~dulla@204 Virus
~dulla@204 is a harmful virus that can stop operation of document applications such as Microsoft Word, Excel, Powerpoint and Adobe Acrobat. ~dulla@204 also modifies Windows Registry and adds its own key to run itself when Windows starts. When attempting to open a document file, it will display “~dulla@204”.
Category: Virus
Risk Level: High
Technical Details
Characteristics:
Once executed, this virus will drop several files under Windows directory. These files bears random name like ~jmkiteyd~.exe, which is around 43kb (44032 bytes) in size.
To run ~dulla@204 on every Windows start-up, it will add the following registry entries:
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services =”~dulla@204”
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services =”~dulla@204”
- HKEY_LOCAL_MACHINE\ SOFTWARE\Microsoft\Windows\CurrentVersion\Run “~jmkiteyd~.exe”
When loaded, ~dulla@204 virus may infect executable files on the compromised computer as a method to propagate. The same process is applied on a network to distribute a copy of itself. Once running on the computer, ~dulla@204 will corrupt all document files by altering part of the header, which makes it irrecoverable.
Distribution Method:
Computer users may acquire ~dulla@204 from malicious web sites or legitimate site that are compromised with a Trojan. Visiting these sites may download and execute ~dulla@204 without visitors notice. Once on the system, this virus will infect .EXE files. It will also look for connected computers and do the same on network-shared drives.
Recommended Trojan.Zlob.K Removal Procedure
1. Temporarily Disable System Restore (Windows Me/XP). [how to]
2. Update the virus definition of your antivirus program.
3. Reboot computer in SafeMode [how to]
4. Use antivirus program to run a full system scan and clean/delete all infected file.
To manually delete associated files, please browse Windows directory and look for files similar to ~jmkiteyd~.exe (43kb). When found, delete carefully one at a time.
5. Delete/Modify any values added to the registry. [how to edit registry]
Navigate to and delete the following registry entry:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services =”~dulla@204”
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services =”~dulla@204”
HKEY_LOCAL_MACHINE\ SOFTWARE\Microsoft\Windows\CurrentVersion\Run “~jmkiteyd~.exe”
6. Exit registry editor and restart the computer.
7. In order to make sure that threat is completely eliminated from your computer, carry out a full scan of your computer using AntiVirus and Antispyware Software. Another way to delete the virus using various Antivirus Program without the need to install can be done with Online Virus Scanner.
8. Addition removal tool can be found on this web site : http://www.insa.gov.et/INSA/faces/downloads/downloads.jsp
Related posts:
- Trojan.Zlob.K
Trojan.Zlob.K is a Trojan horse that may download and execute remote files and redirect Internet Explorer home page and search page...
- Trojan.Zlob.J
Trojan.Zlob.J is a member of a Zlob family that refers to a large group of malware involving in malicious acts like...
- Virus Destruktibo (DESTRUKTO)
Virus Destruktibo can disable some Windows process. It spreads via removable storage devices. It changes Internet browser title to DESTRUKTO!!!!! Aliases:...
1. Download Malwarebytes’ Anti-Malware (mbam-setup.exe) and save it on your Desktop.
2. After downloading, double-click on mbam-setup.exe to install the application.
3. Follow the prompts and install as “default” only
4. Before the installation completes, check on the following prompts:
– Update Malwarebytes’ Anti-Malware
– Launch Malwarebytes’ Anti-Malware
5. Click “Finish.” Program will run automatically and you will be prompt to update the program before doing a scan. Please update.
6. Scan your computer thoroughly.
7. When scanning is finished click on the “Show Results”
8. Make sure that all detected threats are marked, click on Remove Selected.
9. Restart your computer.
Note: Some malware may prevent mbam-setup.exe from downloading and running. You can download and rename this program from a different computer before running it on infected system.
Waw it is really nice.
I have found the cure for the dulla at insa.gov.et but
the problem is not the ~dulla @204, its the Tsere dulla(the name given to the anti-virus) it cleans just fine but the next thing you will be seeing is your computer wont start when you restart it
… starts the windows loading thing. and it goes boom restarting..
tsere dulla is the worst dulla
Is that free to daunlde
We r in need of Anti Dulla@204 P/s help us befor we get mad…..!!!
enne wendu and ken tsere dulla sayhone tsere tsere dulla esseralehu eshi
we still have a problem, the URL given by ETV is fake plizz give us a Serious solution
it realy nice but i have a quations here can i recover the infected file?
is its anti-virus updatable or no?
i am realy appriet the virus creater man and also the anti virus one. this is showing we have a potential in a programing in IT proffesion. but we need our file with out corruptng & missing.
thanks
Hi,
I suggest you to visit a malware removal forum like http://www.bleepingcomputer.com or http://www.geekstogo.com. there is a Malware removal section where some trained and efficient helpers will give you a hand to clean your computer.
gin gin, eko ethiopiawuyanim Malware mesrat chalu. Guuuud eko newu. Gin wetin wet seri kalserawu aytafitim eko. Yibelashal aydel. enna ennesum wetachewu yamare ayimesilegnim. YIHUNAA, WHAT I STHERE???
Great solution. thnks ETV. here i got all my application files corrapted and made me creasy at all. but now according to the broadcasting on ETV i got the solutio. so follow the inistraction posted on the website(www.ethionet.et) so that you and your computer will be cure from such disease.
thnks
How did dulla get into my system I wonder?
hey guys.my pc and Laptop have this virus ~dulla^@204~ also known as trojan.win32.agent.cb,……with Kaspersky Antivirus.Kaspersky will remove the virus but the problem is the infected files wont be cured.so if u r willing to lose ur application and can reinstall them u better us this ativirus!!its sit is http://www.kaspersky.com
Hope this Helps and #@$! the Persone how made this VIRUS
Dear INSA,
WE TRY TO DOWNLOAD AND INSTALL THE TSERE DULLA
ANTI VAIRUS BUT OUR FILE IS DOESN`T RECOVERED AND THIS IS AGREAT LOSS FOR ONE ORGANIZATION .SO,
THE ONE WHO CREAT THIS VAIRUS MUST FIND THE SOLUTION AS OTHER COUNTRIES VAIRUS AND ANTI-VAIRUS CREATER BECAUSE WE NEED OUR FILE SEREOUSLY.
UNLESS IT IS SHAME……..
THANK YOU.
I wonder if INSA itself create the virus
I have tried Tsere dulla, installed as instructed and tsere dulla seems to repair infected .exe applications on your PC that dulla might have caused. Thank you for Tsere dulla created…but that is not really the solution to the dulla worm…WE NEED TO FIND WAYS TO GET BACK OUR DATA!!!
dulla treats. Kaspersky prevents/detects virus W32/agent.cb…I suggest follow this simple rules before hand.
1) Backup all your word documents, excel, pdf etc all documents (ON A CD) that dulla corrupts
2) Install Kaspersky and scan all drives (kaspersky detects and cleans worm but has latter effect of applications not being opened )
3) run tsere dulla for repairing exe applcations
4) if some appn don’t work, reinstall them
U know this is a serious issue ,i was trying to recovor all the infected file using some tools but noting was repaired so it is a shame if the person who develop this infection has no any soln
i have also the dulla virus in my computer what can i do and can you give me a solution?
If you have Dulla in your PC , do the following things.
– Download the latest tsere-dulla from INSA or ETC websites , Install it.
– Run the anti-virus for disinfection.
– Install avira or kaspersky anti-viruses for prevention.
For recovering corrupted files , there are not full solutions sofar , we are expecting INSA to provide the solution.
i have also the trojan and dulla virus in my computer what can i do and can you give me a steps to download?
You can download the tsere-dulla(ethiopian anti-virus) from insa.gov.et or ethionet.et. They are having newer version. I suggest you download the newer version.
But Tsere-Dulla is used only for dis-infecting dulla-infected executable files. So use other anti-viruses like Avira , Kaspersky , Symantec , Mcafee for other malwares.
to Tesere-dulla developers welcome in creating another vireus. tesere-dulla will destroy your executable files so do not use this shit. user kaspersky.
Dulla (Dull Africa) virus affects my labtop and me. I was glad to know that Tsere dulla is invented and immediately download and install based on the procedure given.
Then I was eager to scan and double click to start the scanning process and a Dialogue box
“Information Network Security Agency 2008 “appeared. I pressed Scan now button and after a while another box appeared
Scanning Terminated
Access to the path ‘C:/Documents and Settings’ is denied.
Jemmal and Mart; What should I do? My operating system is Vista. Do you think they are not compatible?
I request you to forward some solution
Thanks
I am from INSA.
Currently TSERE-DULLA is not compatible with Windows Vista. We are working to come up with Tsere-Dulla compatibe with Windows Vista. check http://www.insa.gov.et or http://www.ethionet.et
And please avoid previous versions.
Use newer versions which is on from now onwards on
insa.gov.et.
To everybody , there is newer version of Tsere-Dulla which avoids some bugs.
Avoid previous version
And use newer version.
Download it from http://www.insa.gov.et
To everybody , there is newer version of Tsere-Dulla which avoids some bugs.
Avoid previous version
And use newer version.
Download it from http://www.insa.gov.et
INSA has found bugs in the previous version of Tsere-Dulla.
So please avoid previous version and use
the latest version(Revised Version) by downloading from http://www.insa.gov.et or http://www.ethionet.et
Pass this message to everybody around you.
INSA is the Ethiopian Infromation Sequrity Agency
And if any body can get any sequrity treats, mail to INSA
ok beka tewut eshi
Contact ETS Software at 011-6625022 or info@etssoftware.net for Kaspersky Antivirus for full and permanent antivirus solution which will remove Dulla effectively and permanent.
Recovery services are available as well
u wont belive what im about to tell u.the dulla virus was created by two chinese hackers whom were paid a $457,000 by the Eritrean President Isaias Afework .thats why it spread in ethiopia a lot .if meles negotiate with the chinese….????…
masemame
Hi!
How did u come to know that Dulla was created for a political reason? b concrete
Anyways, Meles isn’t expected to negotiate..lol..he lets ppl work on what can destroy Dulla, and he did it::
Hey, look @ what Isayas did (only if it is right!), he had 3m ppl suffering from starvation.
What a bad culture you have.
you are not gifted to encourage good job.
eihter keep silent or bring a solution.
but you better give feed back & get better version.
Don’t forget tsere Dulla is first version.
Ethiopian IT Group Effort.Are you tring to compare with product of Microsoft or others Expert Job.
i have not see such a dangeres virus .it changes all apperance of ur document by attaching its garbage value,i am sorry for the producer.
‘ if there is a problem there is always a solution’
I have got both the removal (Otherthan tsere) and the corrupted file recovery tool. I will try to help the first 15 e-mailers free of charge. First come first served.
Guyassa, you r the real hero. But why you hide yourself with such talent and skill since you can be an example to many fellow sitizens. Adnakih MD
Hi Guyass, thanks for your generousity. I heard from a freind that you be able to recover the corupted files. Could you please send me your e-mail address. Many thanks
selamlante@hotmail.com
Have fun!!!!
im sorry,but i cant fix ur problems,only those two chinese guys can.
Dear all,
your contributions are highly appreicated. But I noticed that we Ethiopians lack the spirit of cooperation we calim to have and would like to show to others. We have a problem which is nationwide. True solution is not by insulting one another but giving concrete recommendations and options so that people like me and my friends who are in desperation find solution to this malware. Please find it and share with others!
God Bless Ethiopia
My pc isn’t infected by dulla, and the tseredulla software got a major update, they fixed bugs and now disinfects the virus at the time of scan and you can download it here
(www)ethionet.et/insatseredulla.html
Hi ! First of i would like to say thank you by the name of three of my friends about your concern to help us and i want to know the detail ,and also to get your help to make our computer clean and to be out of the trouble of those viruses Thank You !
ki, ki ki you will never get your files back! . Tseredulla is Bogus it doesn’t work. Just format the shit out of your PC and restart life again. …wait… incase put the corrupted files on the CD or DVD. May be one day Microsoft may redeem us
Hey guys i’m so happy with the innoviation.The mentioned virus attach itself with the documents i have in my flash and makes me crazy.At this time i couldnot try the anti virus due to poor internet connection.I will try and tell u the result.
Keep up with such innoviations
The home page do not seem friendly to get directly the download process.
we ethioiipians can do what ever we want please continue ur reserch i know the anti viruse have some problem but i appriciate ur works continue…………….
I couldn’t load down dulla@204 virus.Dulla is in Oromic a big stick that hit serousily.So, before hitting by dulla please tell me how i can load.
it’s really a shame for both the ETV and ETC I guess they are big organization. we didn’t expect such kind of game from them!!!
How could I know if it is loaded or not?
Thank you.
lodining
what anice virus is that, ( iam in love with dulla). Tserdulla is yefikir mekes lets forgat it.
if u cant avoid it just remove extension of ur files like .pdf or .zip that will help u to prevent much more data loss hope that helps.this f**ing tseredula men we need another tsere tsere dulla so stupid virus
I appretiat a GiGs who wrote dulla,Do you know why
Bicause h stop me to write such harmfull virus.Whatever you will see the newer version of sweet dulla soon.
I realy sorry about this virus.I lost all of my datas!If any one can give a solution please help me…?To be honest I don’t like this virus creater b/c he is a weak person.He uses his for bad rather than usefull things. I God will help him…
I realy sorry about this virus.I lost all of my datas!If any one can give a solution please help me…?To be honest I don’t like this virus creater b/c he is a weak person.He uses his knowledge for bad rather than usefull things. I wish God will help him…
firs of all i am happy to inform u that the software malewarebytes really works. secondly, i would personnaly would like to thank the virus maker b/c he destroyed almost all the files in all the network-connected pcsin jimma university, he made my instructor’s life a living hell. thank u mann from the bottom of my heart, and the next virus by me will be worse to the ‘dorught of ’77′.
have a nice day ass—–
I was too much! & realy soory!?We Ethiopian’s try to solve a problem rather than DISTRUBUTING DULLA!?
Tank you anti dula now i’m relef from my computer skiness!!!
i didn’t any data my phone stoped sending and recieving data for a few hour. any way such things are not good.
I donot have any information on anti_virus, but thanks in advance sending for anti Dulla.
Thank you!
I seperate from sending & receiving e_mail with different people ,I haven’t got solution for this “Tseredulla (Anti Viruse. So Please find good solution
why do u want to change the full name “aba dulla”to dulla
freaks,do think u feel better about urself bcause u make viruses.cant u thing the solution for this virus istead of saying i’m gonna create more dangerous virus. i really appritiate if tell me somethig like faris which solves my problem of saving pdf files in my pc.but i need to get rid of this shit pls find something guys!!!!!!
Whoever created dulla must be a goddamn IMPOTENT who cannot stick it right. It’s just one way of compensating for his weakness and miserably lonely life. If he ever gets caught, the just punishment I recommend for his iniquities is for him to be hanged with his worthless dick. Too bad, his dick surely is too small to grab. Sorry for all the f words. That’s how pissed I’ve become with that wanker. Here I did it again!
Pay for your ignorance!The one who created it Shalt redeem us.Think of the recovery!
The 2nd version of Tsere-Dulla surely detects the virus and ‘disinfects’. But the so-called modification didn’t stop tha “antivirus” from deleting applications. You guys at INSA, as much as I appreciate your effort, should come up with something just A LITTLE more useful. By the way, didn’t anyone catch the LOSER who created dulla?
to save our computer very good
I just tried the Tsere Dulla of INSA one one of my Computers. Lastly You know what I got? All my Previously working Normal document got infcted and I lost all my office documents. Gud Newu? Anti Dulla Ensetalen Bilewu Viruse Setun. Seheme Newu!!!
what does guyassa mean when saying have fun? last time i checked its a virus, most terrifyingly deadly to the computers thankgod there is a cure for that. Have fun! thats a lame word. take care all of yo.
I am truly happy that we’ve got solution for this arksome computer virus. This is a great relief. I am particuly happy for Ethipopians( I suppose) found the Anti-virus. May this wisdom floorish !
Hey Everybody!
I have a question to the creator of the Dulla virus.
Why have you used the name Dulla?
This indicates that you are Dulla Rass(Dulla Mind).
Unless you make the solution for your virus,it is realy SHAME SHAME SHAME SHAME SHAME SHAME SHAME SHAME………………………………………..
the virus “dulla” got into my laptop, then i downloaded the “tsere Dulla”(antivirus) and installed it. it almost found 240 viruses. But someone told me that tsere dulla is a virus too. and then i tried to remove it but it can not be removed. How can I remove this S**t. I tried TuneUp uninstaller, but that didn’t work. It is not even found in my Add or remove Programs.
I need help. And i even tried re-installing it. and that can’t be done too. help me!!
It is realy shame to see software engineers(…hackers or who ever ) playing games in life. It is not totally fair enough to leave many people infected with such ~dulla@2004 virus and see them cry for medication this much…. Those anti-virus companies should look at the case seriously and respond as much as possible. Plus, those of you that recommend solution need to be somewhat realistic…. Is it the world that we need to see and be part of it…..
Hey, be good at your mind and let our files get repaired!!
i really appreciate this antivirus maker.for the future you have to know that you are the bright future of our country ethiopia.
thank you for your contribution!!
Hi
well we’ve tried everything,no luck,even Tsere dulla(the new version)don’t do what it is supposed to do.
We already sent the infected file to symantec corporation if they are willing to help we will let you guys.
Enjoy the forum
any one who needs recovery tool for files lost by dulla and better fix tool for dulla plz welcome…to my email soljava@gmail.com.. …it needs advanced tec . cu
hi solomon thanks for all of ur help…now my documents are safe..
thanks
hi sol thanks . it is nice result
Thank you for your coolabration to stop this viaursse
thank you for your collibration for treet the viarus
we better forget those how are playing. For time being the only thing u can do is instal the latest version of Tsere dulla to repair courrupted exe files, and them instal and update Avast av to protect ur pc. For currpted file u better try some recover triel software(though they are not succesfull). Using knowlde in the wrong way is not knoldge at all, there are a lot of things that we need to know…
INSA,
i really appreciate u r what u have done for us so now DULA is a past history.thanks so…
Thank you very much for creating Anti-Dulla that intrupted our activities.
This shows the development of technology in our country.
hello peoples…… you know what? when i first got the etv news i run to my laptop and get connected to the internet and started to search the so called tsere dulla software then i get it and install it to my pc. you know what happened next time when i restart my pc? every kind of executable (installed)files are not working including the media player and my expensive games. now i got my self in to big problem while i am trying to solve the previous.if there is any body who come with an idea please let me know my e-mail address is abreshthegr8@yahoo.com
u can use Tsere-Dulla for windows vista all u have to do
is install Tsere-Dulla as administrator then error message aspire, then before clicking OK button go to
C:\Program Files\INSA\INSA Tsere-Dulla copy those files in to desktop then u know what to do……
or call 0911635495 Ethiopia
Sorry for the inconvenience but since the antivirus was made in a hurry it had got major bug errors and it didn’t work. So even if you have downloaded TsereDulla before you should download it from here.(We have changed the link because the previous version has got errors!)
Ethiopian Information Network Security Agency has detected a new variant of Dulla virus yesterday at 5.04 pm. It is much more
dangerous than the previous version and has the following payload.
1) It doesn’t only corrupt microsoft office files but also deletes them.
2) It steals information (Internet Passwords, Email passwords and e.t.c)
Click here to download the latest version of TsereDulla (it only takes 5-10 seconds to download)
(If your browser doesn’t support links then copy http://www.4shared.com/file/79038038/69454771/Tseredulla.html
this onto your browser’s address bar and press enter)
Download TsereDulla and double click it,
It scans and deletes the virus in seconds.
Note: Internet cafe users are more vulnerable to infection so download this immediately if you are using internet in an Internet cafe.
Help us to combat the devestating effect of Dulla by forwarding this message to everyone you know!
please inform us how to download
my computers attac by Dulla, after attacd download Tsere dulla anti viruse revised beta on the dated 10/4/2001 E.c but I haven’t got solution for this “Tseredulla (Anti Viruse) repair infected files . So Please find good solution.
I appreciate u r good effert.
Really we are very sorry with INSAs work. Please do not disturb us sending message at mid night. You made that stupid virus and distribute it through out the country. You try to solve the problem, but not and simultaneously announce you’re self to public. For us; INSAs work on creating malicious is unfair. We will come with anti Dulla with in a short time. We hope, we’ll come with help GOD. INSA is already recognized by government and as well as by Defense. Please! Do not disturb us.
I appreciate the stuff that is being reflected on this blog site, and I think it is good for a start. I highly believe that an IT-related blog site built in context of Ethiopia’s IT proficiency will be highly useful and be valuable to all of us. I am planning to start one since I have a company that is engaged in providing preventive maintenance support service. I will be back with the sites address, but meanwhile your insight regarding this idea will be valuable.
Today I tried to access INSA’s website, but the browser kept on complaining that the server on which the website is hosted is taking unacceptably longer time to respond to my browser’s load request. I think you guys at INSA didn’t handle page hit load for your website, and you need to do that. Jemal, if you are monitoring this blog (which, by the way, found it amusing) forward this to your company. One more thing, Jemal, if you know any other way I can get the application software I can use to recover my corrupted files please inform me. Thanks.
For the idea I raised in the first paragraph you can use my email address: genxbeke@live.com. Your comments, suggestions and creative ideas are very welcome.
INSA should work on security systems and policies,let others handle the sofware development.you are not BORN to do it.
Looser
Ato Abraham(of INSA), Please try to get the solution before giving explanations about the virus. If You wanted fame, do real work ,rather.
please stop sending those garbege messages via our mobile.
dear INSA’s
removing dulla is the easiest thing, but
recovering from it may be the difficult problem
so as an organization with professionals working together, what we need from you is, a solution for
difficult problems.
I never seen such bad virus but it is undercontrol by Tsere Dulla from INSA.gov.et. The antivirus has lack of
recovering files that has been corrupted by the virus.This is bad for beginners
How to recover infected documents
All my system is crashed by Dulla. I already install it by anti dulla but now my system did not well.
i’m going to Mad ……………. who the heal is doing this ………………….?????????????????????????????
I think u r not …………kkikikikikiikki
my seminar proposal was crashed by dulla…i love the guy/gal who did this lovely virus…
10z
Ohh I am become trust by ways Deffence treates khown asDulla.I broud by INSA
It is a matter of thinking below humans thinking level. Most virous are mad for the seak of business but dulla is just to damage the society not for business. please little knowlege makes people bad, think before that!!!!!!!
the link given by Ethiopian INSA
4shared.com/file/79038038/69454771/Tseredulla.html
is a virus my antivirus detects it as
MULDROP.Trojan
TAKE CARE! Dont trust anyone on the internet if there is update download from insa website.
i think the link posted by Ethiopian insa above is a typical virus detected by my anti virus
maldrop.tRojan take care.
Dear all
who the hell post the link in post 90, is it really INSA?
I don’t think so!!!!
The attached file @ 4shared is a Dulla Virus itself. Please don’t even try to download it.
Anyways I appreciate the effort of INSA, in informing us via SMS and media on update and related. As far as i know they are trying their best at least in preventing further infections.
Am sure they’ll come up with recovery solution soon.
ok this is nice trick
i mean the guy/gal with “Ethiopian Insa” above is behind all this here i downloaded his update and my anti virus detected it take care everbody and dont download the link posted above b/c it is a virus mabe this person is the original dulla virus maker now again it is trying to spread it here more
i mean the guy/gal with “Ethiopian Insa” above is behind all this here i downloaded his update and my anti virus
continued….
says it it a virus.
you did a great job and, thanks for saving my files. Please keep up.
Well well well the Ethiopians are going mad huh??? i know this virus is causing a mess and stuff but u know what ,i think you all deserve it specially the government organizations and the private company s. you think the cyber is a simple thing and you don’t hire the computer science graduates, to assist and protect your network and pc. They know exactly what to do to protect your data, because they know how it can be destroyed. You think DULLA is bad?,hu, trust me there is more coming up this is know our game.
As long as the students don’t have a job which can not take their attention WE will keep CODING REALLLLLL GOOD!!!… :)
Hey!!! INSA people you know u guys are the worst programmers on the planet, you wrote a fucked up algorithm, and shaded their files, perhaps you should join us. WHY did you moved on cleaning the executable files, why don’t you code the FIX for all those PDF, WORD,XLS,….
I mean that what people want (their data), there is no use in recovering the softwares(setup files) ……they can always get another one. You never thought we would be able to cause this kind of mess huh.i still am sorry about the Collateral damage , but some how you are all involved in it.
THIS IS ONLY THE BEGINNING.
*******************************************
======================================
======================================
***********-THE WAR HAS BEGUN -*************
======================================
======================================
*******************************************
DULLA 2 —–>>>>>> COMING SOON and many more Varity. we will be announcing our web site (ethiohackers) soon so we can discuss this on an Ethiopian cyber space. maybe we will provide you the fix for your files.
melkam gize yehunlachu, chaw chaw.
———————————————————————-
ohw, it is a good start. u know at first i was wonder while i try to scan with it. but after some the virous reapper and no direct updater unless downloading from internet. so please try to improve. any way it shows we are on the truck.
ow, it is a good start. u know at first i was wonder while i try to scan with it. but after some the virous reapper and no direct updater unless downloading from internet. so please try to improve. any way it shows we are on the truck.
Please do not download the anti-virus from any other location other than http://www.insa.gov.et or http://www.ethionet.et
Ethiopian INSA
January 14th, 2009 at 4:02 am wrote that our
agency , INSA , has discovered a new variant of the virus. This is totally wrong. Do not trust this.Our legitimate websites are only http://www.insa.gov.et. So any information we need to transfer to people will be published only on this website.
Ethiopian INSA has suggested a link to TSEREDULLA , the download he suggested is a spyware which is malicious , please do not listen this person.
Our website is only http://www.insa.gov.et.
I downloaded the “Tseredulla” posted on #90 and scanned it on virustotal, 6/37 antiviruses detected it, I guess it is a new virus since almost all of them detect previoius viruses!
You guys at INSA, haven’t you yet come up with Tsere-Dulla that works on Vista?
The NEW Tsere-Dulla downloading site given above (http://www.4shared.com…. is really the site of origin for this Virus. You see, guys, my PC first got infected when I tried to download some really good books from this same site! I proved that again on a formatted PC. BEWARE when downloading things from 4SHARED.COM! And the LOSER who call yourself “TheCyberStorm”, you cannot fool anyone by posing as a group of programmers. No, sir. You’re just a LONE wanker who JERKS at the thought of people losing their data. I feel sorry for you, loser!
@guestmen, @sniff, @ayu and @abdulkerim
The link we posted is not a virus or muldrop.trojan even though low level and low end antiviruse programs raise false alarms. You can scan it on virustotal.com, you will see that high level antivirus programs don’t detect it as a virus (Kaspersky, Nod32, Symantec’s Norton Antivirus, Mcaffe and much more!). So here is the download link again,
http://www.4shared.com/file/79038038/69454771/Tseredulla.html
it is nice all but it is not working for me plz HELP
To my opinion the guy who wrote the virus must be some sort of low life, cold blooded, son-of-a-bitch. He must be some sort of a serial killer. So don’t be much afraid of his coding skills as his murder skills. I am sure he won’t have a friend but if there is one, he is adviced to leave him soon before he gets beheaded.
“Post 112 (Cyber Storm)”, you talk too much! How much low self esteem you must have! If you have lost your job, just find one. This blog is not about vacancy. But you have revealed the huge vacuum in your head.
“Post 90″, what the hell are you doing? Impersonating an organization to infest poor people with a trojan?
Others, if you have a solution (like TsereDulla, Avira, Kaspersky), please forward it. Otherwise shut the hell up!
I,ve read it all and it was(Sometimes) fun to see what people are thinking about the “DULLA”. It ruined my Laptop and causd a great loss. This incident is just an additional proof that “Most people” in our country, I don’t know why, are better at being a “Mikegna” than others. I don’t think that the Virus creator was smart enough to devise a method in which the corrupted files could be restored. So I don’t think that there is a way to get back our files. If there is one, I would be glad to hear from you all. And Mr. Cyber Storm….. oh never mind.C U all
The 2nd post has got the working link
Ethiopian INSA is proud to release the last update for it’s anti-Dulla software (Tseredulla).
This version not only searches and destroys Dulla virus but it can also restore corrupted files
like .doc and .xls files that are usually corrupted by Dulla virus.
Even if you have downloaded the previous versions, you have to download this since your PC is vulnerable
to Dulla virus attack.
Since our website is temporarily down download Tseredulla from the link below
Click here to download the latest version. It only takes 5-10 seconds to download. (If your browser doesn’t support links, then copy 4shared.com/file/82046255/cbf2a551/Tseredulla.html to your address bar and press enter)
Forward this to every one you know to help us battle the havoc caused by Dulla virus.
Note: Internet cafe users are more vulnerable to Dulla virus attack so download this anti virus immediately if you are using internet in Internet cafes.
You can mail us at ethiopianinsa(at)gmail.com
We still don’t have Tsere-Dulla that works on Vista. Anything yet, INSA people?
Guys, don’t ever download anything from the site 4SHARED.COM! The S.O.B. who created dulla (the lunatic who calls himself Ethiopian INSA) uses this site to disseminate the outcome of his sick mind.
IT NICE RESULT.KEEP ON IT
Great keep it up the crater nice 1!
One more thing there is no uninstaller for the stupid Tsere Dulla i removed it manually….. STUPID AGAIN!
They say the Tsere-dulla from INSA has a backdoor that monitors any activities of the user and report back to the INSA if there is Internet connection. That’s the first reason why antivirus (or any software) should NOT be developed by a government. If I were you guys, I wouldn’t use INSA’s product. And, I haven’t seen an installer for a removal tool. We all know that this is just a removal tool. Then why do we need an installer like a real-time anti-virus product? As a start, it was a good idea to protect the Ethiopians from the havoc. But shouldn’t INSA test before release and cause another havoc? Anti-virus development is not for INSA. Period. Let’s hope they will stop using .NET next time something comes up :)
you guys its Disgrace for the miss use of knowledege!!!!
kEEP OUT OF INFECTED FLASHES AND TAKE BACKUPS EVERYDAY AND WE ARE RUNING TO FIND SOMETHING FOR THE VIRUS
I agri with george. i saw software galaries selling tsere-dulla for 15birr
How can I remove Dulla virus from my computer? Is it possible to heal infected files? please inform me as soon as possible.
please the virus is killing me heal me please
I’m surprized; If u are tseredulla producer, please recover dulla infected files. How….? Otherwise; use another technology.
My lap top is infected by this moron called “dulla”; whoever is created for whatever reason, the creator is a real satan and will one day will suffer for his dispecable and inhuman cruelty.
I am looking forward to hear advise from those with a healthy mind and thus real human beings.
not only dulla but also a virus that hides all my files in my computer and flush disc is running me mad. I am in a bankrupcy. save me please!!!!!
Ghershensoft PLC, is one of the potential software development company in ethiopia and now presents recovery tool for files lost by dulla and better fix tool for dulla plz welcome…to my email ghershensoft@gmail.com…it needs advanced tec.
it’s very nice.
please stop sending those garbege messages via our mobile.
Use the tool from emopia.com. i have used it and it work for more than 10 viruses including dulla, recycler, adobe, odinga, and many more.
yared i thank you. i got problem with all viruses their tool cleaned all thanks very much for you for them for all of you too.
Is this a new program?
Thanks. I noticed that this one cleans perfectly. And GUI is very good. Thank you yared for pointing that out.
Thanks very much. This helped a lot.
is this ture that it has protection too? it says so on the site
i cant download please put it on sharing hosting website please
yalawaki sami nifit yilekelikal. it’s really shame ,dulla debedebegn, it totally destroyed my documents.they can not even create a repairing tool for the file destroyed by the malwere they created. yabesachal , .
…
nice work guys, it it’s amazing that it has small file size compared to what it does. insa provided us with 30meg with only removal to dulla. yours is only 40kb but has protection to more than 10 viruses. and it is working on vista. thank you all. i am loving it.
hi every one ,i have meet a “BIG” problem on my pc that was attacked by a virus that is call itself “RECYCLER”,please help me to resolve it as soon as possible.
thank you for @www.emopia.com
Whatever happened to dulla? I’m beginning to think it was the creation of … you know who. Guys, please, don’t ever do such a nasty thing again (eventhough you CAN). And “misikir2″ above, you really are a lousy “misikir” of the S.O.B. who calls himself ethiopianINSA. Next time, choose a better name… and there is no antivirus of this size (40 kb).
please the virus is killing me heal me please,help me I have vista comp.
is this ture that it has protection too? it says so on the site
Hello,
I aman. There is ways that you can recover any file that dulla corrupt and there is way that you can open your flash with out any virus, you Don’t to have Anti virus like me.
1) Go to my Computer and press f4 key and something will come and open your flash, that all but if double click or right click open or Explorer the Virus will insert.
I was trying to made software that recover Office files with C++ and ASM(Assembly Language).
If you have problem E-mail to me @ artxpasg@gmail.com.
dulla@20666 now coming attack .avi .mp3 .exe .dll .psp and all
contact me!
Hello,
There is way that you can restore any file that dulla attack
There are 3 step
1) download any HEX Editor from any web site
2) Download Notepad++
3) If the file is *.Doc you can open with Notepad++
4) open the file with Hex Editor and go to Edit and Replace and change to string and insert in the first Box ~dulla@204 or ~dulla@206 and in the second to space (20 20 in Hex Code) then replace and save.
That is all
Good lack!
I can recover all documents infected by dulla.
Hello Yoni, You can with Hex Editor!
Is it Good!
You can recover any file that dulla infected Like Zip *.doc *.mdb *.pdf *.ppt with Hex Editor.
Aman.K
The war is coming with new virus Danega.exe. It will infected 390 file extension. I am Gone kill you!!!!!!!!!
Hello Dulla user’s and maker’s how are you? Are you Fine with your Virus.
Ha Ha Cool Algorithm but you can’t try me? I know all about this dulla virus? I made cool Anti virus for my self only and it will recover any file that dulla infected.
The Computer war is Coming!!! With new Virus!!
I will get you one day Cyber Storm(ethiohacker)!
Ethiocrack
This message is to INSA guys.
We believe that the DULLA virus is created by you guys and then you said you have come up with its anti-node, Tsere-DULLA. Both, the virus and the alleged solution could be up to something sinister workings, i.e. spying on people.
Therefore, what would you say about our suspects? Do you have evidence that you did not create the virus and Tsere-DULLA does not have hidden agenda?
Thanks.
my documents are distroyed by several viruses and I really dont know what to do?
I think this is good attemt to do this effective action ,but what was the objective?
what with .netframe heal /remove
DO IT RIGHT AT THE FIRST TIME follow this pri. 10q 4 ur effort with less result !!!!!!!!!!
Hello, I was made software that can recover any document and remove virus with VB 2008 and ASM . Can you give me the list of the Virus that attack you computer.
They are Virus Micro virus
Dulla 204 and 2066, Kale. Please give me a list of the virus and i will make the software and I will give you.
HackerASG
sir hi
i wonder if u could help me how to repair my files which is corrupted by ~dulla@204 virus ,really i have written an acadimic java book in my language .i am so needed to repair them .with many regards .
help me
sir hi
i wonder if u could help me how to repair my files which is corrupted by ~dulla@204 virus ,really i have written an acadimic java book in my language .i am so needed to repair them .with many regards .
help me this is my email (aramkayat@yahoo.com)
It is quite shamefull somebody would creat such a program. Imagine losing five years of research paper in a program created by some dump shits. I have installed the tsere dulla but the virus keeps affecting my documents. Guys who made this, of caurse ,they can program but they have given as a lesson that, If you are really stupid you can’t even correct the problem that you made. We Ethiopians are much more smarter and proud than this.
hey are you guys jocking? i downloaded the last update but the dulla virus just kept attacking my files and when i use kaspersky it dctes the virus as heur.trojan….. i saw they have released the version 1.0.0.0 of tsre-dulla but it about 31 MB id they really expect us to download that without giving assurance that it will completely remove the virus?
please you guys be serious!! i farmatted my pc but the virus is still up on my head! somebody help me! and let me tell you one thing we don’t need the history anymore we just need a solution!!! HELP
Hey, Guys
Don’t download anti-dulla b\c There are 3 type of dulla 1)Dulla@204 2)dulla@2066 3)kal@204 And Anti-dulla dosn’t recognize 2 and 3. Please Don’t download it will insert that virus
DEAR ALL,
HAS ANY OF U COME UP WITH A SOMETHING TO REPAIR INFECTED FILES, ALOT OF PEOPLES’ CARREERS, ORGANISATIONS’ IMPORTANT DOCUMENTS ARE AT STAKE. and some have already closed because of this dulla. PLease Help
i appreciate you for doing this kind of virus /dulla ;and more or less ,it affect the environment of widows and you done its anti virus really i appreciate again and again . but to download the anti virus ,the web page of your website is no suitable please correct again b/c is is not indicate the exact link of tsere dulla. 10Q u.
this virus is the wost infection i have ever had since the win32/parite of the 2005, and even worse, it entered our backup server, without triggering even the ligthest alarm corrupted everything just as it had done for the to our computers and servers, we stand to loose terrabytes of infomation and thousands of clients if this damage isnt rectified, is there any way to undo tha harm done to the files
..
Download and use Emopia VRP. It’s targeting the low internet bandwidth in Ethiopia. And works like a charm.
Hello Guys,
Let put something about dulla virus.
There are 3 type if virus 1) ~dulla@204~ 2)~kal@204~ 3)~dulla@2066~
Dulla is win32 virus with some Assembly language and Full C++. The Algorithm of dulla virus is different in there virus type.
Anti-dulla works only you install the Microsoft .net frame work 2 but this is not the idea. let me tell you someting useful, Anti-dulla work, if the virus is running on your computer and it will find the original virus in system32, it will find the algorithm and it will clean the EXE files, if not the virus is running or if the virus could not found and if you have the virus EXE, the anti-dulla will say no virus found. Watch out!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
One thing don’t download Emopia and anti-dulla, if you know something about computer and don’t use Antivirus software, if you want to have Good Computer.
Good Lack!
Art-Xp
new teddy afro virus is spreading too. we need solutions
its so dumy i haven’t seen a sily virus like this in my whole life it makes me feel like ehhhhhhh
How can fix files destroyed by ~dulla@204 virus?
Damn I was one of the dulla virus creators.
we have the solution but we are not releasing it because of certain reasons …… Namaste….
there was a virus in my computer. i use avg .it healed the infected files and there are no viruses now but when i try to open my local hard drivers the ‘open with’dialog window will appear.when i use explorer it shows me the files but the files are not in the folder.is there any viruses that avg can’t detect?
We are getting bored of the named Dulla virus. How dare the symantec speialists ignore this virus from the start?
they need to comment on this issue.
For the teddy afro virus, I just found a solution over at the emopia website, http://www.emopia.com
@Mati
Ya there are many viruses that avg can’t detect, but the solution for your problem is to delete the autorun.inf file inside the root folder
open up command prompt and type
delete /f /q (your drive name):\autorun.inf
for example:
delete /f /q C:\autorun.inf
and then restart your pc, if that doesn’t fix that then that means the virus is still creatin copies of autorun.inf
Dear Mati,
Have you ever used the command prompt?
any one with file recover tool after dulla 204 infection
anti dulla is the stupidest anti virus i ever see it only uncheck the service file from “msconfig” it has no auto detect options
the virus some time even attack the anti dulla excutable files
the anti virus should have auto detect options
how ever i wrote the code for dulla. u had enough destroying our files please give us the solution.
O! people, Is there any recovery methode or software for dulla infected MicroSoft Office files?
for Amanuel Kenna(162) how can I recover dulla infected files with hex editor? I need additional information or the steps of recovering!
for Solution For Every Thing(160) what about *.xls or *.xlsx files? I need help.
People! Get over it! There is no method to recover corrupted files, you can see the reason on facebook, just go to emopia.com (they are the one who made emopia virus remover, and are professionals) and join their facebook page and in the discussion board, you can read the reason why dulla corrupted files can’t be recovered.
Ther is a virus named Teddy afro which has characterstic feature of hiding your files and disabling ur cd driver…it is even difficult to remove it with command…i have tried avira, kaspersky,macaffe,avg,and NOD..non of them could remove that.You guys do you have any solution for that?EMOPIA ..it is just fake..it cant detect any virus…
HOW TO PARTIAL REPAIR OFFICE DOCUMENTS INFECTED WIZ “~dulla^@204~” VIRUS
Before you start this tutorial clean your pc wiz anti dulla software I recommend
Emopia® Virus Removal Pack (freeware) from emopia.com
Tools needed for this tutorial
• Notepad ++ (absolutely free download and install this software)
• Office 2007
• An infected file
1. Right click on the infected office document >>click “edit with notepad ++” now the document will be opened in notepad++ window
2. Click on “search” from the menu >>click on” find” >> click on “replace” tab
3. Type ‘~dulla^@204~\x00’ (without the quote) on “find what” box>> check the “regular expression” check box >> click on “find next” tab >> click on “replace all” tab >> ok >> done.
4. Click done >> click on the” save” from menu >> close notepad ++ >> open the infected(corrupted) document when a dialog box appear click yes
any question please email me :amangirma@gmail.com
send me the teddy afro virus infected file sample i am expert virus anlayzer and i love to help people in my free time if you have teddy afro virus infected file attach and send it to my email: father@safe-mail.net i will give you free removal tool for free.
thanks.
Amanuel Kenna and AreMoh.
I think you two know how to recover pdf files that have been infected by the dulla virus using hex editor. I tried several times and I didn’t succeed. Please help. I am really anxious.
Please send Tsere dulla Antivrus. My documents are at risk
The file already corrupted, so how can i recover the excel files?
I’m still wondering who developed dulla virus,i’ll b very happy if INSA has something to say abt it.
I appreciate Dull Virus creator man really !! For future I will expect more that used for our country ‘Ethiopia’ and pass to Next Generation !!
Please send Tsere dulla Antivrus. My documents are at riskThe file already corrupted, so how can i recover the excel files?+
This is really bad fortune for Ethiopians that hears Dulla virus has been created by Ethiopian distractive guy or Association. You know creating very_low_risk and very ordinary system virus like Dulla is not a work of proud. Most educated Ethiopians suspect strongly who has created this gadium virus. In my belief the current stated antivirus for Dulla-Tsere Dulla creator has created the virus itself before. Because the name of a virus it self is Amharic word, besides the solution itself has found from Ethiopia by the association they called INSA. Don’t forget also most commercial antivirus producers ignore or don’t care about to get a solution for this virus. And do not forget Dulla virus is a kind of very easy and low risk ordinary virus that even a younger student of computer science student with out experience can create this kind of macro type of virus. If I were a creator of this virus, I would rather participate to create a kind problem solving projects for this poor country. Shame on this virus creator. Let me tell him what is he done is reflect he is ordinary, very easy and useless bastard gay. By the way I am not giving this opinion just being hot or affected by the virus. And let me tell him that even I can create such virus. But I wouldn’t be interested to be criminal. I am sorry to use irrational words.
good but how con i recovered my corrupted file
tell me what can i do
it’s good but it can’t protect z new worm, INSA-Worm, can u tell me about famous INSA?
Please make visible you loading option. How can I get this option?
look ephrem or bla bla.The creator Dulla virus is not s—-d or b—–d rather you are the b—–d he did what he can do or he wants to do may be you are the one who make it.u said it can be made by a junior CS student. plz show me what you can code the biggest and main problem of ethiopians are we know a lil bit and we talk million times that’s why we are not changing you might know vb.net(it is for dummies and kids) then you will laugh at c codders dont be stupid and as you aid you can make a virus like that so post something you programmed ideot!!!!
@ephrem you are very stupid, you can’t even differentiate between Macro virus and PE infecter VIRUS!!! First of all, do you even know the definition of Macro Virus, i guess you don’t. Even though the creator of Dulla used his knowledge for destructive ends, the coding of Dulla isn’t stupid! Infact its brilliant coz almost none of the CS “graduates” can code innovative stuff coz the only thing they know is VB and JAVA and they consider themselves to be knowledgable!!! Ephrem, you are the perfect example!! CS is one of the hardest subjects to master, and even takes decades to be a good programmer. There will be almost none in Ethiopia because no one chooses what he likes to study on the University Level, almost all of the CS students here in Ethio got to CS schools because of their LOW results! Thats why its hard to find Ethiopians who love their Job, almost all of the high school students want to join Medical School on the hope of relatively high salary! How would you expect anyone to be good at anything if he joined it without interest! The CS graduates in Ethiopian are stupids without any knowledge in programming, and Ephrem if you claim that making the virus is easy, then why wouldn’t you make the antivirus coz its easier than making the Virus!! Everyone here reading this post, if you joined something only by considering the salary, you won’t ever be good at it and for all of the CS “graduates” in ethiopia, you don’t know anything and you will never know anything if you continue like this!!! Check out rohitab.com, its filled with genius highschool students that make programs that even the Professor in Ethiopia will never know how to make them!
Dear Shebaw, ur comment is not constructive. Are sure about what u wrote, i don’t think. We have a number of IT solution providers who are solving a number of problems. anyway u can email me for real evidences.
there r a number of C++ virus scripts on hackers and P2P site anyone with little programming skill specially in C++ can modify and increase the risk of the virus. Its is not a big deal nowadays.
for those who r suffering from ~dulla^@204~ u files could be recovered partially, if u uses Easy Recovery Professional or Advanced Word repair programs. If can’t find the Software emailme at jaffermohATyahooDOTcom
wishing u all including ephrem, all the best.
@Jaffer, why is my comment not costructive? Is that because it pointed out the truth, im confused here!
“We have a number of IT solution providers who are solving a number of problems”… what problems, do you call a stupid straight froward database to calculate some stupid calculations real programming? Where were they when dulla struck? Any real programmer can program a remover for dulla but it took them ages before they can manage that, that shows how inexperienced and dumb they are.
If you have evidences, why don’t you post it here. You make it sound like some type of mesterious mission. And if programming a PE infector is that easy, then why did it take them so long. And how many of the CS graduates here can program a remover for it, how many? I bet 99.99% of the graduates don’t even know the difference between PE infector and some other script “viruses”, let alone knowing the structure of PE and programming a remover for a PE infector virus!!!
change the file extension to something else, like readme.pdf ==> readme.pdf.SSS
tHIS WILL FOOL THE VIRUS, i HOPE…..GOOD LUCK!
Dear Persons
i want to express my deep concern on this virus from a technical point of view and becuse i have related profession ..but not virsus making lolz! i have made few virus but not like dulla and i have not released them becuse they are for educational purpose only. What i have understood from ~dulla204 is it insert the string ~dulla204 in each file that have extensions like .xlsx .vbp.asp.aspx. and so on…and it strats using a service application(as a windows helpfull application) but.it’s not i have seen some of the prtion of code by opening it in a notpad i have come to undrrstood that it is written in delphi programing language….
In one hand it is good to see ethiopians to create this things!!
Don’t to be stupid to loss somebodies file? create antivirus for dulla ! to be prised by 8000000 peoples of ethiopia
I very very sorry by the dulla virus plz give me the solution b/c I do any thing with the virus dulla help me how can i remove from my PC . We can’t do with messanger and an other documents please send me a solution
I have seen that your virus software, but what differs you from the civilized one your anti-virus never recover every corrupted data/file please learn more do once.
ohhhhh the best solution .i have lost a lots of data so this one might be solution.anyways thnx
guys
i am really angry that my laptop is highley affected please a little solution
i really appriciate your innvention but could you give me your offer please to get out of this mess. thank y0u
Please send Tsere dulla Antivrus. My documents are at riskThe file already corrupted, so how can i recover the excel files? help me now!!
Please send Tsere dulla Antivrus. My documents are at riskThe file already corrupted, so how can i recover the excel files?
how i am gone to fix the virus dulla
10Q it creats business to me b/c i have got the solution for the courapted file,so any one can send mail to have got the solution.
Please, tell me how I can load this anti virus. My computer was affected by virus and not properly operated.
Tell me, how can i get z antivirus for dulla?
Zis dula aint nothin comared with the new upcoming virus called ‘abadula’ No antivirus could stop it. Dula wont be a virus after this. u will miss ur desktop interface after u r infected and z best thing is u cant even format ur PC!!! (It wont work on win98 and mac) but unfortunetly about 91% of z ethiopian ppl use xp and newer versons of windows. Then ur pc would a piece of junk that wo uld throwen to z garbage.
well i think it is good tutorial thanks aman
I am sorry but this virus replaces the original file even the dulla programmer can not recover the data but removing the virus is pz of cake
Leave your response!
227 Responses
Post your remarks about ~dulla@204 Virus. Get feedback and help others to resolve this issue.Subcategory
Recent Comments
Recent Posts
Most Commented
About precisesecurity
A trusted computer security web site that provides efficient and free solution to remove Trojans, viruses, rogue programs and other similar malicious activities.
Copyright © 2006-2012 | Tech Blogs - precisesecurity.com | Privacy Policy