Trojan-Downloader.VBS.Psyme.ap (Remover)…

Discovered: April 1, 2004

Updated: February 13, 2007 12:20:30 PM

Also Known As: Troj/Psyme (Sophos), VBS/Psyme (McAfee), Trojan.VBS.KillAV (KAV), Trojan Horse, Downloader.Trojan

Type: Trojan Horse

Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

The following instructions pertain to all current and recent Symantec antivirus products, including the Symantec AntiVirus and Norton AntiVirus product lines.

1. Disable System Restore (Windows Me/XP).
2. Update the virus definitions.
3. Run a full system scan and delete all the files detected as Trojan.Trunlow.
4. Delete the value that was added to the registry.

For specific details on each of these steps, read the following instructions.

1. To disable System Restore (Windows Me/XP)
If you are running Windows Me or Windows XP, we recommend that you temporarily turn off System Restore. Windows Me/XP uses this feature, which is enabled by default, to restore the files on your computer in case they become damaged. If a virus, worm, or Trojan infects a computer, System Restore may back up the virus, worm, or Trojan on the computer.

Windows prevents outside programs, including antivirus programs, from modifying System Restore. Therefore, antivirus programs or tools cannot remove threats in the System Restore folder. As a result, System Restore has the potential of restoring an infected file on your computer, even after you have cleaned the infected files from all the other locations.

Also, a virus scan may detect a threat in the System Restore folder even though you have removed the threat.

For instructions on how to turn off System Restore, read your Windows documentation, or one of the following articles:

• “How to disable or enable Windows Me System Restore“
• “How to turn off or turn on Windows XP System Restore“

---

Note: When you are completely finished with the removal procedure and are satisfied that the threat has been removed, re-enable System Restore by following the instructions in the aforementioned documents.

---

For additional information, and an alternative to disabling Windows Me System Restore, see the Microsoft Knowledge Base article, “Antivirus Tools Cannot Clean Infected Files in the _Restore Folder,” Article ID: Q263455.

2. To update the virus definitions
Symantec Security Response fully tests all the virus definitions for quality assurance before they are posted to our servers. There are two ways to obtain the most recent virus definitions:

• Running LiveUpdate, which is the easiest way to obtain virus definitions: These virus definitions are posted to the LiveUpdate servers once each week (usually on Wednesdays), unless there is a major virus outbreak. To determine whether definitions for this threat are available by LiveUpdate, refer to the Virus Definitions (LiveUpdate).
• Downloading the definitions using the Intelligent Updater: The Intelligent Updater virus definitions are posted on U.S. business days (Monday through Friday). You should download the definitions from the Symantec Security Response Web site and manually install them. To determine whether definitions for this threat are available by the Intelligent Updater, refer to the Virus Definitions (Intelligent Updater).The Intelligent Updater virus definitions are available: Read “How to update virus definition files using the Intelligent Updater” for detailed instructions.

3. To scan for and delete the infected files

1. Start your Symantec antivirus program and make sure that it is configured to scan all the files.
   • For Norton AntiVirus consumer products: Read the document, “How to configure Norton AntiVirus to scan all files.”
   • For Symantec AntiVirus Enterprise products: Read the document, “How to verify that a Symantec Corporate antivirus product is set to scan all files.”
2. Run a full system scan.
3. If any files are detected as infected with Trojan.Trunlow, click Delete.

4. To delete the value from the registry

---

WARNING: Symantec strongly recommends that you back up the registry before making any changes to it. Incorrect changes to the registry can result in permanent data loss or corrupted files. Modify the specified keys only. Read the document, “How to make a backup of the Windows registry,” for instructions.

---

1. Click Start, and then click Run. (The Run dialog box appears.)
2. Type regeditThen click OK. (The Registry Editor opens.)
3. Navigate to the key:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
4. In the right pane, delete the value:"Microsoft Eventlog"="%Windir%\Winupdate.exe"
5. Exit the Registry Editor.

Writeup By: Takayoshi Nakayama

Pembantaian di Jepang Dirancang di Internet

Tragedi pembunuhan dengan korban 7 orang tewas baru saja menggegerkan Jepang. Polisi setempat mengungkap, sang pelaku bernama Tomohiro Kato, memposting rencana pembunuhan itu di internet.

Kato menulis rencana pembunuhan via ponselnya yang kemudian diposting pada sebuah bulletin boards di internet. Barangkali ia memandang internet sebagai media yang efektif untuk mendokumentasikan aksinya.

“Saya akan menubrukkan kendaraan pada orang-orang. Namun jika hal itu tidak terjadi, saya akan mengeluarkan pisau. Selamat tinggal semuanya,” demikian salah satu postingan Kato di internet satu jam sebelum pembunuhan.

Postingan terakhir tercatat sekitar setengah jam sebelum terjadinya tragedi dengan tulisan, ‘inilah saatnya’.

Dan sebagian rencana onlinenya memang benar-benar terjadi. Ia mengemudikan truk menuju kerumunan pemakai jalan sebelum membabi buta mengayunkan pisaunya.

Adapun pada situs internet lainnya, juga terlacak sebuah postingan anonim berjudul ‘A disaster in Akihabara’. Postingan ini memperingatkan bahwa insiden pembunuhan akan terjadi pada Juni 2008.

Di sisi lain, Kato dilaporkan juga menggemari video game meski belum ada sinyalemen bahwa hal ini menjadi salah satu faktor pemicu.

——————-

Tokyo knifeman Tomohiro Kato recorded killing spree on mobile phone blog
The knifeman who carried out Japan’s worst killing rampage in central Tokyo yesterday, killing seven people, may have been planning the attack for months.

Police investigating the killing spree, which took place in broad daylight in one of the capital’s most famous shopping streets, now believe it was scheduled down to the last moment.

The selection of Akihabara – the capital’s Electric Town which is famed as the cradle of modern Japanese youth culture – also appears to have been a central part of the killer’s dark scheme.

In the days leading up to the spree, Tomohiro Kato made several visits to “scope-out” Akihabara and establish its suitability for death. “I knew there would be lots of people and I decided this some days ago,” he told police.

Even as the minutes ticked down to the start of his bloodthirsty rampage, Mr Kato is thought to have recorded his thoughts for digital-age posterity by posting comments on a mobile phone blog.

The first, which appeared in cyberspace at 5:21 a.m. on the morning of the violence read: ‘‘I will kill people in Akihabara, have a vehicle crash and, if the vehicle becomes useless, I will use a knife.”

After a running commentary that tracks his 100km drive from Susono in the foothills of Mount Fuji – and includes the conclusion that the drizzly weather would not deter him in his “mission” – the messages end just minutes before the attacks were unleashed.

“It’s time; I’m going,” read the final comment, which is believed to have been sent just before Mr Kato drove the heavy truck into the crowded, pedestrianised streets of Akihabara.

As other chilling details have emerged about the life of the 25-year old man arrested for the multiple slayings, Japanese are collectively recoiling in disgust at what their supposedly law-abiding, controlled society has produced.

Until this fatal weekend, Mr Kato appears to have led the average life of a young Japanese man from a small, provincial town: a serious boy who graduated from a good local high school in the northern prefecture of Aomori and headed south to work in a car parts factory in Shizuoka. He liked driving cars too fast and would often, according to work colleagues, become deeply immersed in online forums.

Perhaps most strikingly, he appears to have shared with tens of thousands of young Japanese men a passion for Akihabara and its maze of shops and boutiques that helped create Japan’s otaku stereotype.

Originally, the word otaku referred to a sub-class of youth culture which focused on the minutiae of various hobbies – everything from manga comics and video games to model robots and animated pornography. More recently, however, the otaku phenomenon has gone mainstream and even financial analysts track the spending habits of its participants.

But early on Sunday morning, the facade of normality around Mr Kato finally slipped. At 7.14am he is alleged to have sent a text message to a work colleague, waking him up and informing him that he had something to hand over.

When Mr Kato arrived at the colleague’s house at around 8.45am, there seemed to be nothing abnormal – he was wearing the same expressionless “poker face” that he maintained every day in the factory.

The only obvious difference was the pale suit that Mr Kato had on, which were a stark contrast from his usually very casual outfits of T-shirts and cheap jeans. Mr Kato gave his friend a bag of DVDs, video games and left him with the enigmatic message: “I’m going to deliver this truck to Akihabara. I’m going to stop there briefly and then I’m flying east.”

Three and a half hours after that conversation, Akihabara had become a bloodbath. (source: AFP – timeonline – detik)

Speedy Oh Speedy….. Bangganya… Ping gede.. benwit gede…

Rohan Online (OB)

Rohan: Blood Feud is a massively multiplayer online role-playing game (MMORPG). The game is a rich and expansive persistent online world, set on the continent of Rohan. The land is full of quests to embark upon, from simple to glorious. Friends and enemies will be made and lost, spectacular battles will be fought, and an abundance of unique game features will keep players on the edge of their gaming seats. There are many features of the game that set it apart from more traditional MMORPGs, including:

* REVENGE: Players who have been slain in-game by another will have their killers automatically recorded on their “Hit List”. Once resurrected, the slain can teleport to their killers for a chance at revenge.
* TOWNSHIP BATTLES: In-game groups – called ‘guilds’ – have the opportunity to rule each town within Rohan. Other guilds may wage civil war with the ruling guild, with the chance to gain control of their own. In addition to treasure & riches, the right to tax all commercial exchanges within the town for one week goes to the winner.
* BUY & SELL SAFELY: There are several ways in which players can buy and sell goods within the game, including a website specially designed for player-to-player transactions.

www.playRohan.com

Bisakah ping anda seperti ini ?…mhhh dasar SPEEDY !!!

Speedy Padang ?, see what happen.. ?