Problem with a virus

Problem with a virus

Secure Home | Search | About

Microsoft Applications Security - Microsoft's general security discussions and announcements 

Bookmark this page:  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
Problem with a virus Dimitris 05-26-2009
Posted by =?Utf-8?B?RGltaXRyaXM=?= on May 26, 2009, 6:14 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Hello,

A few days ago I caught the W32.Virut.cf virus
I am trying to remove it but it keeps coming back. I have Norton antivirus
2009.
Anyway since the time I found the virus I can not access Windows Update and
every antivirus website (Symantec, Mcafee and others) but I can access every
other website. when I try to access the windows Update webpage I just get
that white page that says that Internet Explorer can not open the site. Do
you know anyway that I can access the Windows Update website concerning my
problem?
I have winXP Professional.
I am writing to this Newsgroup from another computer.

Any help concerning the virus or the update page will be very appreciated
since I am trying to do anything possible to solve my problem and I also want
to download the latest windows updates.

Thank you in advance.
Dimitris



Posted by Malke on May 26, 2009, 7:12 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Dimitris wrote:

> A few days ago I caught the W32.Virut.cf virus
> I am trying to remove it but it keeps coming back. I have Norton antivirus
> 2009.
> Anyway since the time I found the virus I can not access Windows Update
> and every antivirus website (Symantec, Mcafee and others) but I can access
> every other website. when I try to access the windows Update webpage I
> just get that white page that says that Internet Explorer can not open the
> site. Do you know anyway that I can access the Windows Update website
> concerning my problem?
> I have winXP Professional.
> I am writing to this Newsgroup from another computer.
>
> Any help concerning the virus or the update page will be very appreciated
> since I am trying to do anything possible to solve my problem and I also
> want to download the latest windows updates.
>
I don't know why your Norton couldn't catch it, but Symantec has a removal
tool here:

http://www.symantec.com/security_response/writeup.jsp?docid=2009-020411-2802-99&tabid=3

You might also want to go through these malware removal steps:

http://www.elephantboycomputers.com/page2.html#Removing_Malware

Include scanning with David Lipman's Multi_AV and follow instructions to do
all scans in Safe Mode. Please see the special Notes regarding using
Multi_AV in Vista.

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
http://tinyurl.com/yoeru3 - download link and more instructions

You can also check to see if there are targeted removal steps for your
malware here:
Bleeping Computer removal how-to's -
http://www.bleepingcomputer.com/forums/forum55.html
Or here: Malwarebytes malware removal guides - http://tinyurl.com/5xrpft

When all else fails, get guided help. Choose one of the specialty forums
listed at the first link. Register and read its posting FAQ. PLEASE DO NOT
POST LOGS IN THE MS NEWSGROUPS.

You will need to get the tools, etc. from a different known-clean computer
and put them on a USB thumb drive or burn to CD-R. After you get the
machine cleaned up you'll be able to get to Windows Update and other
security-related sites.

If you can't do the work yourself (and there is no shame in admitting this
isn't your cup of tea), take the machine to a professional computer repair
shop (not your local equivalent of BigComputerStore/GeekSquad). Please be
aware that not all local shops are skilled at removing malware and even if
they are, your computer may be so infested that Windows will need to be
clean-installed. If possible, have all your data backed up before you take
the machine into a shop.

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
http://www.elephantboycomputers.com/#FAQ


Posted by David H. Lipman on May 26, 2009, 7:28 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

| Hello,

| A few days ago I caught the W32.Virut.cf virus
| I am trying to remove it but it keeps coming back. I have Norton antivirus
| 2009.
| Anyway since the time I found the virus I can not access Windows Update and
| every antivirus website (Symantec, Mcafee and others) but I can access every
| other website. when I try to access the windows Update webpage I just get
| that white page that says that Internet Explorer can not open the site. Do
| you know anyway that I can access the Windows Update website concerning my
| problem?
| I have winXP Professional.
| I am writing to this Newsgroup from another computer.

| Any help concerning the virus or the update page will be very appreciated
| since I am trying to do anything possible to solve my problem and I also want
| to download the latest windows updates.

| Thank you in advance.
| Dimitris


Virut is a TRUE file infecting virus and is a serious infection. You not only
have to
clean the OS completely but scan any Read/Write media where you have written
files to.

Since Virut infects so many OS files, you should consider using a surrogate PC
and an anti
virus solution that is good at CLEANING a file or wipe the PC and renstall the
OS from
scratch.

The McAfee command line scanner available thriugh my Multiu AV Scanning Tool is
excellent
at cleaning Virut infected files. You can remove the hard disk from the
affected computer
and install it on a surrogate PC. Using the Multi AV Scanning Tool McAfee
module you can
scan the affected hard disk. If this sounds even remotely complicated, wipe the
PC and
reinstall the OS from scratch.


--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Posted by PA Bear [MS MVP] on May 26, 2009, 7:32 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
[In for a penny...]

NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2. [WinXP ONLY!! =>] Run the Windows Live Safety Center's 'Protection' scan
(only!) in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

3. Run a /thorough/ check for hijackware, including posting the requested
logs in an appropriate forum, not here.

Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/page2.html#Removing_Malware

**Seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://www.dslreports.com/forum/cleanup, http://aumha.net/viewforum.php?f=30
or other appropriate forums.**

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.

=====================
Start a free Windows Update support incident request:
https://support.microsoft.com/oas/default.aspx?gprid=6527

Support for Windows Update:
http://support.microsoft.com/gp/wusupport

For home users, no-charge support is available by calling 1-866-PCSAFETY in
the United States and in Canada or by contacting your local Microsoft
subsidiary. There is no-charge for support calls that are associated with
security updates.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002


Dimitris wrote:
> Hello,
>
> A few days ago I caught the W32.Virut.cf virus
> I am trying to remove it but it keeps coming back. I have Norton antivirus
> 2009.
> Anyway since the time I found the virus I can not access Windows Update
> and
> every antivirus website (Symantec, Mcafee and others) but I can access
> every
> other website. when I try to access the windows Update webpage I just get
> that white page that says that Internet Explorer can not open the site. Do
> you know anyway that I can access the Windows Update website concerning my
> problem?
> I have winXP Professional.
> I am writing to this Newsgroup from another computer.
>
> Any help concerning the virus or the update page will be very appreciated
> since I am trying to do anything possible to solve my problem and I also
> want to download the latest windows updates.
>
> Thank you in advance.
> Dimitris


Posted by FromTheRafters on May 26, 2009, 9:02 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
> Hello,
>
> A few days ago I caught the W32.Virut.cf virus

That is really bad news. Flatten and rebuild is best, or recover from an
image made prior to infection. IMO there are too many unknowns with this
malware family to think a cleaning will work. Depending on your system,
your network (if you have one) could be at risk also.



Similar ThreadsPosted
Virus problem September 22, 2008, 3:09 am
Norton Anti-Virus Problem! September 24, 2005, 4:30 pm
Virus and/or hacking problem with Windows Messenger August 7, 2008, 7:22 am
norton live update virus defs problem September 21, 2006, 8:35 pm
The problem is Free Anti-Virus and free spy ware software does not WORK !! January 6, 2008, 9:09 pm
SUS Problem July 4, 2005, 6:29 am
A Problem July 10, 2005, 11:05 pm
Re: I'm having the same problem... can someone help me too? May 26, 2005, 1:45 am
Please help Serious Problem December 24, 2008, 12:25 pm
Trojan problem August 7, 2005, 4:39 pm

The site map in XML format XML site map

Contact Us | Privacy Policy