[Resolved] Win32\ Virut.AJ.dropper keeps popping up in AVG

Its been at stage 34 for about 10 minutes. with no activity from the drive light. I will begin the reboot procedures. Thanks

If it generated a log….where would I find it? Would it be on my desktop? If so…I don't think it made a log.

Ok…I got no log that I can locate and I have two more virus warning screen shots - the first one was upon reboot, the second when I opened IE to post the first shot for you.

There does happen to be a ComboFix folder on my root drive with a lot of stuff in it. I did not see a .log file though…

I am going to have to go to work…They already gave me an extra hour to work on this…so I am going to leave my son to follow the directions that you provide him with….and I will monitor the thread from work as well.

OK time for the bigger gun

Download avz4.zip from here

• Unzip it to your desktop to a folder named avz4
• Double click on AVZ.exe to run it.
• Run an update by clicking the Auto Update button on the Right of the Log window: [external image: Posted Image]
• Click Start to begin the update

Note: If you recieve an error message, chose a different source, then click Start again

• Start AVZ.
  
• Choose from the menu "File" => "Standard scripts " and mark the "Healing/Quarantine and Advanced System Investigation" check box.
• Click on the “Execute selected scripts”.
• Automatic scanning, healing and system check will be executed.
• A logfile (avz_sysinfo.htm) will be created and saved in the LOG folder in the AVZ directory as virusinfo_syscure.zip.
• It is necessary to reboot your machine, because AVZ might disturb some program operations (like antiviruses and firewall) during the system scan.
• All applications will work properly after the system restart.

When restarted

• Start AVZ.
  
• Choose from the menu "File" => "Standard scripts " and mark the “Advanced System Investigation" check box.
• Click on the "Execute selected scripts".
• A system check will be automatically performed, and the created logfile (avz_sysinfo.htm) will be saved in the LOG folder in the AVZ directory as virusinfo_syscheck.zip.

Attach both zip files to your next post

To attach a file, do the following:

• Click Add Reply
• Under the reply panel is the Attachments Panel
• Browse for the attachment file you want to upload, then click the green Upload button
• Once it has uploaded, click the Manage Current Attachments drop down box
• Click on [external image: Posted Image] to insert the attachment into your post

Just curious…about how long should the scan take?

Please let me know if these are not the right zip files. There were three different zip files in the folder. Just an FYI - there seems to be no change since running this last scan. When I came home and started up my computer it immediately started popping up all the drivers as infected again. I am preparing my files for possible reformat just in case.

Hi there that scan has definately confirmed Virut as the programme was changed. We have two options here: 1. I can attempt to clean it but I cannot guarantee 100% that I can as it has infected all of your executable and screensaver files. 2. Back up all your data files but no programmes or applications as they will be infected and do a full reformat Could you let me know how you would like to proceed. As a guide I have just about removed a sality virus on another forum which is not quite as bad but it did take nearly a week

Wow…I really appreciate all the help you have given me. I am going to cut my losses and reformat. But i do have a few questions. I have shared network drives. How can I be sure this virus hasn't gotten moved into the folders there? Currently all i have to scan with is AVG. I will attempt to get Avast as well and scan with that. Let me know what you think I should do about the other computers on my home network. Thanks! Update: Reformat successful. And I did download Avast this time instead of AVG….gonna give it a whirl. What other free virus/spyware software do you suggest? Normally I would grab Ad aware and Spybot - are these two still the best?

Hi wndy26 sorry I could not be of more help in this. I do not believe it would have transfered unless you shared files between the computers (i.e. executables and/or screensavers)

Adaware and Spybot unfortunately are finding it hard to keep up with the current malware trends

My recommendation would be as follows

Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:

• SpywareBlaster to help prevent spyware from installing in the first place.
• SuperAntispyware Run weekly to keep your system clean

It is critical to have both a firewall and anti virus to protect your system and to keep them updated.

To keep your operating system up to date visit

• Secunia Software inspector To check your programme update status
• Microsoft Windows Update

As for Antivirus I am biased as I have been using Avast now for many a year and I love it and have had no problems at all

Any further questions then just shout

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance. If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread. Everyone else please begin a New Topic.