[nibnibz]

hi
recently my computer has been having problems with .exe files, dont know how it started maybe a virus or something but AVG identified all .exe extensions for my programmes as threats and another virus scanner found them as "files not found", once this happened to a programme i was unable to access it and a windows restriction message came up. i did a virus scan and removed anything i could then restarted comp (bad idea probs =/) now when i start up my pc explorer doesnt load (even in safe mode) i cant do it via taskmanager->run prog->explorer because it gives a message "windows cannot find,"explorer". make sure you have typed the name correctly and try again". i have read on other threads that a virus could have changed my .exe directory in the registry (or something like that) and give instructions how to giude through regedit and fix it but i cant access regedit through the command prompt or by run->regedt32, if i type in run-> reg edit a box appears for a second then dissapears. ive tries doing this in safe mode too.

any help on fixing this would be appreciated, i am a bit of a noob though if you havnt already gathered ^^ so ya may have to dumb it down a bit lol.
if any more info is needed just ask plz

[evilfantasy]

Can you burn a CD?

Avira AntiVir Rescue System

1. Download the Avira AntiVir Rescue System
- If you need a free burning application, CDBurnerXP works on all operating systems from Microsoft Windows 2000 SP4 onwards.
2. Place a blank CD in your burner and double-click on the downloaded file.
3. The program will automatically burn the CD for you.
4. Place the burned CD into the affected computer and start the computer with the CD in the CD tray.
5. On the bottom left side of the screen there are 2 flags. Using your mouse click on the British flag to use English.
6. Click on the Configuration button.

- Select Scan all files
- Select Try to repair infected files and Rename files, if they cannot be removed
- Select Scan for dialers
- Select Scan for joke programs (Jokes)
- Select Scan for games
- Select Scan for spyware (SPR)

7. Click on Virus scanner
8. Click on Start scanner at the bottom of the screen.

9. Let Avira finish it's scan and then remove any threats found and then exit out of the scanner.
10. Take the CD out of the CD/DVD tray and then restart the computer.

If needed see this Tutorial for the Avira Rescue CD

[nibnibz]

ty il give it a try =]

[nibnibz]

the scanner found 789 reports of [w32/virut.gen] codes in my .exe files. ive rebooted computer but now the computer wont even startup, it just goes in a loop of geting to the windows loading screen then restarting, even in safe mode and also tried the last known good configuration with no luck. think im screwed

[evilfantasy]

the scanner found 789 reports of [w32/virut.gen]

I figured it was a Virut infection and the news isn't good as far as repairing/removing the infection.

The below information should answer all of your questions.

Virut/Sality is a virus that infects all executable files and screensavers. Virut also opens a back door providing the attacker with unauthorized remote access to the infected computer. Definition: Polymorphic virus.

There is no way to cure this infection. Your only option is to perform a full reformat. Do NOT attempt a repair install. Trying to fix this infection will only leave the computer unusable. See Virut on the Rise and Virut and other File infectors - Throwing in the Towel? for more information.

Note that if you decide to try and clean this you must be extremely careful on what is backed up as these new infections can get into many different file extensions ( DLL, EXE, SCR, HTM, HTML, MP3, AVI, WMV, PDF.....etc). A complete reformat and reinstall is highly suggested! Avoid backing up compressed files (zip/cab/rar.....etc). Virut can also penetrate compressed files that have .exe or .scr inside them.

Backing up files before formatting

If you backup any files they should be scanned from a clean properly protected PC before restoring. Also be careful what scanner is used as some are very poor at detecting and even worse at protecting from this infection. In fact due to the nature of these new infections there are probably no tools that will properly protect you from the infection. Be very selective and only backup files you can not replace like text documents and personal photos.

Do not back up to another machine! It will likely become infected by Virut. Burn to DVD/CD, a flash drive or to an external drive which has nothing else on it and which you can format should it become infected from the backups.

I suggest running at least 3 of the below scanners on the backup files. Run the first scan then reboot before running the second then reboot after the second before running the third.

-) Dr.Web CureIt!
-) AVG Win32/Virut Removal Tool
-) Symantwc W32.Virut Removal Tool
-) McAfee Avert Stinger
-) Microsoft Windows Malicious Software Removal Tool

If you do not know how to perform a fresh install, use this website -> http://www.windowsreinstall.com/

Very important, do the following immediately or as soon as possible!

If you have done any online transactions, call all of your banks, credit card companies, financial institutions and inform them that you may be a victim of identity theft and to put a watch on your accounts and/or change all of your account numbers.

From a clean computer change all of your online passwords including for email, banks, financial accounts, PayPal, eBay, online credit card companies and any online forums or groups you belong to etc.

DO NOT change passwords or do any transactions while using the infected computer. The attacker will get the new passwords and transaction information.

[nibnibz]

ahhhhhhhh =/ pretty gutted about that but if its the only way guess it gotta be done. thanx loads for the help though =]

[evilfantasy]

Yea this is one that nobody wants to see.

It's coming from certain downloads found mainly on torrent sites. Nothing is truly free...