help! laptop infected with W32.Virut virus

[jpf]

anyone know how to get rid of the W32.Virut virus? The laptop is an Averatec 7100 Series with Win XP Home installed. It turns out that the virus is memory resident & infects all .exe & .scr files that are accessed... even the AVG antivirus when scanning for viruses detected its own exe files as being infected, as well as a strange file in the system32 folder...now it seemed to "heal" the files although i read online that the some files might still be corrupt. i cant start windows in normal mode.. it keeps logging off as soon as I log in so im using safe mode.. if it is memory resident, does anyone know what process it is so I can kill it? Once its not running I could safely clean all files without having to worry about more files being infected I hope I doh have to reformat cause I have never got an OEM cd to reinstall Windows. any help will be appreciated

[rags]

I suggest reading these posts
http://www.bleepingcomputer.com/forums/ ... =W32.Virut (http://www.bleepingcomputer.com/forums/index.php?showtopic=120214&hl=W32.Virut)

http://www.bleepingcomputer.com/forums/ ... =W32.Virut (http://www.bleepingcomputer.com/forums/index.php?showtopic=108900&hl=W32.Virut)


If you have files on the computer that you need e.g. pictures, music, documents and you have access to another pc they can be saved for transfer after the OS reinstallation

IM me.

[jpf]

thanks but I think its gone now.. I did in fact use the AVG Virut removal tool but only after repairing Windows with a reinstallation CD from a Dell computer (which did seem to be a complete reinstall) since I could not start it even in safe mode..the tool had run the first time when I was still able to get into Windows but said the virus was memory resident... however when I repaired the OS, it ran without giving me that msg so I just had to clean whatever files were infected by running a full scan with AVG antivirus & antispyware...ran a scan again & everything seems to be OK

only thing is...if I used a reinstalation CD from another computer (Dell) would that be an issue? I had to activate windows after the repair.. I tried using the product key from the Dell comp. but it was invalid... then I used the key on the laptop's green sticker & that seemed to work..however after that Automatic Updates keeps trying to install Mic. Windows Installer 3.1 but it keeps failing... im wondering if it has anything to do with the fact that i used another computer's Windows CD?

[rags]

only thing is...if I used a reinstalation CD from another computer (Dell) would that be an issue? NO


I tried using the product key from the Dell comp. but it was invalid... then I used the key on the laptop's green sticker & that seemed to workWindows will accept your laptop's windows key.


Updates keeps trying to install Mic. Windows Installer 3.1 but it keeps failing...

No this has nothing to do with the CD you used, but it could be that your laptop was updated completely before the infection e.g. with Service Pack 2

Please use dial-a-fix first to try and repair Windows update and Internet explorer..go here

http://wiki.djlizard.net/Dial-a-fix

Then try this if no luck...

Anyway to make a long story short I have used these two methods to solve these problems...read the posts by naki...msg 18 and msg 19...

Also to see your hidden files and folders... RIGHT Click 'Start'> Click (left) 'Explore'.> Click on 'Tools'> Click on 'Folder Options'> Click 'View'> Scroll down to Hidden Files and Folders> Click on 'Show Hidden Files and Folders'> Remove check mark in 'Boxes' in front of 'Hide Extensions for known file types' and 'Hide protected operated system files (recommended)' if it asks are you sure answer 'yes'

http://help.wugnet.com/windows/modules. ... 78#1516078 (http://help.wugnet.com/windows/modules.php?name=Forums&file=viewtopic&p=1516078#1516078)