![]() ![]() Just double-click on the rescue system package to burn it to a CD/DVD. Thus it is possible to repair a damaged system, to rescue data or to scan the system for virus infections. ![]() The Avira AntiVir Rescue System a linux-based application that allows accessing computers that cannot be booted anymore. Some help in redirecting me to the more appropriate place will be if you feel you are infected with something which avast! failed to clean, try another Antivirus engine to scan your computer. I feel ftp.exe is a helpful tool for virus' rather to common users.Īnd extremely sorry if this is not the way the story is supposed to be posted here. This may help some body till the virus creator changes his code. That crap was struggling to establish a successful connection and is a brain without any physical strengthĪny ways for now renaming ftp.exe is an easy solution for me, stopped being bothered by junk stuff and explorer restarts and crashing Audio service etc. I guess avast had failed when the virus had established a connection to my system through some other port or may be i'm wrong. The same kind of attack executed on me and it was reported as DCOM exploit attack (port 135) by avast. it was establishing connections using some port related to microsoft-ds, may be looking for other hosts or victims. I found it is being invoked by some module related to svchost.exeĪfter removing all the downloaded files and renaming FTP.exe, I'd executed msdriver32.exe (Virus) using process explorer to monitor it.įrom process explorer i can see this thing starting too many threads connecting to remote hosts. Hmmm it is a virus, must be surviving from some system files. I renamed the FTP.EXE in system32 folder to _FTP.exe When investigated on the way how the virus is working, it is downloading files from various random sources using FTP I found the most common files created by this virus ![]() Some malware is downloading x.exe and it is being reported as win32:vitro by avast, so i'm here to post some junk data about this virus. I can remove this, and connect it to a working PC or a caddy to recover my files, but how can I check that this hard drive hasn't been corrupted before I connect it to a clean PC, I don't want to spread this thing any further! If i can do this i'm happy to kiss goodbye to my PC, it was old anyway and i'm getting a new one soon. Does this mean that I won't even be able to format it, or is there a way around this?Īlso- I have my documents I want to recover on an extra hard drive installed in my machine. I have no input before this screen comes up, there's nothing I can do but turn it off after this message displays. The next screen I get says 'A problem has been detected and windows has been shut down to prevent damage to your computer.check for viruses on your n chkdsk/f to check for hard drive corruption'.etc etc I press any key to load from disk, and get the blue screen saying 'Setup is loading files' and then 'setup is starting windows'. OK- i've now tried doing a Windows rebuild with an XP setup disk (following these instructions: ) ![]()
0 Comments
Leave a Reply. |