01.01.11 — A New Beginning









Sunrise on New Year's Day over Tokyo Bay on January 1, 2011. AFP Photo Kazuhiro Nogi, AFP, Getty Images





————————





Saturday, January 1, 2011 — New Year's Day





Puzzle by Mark Diehl, edited by Will Shortz



Welcome to day one of the new year…




Across — 1. Star of India, once. SABU; 5. Concert spectacles, LIGHT SHOWS; 15. 29-year Knesset member, EBAN; 16. “Prêt-à-Porter” actress, ANOUK AIMEE; 17. Material for a suit?, TORT; 18. Convention fighter, ICONOCLAST; 19. Ring bearer, TREE TRUNK; 21. “Roots” name, KUNTA; 22. It’s free in Paris, LIBRE; 23. Hazardous obstruction, REEF; 25. Humidifier output, MIST; 26. It often gets fed, EGO; 27. Where the biblical lost tribes were held captive, ASSYRIA; 30. N.Y.P.D. descriptor, FINEST; 32. Cry to get 40-Across, SEND HELP; 37. What Taft, Hoover and Carter each had, ONE TERM; 39. Gave a face-lift, DID OVER; 40. People with saving accounts?, RESCUERS; 42. “Rock Me TONITE” (1984 hit); 43. One worth of emulation, PARAGON; 45. Simon & Schuster’s parent, CBS; 46. Opposite of 4-Down, UBER; 50. Tunnel creator, MOLE; 51. Leaving lines, TATAS; 53. Order in a rush order, TODAY; 55. Barn dance accessory, BANJO PICK; 57. Onetime Chevy Blazer competitor, ISUZU RODEO; 59. Mythological trickster who was punished by being held to a rock, LOKI; 60. Steam roller?, LOCOMOTIVE; 61. Peck, e.g., UNIT; 62. What loaded people have, EXTRA MONEY; 63. Strings used in payroll depts., SSNS.







Down — 1. Take, finally, SETTLE FOR; 2. Native, ABORIGINE; 3. Far from frilly, BARE BONES; 4. Opposite of 46-Across, UNTER; 5. Spot of seclusion, LAIR; 6. Racks up, INCURS; 7. Dingbats, GOONEYS, or perhaps an albatross; 8. Dug in, with “down”, HUNKERED; 9. What stops swings, briefly, TKO; 10. Give the heave-ho, SACK; 11. Area where blood vessels enter an organ, HILUM; 12. Sur citizen, OMANI; 13. Bridge openers, WESTS; 14. Rip into, SET AT; 20. Make stand on end, as hair, TEASE UP; 24. “That’s it!”, FINITO; 28. Course, STREAM; 29. Pad, ADD ONTO; 31. “That sorta thing”, ETC; 33. Pumpkin, HON; 34. People are not 35-Down after these occur, EVICTIONS; 35. See 34-Down, LET BACK IN; 36. Publicists’ preparations, PRESS KITS; 38. Hit from the 1983 platinum album “Kilroy Was Here”, MR ROBOTO; 41. Sultan who captured Jerusalem in 1187, SALADIN; 44. Palais des Nations setting, GENEVE; 46. Not worthless, UTILE; 47. Yanks’ foes, BOSOX; 48. Drawn-out chemical, EDUCT; 49. It may cut things close, RAZOR; 52. Educational ideal, A-PLUS; 54. Arizona county or its seat, YUMA; 56. Bouncing baby, JOEY; 58. Kind of chip, ROM.



One down... 364 to go!




————————







Click on image to enlarge.





Puzzle available on the internet at

at 11:10 PM 0 comments

12.31.10 — MMXI






Father Time Overcome by Love, Hope and Beauty, 1627, Simon Vouet





————————





Friday, December 31, 2010 — New Year's Eve





Puzzle by Caleb Madison, edited by Will Shortz




TIME AFTER TIME (15D. Over and over) and STICK IT TO THE MAN (35A. Be revolting) are the long entries of this end-of-the-year Friday crossword, followed by ten of eight letters — AERONAUT (2D. Blimp navigator, ALOUETTE (38D. “Gentille” one of song), BROMANCE (62A. Relationship in the 2009 film “I Love You, Man”), I’M SO GLAD (17A. Response to great news), J J ABRAMS (1D. Creator of TV’s “Alias”), LAILA ALI (3D. Boxer who wrote “Reach!”), MAPQUEST (37D. Many users follow its directions), NO WAY OUT (39D. Problem for one who’s trapped), P T BARNUM (57A. “The Humbugs of the World” author, 1865) and TEEN IDOL (15A. Poster girl).





Mid-size — AFLAME, ARCHES, ARISEN (16A. Debunked?), ELDEST, ERES TU, HAVE TO, IDLING, JALOPY (1A. One likely to die on the road?), JEANIE (14A. Foster girl), LOSE IT (34D. Freak), OBLATE, ROADIE, SARTRE, SEXTET, S-STARS, STOP BY, TEPEES (40A. Homes within nations), THE WIRE (7A. What something may go down to), TURBOS, WIDGET (28A. Thingamajig), YENTAS, YES I SEE (64A. “Got it”).












Five-letter — ABETS, AITCH (54A. Head start?), ASTIR, I’M HIP, INKER, ITALO, MULAN (31A. Film in which Eddie Murphy voices the dragon Mushu), SAUCE, STOMP, TEMPT.





Short stuff — AAA, ACTA, BOL, DEET (30D. Debugger?), ENO, HARE, HES, ISLA and IPSA,NIS, NNE, ONS (4D. Switch sides?), ORRS, PIES, POW, QUA, RAS, REAP, RNA, SAMI (53D. Language related to Finnish), SIDE, SWAT (24D. Sacrifice fly?), TAU, UEY, WIGS (10D. Freaks (out)), VEX (61D. Really try).




Happy New Year!





————————




































Click on image to enlarge.





Puzzle available on the internet at


THE NEW YORK TIMES — Crossword Puzzles and Games.



Remaining clues — 18. Big tin exporter: Abbr.; 19. Beat badly; 21. Battle joiner’s choice; 22. Kind of replication; 23. Sticks up for, maybe?; 25. Serbian city where Constantine the Great was born; 26. Org. with towers; 27. Luzón, e.g.; 33. Lit; 41. San Francisco’s Museo ___ Americano; 42. Red giants in the night sky; 45. Procure; 47. Big hit; 48. Cross character; 49. Not dormant; 51. As; 52. Ice legend’s family; 56. It’s often hung illegally); 60. Be coerced; 63. 1974 hit with Spanish lyrics; 65. The Allman Brothers Band, e.g. — DOWN: 5. Some county fair contest entries; 6. Folks getting into dirt; 7. Bait; 8. Bucks, e.g.; 9. Rock’s Brian; 11. Not going anywhere; 12. Carrier of drum cases, maybe; 13. First in line, say; 20. Like M&M’s; 27. Cartoonist, at times; 29. 64-Across, to a cat; 32. Court proceedings; 36. Self, in a Latin phrase; 46. ___ National Park; 50. It may stick to your ribs; 55. Dummy on a greyhound track; 58. Coll. Peer leaders; 59. Uptown’s dir. in N.Y.C.






at 10:50 PM 0 comments

12.30.10 — Split Incisions














————————





Thursday, December 30, 2010





Puzzle by Joe Krozel, edited by Will Shortz




Seven answers interrupted by a couple of black squares each constitutes the interrelated group of this thrashing Thursday crossword, with the individual segments capable of qualifying as answers to …some other crossword:




  • CHAR / TERM / EMBER (12A. One in on the founding of a company)

  • PLAN / TMAN / AGER (20A. Production site chief)

  • WIN / ETAS / TER (27A. One getting a bouquet?)

  • OPERA / TIN / GROOM (37A. Workplace where there are many openings)

  • EAR / THAN / GEL (43A. Song played at the school dance in “Back to the Future”)

  • FORT / HERE / CORD (50A. Officially)

  • NOTRE / SPAS / SING (59A. Warning to intruders)




What?




Other — ARM LOCKS (36D. Judo maneuvers); ATTACHES (35D. Legal cases?); GO EAST (45A. Enter an Ivy League school, maybe), kidding, right?; MONOTONY (15D. It’s all the same), for sure!; OOLONG (47A. Chinese for “black dragon”); PECANS (7D. Certain pie toppers); RENEWERS (13D. Some passport applicants); STATIN (4D. Cholesterol medication); STEVIE (23A. Wonder of note), TITTER (44D. Nervous laugh).





Five-letter — AMPLE, CALEB, ELVER (62A. Young fish that has migrated from the Sargasso Sea), EVIAN, FRERE, GRANT, HASAT, IMAGO, JAPES, LETME, NONET, NOWIN, ORMAN, PIANO, SHULS.





Short stuff — ABLE, ACOP, APIA, ARNO, ASH, ATCO, AVOW, DIGS, ENOL, EMMA, EMPT, FISC, FOOL, GAEL, JOKE (32D. One may be running over time), KIAS, KWAI, NEER, NNE, NTS, OHS, ORCA, ONTV, ORB, ORNO, OTAY, OUSE, PEAR, RAW, ROME, SLO, TNT, TROP, VISA.




————————













































 











Click on image to enlarge.







Puzzle available on the internet at



THE NEW YORK TIMES — Crossword Puzzles and Games.



Remaining clues — ACROSS: 1. Dull shade; 4. Road caution; 7. Place for a hammer; 17. River of York; 18. Record label of the Beatles’ “Ain’t She Sweet”; 19. Spy sent by Moses into Canaan; 25. Yes ___; 32. Makes fun of; 35. Profess; 36. It flows near the Piazzale Michelangelo; 40. Sorento and Sedona; 41. “Our Gang” approval; 42. Plentiful; 46. Kind of year: Abbr.; 56. Schubert’s “Eine kleine Trauermusik,” e.g.; 57. 1996 Gwyneth Paltrow title role; 58. River in a 1957 hit film; 63. Rubble maker, for short; 64. Some Windows systems. DOWN: 1. Rent-___; 2. Synagogues; 3. Attacks; 5. Helper’s offer; 6. Sea menace; 8. Big bug; 9. Fit; 10. Thomas Moore’s “___ Ask the Hour”; 11. Eye, to poets; 24. Something that’s stamped; 26. Green; 28. Town on Lake Geneva opposite Lausanne, Switzerland; 29. Too: Fr.; 30. Hydroxyl compound; 31. Setting for “Coriolanus”; 33. Headquarters for Polynesian Airlines; 34. Schnapps flavor; 39. Highlander; 41. Song words accompanying “Sherrie” and “Susanna”; 46. Many a French business partner; 47. “The Suze ___ Show”; 48. Kind of situation; 49. Award; 50. Half-wit; 51. Airing; 53. Pre___ (take the place of); 55. Pad; 56. Ft. Myers-to-Orlando dir.








at 11:08 PM 0 comments

12.29.10 — Tilde We Meet Again...






Mexican Sombrero Siesta Ceramic Tile by Ramos Martinez





————————





Wednesday, December 29, 2010





Puzzle by Patrick Merrell, edited by Will Shortz




TILDE (58D. Mark used four times in this puzzle’s solution), PIÑA COLADA with NIÑA (18A. Margarita alternatives; 6D. One of a 15th-century trio), JALAPEÑO PEPPERS with PIÑATA (40A. Salsa verde ingredients; 8D. It requires one who’s blind with a bat) and MAÑANA SEÑOR with PIÑON and AÑOS (63A. Procrastinating words south of the border; 52D. Evergreen with edible nuts; 62D. Yucatán years) constitutes the interrelated group of this poco caliente Wednesday crossword.







Other — AMPHORA, EAST ROOM, EMIGRATE, LAS VEGAS (20A. Spanish for “the meadows”), MARIACHI (61A. Like traditional Mexican music), VESTALS.





Six-letter — AMIGOS (59A. Baja buddies), ASSADS, DAHLIA (22A. Mexican bloom), DO GOOD, E MINOR, ERODES, LAPTOP, ONE EAR, POTION, RENAME, REPEAL, SPASMS, TAIPEI, THIRDS, THREAT.





Five — AHYES, AMAIN, ANASS, ANGLO (43A. Barrio outsider), AVAIL, “La BAMBA“, DENSE, ECONO, LADLE, MESAS (13D. Tijuana tables), OCEAN, OMBRE (36A. Card game of Spanish origin), OMEGA, PABLO (1D. “Tortilla Flat” character).





Short stuff — ACE, AJA, ALG, ANNA, APAT, ASEA, ASTA, BAP, BEA and BEN, BIOL, BLAH and BLAM, ELS, ESP (39D. Gift in “The Gift“), GALA, ISAO and ISTO, KOS, LAVE, MOC, NED, OSE, OYL, PAN, POD, RRS, SLAP, SOP, STAT, STEP, TIKI.



Mañana!




————————




































Click on image to enlarge.





Puzzle available on the internet at


THE NEW YORK TIMES — Crossword Puzzles and Games.



Remaining clues — ACROSS: 1. Jettisoned compartment; 4. Update, in a way; 10. Noise in a comic book gunfight; 14. Expert; 15. Key of “The James Bond Theme”; 16. Bathe; 17. Big ___; 23. Like telemarketing headsets; 24. Bit of a climb; 26. They’re caught in Chicago; 27. What a cheeky one’s cheek might get; 29. Screen role for Skippy the dog; 31. Pit-___; 34. Cook Island carving; 44. At 30° W 30° N, e.g.; 45. Lock part; 46. Goals against, e.g.; 48. “What ___ be done?”; 50. Certain Protestant: Abbr.; 53. Golfer Aoki; 55. Reason for an evacuation; 65. Castor ___ (old comic strip character); 66. Subj. involving cells; 67. Be altruistic; 68. Mustachioed “Simpsons” character; 69. Kournikova of tennis; 70. They might be knee-jerk reactions; 71. Carbohydrate suffix. — DOWN: 2. Jersey Shore county, appropriately; 3. None too swift; 4. Officially annul; 5. Go from home to home?; 7. “With the jawbone of ___ …”; 8. Comfy footwear, briefly; 9. Slowly disappears; 10. Bor-r-ring; 11. Soup kitchen server; 12. Use; 19. One turned off for takeoff; 21. Virgins of ancient Rome; 25. Island capital of 2.6 million; 30. Two-handled vase; 31. 1977 double-platinum album by Steely Dan; 32. Sweeping shot; 33. Medit. Land; 35. Flattens, for short; 37. Arthur of “The Golden Girls”; 38. $200 Monopoly properties: Abbr.; 41. Crone’s concoction; 42. White House ceremony site; 47. Syrian presidential family; 49. Helping for the very hungry, maybe; 51. At full speed; 54. Psi follower; 56. Cheap, in adspeak; 57. “But of course”; 60. Pricey event; 64. Soak (up).






at 11:04 PM 0 comments

12.28.10 — Valuable Truck?






An overturned semi-truck and other semis are strewn across both sides of Interstate 90 in Erie, Pennsylvania, January 26, 2007





————————





Tuesday, December 28, 2010





Puzzle by Robert A. Doll, edited by Will Shortz




MARATHON MINI (20A. Distance runner’s skirt?), MARINE SUB (34A. Military sandwich?), FINE EXTRA (45A. Outstanding crowd scene actor?) and PRECIOUS SEMI (55A. Valuable truck?) are the seemingly interrelated group of this tepid Tuesday crossword.





Other — ARCHIE (30D. Jughead’s buddy), AVIATE, DIARIES (44D. Works of Pepys and others), CANAPE, EATS OUT (46D. Visit’s a diner), FLATTEN (5D. Render pancake-shaped), HALEST, MILERS, SCRAMS, SEEN AT, SEE SAW, SMEARS, STANCES (9D. Batting positions).





Five-letter — AAHED, ARENA, ASIDE, ATARI, FIRST, GOWNS, HADES, LEVEL, MOVIE, NEHRU, NO SIR, OILED, OOMPH, SARAN, SHELF, SMILE, SNARE, SPOON (5A, Dish‘s runaway partner, in rhyme), SPRIG, TESTS, TONES, UTILE.





Short stuff — AMS, ANI, ARM, AVA, CAEN and CAIN, EBAN, ELIS, ENCL, ESE and ETE, EVER, FORT, HERA, IDES, ISE and ISP and IST, LENA, MELT, NTH, OWE, POE, RED, RILE, RPI, SAFE, SGT, SITE, SLAM, SWE, TANS, TEEM, TOT, URI, VIE.




————————







Click on image to enlarge.





Puzzle available on the internet at


THE NEW YORK TIMES — Crossword Puzzles and Games.



Remaining clues — ACROSS: 1. Bookcase unit; 6. Drill instructor’s rank, often: Abbr.; 9. Animal trap; 14. Tool with a bubble; 15. Poet who created the Ushers; 16. Color variations; 17. Fight card venue; 18. Have payables; 19. Comment to the audience; 23. Catches some rays; 24. Beats it; 28. Chicken, so to speak; 32. Season after printemps; 33. Compete; 37. “Candid Camera” request; 39. Bottom-of-letter abbr.; 40. Clear wrap; 42. Battle of Normandy city; 43. Emitted a contented sigh; 47. Sch. In Troy, N.Y.; 48. Sussex suffix; 50. Most robust; 51. Plaything with a fulcrum; 53. Defense in a snow fight; 55. Valuable truck?; 61. Company behind the game Battlezone; 64. Hurler’s asset; 65. Applied 3-in-One to; 66. Netflix rental; 67. Juno or NetZero, for short; 68. Serving a purpose; 69. Antler sporters; 70. Utmost in degree; 71. Dry runs. — DOWN: 1. Verbal assault; 2. Zeus’ wife; 3. Partner of anon; 4. “Havana” actress Olin; 7. Graduation attire; 10. Boot camp reply; 11. Young Skywalker’s nickname; 12. “Curse you, ___ Baron!”; 13. U-turn from WNW; 21. Where the Styx flows; 22. Believer’s suffix; 25. Take to the sky; 26. Four-lap runners, often; 27. Witnessed in the area of; 28. Slings mud at; 29. Cocktail hour nibble; 31. Stir up; 32. Abba of Israel; 35. Not risky; 36. Mentalist Geller; 38. 1140, in old Rome; 41. India’s longest-serving P.M.; 49. Neighbor of Nor.; 52. Bit of parsley; 53. Leading the pack; 54. Get-up-and-go; 56. Genesis brother; 57. Webmaster’s creation; 58. Yale students; 59. Disappear a la Frosty; 60. Fateful day for Caesar; 61. Pro-___ (some turneys); 62. Huggies wearer; 63. Gardner of “Mogambo”.






at 9:14 PM 0 comments

12.27.10 — Here's Johnny!






The Johnnys Bench, Cash, Miller, Rivers and Nash





————————





Monday, December 27, 2010





Puzzle by C. W. Stewart, edited by Will Shortz




HERE’S JOHNNY (60A. Classic TV intro … or a hint to the starts of 16-, 22-, 30-, 42- and 47-Across), BENCH WARMER (16A. Second-stringer), CASH PAYMENT (22A. Compensation in bills and coins), MILLER LITE (30A. “Great taste … less filling!” sloganeer), RIVER’S EDGE (42A. 1986 Keanu Reeves film) and NASH RAMBLER (47A. Car in the Playmates’ 1958 hit “Beep Beep”) are the interrelated group of this entertaining Monday crossword.





Other — AROUSE (13A. Stir up), BATMAN (1A. Half of the Dynamic Duo), DEMOTE, EDITOR, MERMEN (24D. Fish-tailed males), MORAYS (9D. Some eels), ORCHID, PLINTH (28D. Base of a column), PRELATE (8D. Church dignitary), REAR-END (42D. Ram into from behind), STOP UP, TENSES (46A. Gets rigid).





Five-letter — AZURE, CREEP (54A. Someone who gives you the willies), EAT IN, EXALT, MERIT, NIPPY, REMAP, Milan opera house La SCALA, SET ON, STALE, SCALA, UMIAK (40A. Eskimo boat), UNDID.






Short stuff — AERO, AIDS, APR, ARCH, AREA, ASH and ASS, ATA, BABS, BEET, CUED, DDT, EKES, ERE and EYRE, INIT, IRV, IZE, JED, KNOT, LEI, LIL, LPS, MUCH (4D. A lot), NEW, ODE and OLDE, ONTO, PRO, PUT, RAGE and RARE, RPM, RTE, SASH, SEE, SMUT, TAX, TEE and TEEN, TINE, TOE, TONS (3D. A lot), TSE, USER, WHIM, WOKE, YEN.









————————








































Click on image to enlarge.





Puzzle available on the internet at


THE NEW YORK TIMES — Crossword Puzzles and Games.



Remaining clues — ACROSS: 7. 33 1/3, e.g., for a record: Abbr.; 10. Envision; 14. Prefix with space; 15. Word after sales of income; 18. One thing ___ time; 19. Window framework; 21. Rapper ___ Wayne; 25. Put a cork in; 29. Mao ___-tung; 38. Loosened, as a 57-Down; 39. Before, poetically; 41. Miss ___ USA; 44. Tip of a boot; 53. Suffix with rational or civil; 55. Opened one’s eyes in the morning; 59. Place; 63. Not con; 64. “What’s ___ for me?”; 65. Magazine manager; 66. Hankering; 67. Banned insecticide, for short; 68. Take down a peg or two. — DOWN: 1. Nickname for Barbara; 2. Environs; 5. ___ Wednesday; 6. Just off the assembly line; 7. Chart again; 10. Like week-old bread; 11. Dine at home; 12. Glorify; 14. Design feature over many a gate; 17. Stupidhead; 22. Prompted; 23. Easter mo., often; 25. Porn; 26. Fork prong; 27. Merrie ___ England; 31. Hawaiian garland; 32. Newspaper columnist Kupcinet; 33. Golf peg; 35. Assists; 36. Fulminate; 37. Barely manages, with “out”; 40. Consumer; 43. ___ 1 (Me.-to-Fla. Highway); 45. Flower often used in a 31-Down; 57. A bit cold; 48. Sky-blue; 49. Place atop; 50. Kind of badge for a Boy Scout; 51. Reddish-purple bit in a salad; 52. Records turning at 33 1/3 7-Across; 55. Capricious desire; 56. “Hold ___ you hat!”; 57. Shoelace problem; 58. Brontë’s “Jane ___”; 61. ___ Bartlet, president on “The West Wing”; 62. Poem of praise.






at 7:43 PM 0 comments

How to remove SYO0zxc.exe

SYO0zxc.exe
MD5 : bc6674796fd2923d4feafa0207698a35
SHA1 : ed56503b0112a8e221906cd18cbe907eb3adbf0a
...
AntivirusVersionLast UpdateResult
AhnLab-V32010.12.26.002010.12.25Trojan/Win32.OnlineGameHack
AntiVir7.11.0.1772010.12.25TR/Crypt.ASPM.Gen
Antiy-AVL2.0.3.72010.12.26-
Avast4.8.1351.02010.12.25Win32:OnLineGames-FUX
Avast55.0.677.02010.12.25Win32:OnLineGames-FUX
AVG9.0.0.8512010.12.26Win32/NSAnti.J
BitDefender7.22010.12.26Trojan.Generic.KDV.93919
CAT-QuickHeal11.002010.12.25-
ClamAV0.96.4.02010.12.26PUA.Packed.ASPack
Command5.2.11.52010.12.25-
Comodo71882010.12.25TrojWare.Win32.Trojan.Agent.Gen
DrWeb5.0.2.033002010.12.26Trojan.PWS.Gamania.28606
Emsisoft5.1.0.12010.12.25Trojan-GameThief.Win32.Magania!IK
eSafe7.0.17.02010.12.22-
eTrust-Vet36.1.80602010.12.24-
F-Prot4.6.2.1172010.12.25-
F-Secure9.0.16160.02010.12.26Trojan.Generic.KDV.93919
Fortinet4.2.254.02010.12.25-
GData212010.12.26Trojan.Generic.KDV.93919
IkarusT3.1.1.90.02010.12.25Trojan-GameThief.Win32.Magania
Jiangmin13.0.9002010.12.25-
K7AntiVirus9.74.33352010.12.24-
Kaspersky7.0.0.1252010.12.26Trojan-GameThief.Win32.Magania.efln
McAfee5.400.0.11582010.12.26Generic PWS.y!cvm
McAfee-GW-Edition2010.1C2010.12.25Artemis!BC6674796FD2
Microsoft1.64022010.12.25Worm:Win32/Taterf.B
NOD3257322010.12.25a variant of Win32/PSW.OnLineGames.QMA
Norman6.06.122010.12.24-
nProtect2010-12-25.012010.12.25-
Panda10.0.2.72010.12.25Trj/CI.A
PeeTechFix2.0.7.1372010.12.26Win32.PSW.OnlineGame.zxc
Prevx3.02010.12.26-
Rising22.79.05.012010.12.26-
Sophos4.60.02010.12.25-
SUPERAntiSpyware4.40.0.10062010.12.25-
Symantec20101.3.0.1032010.12.26Trojan.Gen.2
TheHacker6.7.0.1.1052010.12.25-
TrendMicro9.120.0.10042010.12.25-
TrendMicro-HouseCall9.120.0.10042010.12.26WORM_TATERF.BW
VBA323.12.14.22010.12.24BScope.Trojan-Dropper.Inject
VIPRE78262010.12.26BehavesLike.Win32.Malware.bse (vs)
ViRobot2010.12.25.42202010.12.25-
VirusBuster13.6.112.02010.12.25-
...
Files Added
%System%\SYO0szxc10.dll
%System%\SYO0szxc11.dll
%System%\SYO0szxc20.dll
%System%\SYO0zxc.exe
%UserProfile%\Microsoft\DriversSystem32.dll

Keys Added
HKLM\SOFTWARE\Classes\CLSID\{94AC7942-7BE1-4FB9-A7CA-67CD88362758}
HKLM\SOFTWARE\Classes\CLSID\{94AC7942-7BE1-4FB9-A7CA-67CD88362758}\InprocServer32
HKLM\SOFTWARE\Classes\CLSID\{94AC7942-7BE1-4FB9-A7CA-67CD88362758}\ProgID
HKLM\SOFTWARE\Classes\CLSID\{94AC7942-7BE1-4FB9-A7CA-67CD88362758}\Programmable
HKLM\SOFTWARE\Classes\CLSID\{94AC7942-7BE1-4FB9-A7CA-67CD88362758}\VersionIndependentProgID
HKLM\SOFTWARE\Classes\Interface\{94AC7941-7BE1-4FB9-A7CA-67CD88362758}
HKLM\SOFTWARE\Classes\Interface\{94AC7941-7BE1-4FB9-A7CA-67CD88362758}\ProxyStubClsid
HKLM\SOFTWARE\Classes\Interface\{94AC7941-7BE1-4FB9-A7CA-67CD88362758}\ProxyStubClsid32
HKLM\SOFTWARE\Classes\Interface\{94AC7941-7BE1-4FB9-A7CA-67CD88362758}\TypeLib
HKLM\SOFTWARE\Classes\TypeLib\{94AC7948-7BE1-4FB9-A7CA-67CD88362758}
HKLM\SOFTWARE\Classes\TypeLib\{94AC7948-7BE1-4FB9-A7CA-67CD88362758}\1.0
HKLM\SOFTWARE\Classes\TypeLib\{94AC7948-7BE1-4FB9-A7CA-67CD88362758}\1.0\0
HKLM\SOFTWARE\Classes\TypeLib\{94AC7948-7BE1-4FB9-A7CA-67CD88362758}\1.0\0\win32
HKLM\SOFTWARE\Classes\TypeLib\{94AC7948-7BE1-4FB9-A7CA-67CD88362758}\1.0\FLAGS
HKLM\SOFTWARE\Classes\TypeLib\{94AC7948-7BE1-4FB9-A7CA-67CD88362758}\1.0\HELPDIR
HKLM\SOFTWARE\Classes\IEHlprObj.IEHlprObj
HKLM\SOFTWARE\Classes\IEHlprObj.IEHlprObj\CurVer
HKLM\SOFTWARE\Classes\IEHlprObj.IEHlprObj.1
HKLM\SOFTWARE\Classes\IEHlprObj.IEHlprObj.1\CLSID
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{94AC7942-7BE1-4FB9-A7CA-67CD88362758}

Values Added
HKLM\SOFTWARE\Classes\CLSID\{94AC7942-7BE1-4FB9-A7CA-67CD88362758}\VersionIndependentProgID]
(Default) = "IEHlprObj.IEHlprObj"
HKLM\SOFTWARE\Classes\CLSID\{94AC7942-7BE1-4FB9-A7CA-67CD88362758}\ProgID
(Default) = "IEHlprObj.IEHlprObj.1"
HKLM\SOFTWARE\Classes\CLSID\{94AC7942-7BE1-4FB9-A7CA-67CD88362758}\InprocServer32
(Default) = "%System%\SYO0szxc20.dll"
ThreadingModel = "Apartment"
HKLM\SOFTWARE\Classes\CLSID\{94AC7942-7BE1-4FB9-A7CA-67CD88362758}
(Default) = "IEHlprObj Class"
HKLM\SOFTWARE\Classes\Interface\{94AC7941-7BE1-4FB9-A7CA-67CD88362758}\TypeLib
(Default) = "{94AC7948-7BE1-4FB9-A7CA-67CD88362758}"
Version = "1.0"
HKLM\SOFTWARE\Classes\Interface\{94AC7941-7BE1-4FB9-A7CA-67CD88362758}\ProxyStubClsid32
(Default) = "{00020424-0000-0000-C000-000000000046}"
HKLM\SOFTWARE\Classes\Interface\{94AC7941-7BE1-4FB9-A7CA-67CD88362758}\ProxyStubClsid
(Default) = "{00020424-0000-0000-C000-000000000046}"
HKLM\SOFTWARE\Classes\Interface\{94AC7941-7BE1-4FB9-A7CA-67CD88362758}
(Default) = "IIEHlprObj"
HKLM\SOFTWARE\Classes\TypeLib\{94AC7948-7BE1-4FB9-A7CA-67CD88362758}\1.0\0\win32
(Default) = "%System%\SYO0szxc20.dll"
HKLM\SOFTWARE\Classes\TypeLib\{94AC7948-7BE1-4FB9-A7CA-67CD88362758}\1.0\HELPDIR
(Default) = "%System%\"
HKLM\SOFTWARE\Classes\TypeLib\{94AC7948-7BE1-4FB9-A7CA-67CD88362758}\1.0\FLAGS
(Default) = "0"
HKLM\SOFTWARE\Classes\TypeLib\{94AC7948-7BE1-4FB9-A7CA-67CD88362758}\1.0
(Default) = "IEHelper 1.0 Type Library"
HKLME\SOFTWARE\Classes\IEHlprObj.IEHlprObj\CurVer
(Default) = "IEHlprObj.IEHlprObj.1"
HKLM\SOFTWARE\Classes\IEHlprObj.IEHlprObj
(Default) = "IEHlprObj Class"
HKLM\SOFTWARE\Classes\IEHlprObj.IEHlprObj.1\CLSID
(Default) = "{94AC7942-7BE1-4FB9-A7CA-67CD88362758}"
HKLM\SOFTWARE\Classes\IEHlprObj.IEHlprObj.1
(Default) = "IEHlprObj Class"

HKCU\Software\Microsoft\Windows\CurrentVersion\Run
DriversSystem32 = "rundll32.exe "%UserProfile%\Microsoft\DriversSystem32.dll", Launch"
SYO0sos = "%System%\SYO0zxc.exe"

Effect : MSN /Windows live messenger error and disconnect
=======================================================
วิธีกำจัด/แก้ virus : SYO0zxc.exe
=======================================================


หมายเหตุ : ท่านใดที่ได้รับผลกระทบจากไวรัสตัวนี้ โืดย MSN จะ Error และ Disconnect
ก็ลองเอาไปแก้ดูนะครับ
------------------------------------------------------------------------------

หลังจากกำจัด virus ได้แล้ว แนะนำให้ติดตั้งโปรแกรมเพิ่มเติม เพื่อป้องกันการเรียกใช้ autorun
เช่น

Program Advice (Stop AutoRun function/autorun.inf)

NoAutoRun (.REG)
at 9:48 PM 0 comments
Labels:
Subscribe to: Posts (Atom)