JamiiForums |The Home of Great Thinkers - View Single Post

How to remove Raila Odinga virus · 28th May 2008, 02:55 PM

[Odinga Raila pop up and Kibaki Tosha Tena Virus]

How to solve Odinga Raila.gif and Kibaki Tosha Tena Virus?

You can't access your system folders and any kinds of sites with words such as “virus” or “security”? You can not install any antivirus? That may be Kibaki virus, also known as Kalonzo.

If your PC creates duplicates of folders and a popup picture “Odinga Raila” appears every hour and freezes your PC then you're in the right place. We have solution.

Problem description:

What is Raila Odinga virus?

It makes your pc running very slow, it uses 100% CPU time, Raila Odinga doesn't allow you to access system folders, control panel, hidden files or internet to find an antivirus. You aren't allowed to install any kinds of software and have problems with all removable drives inserted and it doesn't matter if you're in a safe mode or not!

How to fix O Reila (Nemesis) manually? For advanced users only

This problem can be solved manually by deleting all registry keys and files connected with this software, removing it from starup list and unregistering all corresponding DLLs. Additionally missing DLL's should be restored from distribution in case they are corrupted by Raila.gif. To fix this threat, you should:

1. Kill the following processes and delete the appropriate files:
• nemesis.exe
• nemesis.inf
• server.inf

Warning: you should delete only those files which checksums are listed as malicious. There may be valid files with the same names in your system. We recommend you to use True Sword for safe problem solution. If you can't find these files in your system, they are actively masking themselves! In suhc case you need special software to unver and kill them.

2. Delete the following malicious registry entries and\or values:

• Key: software\microsoft\windows\currentversion\run\coup onsandoffers

Value: @

• Key: software\microsoft\windows\currentversion\run\htaz pohvqs

Value: @

Warning: If value is listed for some registry entries, you should only clear these values and leave keys with such values untouched. We recommend you to use True Sword for safe problem solution.