--> Clean The Bro_act Virus..!!!

ami_kidz125

(Err..Not 100% sure)
Let's started,

What is bro_act.exe?
Bro_act.exe is either virus or trojan that collects your information and will transfer it to a server.
It is currently undetectable by any anti-virus software on press time...

How do I get infected?
basically, it will spread through thumb drive and through LAN.

How do I know either I get infected? (check through thumb drive.)
right click your thumb drive in My Computer and if you see bolded "Auto", do not click it. Instead you click explore.
Go to tools->folder options. Click view and check advanced settings.
Click"show hidden files and folders" and untick "hide protected operatingsystem files. (Recommended)". You might see a warning window but justleave it. Click ok.
If you were to see a filename calledbro_act.exe, that is the excutables that will affect your PC when youdouble click your thumb drive or right click and click the bolded"auto".

How do I know either I get infected? (check through PC)
Go to tools->folder options. Click view and check advanced settings.
Click"show hidden files and folders" and untick "hide protected operatingsystem files. (Recommended)". You might see a warning window but justleave it. Click ok.
Go to your local hard disk eg. c:
Go to WINDOWS\system32\(your PC's name)\
look for system.exe
if it's there, means your PC is infected.

--> How do I clean the virus? (infected thumb drive)
Make sure--> Go to tools->folder options. Click view and check advanced settings.
Click"show hidden files and folders" and untick "hide protected operatingsystem files. (Recommended)". You might see a warning window but justleave it. Click ok.
1. start Windows Task Manager, click process.
2. Look for bro_act.exe and end the process.
3. Now right click your thumb drive and click explore.
4. Find these filenames, bro_act.exe, autorun.inf
5. Shift + Delete and delete the file.
6.Now... Go to tools->folder options. Click view and check advancedsettings. Untick "hide extensions for known file types". Click ok.
7.Click Search, "All files and folders", put a word or phrase in the file"exe", Change the what file is it criteria to "less than 1 mb", changemore advanced option criteria to search for system folders and searchhidden files and folders.
8. Click search.
9. Delete every single "exe" that contains the name exactly like your folder. and delete the similar icon exe.
10. Now your thumb drive is clean.

--> How do I clean the virus? (infected PC)
Make sure-> Go to tools -> folder options. Click view and check advanced settings.
Click"show hidden files and folders" and untick "hide protected operating system files. (Recommended)". You might see a warning window but justleave it. Click ok.
1. download this file:--> http://download.sysinternals.com/Files/Autoruns.zip
2. unzip it and open autoruns.exe
3. Click logon and wait it loads finish.
4. look for this filename, bro_act.exe
5. untick it and restart your PC in safe mode. Hold F8 when you reboot again to access boot menu. click safe mode.
6. Login and look for c:\Windows\system32\bro_act.exe
7. delete the file. and look for c:\Windows\system32\(Your PC's name)\system.exe
8. Delete that file also.
9. Remember to disable and re-enable your System Restore.
10. Delete everything in the Recycle Bin too.

Why do I scan with any anti-virus and get no results?
This virus is undetectable by anti-virus and it's new virus which had not been in Anti-Virus softwares "Virus Encyclopedias".

Credit To: HeHeHunter
Sorce: http://forum.lowyat.net/topic/405930


Alternative:
--> GData Anti...Worm
--> Sophos BRONTGUI
--> Kaspersky Brontok Removal Tool
--> BitDefender Brontok Removal Tool
--> Brontok Washer

[ Last edited by  ami_kidz125 at 6-3-2007 06:57 PM ]

kmkd

mane ko dpt link neh?? mcm best je info dier

LOL...

Why copy and paste it here...

ami_kidz125

:bgrin: LOL

coz that day many topic here say they have infected same virus...
so just get this info from the other side
but the credit go to you rite..?
r this ok..? if not i will tell the MOD to delete this thread..

limaukasturis

aku dulu ingat bro act nie brontoks.. bila guna brontoks cleaner x jalan pun.. last2 mati akallll...

No problem...
Let it stay here...
Since is my hard work too...!

please add a link to the original post.
http://forum.lowyat.net/topic/405930

That's all.
Thanks for promoting anyway.

my new website: http://hehehunter.my-place.us

ami_kidz125

ok done...
thanks for the tips..