“win32/virut” infections

I’m not seeing the normal infected files that come with some “win32/virut” infections which is very good.
Usually the only way to remove it is to reformat.

I can’t promise to totally clean your PC, but lets give it a go.

The infection you have can cause you to lose your internet connection.
If you lose your internet connection, just run lspfix again.
Start the program and then check the I know what I’m doing box.

First:

Download LSPfix here: http://www.cexx.org/lspfix.htm

Start the program and then check the I know what I’m doing box.

Move all instances of ‘rlls.dll’ (and nothing else), to the Remove pane.
Click the Finish Button and reboot.

Find and delete the file c:\windows\system32\rlls.dll

Next:

Please download ATF Cleaner by Atribune.
Download - ATF Cleaner»

Or from here:
http://www.snapfiles.com/get/atfcleaner.html

Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.

(If you use FireFox or the Opera browser
To keep saved passwords, click No at the prompt.)

It’s normal after running ATF cleaner that the PC will be slower to boot the first time.

Reboot and “copy/paste” a new HijackThis log file into this thread.

Also please describe how your computer behaves at the moment.

See full link

http://forums.whatthetech.com/I_think_i_have_a_problem_win32_virut_t84781.html

You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.