Flu Burung Virus

Flu Burung is a virus that can infect Microsoft Word .doc files by duplicating infected file with an executable .scr extension. The original version will be hidden so only the executable copy is visible to user. Flu Burung Virus will also replaced Internet Explorer title to show its presence and block access to security web sites.

Alias: W32.Rungbu

Damage Level: Medium

Systems Affected: Windows 9x, 2000, XP, Windows Vista

Technical Details and Additional Information:

What can Flu Burung Virus do to infected system?
– The virus will hide file extension on the affected system.
– Setup Microsoft Word as default program to run .SCR files.
– Hides all original Microsoft Word document.

Malicious Files Added by Flu Burung Virus
C:\Documents and Settings\User\Local Settings\Temp\Flu Burung.txt

Flu Burung Virus – Removal

Removing Flu Burung Virus Manually:
1. If using Windows ME or XP, System Restore must be disabled to prevent the threat from restoring itself. [Windows XP System Restore]
2. Update the virus definitions.
3. Reboot Windows in Safe Mode.
4. Run a full system scan and clean/delete all infected files.
5. Exit registry editor and restart Windows.

Anti-virus Tools

In order to completely remove Flu Burung Virus from a system, click here to download and run Malwarebytes Anti-Malware. Sometimes, Trojans will block the downloading and installation of MBAM. If this happens, download it from a clean PC and rename the executable file before executing on the infected machine.

Scan with Norton Power Eraser:
Norton Power Eraser is a virus removal tool created by Norton Antivirus to remove unfamiliar threats without using the traditional AV signatures. Download the tool from this location and start scanning the computer for viruses.

2 Responses

  1. Sandra says:

    Have Flu Burung Virus and mouse will not move so cannot do anything

  2. gibbs23 says:

    Sandra, have you tried to reboot the computer in Safe Mode and run a scan from there. What about your keyboard, is it working?

Leave a Reply

Your email address will not be published. Required fields are marked *