right so i goy avast and its detected vitro on ALLOT of my registry files, i tried deleting them and restoring the important ones but not to much prevail so is there a way of getting avast to just ignore any istances of this virus since it doesn’t exactly do much dammage at all…
Vitro does not make damage? ???
Well, as far I know, it’s a difficult infection to get rid off. Maybe you should backup your documents and data…
you cant fix the files it infects atm only delete them i dont know if it does dammage to others but it hasn’t done a thing on my computer the only dammage caused it from avast deleting the infected files…
would you happen to know anywhere i can download a new userinit.exe file aswell? or could you host yours for me perhaps? =] that was one of files infected and i think if i can just replace it then use security control to stop windows being able to modify or delete i should be ok
I wouldn’t play with Vitro. I was testing it and when it’s on the system, it’s very hard to clean.
I also haven’t seen avast! to mistakenly detect something else as Vitro. Detection sems very accurate.
So i doubt it would flag .reg files…
- Insert Windows Installation and goto recovery console “R”
- select windows installation repair mostly in (c:\windows) by typing its number then press enter.
- type administrator password then enter.
- type the commands below:
D: then enter (or you try E: or any drive where i386 is located)
CD i386 then enter
expand userinit.ex_ c:\windows\system32 then enter
I’m planing to try the suggestion of the first poster. I can go further by not allowing AVAST to delete infected files and see how far it goes. I wonder what kind of damage it does aside from infecting EXE and HTML files. If it doesn’t go further than that then maybe we can just let it do what makes it happy. If the system goes unstable then just re-install(replace) windows again. I can try to live that way while waiting for the cure (hopefully it won’t take too long). I have no other choice because the second partition of my hardisk contains important data where doing Backup might just spread the virus.
In my observation, the virus continue to infect even in Safe-Mode. You just can’t see warning from AVAST because the real-time protection is disabled in this mode. That means it maybe more harmfull in Safe-Mode(?)
My second option:
So far what I did was thorough AVAST bootscan (with delete infected files option). After it finished scanning, I didn’t allow it to continue booting to desktop. I quit while in the log-in screen (hopefully VITRO is not yet active at that state).
So I got rid of the infected EXEs. My next mission are HTML files. I installed LINUX UBUNTU in the extra partition, downloaded AVAST-home for LINUX and right now i’m doing the backup from there without any worries that a virus continue a rapid infection while i’m selecting the files to backup. If the file I wanna backup is an HTML file, I edited it with the UBUNTU editor and removed all existence of Vitro link frame located at the bottom. After the backup to DVD, my next step is scan the DVD with AVAST(for windows) just for assurance. Ofcourse I can’t be 100% sure if the backup are free from Vitro traces. My point is that, once a cure is already available then those traces in the backup-files will no longer be that serious.
i think all it does is inject itself so if you just get avast to ignore the exe’s then shouldn’t be too bad… ive got it down now it just detects on my userinit.exe file so if anyone wishes to donate their uninfected one i would be more than grateful
Virto is a bad virus and is very hard to get rid of! when it infected your computer, it’s almost impossible to get rid of it until you do a clean install of your windows. also, you should not use any old .exe file that you had in your computer, after clean installation of windows install and update your antivirus, do a full scan every external media before using them, be sure all your old .exe file are infected using that virus, it use WindowsSearchIndexer to find your files and infected them… if you have ran any of those files now that file are infected…
I had that virus a few days ago… it would cause your windows not able to boot again…
its not the virus that stops you being able to boot, its the fact that it injects itself into your userinit.exe file then your antivirus deletes it for that reason… also when i got it it injected itself into a whole load of login files and seriously messed it up i used the ultimate boot cd to get on and access hardrive then added the files i needed to logon normally then set avast to do full boot scan and deleted all virus’s then did a few more scans whilst booted on ultimate boot so vitro couldn’t do ntin then i repaired all my files adding new ones instead i just need a userinit file now n i cant find one anywhere, driving me mad.
I already posted above how to obtain the userinit file easily. please Read the above post.
Yes, exactly you are right, you did the best you could do 
read the post boybawang sent for you
It doesn’t just inject itself. It actually physically infects the files.
I doubt that. Ultimate-Boot-CD uses the same core Windows OS so Vitro should still be compatible.