<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Win32 Virtob/Virut removal</title>
	<atom:link href="/posts/win32-virtob-virut-removal/feed" rel="self" type="application/rss+xml" />
	<link>http://hm2k.com/posts/win32-virtob-virut-removal</link>
	<description>The research of an internet entrepreneur and IT consultant</description>
	<lastBuildDate>Thu, 15 Apr 2010 19:49:47 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: P*ssed off Teenager</title>
		<link>http://hm2k.com/posts/win32-virtob-virut-removal/comment-page-1#comment-203246</link>
		<dc:creator>P*ssed off Teenager</dc:creator>
		<pubDate>Wed, 07 Apr 2010 09:09:32 +0000</pubDate>
		<guid isPermaLink="false">http://hm2k.com/posts/win32-virtobvirut-removal#comment-203246</guid>
		<description>GUYSS hello. 
Basically, i have the same problem with my brothers computer - i tried to download a PC game from an internet site. [yesterday.]
Once the file had finished downloading, the computer immediately detected it, and shut off, with a warning screen. Turning the computer back on, I realised something was wrong when three links to porno sites had shown up on the computer. i deleted them, and the file that i originally downloaded, emptied the recycle bin, and hoped it ended at that.
However, this morning, my brother told me the links had returned to his desktop. I ran a system scan, and yes, the computer detected several different viruses, but said i had to PAY TO ACTIVATE THE SCANNER. SO I COULD NOT REMOVE THE VIRUS. or malware, whatever the heck they are. now, for some reason, i cannot open internet explorer on the computer anymore, so either its been moved, removed, or infected.
The virus had five parts to it, but i could delete the first four, but left me with one which i could not access, because &#039;the file was in use&#039;. Someone mentioned that there are multiple instances - they are correct. They were named VT_1, VT_2 ...
Im actually really annoyed, i cannot get rid of this virus and i cannot download any virus scanner because the internet explorer is gone.
HELP.</description>
		<content:encoded><![CDATA[<p>GUYSS hello.<br />
Basically, i have the same problem with my brothers computer &#8211; i tried to download a PC game from an internet site. [yesterday.]<br />
Once the file had finished downloading, the computer immediately detected it, and shut off, with a warning screen. Turning the computer back on, I realised something was wrong when three links to porno sites had shown up on the computer. i deleted them, and the file that i originally downloaded, emptied the recycle bin, and hoped it ended at that.<br />
However, this morning, my brother told me the links had returned to his desktop. I ran a system scan, and yes, the computer detected several different viruses, but said i had to PAY TO ACTIVATE THE SCANNER. SO I COULD NOT REMOVE THE VIRUS. or malware, whatever the heck they are. now, for some reason, i cannot open internet explorer on the computer anymore, so either its been moved, removed, or infected.<br />
The virus had five parts to it, but i could delete the first four, but left me with one which i could not access, because &#8216;the file was in use&#8217;. Someone mentioned that there are multiple instances &#8211; they are correct. They were named VT_1, VT_2 &#8230;<br />
Im actually really annoyed, i cannot get rid of this virus and i cannot download any virus scanner because the internet explorer is gone.<br />
HELP.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: jim</title>
		<link>http://hm2k.com/posts/win32-virtob-virut-removal/comment-page-1#comment-183608</link>
		<dc:creator>jim</dc:creator>
		<pubDate>Sat, 24 Oct 2009 01:52:02 +0000</pubDate>
		<guid isPermaLink="false">http://hm2k.com/posts/win32-virtobvirut-removal#comment-183608</guid>
		<description>I found TRUE information here: http://www.jeann2.com/blog/index.php?post_id=154
The article does not advertise any AV, i believe this guy is fighting against it.
One good point i did not find in any other site: he proved the virus self installed in the master boot record.</description>
		<content:encoded><![CDATA[<p>I found TRUE information here: <a href="http://www.jeann2.com/blog/index.php?post_id=154" rel="nofollow">http://www.jeann2.com/blog/index.php?post_id=154</a><br />
The article does not advertise any AV, i believe this guy is fighting against it.<br />
One good point i did not find in any other site: he proved the virus self installed in the master boot record.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: simon</title>
		<link>http://hm2k.com/posts/win32-virtob-virut-removal/comment-page-1#comment-182706</link>
		<dc:creator>simon</dc:creator>
		<pubDate>Sat, 17 Oct 2009 22:40:01 +0000</pubDate>
		<guid isPermaLink="false">http://hm2k.com/posts/win32-virtobvirut-removal#comment-182706</guid>
		<description>Hi all

For the last week i have been dealing with this Virut and what a nightmare it has been. Previously decided to follow a sequence of anti virus programs...1. Malwarebytes, 2. Superantispware,3. Combo fix, 4. Root repeal, 5. Mgtools. All free downloads.  1 and 2 went ok but when i got to installing 3 it informed me the virut had infected set up file. So here i am about to try the advise on this page.  Normally I would just format and carry on but it is not my computer and there is alot of personal programs and data. Fingers crossed, will let you know of progress.  Learning alot!!!!!!

PS. This was virus was originally downloaded as a Heur virus i beleive.</description>
		<content:encoded><![CDATA[<p>Hi all</p>
<p>For the last week i have been dealing with this Virut and what a nightmare it has been. Previously decided to follow a sequence of anti virus programs&#8230;1. Malwarebytes, 2. Superantispware,3. Combo fix, 4. Root repeal, 5. Mgtools. All free downloads.  1 and 2 went ok but when i got to installing 3 it informed me the virut had infected set up file. So here i am about to try the advise on this page.  Normally I would just format and carry on but it is not my computer and there is alot of personal programs and data. Fingers crossed, will let you know of progress.  Learning alot!!!!!!</p>
<p>PS. This was virus was originally downloaded as a Heur virus i beleive.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Steven</title>
		<link>http://hm2k.com/posts/win32-virtob-virut-removal/comment-page-1#comment-178156</link>
		<dc:creator>Steven</dc:creator>
		<pubDate>Mon, 14 Sep 2009 16:08:10 +0000</pubDate>
		<guid isPermaLink="false">http://hm2k.com/posts/win32-virtobvirut-removal#comment-178156</guid>
		<description>This will fix the virut virus and you will need to install a 2nd windows on a seperate partition if you dont already have it (dw if you dont want it afterwards just remove it)

 1.	go to a proxy site then from there go to the avg site to download their 
virut remover put this in your c drive
2.	Run msconfig
3.	Change Boot tab to safe boot &amp; alternate shell (doesn&#039;t load explorer and
leaves it free to repair)
4.	Reboot
5.	When dos box type &quot;cd c:\&quot;
6.	Type &quot;rmvirut (all your drive letters ie: C:\ D:\ etc)&quot;
7.	Let it run through.
8.	Scan any folder it finds the virut again
9.	Then Scan all your windows folders (depends on how many multiboots you have 
and its pays to have at least 2 with this virus)
10.	Lastly Scan C:\windows\explorer.exe (the evil heart of the virus)
11.	Then type msconfig
12.	Change Boot tab to remove safe boot
13.	Reboot
14.	Then boot into another boot of windows and open cmd.exe scan everything 
again paying particular attention to folders with the virus in it


All done, can now go to antivirus  &amp; mircrosoft websites

PS I dont deserve credit for this my mate found/tweaked this fix in the 1st place and I just tweaked it a bit further to help out the noobs</description>
		<content:encoded><![CDATA[<p>This will fix the virut virus and you will need to install a 2nd windows on a seperate partition if you dont already have it (dw if you dont want it afterwards just remove it)</p>
<p> 1.	go to a proxy site then from there go to the avg site to download their<br />
virut remover put this in your c drive<br />
2.	Run msconfig<br />
3.	Change Boot tab to safe boot &amp; alternate shell (doesn&#8217;t load explorer and<br />
leaves it free to repair)<br />
4.	Reboot<br />
5.	When dos box type &#8220;cd c:\&#8221;<br />
6.	Type &#8220;rmvirut (all your drive letters ie: C:\ D:\ etc)&#8221;<br />
7.	Let it run through.<br />
8.	Scan any folder it finds the virut again<br />
9.	Then Scan all your windows folders (depends on how many multiboots you have<br />
and its pays to have at least 2 with this virus)<br />
10.	Lastly Scan C:\windows\explorer.exe (the evil heart of the virus)<br />
11.	Then type msconfig<br />
12.	Change Boot tab to remove safe boot<br />
13.	Reboot<br />
14.	Then boot into another boot of windows and open cmd.exe scan everything<br />
again paying particular attention to folders with the virus in it</p>
<p>All done, can now go to antivirus  &amp; mircrosoft websites</p>
<p>PS I dont deserve credit for this my mate found/tweaked this fix in the 1st place and I just tweaked it a bit further to help out the noobs</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: JsBc</title>
		<link>http://hm2k.com/posts/win32-virtob-virut-removal/comment-page-1#comment-177126</link>
		<dc:creator>JsBc</dc:creator>
		<pubDate>Fri, 04 Sep 2009 04:50:26 +0000</pubDate>
		<guid isPermaLink="false">http://hm2k.com/posts/win32-virtobvirut-removal#comment-177126</guid>
		<description>I really need some quick help here please. I&#039;ve got this awful virus. Does this work if I have Vista installed on the infected pc? I don&#039;t know if bart&#039;s pe will work, if not is there something for Vista?. Thanks</description>
		<content:encoded><![CDATA[<p>I really need some quick help here please. I&#8217;ve got this awful virus. Does this work if I have Vista installed on the infected pc? I don&#8217;t know if bart&#8217;s pe will work, if not is there something for Vista?. Thanks</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Jin kazuma</title>
		<link>http://hm2k.com/posts/win32-virtob-virut-removal/comment-page-1#comment-173165</link>
		<dc:creator>Jin kazuma</dc:creator>
		<pubDate>Wed, 05 Aug 2009 10:01:44 +0000</pubDate>
		<guid isPermaLink="false">http://hm2k.com/posts/win32-virtobvirut-removal#comment-173165</guid>
		<description>I did exactly as you said now my computer wont log on when i log on it syas its missing windows components and just restarts</description>
		<content:encoded><![CDATA[<p>I did exactly as you said now my computer wont log on when i log on it syas its missing windows components and just restarts</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Gary Osterholt</title>
		<link>http://hm2k.com/posts/win32-virtob-virut-removal/comment-page-1#comment-172801</link>
		<dc:creator>Gary Osterholt</dc:creator>
		<pubDate>Sat, 01 Aug 2009 05:30:23 +0000</pubDate>
		<guid isPermaLink="false">http://hm2k.com/posts/win32-virtobvirut-removal#comment-172801</guid>
		<description>What&#039;s the best way to get the virus off an external hard drive with the Virus on it?

Thanks
Gary</description>
		<content:encoded><![CDATA[<p>What&#8217;s the best way to get the virus off an external hard drive with the Virus on it?</p>
<p>Thanks<br />
Gary</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Andry</title>
		<link>http://hm2k.com/posts/win32-virtob-virut-removal/comment-page-1#comment-171035</link>
		<dc:creator>Andry</dc:creator>
		<pubDate>Fri, 17 Jul 2009 07:52:06 +0000</pubDate>
		<guid isPermaLink="false">http://hm2k.com/posts/win32-virtobvirut-removal#comment-171035</guid>
		<description>I manage to fix few computers infected by VIRTOB with bitdefender, But you must have a clean computer running bitdefender and scan the infected harddrive on that computer, You might need to do an inplace repair of windows after the scan. BITDEFENDER rocks because it disinfect the files instead of deleting or moving it to the quarantine. 

Peace</description>
		<content:encoded><![CDATA[<p>I manage to fix few computers infected by VIRTOB with bitdefender, But you must have a clean computer running bitdefender and scan the infected harddrive on that computer, You might need to do an inplace repair of windows after the scan. BITDEFENDER rocks because it disinfect the files instead of deleting or moving it to the quarantine. </p>
<p>Peace</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: jambangracun</title>
		<link>http://hm2k.com/posts/win32-virtob-virut-removal/comment-page-1#comment-170501</link>
		<dc:creator>jambangracun</dc:creator>
		<pubDate>Sun, 12 Jul 2009 17:16:26 +0000</pubDate>
		<guid isPermaLink="false">http://hm2k.com/posts/win32-virtobvirut-removal#comment-170501</guid>
		<description>huuuuufff......... thanks alot....... 
i&#039;ve been hopeless and helpless for 2 weeks.
thanks again</description>
		<content:encoded><![CDATA[<p>huuuuufff&#8230;&#8230;&#8230; thanks alot&#8230;&#8230;.<br />
i&#8217;ve been hopeless and helpless for 2 weeks.<br />
thanks again</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: blues</title>
		<link>http://hm2k.com/posts/win32-virtob-virut-removal/comment-page-1#comment-169503</link>
		<dc:creator>blues</dc:creator>
		<pubDate>Mon, 06 Jul 2009 11:09:54 +0000</pubDate>
		<guid isPermaLink="false">http://hm2k.com/posts/win32-virtobvirut-removal#comment-169503</guid>
		<description>I&#039;ve managed to clean my machine.
Bart-PE with various anti-virus solutions failed, symantec fremoval tool ailed, Dr web failed. Another weekend lost. The cure is below:
 - Switch off system restore.
 - Download Avira boot disk (linux based, with their anti-virus), and run a scan from this (found 1600 files)
 - Boot from XP disk, into windows console, do fixmbr and fixboot.
 - Re-load windows (I did a clean install). Means I have all my clean files though.
- Re-run both symantec and AVG anti-virus (found nothing with wither).

Good luck!</description>
		<content:encoded><![CDATA[<p>I&#8217;ve managed to clean my machine.<br />
Bart-PE with various anti-virus solutions failed, symantec fremoval tool ailed, Dr web failed. Another weekend lost. The cure is below:<br />
 &#8211; Switch off system restore.<br />
 &#8211; Download Avira boot disk (linux based, with their anti-virus), and run a scan from this (found 1600 files)<br />
 &#8211; Boot from XP disk, into windows console, do fixmbr and fixboot.<br />
 &#8211; Re-load windows (I did a clean install). Means I have all my clean files though.<br />
- Re-run both symantec and AVG anti-virus (found nothing with wither).</p>
<p>Good luck!</p>
]]></content:encoded>
	</item>
</channel>
</rss>
