[techmoron]

Today when i switched on my computer, instead of the usual windows welcome message there was a strange message which read something like this

"dont kill me, im just send message from your computer"
and there was more, but i couldnt understand what it was..the only thing i understood was the above message which was in english..and read exactly the way i have written it here. the rest were english alphabets but i think it was some other language

at the top it was dated 24.1.2007 and there was a name samara...(some strange name).

This message came before windows could boot, so i could'nt turn off the computer, so i turned off the main switch to which the desktop is connected.
when i switched on again the message came and until i click ok on the message it doesnt allow windows to boot( only after i click the ok on the message the windows welcome message comes up)

Help! I m really scared. I dont know what this could be.
very recently, about a month back, i reinstalled windows on my computer. it was working ok till today. and this message came up suddently now when i turned on my computer. i also turned on my computer today about an hour back but this message didnt show up..

I tried to just close the message box but until i click ok on the message box my computer doesnt start. I had to click ok and immediately logged on to this site to find out what i should be doing to get rid of this..

is my computer at risk?
has it got anything to do with the new copy of windows intstalled on my pc..
please help! im worried!

[Elvandil]

Looks like a boot virus. You may not be able to remove it from Windows, so try a bootable AV.

http://www.viruslist.com/en/viruses/...?virusid=19044

[techmoron]

Thanks . a few seconds before is saw your message, i posted in the other section also.
sorry!


should i click on the link you gave me, and what next?
can you help me through the whole procedure please.

and has that got anything to do with the windows i got reinstalled about a month ago, could it be that the copy installed to me was infected??

[Elvandil]

You need to use your own AV CD, if you have one. Is it bootable? It really depends what tools you have available.

For professional help in getting cleaned up, go to the Malware forum and read the sticky about posting a log. Since you can still boot to Windows, you have some advantages.

[techmoron]

i dont have an anti virus installed. when i got windows reinstalled i lost the antivirus that was intstalled previously. i dont have any cd with me now.
but thanks, i have already posted this in the malware section, hopefully someone will tell me how to get rid of this.

i was reading the link you gave me, it suggests i disconnect from internet and then run a scan, but i cant disconnect from the internet while im on this forum..
i dont have another computer.

[techmoron]

Elvandil,
sorry the name wasn't samara. it was surabaya
this time when i booted i tried to copy the message
here it is
Surabaya in my birthday
Don't kill me, i'm just send message from your computer
Terima kasih telah menemaniku walaupun hanya sesaat, tapi bagiku sangat berarti
Maafkan jika kebahagiaan yang kuminta adalah teman sepanjang hidupku
Seharusnya aku mengerti bahwa keberadaanku bukanlah disisimu, hanyalah lamunan dalam sesal
Untuk kekasih yang tak kan pernah kumiliki 3r1k1m0

[hrlow2]

hello techmoron & Elvandil. A lot of the words in that message (according to a search on Yahoo) are Indonesian. It almost appears as if he had been hacked.

[mrss]

If you google on "surabya virus", you get lots of hits, with a lot of possible fixes.

for example...
http://softwarestips.blogspot.com/20...aya-virus.html

and another
http://techfreakindia.blogspot.com/2...e-get-rid.html


Maybe the experts here can tell which one is better or if there is another way.

[hrlow2]

hello mrss. Big Thanks for that. I was looking at the language angle. Never heard of this particular virus. Some words in message do refer to birthday. Big mistake on my part. Did search on Surabaya, but did not add the word virus.

[techmoron]

I also posted in the malware forum yesterday, Didn't recieve any help yet. im hoping, i will get some help soon.
is there anyway i can bring my post to their attention. is this a serious problem. is my computer hacked?? or is it just a virus?

[-Fabez-]

Try this link, http://www.precisesecurity.com/blogs...abaya-startup/

[techmoron]

Is my problem a virus or is my computer hacked?

and whats that link for?
thanks.

[-Fabez-]

The site is about the worm.

Surabaya Startup is a worm that spreads on computer and comes embedded with File Sharing applications. It displays a message on Windows startup:

Surabaya in my birthday
Don’t kill me i’m just send message from your computer

It includes some methods of removal you could try.

[techmoron]

sorry if is sound stupid.
a worm is different from hacking, right??

[techmoron]

Originally Posted by mrss

If you google on "surabya virus", you get lots of hits, with a lot of possible fixes.

for example...
http://softwarestips.blogspot.com/20...aya-virus.html

and another
http://techfreakindia.blogspot.com/2...e-get-rid.html


Maybe the experts here can tell which one is better or if there is another way.

mrss, Thanks for the links. I tried fixing myself, but couldnt complete the procedure.
from the first link i could only follow the first half, the second half, i think is about hidden files..i couldn't do that.


EDIT:
I restarted the computer, the problem persists although i deleted the longon caption and text..