how to remove win32:inject a-z

Viruses and worms
1

my computer is behaving strangely.when i click spacebar it immediately goes to standby,shift key returns 1,numpad 5 shutdowns computer without any warning.i’m now typing using onscreen keyboard.

It all started when i installed the driver for dlink webcam, avast antivirus warned about wi:32 injecta-z virus, but i ignored the warning thinking it was afalse alarm, anyway now my computer is screwedup.

i have formatted harddisk and install xp several times,but the problem is still there

i think its infected in the bios.i disconnected the hd and dvddrive and then booted, when i press the shift key and numlock blinks and on the bios menu the arrow keys and some other keys were not working at all.

avast is not detecting even in the boot scan, what should i do?

2

alright try this:

1.download kaspersky virus removal tool 2010 from here:http://devbuilds.kaspersky-labs.com/devbuilds/AVPTool/

2.save it to your dsktop.

3.open the tool by double clicking on it.

4.Go to the Autoscan tab.
Check the boxes for the areas to be scanned. By default Kaspersky Virus Removal Tool 2010 scans for viruses System memory, Disk boot sectors and Hidden startup objects. In the main window on the Autoscan tab you can define the scan area by checking the necessary scan areas.
Select the required actions to be performed on detected threats by clicking the link in the On threat detection line.

4.Click on the start scan button.

5.Wait until the process is complete.

http://support.kaspersky.com/images/home/avptool_2871_01_en.jpg

Once the scan task is started, the program will detect and automatically delete all known viruses, rootkits, Trojan programs and worms. The application will perform the following actions on threat detection:

6.Prompt when the scan is complete (if you selected Prompt on completion).

7.Prompt for action on each threat detection (if you select Prompt for action).
Disinfect or delete; or delete an infected object if disinfection fails (if you checked Select action: Disinfect and Delete/Delete if disinfection fails).

8.i suggest u right click on the prompt for action before the scan and select choose action menu and then click on delete if disinfection fails option.

http://support.kaspersky.com/images/home/avptool_2871_02_en.jpg

9.it may ask u to reboot if essential.

pls post logs on next comment if possible.also tell me whether this resolved the problem or not.

3

my internet speed is low so it will take atleast a day to download the 94mb kaspersky.i cant’ do it

i tried malware bytes but it didnt detect anything.

what else can i do1?

4

https://blog.avast.com/2010/08/13/to-trust-or-not-to-trust/

5

Hi nigel, welcome to the forums! If your worried about your bios being affected I’d recommend trying this. Once the scan has finished post the log up here for review.

6

here’s-the-log

7

Ok that log looks clean, No MBR infection present :).

Could you please download and run Malwarebytes anti malware from this location:
http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html

If it wishes to update allow it to do so. When its finished post the log up here for review and we’ll take it from there.

PotaDOS

8

i-did-malwarebytes-scan-with-latest-update-but-it-didn’t-detect-anything

here’s-the-log

i-can’t-use-spacebar-because-it’ll-cause-my-system-to-standby,that’s-why-im-typing-like-this

9

I should have asked earlier but where did the infected driver come from? was it a website or a disk that came with the webcam?
As this is stepping out of my bounds I’ll have to refer you too the resident expert malware fighter, ESSEXBOY.

Please refer to the following instructions.
http://forum.avast.com/index.php?topic=53253.0

When you have to OTS log attach it to your next post. If the file is to large upload it to
http://www.mediafire.com/ and post the sharing link.

If someone with more posts than I could kindly PM ESSEXBOY
He is usually in here from 8:00pm - 11:59pm UK time

Good luck Nigel, you are in the very best of hands!
potaDOS out

10

okay-i-will-contact-him

is-cf28741.exe-a-virus

i-can-see-it-in-task-managers-when-i-turned-of-avast

11

Yes it is,googl-ed it,seems to be a trojan.vundo.

12

how about reading prior to writing? my post fully clarifies what is going on here and it also implies that running aswMBR is senseless here… ::slight_smile:

13

Hi Maxx_original,

Thanks you for pointing this out to us all. Your answer is at the end of your blog posting link.
Links from the Mods should have reading priority, while others should react more moderately in their eagerness to post,

polonus

14

@Maxx_original

i read that article when i googled it as soon as avast warned about win32:injecta-z

Thanks for your help guys, the real problem as with keyboard.

Anyhow i would like to know if i should install that webcam driver which actually has win32:injecta-z infection, the driver won’t install unless i ignore that warning!