda)

PCMAV 3.0 Update Build1 (Exel)

2010-03-12T23:25:00.000-08:00

PCMAV 3.0 Update Build1 have been present with the addition of 40 new virus variant identification. For those users PCMAV 3.0, it is strongly recommended to update immediately, so that you PCMAV can recognize and eradicate the virus even more.

Exel. The virus is made using Visual Basic programming language, the size of about 132 KB. This virus will create a duplicate file on the root drive virus is found with names such as: Exel.exe, Data67Exel.exe, Backup1.bat, Kas.exe, Laporan.exe. He would also imitate the name of the file with the extension *. ppt, *. doc, *. xls, *. cob it detects the drives G, H and I, of course with exe extension which is a virus file that has the logo features the Excel application. After creating counterfeit copies files, this virus will delete the original files. At the times specified, the virus will display a message box that read "TOLONG DONG MASUKIN KERTAS KE PRINTER…. SAYA NUMPANG CETAK SEDIKIT", "and print the following text (if the condition of the active printer):

NUMPANG CETAK YA?
SOALNYA PRINTER SAYA LAGI ERROR
JANGAN DIBACA ISINYA KARENA ANDA PASTI TIDAK BISA MELIHAT
KECUALI DIBACA JAM 12 MALAM NANTI SAMA SAYA………
SAYA KASIH TAU DIKIT YA.. ISINYA TENTANG KEKAYAAN BOS SAY
KALAU MAU TAHU SEMUANYA TUNGGU SAJA.hi….hi… hi..hi..hi…

List of virus addition to Build1 PCMAV 3.0 Update:
AngeloCaliber.C
Aurel_666
BigBang
BlackMoron.B
EsTeh
EsTeh.exe.A
EsTeh.exe.B
EsTeh.exe.C
EsTeh.exe.D
EsTeh.inf
Exel
Exel.bat
F3ndhi
F3ndhi.inf
Flu_B0k3p.A
Flu_B0k3p.A.htm
Gasak.A
Gasak.A.bat
Gasak.A.reg.A
Gasak.A.reg.B
Gasak.B
Gasak.B.reg
Gasak.C
LoveStory.C
Lucu.D
M3Reincarnation.B
Malingsi.L
Malingsi.L.dll
Malingsi.L.exe
Malingsi.M
Mshearts.vbs.B
Nhac_moi
Nhac_moi.inf
Test-Eicar-File.B
Winlogon
Winlogon.inf
Xevil.sys.vbs
Xevil.sys.vbs.inf
Xj9_Athl0n
Xj9_Athl0n.inf

Download PCMAV 3.0 Update Build1

False Alarm on PCMAV 3.0 AVG

2010-03-11T23:24:00.000-08:00

Some users of AVG antivirus, maybe get a Trojan Horse virus detection messages SHeur2.CKXV when copying or use of the DVD Ragnarok 3.0 PCMAV PC Media magazine 04/2010.

Detection is the result of the wrong AVG heuristic engine detects files as Trojan Horse PCMAV.exe SHeur2.CKXV (false alarms). Quite a lot of other antivirus software users: PCMAV Avast/Avast5 also wrong as the virus detected by the name of the Win32: Malware-gen.

The research we did shows, the false alarm occurs because the file PCMAV.exe on-pack with EXE packer who sometimes use malware (though it certainly can basically be used by other executable file). Heuristic Engine is designed less accurate by the manufacturer may cause false alarms.

PCMAV itself always pass through a strict quality control and improvised from time to time in order to be used safely. False alarms this has not occurred by the time we do quality control and hopefully quickly corrected by antivirus concerned. In the next PCMAV development, we anticipate this will also minimize the occurrence of false alarms by other antivirus.

So, you can still use PCMAV 3.0 safely. If you use another antivirus PCMAV together, be sure to only activate one antivirus at a time to prevent false alarms.

PCMAV 3.0 Ragnarok Release

2010-03-09T22:59:00.000-08:00

PC Media Antivirus or usually known by this PCMAV, has released the latest version, which is PCMAV 3.0 with code name Ragnarok. As a blogger buddies know Ragnarok own name is the name of a game played by many people throughout the world.

PCMAV who claim to be the antivirus that can "drive" the virus with the level of accuracy reached 100% of this has added some new features in pcmav 3.0.
Features include:

* Rewrite ENGINE OPTIMIZATION: Transcribing radically most components core code PCMAV to comply with the compiler new generation that is used by PCMAV 3.0. The result, PCMAV is now more compatible and stable on Windows 7 32-bit.
* Lightest ON SYSTEM RESOURCES: Compared PCMAV previous generation, PCMAV 3.0 is now truly extraordinary is lighter because it can save the use of memory up to 90%, although with the introduction of database virus of the largest in Indonesia (more than 3000 viruses). In Windows XP SP3, is idle, the average use of memory by PCMAV 3.0 for only 2 MB of! Compare with PCMAV previous generation which is idle requires 35 MB of the use of memory.
* Multicore CPU scanning OPTIMIZATION: PCMAV 3.0 run faster on multi-core CPUs latest generation. With the use of multi-thread nan complex, PCMAV 3.0 capable to work faster by utilizing the benefits of architecture multi-core CPUs automatically, either CPU based on Intel HT (Pentium 4, Atom, Core i3/i5/i7, etc..) Or AMD. From the results of tests on Netbook Intel Atom N270 with Windows XP SP3, PCMAV 3.0 capable to work 2x faster than PCMAV previous generation.
* UPDATED! Added database identifier and cleaning 30 viruses of local / foreign / new variants are reported spread in Indonesia. Total 3164 virus and its variants.
* Improved! Change the name of the virus following the new variants found.

IN A NEW VIRUS PCMAV 3.0 (30 Virus)
Autoit.ES
Autoit.ES.inf
Autoit.ET
Autoit.EU
Autoit.EU.inf
Buxto.E
Cobax.exe.B
EvolutionMp3
Flyff666.vbs
Flyff666.vbs.inf
Harpot.J
IFunU
Istig.C
Istig.D
Istig.E
M3Reincarnation
M3Reincarnation.sys
Malingsi.J
Malingsi.J.dll.A
Malingsi.J.dll.B
Malingsi.J.dll.C
Malingsi.J.dll.D
Malingsi.J.dll.E
Malingsi.J.exe
Malingsi.J.ini.A
Malingsi.J.ini.B
Malingsi.J.mrc
Download PCMAV 3.0 Ragnarok Release

PCMAV 2.3 Update Build4(EsTeh)

2010-02-27T22:27:00.000-08:00

PCMAV 2.3 Update Build4 been present with the addition of 9 new virus variant identification. For those users PCMAV 2.3, it is strongly recommended to update immediately, so that your PCMAV can recognize and eradicate the virus even more.

EsTeh. The virus is created with Visual Basic programming language and is about 189 KB. The virus is spread by copying a file name has a certain extension (such as *. avi, *. doc). Virus file disguised berekstensi *. exe, changed the original file attributes to hidden, and the virus will try to imitate the original file icon with one from a collection of icons that you have extract the temporary folder. Icon files are extracted virus named doc.ico, folder.ico, mptre.ico, rar.ico, txt.ico, wmp.ico, and xls.ico.

String "Es Teh" look at the Product Name (right-click the virus file, select Properties - Version). String is also used to define the project name with the extension *. vbp the reading on the body of the virus.

If a text file opened with Notepad, which is not seen the contents of text files, but the animation's words below:
Kenapa kamu baca?

Tulisan sy ini jelek tau…

Tidak pantas untuk di baca..!

Tapi kalo di paksa untuk di baca

nanti sy bilangin orangnya jelek, kaya tulisan sy…

[yang baca tulisan sy]
SALAM KENAL AJA

By : vbSor0n9

List of virus addition to PCMAV 2.3 Update Build4:
AngeloCaliber.C
Aurel_666
Autoit.ES
Autoit.ES.inf
Autoit.ET
Autoit.EU
Autoit.EU.inf
BigBang
BlackMoron.B
Buxto.E
Cobax.exe.B
EsTeh
EsTeh.exe.A
EsTeh.exe.B
EsTeh.exe.C
EsTeh.exe.D
EsTeh.inf
EvolutionMp3
F3ndhi
F3ndhi.inf
Flyff666.vbs
Flyff666.vbs.inf
Gasak.A
Gasak.A.bat
Gasak.A.reg.A
Gasak.A.reg.B
Gasak.B
Gasak.B.reg
Harpot.J
IFunU
Istig.C
Istig.D
Istig.E
LoveStory.C
M3Reincarnation
M3Reincarnation.sys
Malingsi.J
Malingsi.J.dll.A
Malingsi.J.dll.B
Malingsi.J.dll.C
Malingsi.J.dll.D
Malingsi.J.dll.E
Malingsi.J.exe
Malingsi.J.ini.A
Malingsi.J.ini.B
Malingsi.J.mrc
Malingsi.K
Malingsi.L
Malingsi.L.dll
Malingsi.L.exe
Malingsi.M
Nhac_moi
Nhac_moi.inf
Soundvc
Test-Eicar-File.B
UnDeepFreeze
Winlogon
Winlogon.inf
Xevil.sys.vbs
Xevil.sys.vbs.inf

Download PCMAV 2.3 Update Build4(EsTeh)

PCMAV 2.3 Update Build3(Xevil.sys.vbs)

2010-02-20T22:23:00.000-08:00

PCMAV 2.3 Update Build3 been present with the addition of 11 new virus variant identification. For those users PCMAV 2.3, it is strongly recommended to update immediately, so that your PCMAV can recognize and eradicate the virus even more.

Xevil.sys.vbs. A virus is made by using VBScript, measuring approximately 5 KB. This virus infects any hard disk drives root / removable disk that is encountered (except drive A) and make copies of the virus file named xevil.sys.vbs, and create a autorun.inf file to execute the virus. Xevil.sys.vbs file will also dicopykan on the folder \ Windows. On the Internet Explorer browser title, the virus will add the string.:: This System Has Been Defaced by X-Evil::.

List of virus addition to PCMAV 2.3 Update Build3:
AngeloCaliber.C
Aurel_666
Autoit.ES
Autoit.ES.inf
Autoit.ET
Autoit.EU
Autoit.EU.inf
BigBang
Buxto.E
Cobax.exe.B
EvolutionMp3
Flyff666.vbs
Flyff666.vbs.inf
Gasak.A
Gasak.A.bat
Gasak.A.reg.A
Gasak.A.reg.B
Gasak.B
Gasak.B.reg
Harpot.J
IFunU
Istig.C
Istig.D
Istig.E
LoveStory.C
M3Reincarnation
M3Reincarnation.sys
Malingsi.J
Malingsi.J.dll.A
Malingsi.J.dll.B
Malingsi.J.dll.C
Malingsi.J.dll.D
Malingsi.J.dll.E
Malingsi.J.exe
Malingsi.J.ini.A
Malingsi.J.ini.B
Malingsi.J.mrc
Malingsi.K
Malingsi.L
Malingsi.L.dll
Malingsi.L.exe
Malingsi.M
Nhac_moi
Nhac_moi.inf
Soundvc
Test-Eicar-File.B
UnDeepFreeze
Winlogon
Winlogon.inf
Xevil.sys.vbs
Xevil.sys.vbs.inf

Download PCMAV 2.3 Update Build3(Xevil.sys.vbs)

PCMAV 2.3 Update Build2(BigBang)

2010-02-14T22:16:00.000-08:00

PCMAV 2.3 Update Build2 been present with the addition of 10 new virus variant identification. For those users PCMAV 2.3, it is strongly recommended to update immediately, so that your PCMAV can recognize and eradicate the virus even more.

BIGBANG. The virus is created with Visual Basic programming language, is about 20 KB in a state of too-pack. Some virus files will be created on the root drive with the file name Dewi.exe Sandra, Luna Maya.exe, DSC_0506.exe, DSC_1505.exe and so on. BIGBANG string seen when the virus file right click, select Properties - Version - Internal Name. Some applications will be transferred by a virus, among others:

- When you access the command prompt (Start - Run - cmd), an application called the OSK (On Screen Keyboard).
- When accessing MS Config (Start - Run - msconfig), the application is called MSheart game.
- When accessing the Task Manager (Start - Run - taskmgr), the application is called Magnify.

At login, a message will appear:

PESAN DARI SURGA
PERSAHABATAN TAK AKAN PERNAH ABADI

List of virus addition to PCMAV 2.3 Update Build2:
AngeloCaliber.C
Aurel_666
Autoit.ES
Autoit.ES.inf
Autoit.ET
Autoit.EU
Autoit.EU.inf
BigBang
Buxto.E
Cobax.exe.B
EvolutionMp3
Flyff666.vbs
Flyff666.vbs.inf
Harpot.J
IFunU
Istig.C
Istig.D
Istig.E
LoveStory.C
M3Reincarnation
M3Reincarnation.sys
Malingsi.J
Malingsi.J.dll.A
Malingsi.J.dll.B
Malingsi.J.dll.C
Malingsi.J.dll.D
Malingsi.J.dll.E
Malingsi.J.exe
Malingsi.J.ini.A
Malingsi.J.ini.B
Malingsi.J.mrc
Malingsi.K
Malingsi.L
Malingsi.L.dll
Malingsi.L.exe
Malingsi.M
Nhac_moi
Nhac_moi.inf
Soundvc
UnDeepFreeze

Download PCMAV 2.3 Update Build2(BigBang)

PCMAV 2.3 Update Build1(M3Reincarnation)

2010-02-09T22:09:00.000-08:00

PCMAV 2.3 Update Build1 been present with the addition of 30 new virus variant identification. For those users PCMAV 2.3, it is strongly recommended to update immediately, so that your PCMAV can recognize and eradicate the virus even more.

M3Reincarnation. Measuring approximately 19 KB in a state of too-pack, this virus was made with Visual Basic programming language. Be careful because it will delete files berekstensi 3gp, and disguising himself using the name of the deleted file, but with the exe file extension, so if you run, the virus will be in action. Copies of the virus file will be created on the hard drive or removable disk with the names include:

At the root drive C, there 3gp.sys file containing source code for 3gp.txt and memciptakan files vv.reg to manipulate the registry, there is also a comment line containing the string "by M3: Reincarnation".
- windriver.exe
- ccinfo.EXE
- creditcardinfo.txt.EXE
- readme.txt
- readme.txt.exe
- version.sys
- spg_task.3gp.exe
- stba_cihampelas.3gp.exe
- msginax.dll
- dan masih banyak lagi.

List of virus addition to PCMAV 2.3 Update Build1:
Autoit.ES
Autoit.ES.inf
Autoit.ET
Autoit.EU
Autoit.EU.inf
Buxto.E
Cobax.exe.B
EvolutionMp3
Flyff666.vbs
Flyff666.vbs.inf
Harpot.J
IFunU
Istig.C
Istig.D
Istig.E
M3Reincarnation
M3Reincarnation.sys
Malingsi.J
Malingsi.J.dll.A
Malingsi.J.dll.B
Malingsi.J.dll.C
Malingsi.J.dll.D
Malingsi.J.dll.E
Malingsi.J.exe
Malingsi.J.ini.A
Malingsi.J.ini.B
Malingsi.J.mrc
Malingsi.K
Soundvc
UnDeepFreeze

Download PCMAV 2.3 Update Build1(M3Reincarnation)

PCMAV 2.3 Release

2010-02-05T21:53:00.000-08:00

Had attended the latest edition of PC Magazine Media 03/2010. Of course, also include antivirus pride Indonesia, PCMAV who has reached release 2.3. Currently, PCMAV is the only one capable of recognizing antivirus 3134 virus and its variants are reported more widespread in Indonesia.

WHAT'S NEW?
a. UPDATED! Added database identifier and cleaning viruses 27 local / foreign / new variants spread in Indonesia reported. Total 3134 virus and its variants.

b. UPDATED! Added a special cleanser that can handle the virus Zhola make some specific changes to the configuration of Windows.

c. NEW! Optimizing memory usage in PCMAV-CLN thus reducing memory usage of approximately 800 kilobytes.

d. Improved! Change the name of the virus following the new variant was found.

e. BUG FIXED! Introduction of error correction servers for sending the virus to quarantine the virus features.

f. BUG FIXED! PCMAV-RTP improvements to be compatible with Windows 7 (experimental, must be run with administrator privileges).

Download PCMAV 2.3 Release

PCMAV 2.2c Update Build4 (Flyff666)

2010-02-03T23:06:00.000-08:00

PCMAV 2.2c Update Build4 been present with the addition of 10 new virus variant identification. For those users PCMAV 2.2c, it is strongly recommended to update immediately, so that your PCMAV can recognize and eradicate the virus even more.

Flyff666. Size around 19 KB, the virus is made with VB Script. When active, the virus modifies the registry in such a way to protect herself from being able to be cleaned, such as disable regedit, task manager, command prompt, remove the desktop icon display, drive, and much more. PCMAV users infected with the virus, probably will find it difficult to run PCMAV-CLN because they can not access any drives.

Here are two tricks to run a virus PCMAV although Flyff666 already mastered your computer.

1. If you have set the parameters / regshell to have the menu "Scan with PCMAV" when right-click the file / folder, then the job will be easy. Simply select the Start menu, right-click on any icon and select "Scan with PCMAV". When PCMAV appears, click the Back button and check the checkbox My Computer (drives C or other drives will not be visible), and then scan as usual. PCMAV Flyff666 will detect the root drive C, clean and restart, your computer will return as usual.

If a way can not be done because you do not activate / regshell, try the following way.

2. Open Notepad (Start - All Programs - Accessories - Notepad), then select File menu - Open, the file name type "C: \" (or the folder where PCMAV drives are) without the quotes, it will show folders on drive C, so you can steer the PCMAV folder. Copy the folder PCMAV (with the Ctrl + C), then close it just Notepad. Then select Start - My Computer, navigate to Shared Documents or any folder visible, then paste (Ctrl + V) PCMAV folder, and run PCMAV-CLN.

After doing the steps above, do not forget to scan the contents of your hard drive once again to ensure no files remaining Flyff666 virus.
So, do not worry even when logged in, the virus will bully you with the following message:

H4 × 0r3d By Flyff 666

My program is Evil that will take over your computer! Hasbeen System Hacked BY: 666 From Indonesian Flyff Hackers Community

List of virus addition to 2.2c Update PCMAV Build4:
Albim
Autoit.ES
Autoit.ES.inf
Autoit.ET
Autorunme.G
Avt-Net
Avt-Net.dll
CintaKampus
Cobax.exe.A
Cobax.exe.B
Cuakep.G
EvolutionMp3
Flyff666.vbs
Flyff666.vbs.inf
Gambar
Gambar.bat.A
Gambar.bat.B
Geografi.B
Harpot.J
IFunU
Istig.C
Istig.D
Istig.E
Lucu.C
Malingsi.J
Malingsi.J.dll.A
Malingsi.J.dll.B
Malingsi.J.dll.C
Malingsi.J.dll.D
Malingsi.J.dll.E
Malingsi.J.exe
Malingsi.J.ini.A
Malingsi.J.ini.B
Malingsi.J.mrc
Malingsi.K
Mobird
Mobird.inf
Msa
Mshearts.htm
Mshearts.inf
Mshearts.vbs
Random8
Serviks
Serviks.inf
Serviks.vbs
Shuriken.J
SlowButSure.vbs.G
SlowButSure.vbs.G.inf
Soundvc
UnDeepFreeze
Zhola
Zhola.inf

Download PCMAV 2.2c Update Build4 (Flyff666)

PCMAV 2.2c Update Build3 (EvolutionMp3)

2010-01-22T16:33:00.000-08:00

Update PCMAV 2.2c Build3 been present with the addition of 15 new virus variant identification. For those users PCMAV 2.2c, it is strongly recommended to update immediately, so that your PCMAV can recognize and eradicate the virus even more.

EvolutionMp3. The virus is created with Visual Basic programming language, with a size of about 44 KB. Berekstensi *. mp3 files in which he discovered will be removed and replaced with virus files. Configuring the click of a mouse-click will be confused between right and left click. For example, if you're used to run an application by double-clicking the left mouse button, then when the virus is active, you can just run the application by double-clicking the right mouse button. Each will enter Windows, the virus displays the following message:

STOP PIRACY!!!!

Stop pembajakan Musisi Dalam Negeri, Jangan Gunakan MP3 lagi (sok sok an) huahahahahaha!!!

List of virus addition to 2.2c Update PCMAV Build3:
Albim
Autoit.ES
Autoit.ES.inf
Autorunme.G
Avt-Net
Avt-Net.dll
CintaKampus
Cobax.exe
Cuakep.G
EvolutionMp3
Gambar
Gambar.bat.A
Gambar.bat.B
Geografi.B
IFunU
Istig.C
Lucu.C
Malingsi.J
Malingsi.J.dll.A
Malingsi.J.dll.B
Malingsi.J.dll.C
Malingsi.J.dll.D
Malingsi.J.dll.E
Malingsi.J.exe
Malingsi.J.ini.A
Malingsi.J.ini.B
Malingsi.J.mrc
Mobird
Mobird.inf
Msa
Mshearts.htm
Mshearts.inf
Mshearts.vbs
Random8
Serviks
Serviks.inf
Serviks.vbs
Shuriken.J
SlowButSure.vbs.G
SlowButSure.vbs.G.inf
Zhola
Zhola.inf

Download PCMAV 2.2c Update Build3 (EvolutionMp3)

Virus Analysis Wmplayerc

2010-01-22T16:23:00.000-08:00

Wmplayerc a local worm has been known since Update PCMAV 2.2a Build3 and reportedly widespread in Indonesia. This time will be shown more complete analysis. Adverse effects of this virus is to delete the multimedia files that are recognized from the list of file extensions that are stored in the body of the virus. Multimedia files found will be replaced with a virus file that is ready to run and spread.

File Extension List
Here is a list of multimedia file extensions that can be a victim of this virus are:
.AVI
.3GP
.MP4
.FLV
.ASF
.M4V
.MPE
.VMV
.M1V
.M2V
.VOB
.MOV
.WVX
.MKV
.MPA
.MPV
.DIV
.M2P
.3G2
.DAT
.MPEG
.DIVX
.REAL

Folder Manipulation
In an attempt to hide ourselves and re-active (if you managed to kill the process in memory), the virus makes copies of folders on the root drive in the form of shortcuts / links, and hide the original folder with attributes System / superhidden.

As a result, your computer quick look fine, except when noted through Windows Explorer, you will see a folder on the root drive (eg Windows, Program Files) has size 2 KB. Meanwhile, the actual folder does not
include the size in Windows Explorer. To see the actual condition, set the configuration of Windows Explorer by selecting Tools menu - Folder Options, pililh "Show hidden files and folders" and uncheck the option "Hide extensions for known file types" and "Hide protected operating system files (Recommended) ".

What happens when you click on the folder that lies? Which is run the following command:

%WINDIR%\system32\rundll32.exe Shell32.dll,ShellExec_RunDLL “RÊCYCLÊR\ .com” “NamaFolder”

"Foldername" is the actual folder. Open the folder, but before the virus has been executed, the virus shows that the parent is stored with the name ". Com" (without quotes) in the RÊCYCLÊR folder.

Surgery Virus
This virus has some "gallant list" of URLs pornographic websites locally, so when the infected computer browsing to pornographic websites, the computer will shutdown itself.

The virus also checks for running programs, by detecting the caption contained in the program. Back a few words connote porn banned by the virus. In addition, string Norman Malware Cleaner, PROCEXPL, PeiD v0.95, PeiD v0.94, and OLLYDBG also includes a list of strings that will make the virus to shutdown the computer.

Computers can be infected with this virus through a flash disk that has been infected, ie when the user clicks the folder lies on a flash disk or storage media that the caller is actually a viral link. In addition, ketidakwaspadaan also can make you click on a virus file disguised as multimedia files, complete with a media player icon to trick users.

In addition to creating a master file which is about 66 KB in RÊCYCLÊR folders, files parent folder is also created in Program Files \ Windows Media Player with Wmplayerc.exe or Xvidshow.exe name (if your computer installed the XviD codec). Retrieving string with dissected and mapped back to the body of the virus visualized in the following figure.

In the body there are also viruses command shutdown.exe-r-f-t 00, which likely is the command to be executed when detecting a virus accessing pornographic websites or specific caption. -R parameter to instruct shutdown and restart, the parameter-f to force other applications closed, and 00-t parameter is a timeout for shutdown process, in this case is set 0 seconds.

When active, the virus load the file into memory dropper with the name of svchost.exe, which is used to monitor traffic is TCP / IP so that it can detect when you run the URL included in the list of pornographic web saved by a dropper. Dropper file is created with VisualBasic and measured about 9 KB. In addition, the string reads “Tak gendong kemana-mana.. Enak Tau !!! Ha Ha Ha Ha” also appear in the body of this file.

Use the latest PCMAV for cleaning the virus completely Wmplayerc. Notice if there are files that you believe is the name of your multimedia files - but Wmplayerc detected as a virus - so the file was not the original video file again, but the virus file disguised (please check the size and the file extension if you are still in doubt ), while the original video file has vanished removed by the virus. Recovery do best if you are already experiencing this.

False Alarm ClamAV: Trojan.Rootkit-1835

2010-01-22T16:20:00.000-08:00

PCMAV 2.2c user that the computer detected "Trojan.Rootkit-1835" that infects atapi.sys file (usually located in the folder Windows \ System32 \ drivers). The virus is detected by ClamAV engine is integrated with PCMAV.

At each release PCMAV, we always perform strict quality control and continued to improvised from time to time, to ensure that PCMAV going well when you are in your hands. With this complaint, we initiated an investigation and check again. The conclusion we get is Trojan.Rootkit-1835 is detected by ClamAV on atapi.sys file is a false alarm. The solution is to update the latest ClamAV database.

The following steps ClamAV database update manually, with a consideration if you can update automatically, should not be having this false alarm because you have ClamAV database was updated. We've got feedback that this step to solve the reported false alarms concerned readers.

1. Prepare PCMAV 2.2c already integrated with ClamAV 0.95.3.
2. Download the latest database (daily.cvd) in http://www.clamav.net/download/cvd/
3. PCMAV folder, save it in the folder daily.cvd plugins \ clamav \ (old daily.cvd overwritten).
4. With this condition, PCMAV 2.2c + ClamAV 0.95.3 plus the latest database is ready.
5. Run PCMAV-CLN and PCMAV-RTP as usual.

After running these steps, false alarms should not occur again.

PCMAV 2.2c Update Build2 (SlowButSure.vbs.G)

2010-01-18T16:12:00.000-08:00

Update PCMAV 2.2c Build2 been present with the addition of 7 new virus variant identification. For those users PCMAV 2.2c, it is strongly recommended to update immediately, so that your PCMAV can recognize and eradicate the virus even more.

SlowButSure.vbs.G. Created with VBScript and measured about 8 KB, in his written
"My name is Slow but sure V1.08". Do not be fooled if the virus actually fix the registry, such as Task Manager shows if it disabled, return the Folder Options menu in Windows Explorer if it was hidden, and repair registry registry-Another common modified virus.Tapi what's the point if he himself spread and make displays annoying? One of them is to change the system properties in My Computer as a picture, writing:

Registered To:

amaze
I’m Not Panic, Virus anda sudah kami lumpuhkan !

List of virus addition to 2.2c Update PCMAV Build2:
Albim
Autorunme.G
Avt-Net
Avt-Net.dll
CintaKampus
Cobax.exe
Cuakep.G
Gambar
Gambar.bat.A
Gambar.bat.B
Geografi.B
Lucu.C
Mobird
Mobird.inf
Msa
Mshearts.htm
Mshearts.inf
Mshearts.vbs
Random8
Serviks
Serviks.inf
Serviks.vbs
Shuriken.J
SlowButSure.vbs.G
SlowButSure.vbs.G.inf
Zhola
Zhola.inf

Download PCMAV 2.2c Update Build2 (SlowButSure.vbs.G)

PCMAV 2.2c Update Build1 (Zhola)

2010-01-09T23:21:00.000-08:00

PCMAV 2.2c Update Build1 been present with the addition of 20 new virus variant identification. For those users PCMAV 2.2c, it is strongly recommended to update immediately, so that your PCMAV can recognize and eradicate the virus even more.

Zhola. Created with Visual Basic programming language without in-pack, measuring approximately 672 KB, Zhola viruses including the virus that has a payload malignant. Owned icon resembling icons of local software. He will find a variety of documents and multimedia files, and then delete it and replace it with a virus file disguised by the name of the file. In the body, the virus stores the following file extensions: *. doc, *. jpg, *. mp3, *. avi, *. mpeg, *. 3gp, *. flv, *. mpg, *. mov, *. wmv, *. wav, *. 3GP2. Any files with these extensions will be sought after the virus. In addition to any drive root met, the virus also creates files with names windows.exe, Love Letter 4 Zhola.exe, and autorun.inf as shown in screenshots.

List of virus addition to 2.2c Update PCMAV Build1:
Albim
Avt-Net
Avt-Net.dll
CintaKampus
Cuakep.G
Gambar
Gambar.bat.A
Gambar.bat.B
Geografi.B
Msa
Mshearts.htm
Mshearts.inf
Mshearts.vbs
Random8
Serviks
Serviks.inf
Serviks.vbs
Shuriken.J
Zhola
Zhola.inf

Download PCMAV 2.2c Update Build1 (Zhola)

PCMAV 2.2c Release

2010-01-07T23:00:00.000-08:00

Magazine has attended the latest edition of PC Media 02/2010. Of course, also include antivirus pride Indonesia, which has reached PCMAV release 2.2c. Currently, PCMAV is the only one capable of recognizing antivirus 3107 virus and its variants are reported more widespread in Indonesia.
WHAT'S NEW?
a. UPDATED! Added database identifier and cleaning viruses 12 local / foreign / new variants spread in Indonesia reported. Total 3107 virus and its variants.

b. Improved! Change some names to follow new variant viruses found.

Immediately get PCMAV 2.2c Valkyrie improved only from a PC Media magazine 02/2010 which had been published. Soon the message and get in the stall / nearest dealer.

Download PCMAV 2.2c Release

PCMAV 2.2b Update Build4 (Mshearts.vbs)

2010-01-04T22:55:00.000-08:00

PCMAV 2.2b Update Build4 been present with the addition of 6 new virus variant identification. For those users PCMAV 2.2b, it is strongly recommended to update immediately, so that your PCMAV can recognize and eradicate the virus even more.

Mshearts. Created with VB Script and measured about 32 KB, it attacks the root drive, including a removable disk drive letter until it reaches the O, with mengcopykan files and mshearts.vbs name autorun.inf. The presence of this virus is relatively easy to known that the virus will put a file named'M here.htm on the desktop. Messages on the HTML file contains:

.vbs LOLA 666.

– Pesan Negara –

Coba lihatlah keadaan pedidikan di negeri kami..

Apakah pemerintah sudah memberikan yang terbaik..

Masih ada yang jauh di sana..

Yang tidak menerima pendidikan..

Pemerintah tidak bertanggung jawab..

Memajukan pendidikan umum..

Ini merupakan janji kalian untuk kami..
(¯`•.¸¸.»[I’M Back]«.¸¸.•´¯)
-= Sorong papua 17-06-08 =-

List of virus addition to 2.2b Update PCMAV Build4:

Albim
Autoit.ER
Avt-Net
Avt-Net.dll
Busur.C
CintaKampus
Gambar
Gambar.bat.A
Gambar.bat.B
Geografi.B
JunJun
JunJun.bmp
JunJun.inf
JunJun.ini
Kelor
Kemben_Melorot
Meme.E
Msa
Mshearts.htm
Mshearts.inf
Mshearts.vbs
Pangeran_Cinta.inf
Pangeran_Cinta.txt
Pangeran_Cinta.vbs
Random8
Serviks
Serviks.inf
Serviks.vbs

Download PCMAV 2.2b Update Build4 (Mshearts.vbs)

PCMAV 2.2b Update Build3 (Gambar)

2009-12-27T22:47:00.000-08:00

PCMAV 2.2b Update Build3 been present with the addition of 7 new virus variant identification. For those users PCMAV 2.2b, it is strongly recommended to update immediately, so that your PCMAV can recognize and eradicate the virus even more.

Gambar. One of the troubling things that computer users are infected with the virus when the data files manipulated by the virus, whether it be deleted, in-hidden, or in-encrypt. Similarly, this virus does, is about 84 KB, the virus is made with Delphi programming language. Fortunately, this virus only change the attributes of the files with the extensions *. doc, *. xls, *. jpg, *. mp3, and *. 3gp become super hidden. Then the virus will copy filename duplicate themselves files that have changed attributes earlier. The virus is also mengcopykan himself with the name gambar.exe to some predefined folders. Like most other viruses, this virus has a specific message as a sign of its existence. Virus BACA_DULU_DONG !!!!!!!!!. create BAT file, which contains the following message:

" MAAF YA MAU PINJAM KOMPUTERNYA UNTUK ISTIRAHAT SEBENTAR AJA, BOLEHKAN ?????
JANGAN KHAWATIR KOMPUTER NYA NGAK DIAPA - APAIN DECH
SOAL NYA AQ BARU DATANG DARI TEMPAT YANG JAUH…… MAKLUMLAH MUSAFIR
Oh.. Ya… JADI LUPA NICH KENALKAN NAMAKU ” G3X.B ”
SALAM KENAL BUAT SIAPA SAJA YANG SEDANG AKTIF DI KOMPUTER INI
ADUH JADI NGEREPOTIN NICH, AQ MAU ISTRAHAT DULU YA, DA..AA.AAA
GOOD LUCK FOR YOU ! "

List of virus addition to 2.2b Update PCMAV Build3:
Autoit.ER
Busur.C
CintaKampus
Gambar
Gambar.bat.A
Gambar.bat.B
JunJun
JunJun.bmp
JunJun.inf
JunJun.ini
Kelor
Kemben_Melorot
Meme.E
Mshearts.inf
Mshearts.htm
Mshearts.vbs
Pangeran_Cinta.inf
Pangeran_Cinta.txt
Pangeran_Cinta.vbs
Serviks
Serviks.inf
Serviks.vbs

Download PCMAV 2.2b Update Build3 (Gambar)

PCMAV 2.2b Update Build2 (CintaKampus)

2009-12-19T22:39:00.000-08:00

PCMAV 2.2b Update Build2 been present with the addition of 8 new virus variant identification. For those users PCMAV 2.2b, it is strongly recommended to update immediately, so that your PCMAV can recognize and eradicate the virus even more.

CintaKampus. Bustling campus activities allows the virus is spreading quickly, and when it spreads, the virus does not care whether you are friend or foe of the maker. Virus CintaKampus theme is carried on campus, created by using Visual Basic and measuring less than 196 KB. This virus contains the timer that detects certain hours, which makes the display screen to be reversed, or execute the Notepad program contains a virus message as follows:

" kok kampus jadi gak ada kegiatan ??
ada apa…?, apa gak butuh perobahan dikampus!
We Love Our Campus!
buat kamoe2 yang ngebaca pesan ini,gimana??
kami harap begitu pula…
jangan biarkan kampus vakum dari kegiatan..
Mari ciptakan kreativitas untuk kemajuan kampus "

List of virus addition to 2.2b Update PCMAV Build2:
Autoit.ER
Busur.C
CintaKampus
JunJun
JunJun.bmp
JunJun.inf
JunJun.ini
Kelor
Kemben_Melorot
Meme.E
Pangeran_Cinta.inf
Pangeran_Cinta.txt
Pangeran_Cinta.vbs
Serviks
Serviks.vbs

Download PCMAV 2.2b Update Build2 (CintaKampus)

PCMAV 2.2b + Update Build1 Release

2009-12-17T18:47:00.000-08:00

PC Magazine Media 01/2010 has the latest edition published. As always, accompanied by antiviral pride Indonesia, PCMAV which now has reached the release 2.2b. Currently, PCMAV is the only one capable of recognizing antivirus 3096 virus and its variants are reported more widespread in Indonesia.

WHAT'S NEW?
a. UPDATED! Added database identifier and cleaning viruses 20 local / foreign / new variants spread in Indonesia reported. Total 3096 virus and its variants.
b. Improved! Change some names to follow new variant viruses found.

Jun: 2.2b Update PCMAV Build1
Update Build1 comes with the addition of 8 new virus variant identification. For those users PCMAV 2.2b is recommended to update immediately, so that your PCMAV can recognize and eradicate the virus even more.

June The virus is made by using the Microsoft compiler C + +, infected computers will have an information system (My Computer - Properties) to display the logo of this virus, which is taken from oemlogo.bmp and oeminfo.ini files stored in the folder Windows \ System32. Apparently not a local virus.

List of virus addition to 2.2b Update PCMAV Build1:
Autoit.ER
Jun
Jun.bmp
Jun.inf
Jun.ini
Kelor
Kelor.reg
Meme.E

Download PCMAV 2.2b Release

Download PCMAV 2.2b Update Build1

Download PCMAV 2.2b Valkyrie Update Build1 + Clamav (678.670+8 virus)

PCMAV 2.2a Update Build4(Kelor)

2009-12-11T17:24:00.000-08:00

Update Build4 comes with the addition of 6 new virus variant identification. For those of you 2.2a PCMAV users are strongly encouraged to update immediately, so that you PCMAV can recognize and eradicate the virus even more.

Kelor. Created with Visual Basic, this virus is about 88Kb, the parent file using Excel icon. Message to continue to study this virus appear in an Excel worksheet:

DAFTAR MOTTO ANAK STMIK XXXXXXX

- Belajar dan Pokoknya Belajar
- Lagi-Lagi Belajar
- Tak Ada Kata Untuk Tidak Belajar
- Kapan Sih Kita Berhenti Belajar???
- Belajar Untuk Maju, Maju Untuk Bisa Berada di Depan
- Kalau Berada Di Deretan Terdepan, Pasti Akan Mudah Dilihat Orang
- Kalau Anda Dilihat Orang, Pasti Orang Itu Akan Mencari Tahu Siapa Anda dan Apa Yang Bisa Anda Perbuat

by. Pemangsa Kelor……..(2006.02.0xx)

Also features, the virus also changes the text on the Windows Start button with the nickname maker (Predators Kelor) and the name of a STMIK.

List of virus addition to 2.2a Update PCMAV Build4:
Abzenz
Actualizador
Angelo.D
Angelo.E
Busur.B
Fajr
Hailua
Indaboxa
Jun
Jun.bmp
Jun.inf
Jun.ini
Jview
Kelor
Kelor.reg
Komputeik
Pla
Purwokerto-Raong
Skripsi-Ani
Spiderman5
Wmplayerc.A
Wmplayerc.B
WmplayerC.host
Xnd1.vbs
Xnd1.vbs.inf
Xnd1.vbs.html
Download PCMAV 2.2a Update Build4(Kelor)

PCMAV 2.2a Update Build3 (Wmplayerc)

2009-12-01T00:03:00.000-08:00

Build3 Update 3 comes with the addition of a new virus variant identification. For those of you 2.2a PCMAV users are strongly encouraged to update immediately, so that you PCMAV can recognize and eradicate the virus even more.

Wmplayerc. This virus is about 66Kb (Wmplayerc.A variant), or 262Kb (Wmplayerc.B variant). Typical example create a shortcut to the folders found on the root drive, while the original folders are hidden himself. In the folder Program Files \ Windows Media Player, will create the file "wmplayerc.exe" which is a file virus.Virus also create folders with names in it too RÊCYCLÊR which contains a virus file named ". Com". PCMAV Update 2.2a Use Build3 to detect the presence of this virus. To membasminya, use PCMAV 2.2b is included on the PC Magazine Media 01/2010 edition that will soon be published.

List of virus addition to 2.2a Update PCMAV Build3:
Abzenz
Actualizador
Angelo.D
Angelo.E
Busur.B
Fajr
Hailua
Indaboxa
Jview
Komputeik
Pla
Purwokerto-Raong
Skripsi-Ani
Spiderman5
Wmplayerc.A
Wmplayerc.B
Wmplayer.host
Xnd1.vbs
Xnd1.vbs.inf
Xnd1.vbs.html

Download PCMAV 2.2a Update Build3 (Wmplayerc)

PCMAV 2.2a Update Build2 (Xnd1)

2009-11-30T23:58:00.000-08:00

Update Build2 comes with the addition of 7 new virus variant identification. For those of you 2.2a PCMAV users are strongly encouraged to update immediately, so that you PCMAV can recognize and eradicate the virus even more.

Xnd1. General enough message of love made by a virus, one of which is a virus Xnd1 made with this VBScript, is about 10KB. This virus creates a file in the root Defau1t.HTML drive that contains the virus message, but that he also created some virus files with the extension *. vbs.

List of virus addition to 2.2a Update PCMAV Build2:
Abzenz
Actualizador
Angelo.D
Angelo.E
Busur.B
Fajr
Hailua
Indaboxa
Jview
Komputeik
Pla
Purwokerto-Raong
Skripsi-Ani
Spiderman5
Xnd1.vbs
Xnd1.vbs.inf
Xnd1.vbs.html

Download PCMAV 2.2a Update Build2 (Xnd1)

PCMAV 2.2a Update Build1 (Indaboxa)

2009-11-05T21:59:00.000-08:00

Update Build1 comes with the addition of 10 new virus variant identification. For those of you 2.2a PCMAV users are strongly encouraged to update immediately, so that you PCMAV can recognize and eradicate the virus even more.

Indaboxa. The virus is made using Visual Basic to the size of about 40KB.File-created files on the root drive, among others called "leakage UAN and UAS.exe", "Counter Strike.exe", and other file names that could be inviting the user to run it if unawares. If you view the properties file his Comment on the Version and Company will be listed: INDABOXA.

One characteristic of this virus is to change the registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\ CurrentVersion\Policies\ LegalNoticeText with the message: "ERROR NOT ON YOUR COMPUTER BUT ON YOURSELF". The message will appear when users press CTRL + ALT + DEL to enter into the Windows Log On, or when do want to Log Off and login with another user account.

List of virus addition to 2.2a Update PCMAV Build1:
Abzenz
Angelo
Busur.B
Fajr
Hailua
Indaboxa
Jview
Purwokerto-Raong
Skripsi-Ani
Spiderman5

Download PCMAV 2.2a Update Build1 (Indaboxa)

PCMAV 2.2 Release

2009-11-05T19:49:00.000-08:00

Together with the publication of the magazine edition 11/2009 PCMedia, PCMAV again present. With labels PCMAV 2.2 PCMAV 3.0251 have been able to detect many viruses that circulated in Indonesia. One is fun, in this version of PCMAV "get along" with Avira that I use on the computer. PCMAV version 2.2 is free of viruses and also Induc free from false alarms Avira. (what about the other anti-virus you use, please fill out the comment below)

But when I try to run the first time I was not PCMAV 2.2 can not walk straight and only stopped when checking the updates via the Internet. For the record my computer is connected to the Internet. Finally I when I turn off its Internet new PCMAV can walk.

PCMAV new in 2.2:

1. UPDATED! Added to the database 71 identifying and cleaning local virus / foreign / new variants spread in Indonesia reported. Total 3025 virus and its variants, including variants Conficker sophisticated viruses that circulated in Indonesia, many well-known in this 2.2 version.
2. Improved! Added a special identifier that can identify the virus are much Induc reported around the world.
3. BUG FIXED! Error detection (false alarms) heuristic on some programs and scripts.
4. Improved! Change some names to follow new variant viruses found.
5. Improved! Fixes some minor bugs and improvisation internal code to ensure that the remains can be PCMAV antivirus Indonesian pride.

DOWNLOAD PCMAV 2.2

PCMAV 2.1a Update Build4 (Rinarudy)

2009-10-09T03:51:00.000-07:00

Update Build4 comes with the addition of 10 new virus variant identification. For those users PCMAV 2.1A highly recommended to update immediately, so that you PCMAV can recognize and eradicate the virus even more.

Rinarudy. The virus is made using Visual Basic to the size of about 56KB. Will create a virus file in each root drive that he met with Rina_Rudy_Luph_You_Banged.exe name. And create a new folder with the name "Jatimcrew Under Cover" by the contents of the file the same virus. Also create a new folder with the name "LuphRina" with the contents of a file with the name LuphRina.exe. The virus is similar to using Microsoft Word icon to fool the user, so do not get fooled with it. At a certain time, he also displays a black background with red writing that will cover your screen.

List of virus addition to 2.1A PCMAV Update Build4:
Ageia.vbs
Aibo.B
Apong-Valeria.B
Astuty.B
Autoit.EL
Autoit.EL.exe
Autoit.EL.inf
Charis.vbs
Charis.vbs.inf
Darkbot
Foldres.C
GameVB.C
Gdmae.vbs
Geografi
Getrawen.C
Ketik
Kupret
Malingsi.H
Malingsi.H.exe
Malingsi.I
Minerva.C
MoneyMy.C
Nhatquanglan.D
Phim
Phim.inf
Riand.C
Rinarudy
Ronkor.B
Ronkor.txt.B
Shinchan
Shinchan.htt
Shinchan.inf
Shinchan.ini
SmsCinta.vbs.B
Thumbs.vbs.B
Tigdua
Tugas.C
Unindra
Zayus
Zayus.txt

Download PCMAV 2.1a Update Build4 (Rinarudy)

PCMAV 2.1a Update Build3 (Riand.C)

2009-09-29T21:39:00.000-07:00

Update Build3 comes with the addition of 10 new virus variant identification. For those users PCMAV 2.1A highly recommended to update immediately, so that you PCMAV can recognize and eradicate the virus even more.

Riand.C. Viruses are created using Visual Basic is disguised with a folder-like icon. As show time at 21:00, he will display a message saying "Hey we meet again?" With the Ok button. When the button is clicked, the virus will display the image some men - men with the words "Coming through YEach woi !!!!".

List of virus addition to 2.1A PCMAV Update Build3:
Ageia.vbs
Astuty.B
Charis.vbs
Charis.vbs.inf
Darkbot
Foldres.C
GameVB.C
Gdmae.vbs
Geografi
Getrawen.C
Ketik
Kupret
Malingsi.H
Malingsi.H.exe
Malingsi.I
MoneyMy.C
Nhatquanglan.D
Phim
Phim.inf
Riand.C
Ronkor.B
Ronkor.txt.B
Shinchan
Shinchan.htt
Shinchan.inf
Shinchan.ini
SmsCinta.vbs.B
Thumbs.vbs.B
Tugas.C
Unindra

Download PCMAV 2.1a Update Build3 (Riand.C)

PCMAV 2.1a Update Build2 (Charis.vbs)

2009-09-29T21:26:00.000-07:00

Update Build2 comes with the addition of 10 new virus variant identification. For those users PCMAV 2.1A highly recommended to update immediately, so that you PCMAV can recognize and eradicate the virus even more.

Charis.vbs. Local virus was created using VBScript with the size of about 6KB. On the drive will have infected autorun.inf file and ch4r15.sys.vbs. The default page of Internet Explorer will be converted into http://ch4r15_15 @ yahoo.co.id, and captionnya be ":: ch4r15::". At the beginning of the script viruses also the phrase "YOU LUCKY OPENING THIS SCRIPT, HAPPY NEW WINDOWS MENEMPUH (ch4r15_15@yahoo.co.id)".

List of virus addition to 2.1A PCMAV Update Build2:
Ageia.vbs
Astuty.B
Charis.vbs
Charis.vbs.inf
Darkbot
Foldres.C
GameVB.C
Gdmae.vbs
Geografi
Kupret
Malingsi.H
Malingsi.H.exe
Malingsi.I
Nhatquanglan.D
Phim
Phim.inf
Ronkor.B
Ronkor.txt.B
SmsCinta.vbs.B
Thumbs.vbs.B

Download PCMAV 2.1a Update Build2 (Charis.vbs)

PCMAV 2.1a Update Build1 (Malingsi.H)

2009-09-07T19:15:00.000-07:00

Update Build1 comes with the addition of 10 new virus variant identification. For those users PCMAV 2.1A highly recommended to update immediately, so that you PCMAV can recognize and eradicate the virus even more.

Malingsi.H. Back in the new variant of this virus. Characterized by almost no change, use the icon like Microsoft Word. This variant has a size of about 727KB, and on-pack use PE Compact. This virus acts as a bot by using mIRC. Therefore to support the action he will create some support files in the \ Program Files \ mIRC \ IRC Bot. To be active every entry of Windows, these viruses planted on StartUp folder with Adobe Gamma Loader.com name, the name was briefly used by applications like Adobe's who also is usually in the StartUp folder. Obviously, he did this to deceive users. So, pay careful attention to the file name, the original files are usually Adobe with extension. Exe, not. Com.

List of virus addition to 2.1A PCMAV Update Build1:
Darkbot
Kupret
Malingsi.H
Malingsi.H.exe
Malingsi.I
Nhatquanglan.D
Phim
Phim.inf
Ronkor.B
Ronkor.txt.B

Download PCMAV 2.1a Update Build1 (Malingsi.H)

PCMAV 2.1a Fixed + Express for Induc

2009-09-07T18:53:00.000-07:00

If any of you who use PCMAV 2.1x series along with other antivirus in a PC, and get a warning that the file contains code PCMAV Induc viruses, does not need to worry.

The virus is active ONLY be installed on the computer version of the Delphi compiler is 4-7 on the computer are common among developers / programmers Delphi. In other words, the computer virus generally can not be active. Of virus programmer / developer or a software house that use this Delphi was not lethal as was heralded by some sites.

The virus is made only to infect every application created using Delphi. The way it works is to find out whether the computer is version Delphi 4-7 applications. If there is, he then sought the files for Delphi innate SysConst.pas injected "code" is still really in the form of source code. Then, SysConst.pas files compiled to produce SysConst.dcu files. While the original files in SysConst.dcu-rename the virus becomes SysConst.bak. Files that have been contaminated with the virus can be found in the directory \ Program Files \ Borland \ DelphiX \ Lib, where X shows Delphi version.

What happens if the virus is active?
Of course, every application created using Delphi code will be boarded by this virus. For example when a programmer uses SysUtils unit in the program. But, it is important for you to know that this virus can only spread themselves on your computer if there are 4-7 versions of Delphi, and he's not doing damage, like deleting files or other things. Thus, any programmer that makes software using Delphi that contains the virus code, the software will be detected as a virus by the antivirus, as a result the software in-block and can not be used. And no doubt, has many applications made with Delphi, even though popular, had boarded it. One of including third-party components (third party) from a professional developer PCMAV used by generations of 2.1x.

So how do I clean the computer from this virus?
For now, the action can be done on the infected file is deleted a file compilation of Delphi. Then, do the rebuild again for all applications created with Delphi are infected. But before doing rebuild or recompile, you need to improve SysConst.dcu files that have been infected. Way, simply delete SysConst.dcu file, then copy files SysConst.bak be SysConst.dcu. And let SysConst.bak file, so that your computer is not infected anymore. All these files can be found in the Delphi program directory, default in "\ Program Files \ Borland \ DelphiX \ Lib", where X shows the version of Delphi. The easiest way, do the scan using PCMAV Express for Induc to overcome this virus completely. And lastly, please contact the software manufacturer and let them know that the software had been boarded by Induc virus code.

Once again, no need to worry too much. As long as you're not a programmer / developer using Delphi and Delphi compiler versions on your computer 4-7, then certainly this virus will never be active.

Download PCMAV 2.1 Fixed:

Download PCMAV Express for Induc:

PCMAV 2.1 Update Build3 (Viettel)

2009-09-07T18:25:00.000-07:00

Update Build3 comes with the addition of 10 new virus variant identification. For you PCMAV 2.1 users are strongly advised to update immediately, so that your PCMAV can recognize and eradicate the virus even more.

Viettel. This virus will drain a victim's computer resources so that was very slow. He uses a folder-like icon in the spread. It was alleged that he came from Vietnam. He will create a master file in the Windows directory with the name of the userinit.exe and System32 with the name system.exe. At the infected computer will have a file with a name in the directory kdcoms.dll Windows.

List of virus addition to PCMAV 2.1 Update Build3:
Aibo
Alva
Autoit.EH
Autoit-Hubbun
Autoit-Hubbun.txt
Bassok
Boas
Busur
Buxto.D
Chelsea
Chelsea.inf
Cortex.B
Fold
GhostyNet.D
HellSpawn
HellSpawn.html
Ilusi.vbs.B
Ilusi.vbs.txt.B
Kepret
Knight.B
Manna
Merlin.bat
Merlin.bat.inf
MoneyMy.B
Peerfrag
Riand.B
Spiderman.B
Viettel.A
Viettel.B
Viettel.C

Download PCMAV 2.1 Update Build3 (Viettel)

PCMAV 2.1 Fixed + Express for Induc

2009-08-23T18:06:00.000-07:00

PCMAV 2.1 Update Build2 (HellSpawn)

2009-08-23T17:58:00.000-07:00

Update Build2 comes with the addition of 10 new virus variant identification. For you PCMAV 2.1 users are strongly advised to update immediately, so that your PCMAV can recognize and eradicate the virus even more.

HellSpawn. Bericon virus was created with the folder in C + +. The file name following the name of the parent process / services of Windows such as service.exe, winlogon.exe, lsass.exe and smss.exe. There are also other names that allegedly random. In the body there is a database application that is forbidden to run. If the application is included in the blacklist list is run, it will be directly in-kill.

List of virus addition to PCMAV 2.1 Update Build2:
Alva
Autoit.EH
Autoit-Hubbun
Autoit-Hubbun.txt
Bassok
Boas
Busur
Buxto.D
Chelsea
Chelsea.inf
Cortex.B
GhostyNet.D
HellSpawn
HellSpawn.html
Ilusi.vbs.B
Ilusi.vbs.txt.B
Kepret
Knight.B
Manna
Spiderman.B

Download PCMAV 2.1 Update Build2 (HellSpawn)

PCMAV 2.1 Update Build1 (GhostyNet.D)

2009-08-21T17:48:00.000-07:00

Update Build1 comes with the addition of 10 new virus variant identification. For you PCMAV 2.1 users are strongly advised to update immediately, so that your PCMAV can recognize and eradicate the virus even more.

GhostyNet.D. The virus is believed this is not a local product at the time carried a message will appear false or "fake error" that reads "memory access violation at 0 × 000000EF base address 0 × 000000F0." As if the program crashes when the virus has been residing in memory. He created two new items in the registry Run with the name avpupdt and ctfmon. Master file of this virus resides in the directory C: \ WINDOWS \ system32 \ 1920622684. At the root drive is the operating system, there will be a file named index.html which is the virus message.

List of virus addition to PCMAV 2.1 Update Build1:
Alva
Boas
Chelsea
Chelsea.inf
GhostyNet.D
HellSpawn
HellSpawn.html
Ilusi.vbs.B
Ilusi.vbs.txt.B
Spiderman.B

Download PCMAV 2.1 Update Build1 (GhostyNet.D)

PCMAV 2.1 Release

2009-08-21T17:23:00.000-07:00

PC Magazine Media 09/2009 has the latest edition published, along with it has been officially released are the pride of Indonesia Antivirus, PCMAV 2.1. In this release, PCMAV can recognize the 2883 virus and its variants are reported more widespread in Indonesia, including virus-nan Conficker AutoIt sophisticated and has many variants.

In the edition, readers will also be presented article Autoit.EE virus that is the latest variant of AutoIt virus that can spread through the help of Yahoo! Messenger, and even now has support GTalk. This new variant also has a function "debug mode" is very interesting for you to know.

Not to forget, also included a special engine that can handle polymorphic viruses Sality type consisting of 4 variants (Sality-302/304/309/400). This virus can infect executable files, and also can act as a trojan.
WHAT'S NEW?
a. UPDATED! Added to the database 70 identifying and cleaning local virus / foreign / new variants spread in Indonesia reported. Total 2883 virus and its variants, including variants of the virus and Sality Conficker nan-polymorphic complex and sophisticated that many circulating in Indonesia has been known in this version 2.1.

b. NEW! Special engine to handle completely to the root - roots of 4 variants of polymorphic viruses Sality (302/304/309/400) are able to infect files. EXE and. SCR, and able to reside in memory as a trojan.

c. Improved! Added a special cleanser that can handle the virus Autoit.EE a lot of spread in Indonesia.

d. Improved! Heuristic engine to detect polymorphic variants of the virus nan-a lot of complex circulating in Indonesia.

e. BUG FIXED! Error detection (false alarms) heuristic on several programs and scripts.

f. Improved! Change a few names of new virus variants which follow found.

g. Improved! Fixes some minor bugs and improvisation internal code to ensure that the remains can be PCMAV antivirus the pride of Indonesia.

DOWNLOAD PCMAV 2.1

PCMAV 2.0d Update Build4 (Diar)

2009-08-09T17:26:00.000-07:00

Update Build4 present the user with the addition of 10 new virus variants. For you PCMAV 2.0d users are strongly advised to update immediately, so that you PCMAV can recognize and eradicate the virus more. Total virus / variant that can be recognized by PCMAV 2.0d are 40 viruses / variants.

Diar. The virus is made using Visual Basic. Comes with a file size of 124KB, with the icon that masquerade as a folder. In its action, the virus will try to kill this Folder Options, Run, Find, regedit, System Restore, even Safe-Mode. At the infected computer, in the root drive will be a new file with the name "diar_gb.html" and "nitip salam ya ... txt" which contains a message from the creator of the virus.

List of virus addition to PCMAV 2.0d Update Build4:
Arzon.B
Autorunme.F
Cuakep.A
Cuakep.A.bmp
Cuakep.A.inf
Cuakep.A.ini
Cuakep.B
Cuakep.B.bmp
Cuakep.B.inf
Cuakep.B.jpg
Cuakep.C
Cuakep.C.inf
Cuakep.D
Cuakep.D.inf
Cuakep.D.jpg
Cuakep.E
Cuakep.E.inf
Diar
Diar.html
Diar.txt
Gen.VBWG-Cute.E
Istig
Istig.inf
Kryptik
Kryptik.inf
Panik
Shellwdqu
Smansa
Smansa.html
Smansa.inf
SmsLucu.B
SmsLucu.B.inf
TheAnd
TheAnd.inf
TheAnd.txt
Tukang
Tukang.inf
Tukang.txt
Violinist
Violinist.inf

Download PCMAV 2.0d Update Build4

PCMAV 2.0d Update Build3 (TheAnd)

2009-08-03T21:07:00.000-07:00

Update Build3 present the user with the addition of 30 new virus variants. For you PCMAV 2.0d users are strongly advised to update immediately, so that you PCMAV can recognize and eradicate the virus more.
TheAnd. Virus size 57856 bytes is created using Visual Basic and in-pack use tElock. Icon virus is similar to the standard application icon. During infection, it will create some files. In each root of each drive will be found with the file name and do not forget TheAnd.exe file autorun.inf. In the Windows directory there are files with the name TheAndBaHaRi.ta13. System32 also found in many virus files, one with the name XD FromDeAn.ta13. He will turn off some Windows functions such as regedit, Run, Command Prompt. File message virus can also be found in the Windows directory with the name Opening.txt that contains the message "-TheAnd13.Opening-By: TheAnd13".

List of virus addition to PCMAV 2.0d Update Build3:
Arzon.B
Cuakep.A
Cuakep.A.bmp
Cuakep.A.inf
Cuakep.A.ini
Cuakep.B
Cuakep.B.bmp
Cuakep.B.inf
Cuakep.B.jpg
Cuakep.C
Cuakep.C.inf
Istig
Istig.inf
Kryptik
Kryptik.inf
Panik
Shellwdqu
Smansa
Smansa.html
Smansa.inf
SmsLucu.B
SmsLucu.B.inf
TheAnd
TheAnd.inf
TheAnd.txt
Tukang
Tukang.inf
Tukang.txt
Violinist
Violinist.inf

Download PCMAV 2.0d Update Build3

PCMAV 2.0d Update Build2 (Cuakep)

2009-07-28T03:07:00.000-07:00

Update Build2 present the user with the addition of 20 new virus variants. For you PCMAV 2.0d users are strongly advised to update immediately, so that you PCMAV can recognize and eradicate the virus more.

Cuakep. The virus that uses a similar image file icon. It was created using Visual Basic. This virus will try to block anti-virus program and some of the features such as Windows Folder Options and System Restore. It is very easy to identify whether the computer is infected with this virus does not, just to see the System Properties, if it looks like what you see in the picture above, most likely your computer has been infected.

List of virus addition to PCMAV 2.0d Update Build2:
Cuakep.A
Cuakep.A.bmp
Cuakep.A.inf
Cuakep.A.ini
Cuakep.B
Cuakep.B.bmp
Cuakep.B.inf
Cuakep.B.jpg
Cuakep.C
Cuakep.C.inf
Istig
Istig.inf
Kryptik
Kryptik.inf
Smansa
Smansa.html
Smansa.inf
Tukang
Tukang.inf
Tukang.txt

Download PCMAV 2.0d Update Build2

PCMAV 2.0d Update Build1 (Smansa)

2009-07-20T18:17:00.000-07:00

Update Build1 present the user with the addition of 10 new virus variants. For you PCMAV 2.0d users are strongly advised to update immediately, so that you PCMAV can recognize and eradicate the virus more.

SMANSA. Virus that is made with VB when seen on the Explorer with the Details view mode, it will appear as the application icon without the standard, but what if the views with Icons mode, it will appear as a folder. The virus is UPX using this pack, when the infection will create a file with the name Paket.exe and Autorun.inf in the root of each drive that he found. The file is hidden so that the given attributes are not visible with standard Explorer settings. In addition, the infected flash disk drive also will be found a message with the file name-kenangan.html reminded that contains a message from the creator of the virus.

List of virus addition to PCMAV 2.0d Update Build1:
Istig
Istig.inf
Kryptik
Kryptik.inf
Smansa
Smansa.html
Smansa.inf
Tukang
Tukang.txt
Tukang.inf

Download PCMAV 2.0d Update Build1

PCMAV 2.0d Release

2009-07-08T17:56:00.000-07:00

At the time this release, PCMAV 2.0d able to identify and overcome the virus in 2813, not including variants that are also able to detect, many reported that wide spread in Indonesia, including 3 main variants of the virus Conficker and Autoit, and local virus FullHouse, Yuyun.vbs, and PutriEor . vbs that many now claim.

WHAT NEW?
a. Updated! Added a database and virus cleaning 42 local foreign / new variants have been spread in Indonesia. Total 2813 virus and its variants, including variants of the virus Conficker sophisticated, which many in Indonesia have been circulating in the known versions This 2.0d.

b. Improved! Added a special cleanser that can handle virus PutriEor.vbs that make many changes to the configuration of Windows.

c. Improved! Engine variants heuristik to detect polymorphic viruses and nan-Metamorphic complex of many circulating in Indonesia

d. UPDATES! Optimization engine cleaner Yuyun.vbs handling of virus, to further ensure that the virus has been cleaned thoroughly to the "radical".

e. BuG fixed! Error detection (false alarm) heuristik in some programs and scripts.

f. Improved! Changes the name of some new virus variants to follow the found.

g. Improved! Some minor improvements and bug improvised internal code to ensure that the remains can be PCMAV antivirus India's pride.

DOWNLOAD PCMAV 2.0d

PCMAV 2.0c Update Build4 (Autoit varian)

2009-07-01T00:27:00.000-07:00

Update Build4 present the user with the addition of 10 new virus variants. For you PCMAV 2.0c users are strongly advised to update immediately, so that you PCMAV can recognize and eradicate the virus more.Total virus known to update Build4 this time is for 42 viruses / variants.

Autoit. Most variants of the virus-based import script using this as a folder-like icon. This virus has the ability to do the auto update to multiple sites. He can also take advantage of Yahoo! Messenger as media distribution intermediaries to send a message with a link to each contact person in the Y! M victims. So, be careful when getting the message of Vietnam in the Yahoo! Your Messenger.

List of virus addition to PCMAV 2.0c Update Build4:
Angelo-Ankrink.C
Autoit.DU
Autoit.DV
Autoit.DW
Autoit.DX
Autoit.DX.inf
Autoit.DY
Autoit.DZ
Autoit.EA
Autoit.EB
Autoit.EC
Autoit.ED
Bluedemons.vbs
Bluedemons.vbs.inf
CeylonSpyNet.D
CeylonSpyNet.E
Gen.VBWG-Cute.D
Getrawen.B
GhostyNet.C
Hitem
Hitem.inf
Ilusi.vbs
Ilusi.vbs.inf
Ilusi.vbs.txt
Juliet
Juliet.inf
Juliet.txt
Lucu.B
Malingsi.F
Mosquitos
Mrx.A
Mrx.B
Nelram
PutriEor.vbs.A
PutriEor.vbs.B
PutriEor.vbs.html.A
PutriEor.vbs.html.B
PutriEor.vbs.inf
PutriEor.vbs.txt
Soundvc
Soundvc.doc
Soundvc.lnk

Download PCMAV 2.0c Update Build4

PCMAV 2.0c Update Build3 (Ilusi.vbs)

2009-06-22T22:33:00.000-07:00

Update Build3 present the user with the addition of 10 new virus variants. For you PCMAV 2.0c users are strongly advised to update immediately, so that you PCMAV can recognize and eradicate the virus more.

Ilusi.vbs. Virus VBScript creates the file ajum_dnbs_uinsgd_unibi.dll.vbs, autorun.inf, and a message 622270253382.txt, at the root of each drive that he found. These files are given hidden attributes except the message file. In the Windows directory, there are also ajum_dnbs_uinsgd_unibi.dll.vbs file. The easiest ways to identify whether your computer has been infected by this virus or not is to see the System Properties, as the virus is changing into RegisteredOrganization "…….2007……." RegisteredOwner and to "the illusion PanszoreShell32-01."

List of virus addition to PCMAV 2.0c Update Build3:
Angelo-Ankrink.C
Autoit.DU
Autoit.DV
Autoit.DW
Autoit.DX
Autoit.DX.inf
Bluedemons.vbs
Bluedemons.vbs.inf
Getrawen.B
GhostyNet.C
Hitem
Hitem.inf
Ilusi.vbs
Ilusi.vbs.inf
Ilusi.vbs.txt
Juliet
Juliet.inf
Juliet.txt
Lucu.B
Mosquitos
Mrx.A
Mrx.B
Nelram
PutriEor.vbs.A
PutriEor.vbs.B
PutriEor.vbs.html.A
PutriEor.vbs.html.B
PutriEor.vbs.inf
PutriEor.vbs.txt
Soundvc
Soundvc.doc
Soundvc.lnk

Download PCMAV 2.0c Update Build3

PCMAV 2.0c Update Build2 (Juliet)

2009-06-14T23:29:00.000-07:00

Update Build2 present the user with the addition of 10 new virus variants. For you PCMAV 2.0c users are strongly advised to update immediately, so that you PCMAV can recognize and eradicate the virus more.

Juliet. Virus is a local place a message on the file "\ Documents and Settings \ All Users \ Start Menu \ Programs \ Startup \ Romeo & Juliet.txt". So, the message will appear automatically when Windows starts. This virus uses the folder icon to trick potential victims, is created using VB with the size of about 208KB. Task Manager and Command Prompt also disable by the virus to make havoc.

List of virus addition to PCMAV 2.0c Update Build2:
Angelo-Ankrink.C
Autoit.DU
GhostyNet.C
Hitem
Hitem.inf
Juliet
Juliet.inf
Juliet.txt
Lucu.B
Mosquitos
Mrx.A
Mrx.B
Nelram
PutriEor.vbs.A
PutriEor.vbs.B
PutriEor.vbs.html.A
PutriEor.vbs.html.B
PutriEor.vbs.inf
PutriEor.vbs.txt
Soundvc
Soundvc.doc
Soundvc.lnk

Download PCMAV 2.0c Update Build2

PCMAV 2.0c Update Build1 (PutriEor.vbs)

2009-06-08T20:13:00.000-07:00

Update Build1 present the user with the addition of 12 new virus variants. For you PCMAV 2.0c users are strongly advised to update immediately, so that you PCMAV can recognize and eradicate the virus more.

PutriEor.vbs. Virus that is one size around 55KB. It was created with VBScript. At the infected computer will have several files to support the virus, for example, on the root drive, I have a file autorun.inf, History_USB.vbs, Lirik2_lagu.vbe, New Text Document.txt, and Love Poetry bwt Putri.html. When the message appears virus (Love Poetry Putri.html bwt), will be accompanied by the music of Beethoven.

List of virus addition to PCMAV 2.0c Update Build1:
Hitem
Hitem.inf
Mosquitos
PutriEor.vbs.A
PutriEor.vbs.B
PutriEor.vbs.html.A
PutriEor.vbs.html.B
PutriEor.vbs.inf
PutriEor.vbs.txt
Soundvc
Soundvc.doc
Soundvc.lnk

Download PCMAV 2.0c Update Build1