It seems like every executable file on my system has been infected!!!
Jump to content
Posted 28 April 2009 - 03:32 PM
Posted 28 April 2009 - 05:37 PM
Virut is a polymorphic file infector with some additional features. It spreads all around the drive and infects even files infected by another virus previously. The only symptoms are a strange HDD activity while infecting, and also unwanted TCP traffic. Virut tries to connect you into an IRC network under the user name "Virtu" and zombify you. Unfortunately, the cleaning of this virus is very difficult or almost impossible.
The virus remains resident in memory and infects executable files with ".EXE" and ".SCR" file extensions.
The virus disables Windows File Protection by injecting code into the "winlogon.exe" process that patches system code in memory.
Edited by farbar, 28 April 2009 - 05:38 PM.
Posted 04 May 2009 - 09:01 AM
0 members, 0 guests, 0 anonymous users