Any idea what this is ?

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by TwoDigits, Jun 29, 2009.

  1. TwoDigits

    TwoDigits Private E-2

    Ive got a particularly nasty virus on my machine, my security is Comodo firewall, windows defender, Avast free version, threatfire. I started getting a lot of pop up alerts but each time Avast dealt with it another would be generated.
    A lot of my software has been infected and no longer works.
    I uninstalled Avast and comodo started throwing up alerts.
    I uninstalled threatfire and have just kept comodo and win defender.
    I tried to install another AV BitDefender but it wont install, same with Avira.

    Avast said it was Win32/ Virut.nbi virus

    some of the alerts are as follows :
    VRT29.tmp
    VRT4.tmp
    and many others of this variety

    18.tmp
    24.tmp
    2c.tmp
    1E.tmp
    A1.
    8F.
    9B.
    and many more like this

    If anyone has any experience of this id be interested to know what it is.

    Thanx
     
  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Welcome to Major Geeks!

    Yes, you are infected.

    Please follow the instructions in the READ & RUN ME FIRST link given futher down and attach the requested logs when you finish these instructions.

    • If you have problems where no tools seem to run, please try following the steps given in the below and then continue on no matter what you find. You only need to try the TDSSserv steps if having problems getting scans in the Read & Run Me First. If TDSSserv is not found, just continue on with the READ & RUN ME.
    READ & RUN ME FIRST. Malware Removal Guide

    • If something does not run, write down the info to explain to us later but keep on going.
    • Do not assume that because one step does not work that they all will not.
    • After completing the READ & RUN ME and attaching your logs, make sure that you tell us what problems still remain ( if any still do )!
    Helpful Notes:

    1. If you run into problems trying to run the READ & RUN ME or any of the scans in normal boot mode, you can run the steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:

    2. If you have problems downloading on the problem PC, download the tools and the manual updates for SUPERAntiSpyware, Malwarebytes and Spybot ( links are given in the READ & RUN ME) onto another PC and then burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if (and only if) your internet connection does not work. Yes you could use a flash drive too but flash drives are writeable and infections can spread to them.
    3. If you cannot seem to login to an infected user account, try using a different user account (if you have one) in either normal or safe boot mode and running only SUPERAntiSpyware and Malwarebytes while logged into this other user account. Then reboot and see if you can log into the problem user account. If you can then run SUPERAntiSpyware, Malwarebytes, ComboFix and MGtools on the infected account as requested in the instructions.
    4. To avoid additional delay in getting a response, it is strongly advised that after completing the READ & RUN ME you also read this sticky:

    Any additional post is a bump which will add more delay. Once you attach the logs, your thread will be in the work queue and as stated our system works the oldest threads FIRST.
     
  3. TwoDigits

    TwoDigits Private E-2

    Im finding it extremely difficult to work with this machine now
    the longer i stay on it the worse it gets; last night before i
    switched off i was getting DOS screens by the dozen and my
    monitor started blinking on & off.

    I have a VIRUT infection and something else but the patching
    virus has infected my system files, how many i dont know but
    lots of things dont work as well as a heap of software including
    ATI.

    It seems that whenever i download some tool or other to aid in
    the clean up, that gets patched as well so it occurred to me that
    even if i do manage to get my system cleaned up, my system will
    need repairing, most of my software will need to be reinstalled, and
    i will lose a lot of stuff in the process. And; on top of all that there
    is no guarantee that the infection wont come back.

    So i might be better formatting my drive and rebuilding from scratch.

    Please let me know if this is a bad idea and im over reacting.
     
  4. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    The safest thing for you to do is backup your personal data immediately since your PC could possible become unbootable at any point in time. Do not back up any executable files. This includes programs that you have downloaded since any of them could be infected.

    Once you backup, you need to perform a total reinstall of Windows and all other necessary software. DO NOT reinstall from any executable files you backed up because they are most likely infected.

    Sorry to have to confirm this.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds