About 2 days ago I ran an update for game which unfortunately carried with it the Win32 Virut. Before my computer was completely paralyzed I ran a Norton Security Scan and that specific virus popped up everywhere. I've done a little research and found that it infects mainly .exe files. Rather than attempt to salvage my files I decided to reformat.
Having reinstalled Windows Vista 32bit, I noticed that things were still going wrong.
- Unable to install Microsoft Office 07 :
Error 1935. An error occurred during the installation of assembly component
[97F81AF1-0E47-DC99-A01F-C8B3B9A1E18E]. HRESULT: 0x8007054F
- Unable to install AVG Free Edition :
Error: Action failed for file avgwdsvc.exe: starting service....
Error 0x800736b1
- Unable to run Trend Micro HouseCall 6.5 :
An error occurred while trying to transfer data from the Internet!
Do you want Trend Micro HouseCall to try resending the required files?
Here is my HJT v2.0.2 log file :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:32:35 PM, on 8/02/2009
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16386)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\William\Computer\Avast\ashDisp.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\System32\notepad.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\William\Computer\HiJackThis\HiJackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL (file missing)
O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL (file missing)
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\William\Computer\Avast\ashDisp.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O13 - Gopher Prefix:
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://dl8-cdn-01.sun.com/s/ESD5/JSCDL/jre...ows-i586-jc.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\William\Computer\Avast\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\William\Computer\Avast\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\William\Computer\Avast\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\William\Computer\Avast\ashWebSv.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
--
End of file - 2884 bytes
I was able to install avast! AV but it didn't find any problems. I also ran a Win32 Virut remover from AVG to no avail.
I wholeheartedly appreciate any feedback.