MyLovely. Love can come at any time, but you would not expect a message of love of the worm on this one. When your computer is infected by the worm MyLovely, certain files that you click will display a message like the picture above. Worm is made with Visual Basic programming language and the size of about 188 KB, without in-pack. Icon resembling icons use JPG image. String "MyLovely" found in certain parts of the body of the worm. Diffusion technique using a USB / removable disk with mengcopykan worm files with names such as:
-
Kasihku.exe
-
Sayangku.exe
-
Gambar Lucu.exe
-
Poto 01.exe
-
Walpaper.exe
Worms also replicate themselves in certain folders in your hard drive as in MyDocuments, Favorites, Start Menu – Programs. EXE file with some specific names will be blocked and directed to call the worm file, which will display the returned message of love. EXE file in the list-block include:
-
Notepad.exe
-
PCMAV.exe
-
Taskkill.exe
-
Msconfig.exe
-
Procexp.exe
-
Unlocker.exe,
-
dan lain-lain.
Auto, a certain file extension associated with EXE files that are blocked (eg *. txt file that calls Notepad.exe) will also be triggering the worm message when clicked.
For how to purge, because PCMAV.exe files into one file that is blocked by the worm, then change the file name PCMAV.exe with another file name (eg xyz.exe), then run as usual.
PCMAV 3.1.1 Update Build1
To eradicate this virus or another virus variant, PCMAV 3.1.1 Update Build1 is now available with the addition of 45 new virus variant identification. For those users PCMAV 3.1.1, it is strongly recommended to update immediately, so that you PCMAV can recognize and eradicate the virus even more.
To obtain and use PCMAV update this, you simply run PCMAV.exe, the computer must be switched on to connect to the Internet (non-proxy). PCMAV the Automatic Updates feature of automatically downloading and updating the databases of PCMAV.
But for you who want to get the update files manually, you can download the file this links
Extract and Place the downloaded file (update.vdb) into the folder \ vdb. If previously there is an update of the old, you can simply overwrite it. Make sure once again that the name of the file updates are update.vdb, if different, simply change the name. And later when you re-run PCMAV, he was already in a state of an updated condition.