Search : in
By :

Surabaya virus

Last answer on Oct 5, 2009 1:56:27 am BST ashmrao, on Oct 2, 2008 4:28:37 am BST 
 Report this message to moderators

Hello,
I keep getting this message upon booting

Surabaya in my birthday
Don't kill me, i'm just send message from your computer
Terima kasih telah menemaniku walaupun hanya sesaat, tapi bagiku sangat berarti
Maafkan jika kebahagiaan yang kuminta adalah teman sepanjang hidupku
Seharusnya aku mengerti bahwa keberadaanku bukanlah disisimu, hanyalah lamunan dalam sesal
Untuk kekasih yang tak kan pernah kumiliki 3r1k1m0


I can' t access hidden folder and all the othe folders have become .scr extension

When i Right click on any folder it shows Test, configure instead of open



Please help

Configuration: Windows XP
Internet Explorer 6.0

Best answers for « Surabaya virus » in :
[Virus] System Volume Information Show[Virus] System Volume Information The System Volume Information folder is used by Windows XP for storing data on system configuration and is also used by the System Restore tool to store information and restore points. Restore points...
How to remove "NewFolder.exe" virus? ShowHow to remove "NewFolder.exe" virus? Issue Solution Issue Newfolder.exe is a virus (Malicious folder) which real name is Iddono, appear everywhere in your hard-drive. Once it is executed, some malicious process will be started like...
How to remove the virus CONFICKER / DOWNADUP / KIDO? ShowHow to remove the virus CONFICKER / DOWNADUP / KIDO What is the Conficker? How to avoid being infected by Conficker? Disinfect a computer affected by Conficker Preliminary Remove infection What is the Conficker? Conficker (also...
Download Clean Virus MSN ShowViruses meet hereafter a bit on the net by all thinkable means everywhere. After mails , supporting they attack instantaneous freight forwarding. Clean Virus MSN is a tool which discerns automatically the viruses which circulate on MSN Messenger....
Viruses - Introduction to viruses ShowVirus A virus is a small computer program found within the body of another program which, when run, loads itself into the memory and carries out the instructions programmed by its author. The definition of a virus may be: « Any computer...
The LovSan/Blaster virus ShowIntroduction to the LovSan virus Appearing in the summer of 2003, LovSan (also known as W32/Lovsan.worm, W32/Lovsan.worm.b, W32.Blaster.Worm, W32/Blaster-B, WORM_MSBLAST.A, MSBLASTER, Win32.Poza, Win32.Posa.Worm, and Win32.Poza.B) is the first...
Utilities for Removing Common Viruses and Worms ShowWhat is a virus removal tool? A virus removal tool is a small executable file for cleaning a machine which has been infected by a particular virus. Each removal tool is therefore uniquely capable of eradicating a particular kind of virus, or a...

1

signalup, on Oct 2, 2008 9:48:16 am BST
  • +1

Hey there,

just try to download a software called "superantispyware" from www.superantispyware.com and after that just do a complete full scan of your computer if should detect the virus or probably the spyware

Reply to signalup

25

acn, on Jul 22, 2009 7:03:00 pm BST

How to kill &remove System security virus from my P.C?

Reply to acn

2

rhille, on Oct 11, 2008 4:49:44 am BST
  • +5

Hi..i have the same problem with the surabaya thing..what did you do to solve it?..pls help..thanks!:)

Reply to rhille

3

aldrich, on Oct 12, 2008 11:48:33 am BST
  • +2

I just got some tricks that might help you remove the symptoms of the virus, though i might not be sure if it will really remove all the virus files. It did work for me though as the symptoms never reappeared. You will need an anti-worm program called "NOOB.KILLER.leerz.exe". It's not a virus, just an anti-worm utility progam. If your unsure you can do research on this program file and check it out yourself. This NOOB.KILLER.leerz.exe is one of my trusted anti-virus/anti-worm/anti-virus symptoms program.
Well the procedures (I assume you use WinXP):

1. Run NOOB.KILLER.leerz.exe in safe mode and restart/reboot in safe mode. This will remove one of the symptoms of the virus.

2. In a window menu, click Tools, click Folder Options, click the tab View, click toggle button Show hidden files and folders, and unclick Hide protected operating system files.

3. Hunt the suspected files like the .scr folders, the "Thumbs .db" file in the USB Flash drive, Thumbs.com, etc. The .scr files are actually the RUGGED folder icons which are created by the virus. The actual folders are hidden by the virus and cannot be seen even if you follow step no. 2 without doing no. 1 first.

4. Delete the suspected files and folders in the hard disk. (if you are unsure about suspected files, I recommend just deleting the copy folders and the Thumbs .db and Thumbs.com).

Note: in deleting the virus files in the USB flash drive, I would do this: delete the virus files then immediately unplug the flash drive without 'safely unplugging' it. This will prevent the virus to reinstall itself. Of course you shouldn't do this if you accessed other non-virus files as it would corrupt those.

Reply to aldrich

4

aldrich, on Oct 12, 2008 11:50:12 am BST

I just got some tricks that might help you remove the symptoms of the virus, though i might not be sure if it will really remove all the virus files. It did work for me though as the symptoms never reappeared. You will need an anti-worm program called "NOOB.KILLER.leerz.exe". It's not a virus, just an anti-worm utility progam. If your unsure you can do research on this program file and check it out yourself. This NOOB.KILLER.leerz.exe is one of my trusted anti-virus/anti-worm/anti-virus symptoms program.
Well the procedures (I assume you use WinXP):

1. Run NOOB.KILLER.leerz.exe in safe mode and restart/reboot in safe mode. This will remove one of the symptoms of the virus. download here at: http://leerz25.sitesled.com/

2. In a window menu, click Tools, click Folder Options, click the tab View, click toggle button Show hidden files and folders, and unclick Hide protected operating system files.

3. Hunt the suspected files like the .scr folders, the "Thumbs .db" file in the USB Flash drive, Thumbs.com, etc. The .scr files are actually the RUGGED folder icons which are created by the virus. The actual folders are hidden by the virus and cannot be seen even if you follow step no. 2 without doing no. 1 first.

4. Delete the suspected files and folders in the hard disk. (if you are unsure about suspected files, I recommend just deleting the copy folders and the Thumbs .db and Thumbs.com).

Note: in deleting the virus files in the USB flash drive, I would do this: delete the virus files then immediately unplug the flash drive without 'safely unplugging' it. This will prevent the virus to reinstall itself. Of course you shouldn't do this if you accessed other non-virus files as it would corrupt those.

Reply to aldrich

5

samshemi, on Oct 24, 2008 6:25:50 am BST
  • +1

Please give me a good answer about surabaya virus - how can remove virus my system without any bad effect of my systems files

Reply to samshemi

6

iskaysdalimit, on Oct 28, 2008 2:49:27 pm GMT
  • +1

I tried to delete the lines below from my windows registry via regedit but it didn't worked out. can you help me on how to remove this one?

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
LegalNoticeCaption = 81u3f4nt45y - 24.01.2007 – Surabaya
LegalNoticeText = Surabaya in my birthday. Don’t kill me, i’m just send message from your computer. Terima kasih telah menemaniku walaupun hanya sesaat, tapi bagiku sangat berarti. Maafkan jika kebahagiaan yang kuminta adalah teman sepanjang hidupku Seharusnya aku mengerti bahwa keberadaanku bukanlah disisimu, hanyalah lamunan dalam sesal Untuk kekasih yang tak kan pernah kumiliki 3r1k1m0.

Reply to iskaysdalimit

7

danny, on Oct 30, 2008 6:14:46 am GMT
Reply to danny

9

kan, on Nov 22, 2008 5:49:15 pm GMT
  • +2

Teri maa ki........... indian abusing

Reply to kan

11

RT, on Jan 4, 2009 4:09:31 am GMT

Hello, I've also had the virus, I have some information for everyone..

English translation of Indonesian message:

Surabaya in my birthday.
Don’t kill me, I’m just send message from your computer.
Thank you for hoping to accompany me although only for a moment, but as for me I'm extremely berartil.
Sorry if the happiness that I asked for was to be my friend as long as I live.
Obviously I understood that my existence is not like yours only I wish it was different.
For the sweetheart that would never be mine 3r1k1m0.

I cant find the translation of berartil in any dictionary, so i assume it is rude or slang. I began to think that it was a deliberately misspelled or made-up word by 3r1k1m0, so I googled it for fun, a lot of non-English sites are displayed, the Indonesian sites with the whole word "berartil", in the context, seem to suggest that it means "alone", but don't hold me to that, it is a complete speculation.

While searching berartil, i came upon a 'friendster' dating site for one Erik Idris. one of his friends had left a comment with the word in it (roughly translated the comment is congratulating people on finding companions, when they thought they would be alone forever). Clearly then, Erik Idris knows this (still assuming slang) word, and could use it in, say, a message from your computer.

Erik's profile states school as Bina Nusantara, this could either be a high school or, as he is 24 on the site, Binus University, a mainly Computer Studies orientated uni.

And remember, the virus creator signs as 3r1k1m0, Erik Idris seems to be very similar when you consider chatspeak.
I really would like to give Erik the benefit of the doubt, and if you believe he is unconnected, forget these last three paragraphs, because the rest is unbiased information. If Erik Idris believes he is being wrongfully accused, and can logically disprove my theories, i will glady send a retraction, but until then, I will continue to treat him as suspicious.

Reply to RT

12

evan, on Jan 14, 2009 3:33:27 am GMT

Surabaya in my birthday. Donâ??t kill me, iâ??m just send message from your computer. Terima kasih telah menemaniku walaupun hanya sesaat, tapi bagiku sangat berarti. Maafkan jika kebahagiaan yang kuminta adalah teman sepanjang hidupku Seharusnya aku mengerti bahwa keberadaanku bukanlah disisimu, hanyalah lamunan dalam sesal Untuk kekasih yang tak kan pernah kumiliki 3r1k1m0.

i'm trying to translate these words into english so u guys cud read it :

surabaya in my birhtday. dont kill me, i'm just send message from ur computer. thanks for accompanying me altho it just for a moment, but that was so much meaningful to me. Forgive me if the happiness i asked (is supposed to be) a lifetime mate (girlfried/wife). I should have known that my existence is not with you, it's just an empty wish. For my love whom i'd never have (.) 3r1k1m0.

those were the closest translation i cud do, since it wasnt a poem at all. he just complained and whined about his bad fate. Nevertheless that wasnt a reason for him to suffered others with his virus.

Reply to evan

13

noni, on Jan 28, 2009 4:11:41 am GMT
Reply to noni

16

baby, on Mar 18, 2009 12:06:14 am GMT
  • +3

Hey, thanks for the information, it really works.

Reply to baby

17

kraghu, on Mar 19, 2009 8:10:08 am GMT
  • +1

Hi,

I have the same virus, but my windows doesn't start. It restarts whenever I try to start it. I cannot login to my computer.

Please suggest any methods to log into the computer and remove the virus.

Thanks.

Reply to kraghu

23

enan, on May 14, 2009 10:52:28 am BST
  • +1

This is great. Thanks mate

Reply to enan

14

dennis_tech, on Feb 13, 2009 5:09:06 am GMT

Removing this virus is an easy one. just have to make some registry changes thats all. The link below gives full detail how to remove this virus and with screen shots:
http://tinyurl.com/surabaya-virus

Reply to dennis_tech

15

Alis, on Mar 9, 2009 3:37:56 am GMT

Hello,
Please send me Free AntiVirus for Virus Surabaya in my birthday

Thank you,
Alis.

Reply to Alis

18

Sunil Saini, on Mar 21, 2009 7:51:21 am GMT

Delete below lines from your windows registry via regedit

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
LegalNoticeCaption = 81u3f4nt45y - 24.01.2007 � Surabaya
LegalNoticeText = Surabaya in my birthday. Don�t kill me, i�m just send message from your computer. Terima kasih telah menemaniku walaupun hanya sesaat, tapi bagiku sangat berarti. Maafkan jika kebahagiaan yang kuminta adalah teman sepanjang hidupku Seharusnya aku mengerti bahwa keberadaanku bukanlah disisimu, hanyalah lamunan dalam sesal Untuk kekasih yang tak kan pernah kumiliki 3r1k1m0

Reply to Sunil Saini

19

leo, on Mar 25, 2009 9:39:05 am GMT
  • +1

Try using Noob Killer which is a freeware made by a Filipino. We just used it on one notebook in the office which was affected and it removed Surabaya.

Reply to leo

21

raj, on Apr 13, 2009 12:55:33 pm BST
  • +1

Let me se if it works anyway thanks for the information

Reply to raj