My friends computer has just got infected with Virut AE and Heur.
Unfortunately he didnt knew about any AV program. When he called me for help I found that he is very badly infected
Virus is not allowing me to install Avast or Antivir, and also I am unable to acces msconfig.exe
Later I tried AVG, which got installed and is searching for viruses. Internet Performance is very very poor so I cant install updates
What should I do,
Go on disinfecting the PC or Just reinstall windows.
If Virut has got established without an AV he is in serious trouble.
Your friend would be advised to back-up what data they can, excluding .exe, .htm/l, .scr as these are the targets for infection, the more you open the more that get infected.
So it could well be a format and reinstall from scratch.
You could first try this tool, but there are no guarantees that it will be able to repair those files that are infected, depends on the variant of virut that they have.
DrWeb CureIt! - See http://www.freedrweb.com/cureit/ - Download ftp://ftp.drweb.com/pub/drweb/cureit/launch.exe (Free) Fairly effective against file infectors, Virut (infects .exe, .scr, .mp3 & .wmv), more so when used in safe mode.
DrWeb also do a Live CD (and is possibly your best bet) if you are unable to get into your system see, http://www.freedrweb.com/livecd/?lng=en, documentation ftp://ftp.drweb.com/pub/drweb/livecd/LiveCD-en.pdf
Let me try this one too.
however recently one more problem evolved. Display driver stops working as AVG removes the virus.
That’s the problem, since it infects files that are opened and removal of an infected file rather than a repair (frequently difficult or impossible, depending on the variant) of the infected file/s.
You only need to browse the viruses and worms forum for Virut or Vitro to see that the greatest majority have to reformat and reinstall once this virulent infection gets established.
If you use dr.web’s live cd then there is an option: try to repair. enable it. it may disinfect the file and hence you will not lose the os. (I don’t know exactly the option but it is there.)
That is why I gave him the not only the link for the live CD but also the PDF documentation.
yes but I guess generally all are in a hurry to disinfect the system and so may not read.
nmb