Virus WIN32 AUCRYPT

Viruses and worms
1

I cant eliminated this virus witH aVAST?

Help me please?

2

What was the name and location of the file detected? (You can find this information in the avast! log.)

3

If avast detects but the virus comes back, you can try:

  1. Disable System Restore and reenable it after step 3.
  2. Clean your temporary files.
  3. Schedule a boot time scanning with avast with archive scanning turned on.
  4. Use SUPERantispyware, MBAM or Spyware Terminator to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.
  5. Test your machine with anti-rootkit applications. I suggest avast! antirootkit or Trend Micro RootkitBuster.
  6. Make a HijackThis log to post here or, better, submit the RunScanner log to to on-line analysis.
  7. Immunize your system with SpywareBlaster or Windows Advanced Care.
  8. Check if you have insecure applications with Secunia Software Inspector.
4

The location of the file detected is:

C:\docume 1\varca\config 1\temp\1qt.sys malware win32:vanti-bk=(Rtk) Software perjudicial rootkit. 21/05/2008

C:\windows\system32\Kavo0.dll. malware win32 aucrypt (cryp)

5

Please ensure you have the latest version of avast- 4.8- and that it is up to date, then run a boot time scan with avast! Right click the scanner screen, select ‘schedule a boot time scan’ and reboot when requested.

6

Hi MIN:

  1. Delete the Autorun.inf file of your C: drive, for it :
    Open the command prompt, and type :
    cd
    attrib -s -h -r autorun.in

  2. Download and run firefox to protect your from future spyware attacks and pop ups which are coming in through internet explorer (Trojan downloaders, win32 ) .Then update your windows through firefox
    Browser attacks aren’t easy to spot because they piggyback on legitimate traffic that doesn’t exhibit many obvious warning signs

  3. Run VundoFix and ComboFix: http://securitynewsfromthenet.blogspot.com/2007/05/vundofix-and-combo-fix.html

  4. Run Malwarebytes Anti-Malware from: http://securitynewsfromthenet.blogspot.com/2008/03/malwarebytes-anti-malware-105.html

  5. Run SuperAntiSpyware against the nasties: http://securitynewsfromthenet.blogspot.com/2007/04/superantispyware-home-edition-free.html

  6. Run a complete scan with free curing utility Dr.Web CureIt!
    http://www.freedrweb.com/

polonus

7

Excelente people¡ The virus was eliminate.Thanks for all the advices.

8

Welcome to the forums, MIN. :slight_smile:

We are glad your problem has been solved.

Please come back often, learn more, and maybe help others.