One Nasty Philippine Made Virus

Search:

One Nasty Philippine Made Virus

Last month my computer got infected by a virus. There is really no formal name for the virus since most of the anti-virus makers up to know have still not identified it. In fact when you search for a "remover" for this virus in google you cannot find any. (Correct me if I am wrong) There are only instructions on how to remove it and only a few websites are giving such instructions. The reason for this is because this virus is local, that is made in the Philippines.

Ok so before I start telling you how to remove it, let us "know the enemy first":

SYMPTOMS: 1.) Your internet explorer title bar has the message "TTMS NAA NA DIRE! DONT WORRY IM NOT A CORRUPT LIKE YOU!!" 2.) If you go to "Start" > "Run" and type "regedit." A message will pop up that says "Registry editing is disabled by your administrator." 3.) In windows explorer you can see a file or several files called "TTMS???.vbs.dll" (The question mark stands for numbers, like TTMS123.vbs.dll) This file is also present in your c:\windows directory)

HOW TO REMOVE IT IN YOUR COMPUTER Step 1 - Delete the virus file in the registry

a.) Go to Doug Knox's page to download a Registry enable/disable tool. (The tool requires you to reboot in order that you could access the registry) b.) After you have rebooted and has logged in to windows, press CTRL+ALT+DEL it will bring up the task manager. Go to "Processes Select "WSCRIPT.EXE" and click "End Process" c.) Go to START > RUN > then type "Regedit" d.) Once you are in the registry editor go to EDIT > FIND type "TTMS*" it will bring you to all files with the words "TTMS" click on the file and press delete. Do this again and again until you have deleted everything related to the TTMS virus. (Take note if you have an important program with a file with the words TTMS0 be careful about doing this but I do no know of any important program that has this)

e.) To change your Internet explorer title bar do the following in the registry editor: 1.) In the left panel, go to: HKEY_CURRENT_USERS>SOFTWARE>Microsoft>Internet Explorer>Main 2.) In the right panel, locate and modify the entry: From Window Title = "TTMS IS IN YOUR PC, DON'T WORRY I'M NOT CORRUPT AS YOU!" 3.) Change the value to Window title = "Microsoft Internet Explorer" 4.) In the left panel, locate the following: HKEY_USERS>%USERID%>SOFTWARE>Microsoft>Internet Explorer>Main NOTE: %USERID% is the current user ID in the registry. 5.) In the right panel, locate and modify the entry: From Window Title = "TTMS IS IN YOUR PC, DON'T WORRY I'M NOT CORRUPT AS YOU!", Change the value to Window title = "Microsoft Internet Explorer"

STEP 2 - Ensure that you have disabled "System Restore." This is prevent you from going back to a restore point, inadvertently activating the virus. You can accomplish this by going to START > SETTINGS > CONTROL PANEL > SYSTEM > SYSTEM RESTORE and check "Turn of system restore in all hard drives"

STEP 3 - Delete all virus strains a.) Set windows explorer to show hidden files. Do this by going to WINDOWS EXPLORER > TOOLS > FOLDER OPTIONS > VIEW > HIDDEN FILES AND FOLDERS Click on "Show hidden files and folders" b.) In your windows explorer, go to drive C right click and select Open. (Do not double click to prevent the virus from activating. ) c.) You must DELETE all files starting with "TTMS" it is there are usually 1 to 4 files. d.) Check to see if there is an "autorun.inf" in the drive. Using notepad, open the file. Once you see this link '[autorun]shellexecute=wscript.exe TTMS831.dll.vbs'. DELETE the file. e.) Repeat all the other steps for all hard disk. and for the C:\Windows folder.

Article Source: http://articlenexus.com

how to remove TTMS NA NA DIRE is not the only topic that Zigfred Diaz blogs about. He also blogs about several interesting topics including, money management, investments, How to invest in the Philippine stock market entrepreneurship, leadership, etc. Visit his blog today !

Please Rate this Article

Not yet Rated

Click the XML Icon Above to Receive Internet Articles Via RSS!

Additional Articles From - Home | Internet

STOP Paying for Your Ads! FREE Pay Per Click!

Everything you need for your website and home business.
	Adsense Site Builder
	Adsense Analyzer Software
	Clip Art
	Domain Names
	Header Graphics
	Make Money Online
	Photo Art
	Resell Rights Products
	SEO Software
	Web Hosting $4.95/mo
	Website Templates
	Web Site Promotion Tools
AdvancedWebsiteTools.com

	Print This Article
	Add To Favorites
	Email to Friends
	Ezine Ready

Submit Articles
Member Login
Top Authors
Most Popular Articles
Submission Guidelines
Ezine Notifications
Article RSS Feeds

(Your 160x160 ad here)
Only $50 a month-click here

Link Exchange
Blog by WordPress
Privacy Policy
Terms of Service
About Us
Contact Us
Banner Advertisements

Have you Victimized by a Business or the Government? File your consumer complaints or business complaints at BusinessReporter.net!

Structured Settlement?
Free information to help you learn more about structured settlements, your rights, and how to select the best company for you.

Affordable Discount Dental Plans
Choose from over 30 top-quality national and regional discount dental plans. Save 10% to 60% on most dental procedures

Classic Autos
Replica Kit Cars

Links

Bad Credit Repair

Hair Loss Remedies

Steiff Bears, Antique Bears

Model Railroading | Model Trains

Fighting Foreclosure

toe nail fungus

Free Diabetic Supplies

Antique Radios | Ham Radios

Crazy Fox Review

Herbal Remedies