gregatkins Posted February 10, 2009 ID:55238 Share Posted February 10, 2009 Somehow this virus (and variants) of Win32 Virut busted out on my school campus, on the bright side the "economy saving" virus protection software we have now we most likely be replaced by something that actually works.Is there anyway to remove this Virut virus and save the .exe files it infects? I am currently scanning with the AVG virut removal tool, however it can't clean infected files and has to delete them then most likely I'll be reloading the OS from scratch. Many of the infected files are ones that Windows needs to run, and either way I want to clean all the files since this virus opens up a backdoor port to download more virii. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted February 10, 2009 Root Admin ID:55251 Share Posted February 10, 2009 Well that is a rather old one if it's the one listed here. Symantec may be able to clean the files.Please review the information here Link to post Share on other sites More sharing options...
Mad Dog Vee Posted February 10, 2009 ID:55294 Share Posted February 10, 2009 I've had success with Dr. Web CureIt with virut. Link to post Share on other sites More sharing options...
Staff TeMerc Posted February 10, 2009 Staff ID:55312 Share Posted February 10, 2009 I'll add my own .02 here.Reformat the machine. That's the only way to be 100% sure the infection is gone.I don't know any security researchers who would try to clean this infection on a clients machine if they had their hands on it physically. End users in a forum is another story, but they'll still usually recommend reformatting.Save your data and insert the install disk. Peace of mind in a couple of hours. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted February 11, 2009 Root Admin ID:55329 Share Posted February 11, 2009 I agree Tom, but often as you say, not much choice for many home users as seen here in the forums. Surprised though that someone got hit by this if it's really that old, or is it some new variant? Link to post Share on other sites More sharing options...
Staff TeMerc Posted February 11, 2009 Staff ID:55331 Share Posted February 11, 2009 Surprised though that someone got hit by this if it's really that old, or is it some new variant?Apparently so, yes. I ran into one a few months ago with a rogue download, was very surprised to say the least. I may even still have the installer. Link to post Share on other sites More sharing options...
rdmtech Posted February 11, 2009 ID:55359 Share Posted February 11, 2009 I'm working with a school that just got slammed with this malware. If we can't successfully clean the workstations we would have to reload them......that's a few hundred workstations.....OUCH! Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted February 11, 2009 Root Admin ID:55375 Share Posted February 11, 2009 Well I would try loading Symantec on at least one of the systems and see what it can do with it and go from there.Then try an Avira or AVG free version as well and see what they can do. Link to post Share on other sites More sharing options...
gregatkins Posted February 11, 2009 Author ID:55599 Share Posted February 11, 2009 It was a variant of the virut virus, still nasty...pretty much destroyed all the .exe. files. AntiVir wouldn't install but I got AVG to install without issues. It couldn't clean the files so naturally when half of the system .exe files are quarantined it makes it useless. The computer didn't have any anti-virus software on there in the beginning.I ran AVGs remove virut utility and of course it didn't find anything, but there are a few variants out there so I just reformatted and put AntiVir on it. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now