Troj/Virtum-Gen

itsuxx · Nov 3, 2008

Hi

i have sophos anti virus and it finds the Troj/Virtum-Gen
in the system volume information folder

i found some posts about it in this forum but it seems that the removal is very inidividual

i read the READ & RUN ME FIRST and did everything as discribed in the Windows XP Cleaning Procedure but the virus is still there

ill attach the log files to this thread

i appreciate any help!

itsuxx · Nov 3, 2008

the zip file as attachment

TimW · Nov 4, 2008

Items in your recovery files will not be removed by software...you need to turn off system restore, reboot and turn it back on.

You also need to update your OS....either to SP2 or SP3!

Your logs are clean....so we can clean up from running the scans:

We recommed you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no protection. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.

If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)

Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required

"%userprofile%\Desktop\combofix" /u

Notes: The space between the combofix" and the /u, it must be there.

This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.

Delete the C:\combofix folder from combofix (if it exists)

Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.

If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.

Go to add/remove programs and uninstall HijackThis.

You can delete the C:\MGtools folder and the C:\MGtools.exe file. You can also delete the C:\MGlogs.zip

If you are running Vista, Windows XP or Windows ME, do the below:

Refer to the cleaning steps in the READ ME for your Window version and see the steps to Disable System Restore which will flush your Restore Points.

Then reboot and Enable System Restore to create a new clean Restore Point.

After doing the above, you should work thru the below link:

How to Protect yourself from malware!

Click to expand...

Log in or Sign up

Troj/Virtum-Gen

itsuxx Private E-2

Attached Files:

SASlog.txt

mbam-log-2008-10-26 (21-05-25).txt

ComboFix.txt

itsuxx Private E-2

Attached Files:

MGlogs.zip

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member