27Aug Burito, Braviax, UPS virus … check your email senders!
Damnit, why can’t people check to see if they know the person sending them an email before they open attachments? The latest bit of fun seems to be people opening emails that apparently relate to statements of fees, invoices etc - it’s a VIRUS and here’s how to fix it.
Yeah yeah why bother re-posting what someone else has already written? As far as I’m concerned the more matches on Google that help people fix this type of crap the better (yes I’m bitter about this virus because it’s ruining my week).
Anyway, the virus might arrive as an email from UPS although we all know that this can and will change at any time. The occurrences that I’ve seen (unfortunately my workplace has been hit with this virus) were from someone called "Augusta Berry" and were from email addresses like ghytrhjv@bravex.com (the domain name alone is a clue). Naturally the sender name and address can and will also change without warning.
The attachment can be called anything although the occurrences I’ve seen were all called "fees_2008_2009.zip". This zip file, when opened, will deploy 2 files onto your system - braviax.exe and burito.exe.
Print these instructions or open them on a computer other than the one that is infected because you’ll have to restart your computer to fix the virus. I did not write these steps but I know they work.
2. Double click SDFix.exe and it will extract the files to %systemdrive% (this is the drive that contains the Windows Directory, typically C:\SDFix). DO NOT use it just yet.
3. Reboot your computer in “SAFE MODE” using the F8 method. To do this, restart your computer and after hearing your computer beep once during startup [but before the Windows icon appears] press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in “Safe Mode”.
4. Open the SDFix folder and double click RunThis.cmd to start the script.
5. Type Y to begin the cleanup process.
6. It will remove any Trojan Services or Registry Entries found then prompt you to press any key to reboot.
7. Press any Key and it will restart the PC.
8. When the PC restarts, the Fixtool will run again and complete the removal process then display Finished, press any key to end the script and load your desktop icons.
9. Once the desktop icons load the SDFix report will open on screen and also save into the SDFix folder as Report.txt.
As I said, I did not write these steps - I found them on the Bicester Computers Support Forum in a post called "FIXED! UPS Virus removal - braviax.exe and burito.exe" and rather than write my own version I’ve just copied the text from there. Thanks to Laurentio (the original poster) for posting these steps - they saved my ass.
