BleepingComputer.com: How To Remove Flu Burung Virus

Jump to content

Forum Rules

When posting your problem, do not run and post a ComboFix log. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.


If you have not received help after three days, please post a link to your topic HERE.
Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

How To Remove Flu Burung Virus Rungbu/Dizan

#1 User is offline   sizzla 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 27
  • Joined: 13-March 07

Posted 29 October 2007 - 08:51 AM

I came across the procedure of removing the Flu Burung virus on Blackyard Technologies. You will have to download several tools which are to be used to clean the virus and restore infected files. It is actually a variant of the more common Rungbu/Dizan virus which is spread by opening infected Microsoft Word documents. The more common type can be prevented by deleting infected Microsoft Word documents which have an .scr file extension (Screen Saver). The latest variant does not show the file type and is difficult to tell apart the infected files unless you use the tools provided. Spread the word and help prevent the spread of this virus.

Complete virus removal instructions

#2 User is offline   quietman7 

  • Bleepin' Janitor
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Global Moderator
  • Posts: 25,511
  • Joined: 09-July 05
  • Gender:Male
  • Location:Virginia, USA

Posted 29 October 2007 - 09:16 AM

Although this removal method is from an ICT company in East Africa, I don't know anything about W32.Rungbu Splitter or its creator.

The web site says ICT specializes in high quality web design, application development, animation and database development. I see no mention of malware removal expertise. Until we know more information, the staff at BC cannot endorse or recommend the tool. If you choose to use it, then use at your own risk.
Microsoft MVP - Consumer Security 2007-2012 Posted Image
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

#3 User is offline   sizzla 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 27
  • Joined: 13-March 07

Posted 29 October 2007 - 10:02 AM

LOOOOOOL quietman. You crack me up. The website is actually owned by a Support analyst who works in Kenya. The tool has been proven to work time and again. Don't be surprised that folks down in Africa can know a bit about malware removal. Share the knowledge an give the guyz at Blackyard credit. The tool really works! :thumbsup:

#4 User is offline   quietman7 

  • Bleepin' Janitor
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Global Moderator
  • Posts: 25,511
  • Joined: 09-July 05
  • Gender:Male
  • Location:Virginia, USA

Posted 29 October 2007 - 10:17 AM

sizzla, I was not saying the removal method would not work. All I was saying is that BC cannot recommend it at this time.

We only refer our members to use tools created by trusted experts we are familiar with or from any of the major Anti-virus/Anti-malware vendors. This is a common practice at most online web communities. So if we don't endorse something, that is not a reflection on those we do not know or criticism of their technical capabilities.

You made a suggestion and I responded. Leave it at that. I are not going to engage in a debating contest.

This post has been edited by quietman7: 29 October 2007 - 10:21 AM

Microsoft MVP - Consumer Security 2007-2012 Posted Image
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

#5 User is offline   sizzla 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 27
  • Joined: 13-March 07

Posted 29 October 2007 - 10:22 AM

No pun intended...i understand your situation. I guess only time will tell.

#6 User is offline   quietman7 

  • Bleepin' Janitor
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Global Moderator
  • Posts: 25,511
  • Joined: 09-July 05
  • Gender:Male
  • Location:Virginia, USA

Posted 29 October 2007 - 01:16 PM

We'd like to get some samples of this infection's files.

Please see pinned topic titled "Preparation Guide For Use Before Posting A Hijackthis Log". In step #9 there are instructions for downloading HijackThis and creating a log. (This is a self-extracting version which will automatically install HJT in the proper location.) Don't do any other scans just yet.

When you have done that, post your log in the HijackThis Logs and Malware Removal forum, NOT here, for assistance by the HJT Team Experts. A member of the Team will walk you through, step by step, on how to clean your computer. If you post your log back in this thread, the response from the HJT Team will be delayed because your post will have to be moved. This means it will fall in line behind any others posted that same day.

Start a new topic, give it a relevant title and post your log along with a brief description of your problem, a summary of any anti-malware tools you have used and a summary of any steps that you have performed on your own. Please include the top portion of the HijackThis log that lists version information. An expert will analyze your log and reply with instructions advising you what to fix. After doing this, we would appreciate if you post a link to your log back here so we know that your getting help from the HJT Team.
Microsoft MVP - Consumer Security 2007-2012 Posted Image
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

#7 User is offline   sizzla 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 27
  • Joined: 13-March 07

Posted 29 October 2007 - 11:26 PM

Hey pple, just an update on the manual virus removal procedure. There are a number of satisfied customers who posted their gratitude on the blog. I would encourage all of you who succeed to let the world know. Here's just one of them:

Quote

hi
it all worked out perfectly fine and i am back up and on the run.
thanx much !

chaipachii


Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users