Ropatsa, a patch for the virus Raila Odinga

The virus is a virus saying created by hackers supporting the candidate (ex) with the presidency in Kenya of the name of Raila Odinga, it appeared at the beginning of the year 2007.

The weather is not large to thing except the posting (a propaganda) of a picture of the aforesaid candidate for each starting of the computer. A little awkward but better be worth a virus which makes only bother else than others which function as a cancer by puffing out gradually your system without you realizing of the gravity of the situation

This virus is transmitted by removable supports.

The virus :

Crates files in the desktop of the current user "Raila Odinga.gif"

Creates file system.dll and puts it in

Documents and Settings\%user%\Local Settings\Temp\nsf5.tmp\System.dll
and
Documents and Settings\%user%\Local Settings\Temp\nsv3.tmp\System.dll

Puts two files in each removable disk inserted:

• Raila Odinga.exe
• Raila Odinga.gif
• Autorun.inf

Creates link in the StartUp menu

(Documents and Settings\%user%\Menu Démarrer\Programmes\Démarrage\Raila Odinga.lnk)

<StartUp>Raila Odinga.lnk

Creates the registry entry:

HKLM\Software\Microsoft\Windows\Current Version\Run\
Raila Odinga
<Windows>\system32\drivers\Raila Odinga.exe

This virus runs automatically each time you open or explore a partition, it is preferable to download the patch and unpack it on the desktop, reboot your machine in Safe Mode and run the patch, always in safe mode.

Instruction on how to restart your computer in safe mode.