Monday, 23 May 2011

Have you Ever Heard of the Raila Odinga Computer Virus?

My Experience with the "RAILA ODINGA" Virus

Contributed by Jonathan Barwon

There are many categories of viruses, including the Kenyan Prime Minister Raila Odinga virus.

There are parasitic or file viruses, bootstrap-sector, multipartite, macro, and script viruses. The so-called Raila Odinga, virus which has become particularly prevalent, infects Microsoft word files, replicates from computer to computer by spreading entire copies of itself. It is called Raila Odinga, because it comes with a photo or image of Raila Odinga.

I have yet to understand why the creators of this virus have used this man's name and image as a virus. The creator must either hate Mr. Raila Odgina or really love him! 

It's main mode of transmission is via memory sticks. Raila odinga is a worm that attacks Microsoft word files, but it looks like a JPG file and mostly found on the desktop.

Raila Odinga is a virus that is common in Africa.

Here are a few things to look out for:

1. If you delete the picture file it will delete and return to where it was.
2. It runs from the driver folder in system 32 folder
3. It auto runs at system startup
4. It makes the computer boot slowly
5. It makes the computer freeze
6. It creates new folder.exe folders in your computer

Raila Odinga is a virus that is common in Africa.

You may say, "I have a very good anti virus, how can my computer be affected with the so-called 'Raila Odinga' virus?" You may have paid a lot of money for the anti virus you have but remember:

1. In Africa, some users install anti-virus on their computers without the license key
2. Anti-virus software is not up-to-date because users do not update it
3. Some users only have the trial versions of the anti virus on their PCs
4. Lack of computer knowledge:  remember to always do virus scan whenever you connect to a USB drive, especially if it is not your own
5. Memory sticks or flash drives are the easiest way viruses can travel between PCs or laptops!

How to remove the old Odinga

i. Open My Computer, double click Drive:C, open Windows folder, double click on System 32 folder, open Driver Folder, locate the World File in the folder, note the name. 
ii. Right click on the Task Bar, open Task Manager, click on the Process tab, locate the name of the world file you saw in the Drive Folder, right click on the name of the file, click End Process to terminate the running process. 
iii. Open the Driver Folder of System 32  where the file is, delete all the MS word files on that folder, then close the folder locate the Raila Odinga picture file usually on the desktop or somewhere in your computer, delete the picture file.
iv. Please do not double click on the picture file, only Delete it
v. Finally, empty your Recycle Bin and Restart your computer. That way the Odinga is off your machine! 

I learned how to remove Raila Odinga from my former boss when I was working with Comium as a Field Support Technician. 

Hope this was useful and interesting!

Jonathan Barwon
Head of IT
New Africa Technology Company
1st Floor, Above Master Trading
Randall Street
Monrovia, Liberia
Tel: +231 77153937/+231 880832999