Win32/Virut Attack, need direction

fang_laluna · Aug 10, 2009

Hi,

I'm running Windows Vista Ultimate, 32 Bit SP2.

This morning I downloaded keygen for a software (I know, I was being stupid).
When I executed the .exe files, there was a blinking window but I didn't pay attention to it. After about 30 minutes, AVG alerted me (windows system files has been infected with Win32/Virut.

I run a scan using AVG, about more than 100 files couldn't be repaired. Bunch of windows file has been moved to virus vault.

Then I started searching how to remove Virut, but every forum has different way of doing it. I'm not sure which one actually works.

My PC is now running windows in safe mode.

I tried to download AVG and other removal tool, but it doesn't seem to work.

I know there might be several thread about this kind of problem, can someone please post link of a working solution to remove the Virut?

What should I do with files that has been quarantined by AVG? should I restore them before removal? I also has 2 external hardisk attach at the time of infection.

I really don't want to clean install windows, so is there any solution?

chaslang · Aug 12, 2009

Welcome to Major Geeks!

fang_laluna said: ↑

I really don't want to clean install windows, so is there any solution?
Click to expand...

Sorry to tell have to give you the bad news but no there is no reliable fix for Virut type infectuons other than a total clean reinstall. Below is the standard blurb we give people for this type of infection once we see logs revealing the infection:

Your logs show that your Windows Operating system files have become infected and there is no known reliable fix for this. In addition there are many many other infected files. We could spend a lot of time trying to remove this infection, but odds are that it will not work because the nature of the infection has so many executable system files infected that as soon as we fix one file, other files that are infected will almost immediately or upon the next reboot, just reinfect the files. In addition, your PC would still basically be unreliable/untrustworthy even if we manage to fix the infected files that we can see since there could be many more that we are not seeing.

The safest thing for you to do is backup your personal data immediately since your PC could possibly become unbootable at any point in time. Do not back up any executable files. This includes programs that you have downloaded since any of them could be infected.

Once you backup, you need to format partitions and reinstall Windows and all other software especially your protection software. Then install all updates for all software. DO NOT reinstall from any executable file backups you made while this PC was infected or you will just be reinstalling the infection.
Click to expand...

Log in or Sign up

Win32/Virut Attack, need direction

fang_laluna Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member