I'm working on a friend's computer which has been infested by the above virus.
It has blocked Avira from running, also blocks any removal software I've
tried to run in Safe Mode (Malabytes Antimalware, Ms Malicious Software
Removal Tool, Avira Removal Tool, McAfee Stinger).
It blocks any attempt to reinstall Avira or AVG in Safe Mode.
I can't find any removal tools at Symantec or McAfee sites for this
specific virus (thought there are tools for many other W32 variants).
Short of reformatting, has anyone been able to remove this particular W32
variant? According to Symantec definitions, the Virut variation has been
around for quite a while.
I was able to identify it by trying to run the above removal tools off a
USB thumb drive. When I replaced the drive in my own computer, Avira
immediately informed me that each of these tools had been modified by this
virus.
Don Penlington
The NOSPIN Group has added a new feature on our website,
web based bulletinboard for questions and answers:
Visit our sister website at http://nospin.com
|