Hello all. I’m a fairly new user of Avast, and I really need help. My computer (ThinkPad T23 running XP Pro) started to run slowly, Google results hijacked, etc. On advice I’d seen many places, I decided to run the on-boot scan. Almost immediately, I was getting warnings this and that file was infected with win32:vitro. I selected option 4 (I believe
) move to chest. A bit later, more warnings came up about the same virus, but this time the message said the infected files were Windows System files, are you sure you want to delete? Wanting to get rid of what I’m discovering is a very nasty virus, I chose yes. You can probably guess what happened next. The computer is in a constant loop of booting up and immediately saying Windows is shutting down, but it doesn’t. None of the desktop or systray icons load. Behavior is exactly the same in Safe Mode. Can someone help? Thanks. :-[
Might this have something to do with a corrupted userinit.exe file?
Thats why you should never delete a file until you are certain that it is
malware. I, myself, would not even send a detected file to the chest
unless I was certain that is indeed malware. Now, maybe you can try
hitting F8 and when you get the option for System restore, try to do one
or you can try Last Known Good Configuration option.
Good luck
Bo
Sorry to break it to you but Win32:Vitro is a very aggressive file infector, and its very difficult to remove. I heard that there is no fix for Windows XP (Correct me if I’m wrong). So reformat or use Dr.Web® LiveCD to restore your non-bootable PC. Instructions can be found here.
If your Windows or Linux system has been rendered non-bootable by malware, restore it for FREE with Dr.Web LiveCD!Dr.Web LiveCD will clean your computer of infected and suspicious files, help you copy important information to a removable data storage device or another computer, and then attempt to cure infected objects.
I just saw it. If its Virut it looks bad for goofyGAguy. I hate reformat but
this would be a good time for one.
Bo
Hi. Already tried that, as well as all the various Safe Mode options. Nothing works. I think my Windows install is well and truly hosed. :-[
Thanks for the links Glooby.
Your welcome, and good luck 
goofyGAguy I hate saying it but I think you are right man. Virut infects all
executables on your PC. After you reformat, learn Sandboxie and use it
together with Avast and this will never happen to you again
Bo