I need help:What it means?

Viruses and worms
1

When I use avast 4.7 ,It got a virus named Win32.Jeefo
But I can`t find any information about it.
As it got all my exefiles,i want to repair it more than delete it.
Who can help me?

Sorry for my poor English,I`m Chinese.

http://www.comicfishing.com/thbbsin/attachment/12_7522_11c4aae6d1d0161.jpg

By the way,the virus is strange. My computer didnt get slow,didnt lost files,and didn`t get any more files.

2

Hi ssqqssqq,

Win32.Jeefo.A is a virus that infects PE files.

Once activated, it copies itself as SVCHOST.EXE to the Windows directory, launches it as a separate process, then passes control back to the host program. The virus then installs itself as a service to stay in memory. The following registry key is created on Win9x systems:

HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices\PowerManager, = “%Windows%\SVCHOST.EXE”

On Win2k, the service name is “Power Manager”:

HKLM\System\CurrentControlSet\Services\PowerManager\ImagePath, “%Windows%\svchost.exe”

Note that SVCHOST.EXE is a valid system filename that exists in the System directory. The virus-created SVCHOST.EXE contains only the virus itself and is 36,352 bytes in size.

The virus searches drive letters C to Z for fixed disks. Once found, all directories are searched for suitable PE file to infect. Infected files increase 36,352 bytes in size, but the last modified date and time remains the same.

The virus body contains the following hidden message (although this is never displayed to the user):

“Hidden Dragon virus. Born in a tropical swamp”

Note: The virus may corrupt some files. Such files may not work correctly after cleaning and removal of the virus code. The corrupted programs will need to be restored from backups or the original installation packages.

polonus

3

So I have to format my disk and reinstall all software?
As some of the corrupt files is important to me,Do you have any ideas to save them?
Thank you for help.

4

Hi ssqqssqq2000

A possible fix could be to go back and restore to a point before the infection took
place if you know that. That is why backup-ing your system can be so vitally important, because it gives you a possibility to go back to a situation
your comp was before the infection took place, and all the changes after infection
are being made undone.

Another thing to try:
start in DOS mode.

navigate to:

C:\Window\System

run

Scanreg /Restore

Select a date prior to the infection.

Re-boot.

Interrupt the boot sequence, and select “Safe Mode”

Run an anti-virus engine.

On reboot interrupt boot.

run a dirty reinstall.

polonus

5

OK,I will try it.
Thank you.

I will have a backup nexttime.