VBS Flufferminer Prefetch INI

Viruses and worms
1

Please advise… I installed Windows Updates for Win7 last night and used the machine all day today. I full scanned 3-4x during the day with Avast and Malwarebytes with the usual 0 threats. Also used Hitman Pro, 0 threats.

As I was doing my last scan before shutdown, all of a sudden I got this Flufferminer thing. No downloads, no bad sites. I did use my flashdrives, but as a habit I checked them with the folder scan in Avast - 0 threats.

When Avast reported I had Flufferminer infection in the Windows Prefetch layout.ini it went to the Quarantine and I did the recommended boot scan.

Boot scan reported no infection, subsequent Malwarebytes no infection as did Hitman Pro. I did d/l ADW Cleaner which found 2 registry entries which I removed. A final full scan with Avast showed no infection.

I then deleted the file, layout.ini from the quarantine. If this is a FP, did I do damage to my system by deleting layout.ini?

2

Nobody?

3

forum is full of Flufferminer post…do you read them?

4

Yes, of course. My question is if I did damage to my system by deleted the layout.ini file. There seems to be new .FX files in Prefetch, Readyboot. This AM, I tried to a boot scan and Win would not reboot.

5

does this help

http://answers.microsoft.com/en-us/windows/forum/windows_7-files/layoutini-is-missing-in-my-prefetch-folder/7d1a806e-1abc-4dfa-becc-eb3a109150da

6

Thanks for your reply. I am concerned about this.

Yes, I read that yesterday, but I am afraid to mess any further without consulting first with an expert.

Should follow the steps Microsoft has listed to rebuild the layout.ini file? If, so I will.

Thanks again.

7

That command is safe, works in XP Vista and 7. Windows itself issues the command under the covers every 2 or 3 days,
as a part of it’s self optimization. Issuing it manually is not a problem.

8

Thanks for your kind reply. I know you guys are busy and I seldom get virus or malware, so this was a shock.

If Windows automatically will recreate the layout.ini, I just as soon leave alone.

I was concerned especially since I thought I damaged my system by deleting from the virus chest. For example, I tried to do a boot scan this AM and I got a black screen. Unplugged the PC and I was able to restart.

Also, doing a full scan, Avast got stuck on one file - boot kors font.tff. Redoing a full scan now.

Again, MANY THANKS!

9

THANKS Once More… worked, new layout.ini in C:\Windows\Prefetch…