• Skip to main content
  • Skip to primary sidebar
  • Advertise

Computer Tips And Tricks, Gadgets, How-To, Life - 2.0 Style

Get latest technology updates and computer tips and tricks.

Bom Sabado! Virus In Orkut – How To Remove / Solve It?

September 25, 2010 by Gautam

I got a scrap from a friend on Orkut today. It was quite unusual, as this particular friend had not left a scrap in ages.

Just checked my email in GMail and the message said Bom Sabado! ( do you know what Bom Sabado means ? If you don’t read this post)

I was not sure what it meant. The message was neither in English, nor in my mother tongue, and being suspicious I googled around and found that it indeed is a worm (it’s not a virus, no losses have been mentioned from it yet) that is spreading through out Orkut.

Tanmoy Talukdar has left a solution on how to solve this problem at Techie-Buzz.

For everyone whose orkut account has been affected with the ‘bom sabado’ worm ….

The worm injects a hidden iframe containing a malicious javascript http://tptools.org/worm.js [do not click this], which steals the user cookie which contains the password in an encoded form. So the attacker do not get to know your plaintext password but can login using your credentials by impersonating using the cookie to fool the identification system. So a trivial solution is to diable javascript, another solution is to disable iframes or u can take an advanced measure by blocking the domain http://tptools.org/ by editing your hosts file and redirecting it to a safe address, say 127.0.0.1

go to C:\windows\system32\drivers\etc\
There is a file named ‘hosts’. By default it is read-only. Go to it properties and uncheck the tickmark beside read-only
edit it with you favourite editor.

add this line at the end of it

127.0.0.1 tptools.org

save it. and then restart your network interface. ( in simple words, just reconnect your interner connection ) and bingo!! the worm’ll be useless.

Hope this message is really helpful and saves you from Bom Sabado!

Filed Under: Internet Tagged With: bom sabado, orkut virus, Virus

Reader Interactions

Comments

  1. Ravi Dora says

    September 26, 2010 at 9:03 am

    Thanks buddy for your Information
    It is Useful for all,
    Thanks Again.
    Have A Good Day.

  2. BluesM4N says

    September 26, 2010 at 4:10 am

    “Bom Sábado” means literally “have a nice Saturday”

  3. Gautam says

    September 25, 2010 at 11:19 pm

    @Tanmoy – Thanks for the update.

  4. Tanmoy Talukdar says

    September 25, 2010 at 11:05 pm

    bom sabado killed, yet again … http://bit.ly/adhr0V

  5. Tanmoy Talukdar says

    September 25, 2010 at 10:17 pm

    make sure that you are running notepad(or whatever app u use) in admin mode.

  6. Gautam says

    September 25, 2010 at 9:47 pm

    @Harika – Thanks for the input.

  7. harika says

    September 25, 2010 at 5:40 pm

    these things will be useful..i jus found out from techie-buzz.com
    thank you.. :):D
    * Switch to the “older version” of Orkut.
    * Log out of Orkut.
    * Clean your browser’s cache
    and cookies.
    * Log in and change your password and security
    question.

  8. Pramod says

    September 25, 2010 at 5:16 pm

    Some Solve :- http://*.tptools.org block a website your internet browsers.

  9. Harika says

    September 25, 2010 at 4:55 pm

    ok…then wat to do..???

  10. Harika says

    September 25, 2010 at 4:53 pm

    i mean…i couldn’t add that 127.0.0.1 tptools.org at the end..even it is not in read only mode by default.. 🙁

  11. Gautam says

    September 25, 2010 at 4:52 pm

    @Harika – There is no problem and nothing to worry about.

  12. Harika says

    September 25, 2010 at 4:49 pm

    Bt in my properties..,there is no tick mark for read-only…Even though i got the scrap ‘bom sabodo’ 🙁
    is there any problem with this..please suggest me… 🙁

  13. Tanmoy Talukdar says

    September 25, 2010 at 4:28 pm

    Thanks for the mention, buddy 🙂

Trackbacks

  1. Full Story Of Bom Sabado And Step By Step Instruction To Remove It | (IT)Gossips - find thousands of detailed, explanatory articles. says:
    September 28, 2010 at 10:28 pm

    […] This scrap is automatically created and you can notice words like ‘bomb amugu’, ‘bom sabado‘, which in Portuguese is a way of saying Good […]

Primary Sidebar

Copyright © 2023 · Magazine Pro on Genesis Framework · WordPress · Log in