Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Several .exe files deleted by virus


  • Please log in to reply
11 replies to this topic

#1 jilltaz8

jilltaz8

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:09:07 AM

Posted 27 March 2009 - 04:26 AM

I've been having this problem for several weeks now. I thought that even though the virus was still there, it didn't really do a lot of damage. Unfortunately, after about a couple of weeks of "peace" Avast started picking up the virus (Win32:Vitro) again.

A bunch of my .exe files, especially those in the System32 folder, have been deleted by the virus or by my antivirus as they have been corrupted. I can't re-download them.

cmd, notepad, windows calculator, etc are some of the exe files that got targeted.

I'm guessing that the only solution is a complete reformat but I've seen some posts that say that even though they reformatted the virus comes back. :S

Any help and advice would be IMMENSELY appreciated!

I also can't run File Checker.

BC AdBot (Login to Remove)

 


#2 DaChew

DaChew

    Visiting Alien


  • Members
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:10:07 AM

Posted 27 March 2009 - 05:29 AM

The recent strains of virut are incurable for all practical purposes, people are reinfecting themselves after a full format by reinstalling the virut which has infected their backup exe, scr or html files.

Any external drive is especially suspect for a reinfection when it's allowed to autostart at connection and has been infected previously.

This applies to a lot more infections than virut.
Chewy

No. Try not. Do... or do not. There is no try.

#3 jilltaz8

jilltaz8
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:09:07 AM

Posted 27 March 2009 - 05:46 AM

Okay, so what do I have to do to make sure I don't get reinfected?

#4 DaChew

DaChew

    Visiting Alien


  • Members
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:10:07 AM

Posted 27 March 2009 - 05:49 AM

Do you have another computer to use that's not infected?
Chewy

No. Try not. Do... or do not. There is no try.

#5 jilltaz8

jilltaz8
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:09:07 AM

Posted 27 March 2009 - 05:58 AM

My laptop was infected for a while, but I reformatted using the Toshia disk that it came along with, and it now seems clean.

#6 DaChew

DaChew

    Visiting Alien


  • Members
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:10:07 AM

Posted 27 March 2009 - 06:18 AM

Is there any personal data on the virut computer that you have to backup?
Chewy

No. Try not. Do... or do not. There is no try.

#7 jilltaz8

jilltaz8
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:09:07 AM

Posted 27 March 2009 - 06:23 AM

Just sentimental files such as pictures and videos, but I've saved those to a cd earlier today.

#8 DaChew

DaChew

    Visiting Alien


  • Members
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:10:07 AM

Posted 27 March 2009 - 06:30 AM

If you have any external drives? Usb etc

Keeping Autorun enabled on USB and other removable drives has become a significant security risk due to the increasing number of malware variants that can infect them and transfer the infection to your computer. To learn more about this risk, please read:


for xp
https://forums.symantec.com/syment/blog/art...sage.uid=366902

http://www.f-secure.com/weblog/archives/00001575.html

http://miekiemoes.blogspot.com/2008/11/ple...torun-asap.html

for vista
http://www.howtogeek.com/howto/windows-vis...-windows-vista/
http://www.mechbgon.com/build/autoplay.html#Vista
Chewy

No. Try not. Do... or do not. There is no try.

#9 jilltaz8

jilltaz8
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:09:07 AM

Posted 27 March 2009 - 10:28 AM

I've disabled Autorun. :thumbsup:

#10 DaChew

DaChew

    Visiting Alien


  • Members
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:10:07 AM

Posted 27 March 2009 - 04:05 PM

Make sure it's disabled on any computer that sees that data you saved.

I reccomend reloading but using another computer to download drivers, updates(service packs), anti virus etc and burn to cd for installing before the reloaded computer ever hits the internet or looks at any backed up data.

Good luck

Please start a thread in whichever forum is appropriate, xp or vista? for advise on the reload if needed.
Chewy

No. Try not. Do... or do not. There is no try.

#11 jilltaz8

jilltaz8
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:09:07 AM

Posted 28 March 2009 - 12:44 AM

Okay, sorry if I'm being so dim about this, but where can I download the drivers, etc.

#12 DaChew

DaChew

    Visiting Alien


  • Members
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:10:07 AM

Posted 28 March 2009 - 12:56 AM

You need to start a new thread in the appropriate forum as I suggested already

If it's XP or Vista

Then state you make and model of computer and what you are trying to do.
Chewy

No. Try not. Do... or do not. There is no try.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users