A Developer WeBLOG RSS 2.0

Yesterday, I found that my laptop was infected by a virus. I was a bit surprised by it, because, well, it’s my first time. I always try to keep my computer pretty clean whenever I’m using it, and I’m not sure where and how I got this virus. The virus is undetectable with AVG Free, which I have installed in my machine. This can mean 3 things: The virus is relatively new, the virus is not a BIG threat, and lastly AVG Free sucks. Anyway, the virus has the following symptoms:

  • Internet explorer title bar has “[--Hacked by ROCKSTREET—] @InF” message.
  • Your computer keeps on prompting you with “Drive was not found, please insert disk at location” dialog.

As you can see from the symptoms, the virus is not very threatening. The second symptom can be a bit worrying, but I’m finding that all of my drives can be found and work with no problem. Thus that dialog window is probably a bogus dialog window. After gathering some more information from the net, finally found a way to remove the virus, here is how:

  • Go to “Start Menu” and then “Run”. In the dialog box type “msconfig” and click “Ok”.
  • Select the “Startup” tab, and un-tick rockstreet entry. Click “Apply” –> “Ok” –> “Exit without Restart”.
  • Go to “c:\windows” and the root of every drive that you have (e.g. “c:\”, “d:\”), and then delete the “rockstreet.dll.vbs” file.
  • Go to the following registry key “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run”, and delete the load key.
  • Go to the following registry key “HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main”, and clear up the “Window Title” value key.
  • Restart your machine.

Hope this helps in removing the virus if your computer is having the same problem.

RWendi

Saturday, August 22, 2009 7:08:42 AM UTC |  Comments [2]
Computer Hardware | Security
Sunday, December 06, 2009 2:51:54 PM UTC
Thank you for post. I found it first by search on your site and has found it very informative.
Terramundi Pots
Sara Colins
Wednesday, May 12, 2010 1:55:44 PM UTC
Hi there, I just wanted to say thanks for this informative post, can you please allow me to post it on my blog?
OpenID
Please login with either your OpenID above, or your details below.
Name
E-mail
(will show your gravatar icon)
Home page

Comment (Some html is allowed: a@href@title, b, blockquote@cite, em, i, strike, strong, sub, sup, u) where the @ means "attribute." For example, you can use <a href="" title=""> or <blockquote cite="Scott">.  

Enter the code shown (prevents robots):

Live Comment Preview
All Content © 2010, RWendi