This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

Windows Recovery virus stopped but google redirects

3 min read

✨ The volunteers who helped with this thread aren't active anymore, but you can still get a personalized answer — click Ask AI below.

This thread's last reply is from June 6, 2011, 10:02 AM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

migmanus
June 4, 2011, 9:24 PM UTC
It seems to be running okay, except obviouslyy for the 25 viruses that the scan found.
Cypher Admin/Teacher
June 5, 2011, 10:22 AM UTC
Hi migmanus i have some really bad news :(

Your System is infected with file infector.

A file infecting virus is able to modify itself each and every time it runs. In addition, when it infects, sometimes it will destroy the file it tries to latch onto. For these reasons, you really can't fix this infection. You will need to format/reinstall the operating system on this machine.

For more information see Here
"AVG Technologies" wrote:There are bugs in the viral code. When the virus produces infected files, it also creates non-functional files that also contain the virus.


For more information see Here
"Network Associates" wrote:W32/Virut.h is a polymorphic, entry point obscuring (EPO) file infector with IRC bot functionality. It can accept commands to download other malware on the compromised machine.

It appends to the end of the last section of executable (PE) files an encrypted copy of its code. The decryptor is polymorphic and can be located either: Immediately before the encrypted code at the end of the last section At the end of the code section of the infected host in 'slack-space' (assuming there is any)
At the original entry point of the host (overwriting the original host code)


Miekiemoes, one of our team members here and an MS-MVP, additionally >> has a blog post about Virut.

I suggest you to start backup all of your valuable data/documents/pictures/movies/songs/etc..
Do NOT backup any applications/installers and Do NOT backup any .exe/.scr/.htm/.html/.xml/.zip/.rar files...
This because these files may be infected as well. If you back them up and replace them afterwards, it will infect your computer again.

Read here for instructions how to format and reinstall Windows: How to reformat and reinstall Windows

If you have any questions feel free to ask.
migmanus
June 5, 2011, 11:04 AM UTC
Crap. I am bummed. I got excited after we stopped the redirects! I will read through the information that you provided. Even though we have not found a fix I really do appreciate the time and energy you have spent on my issue.
Cypher Admin/Teacher
June 5, 2011, 11:17 AM UTC
Hi migmanus.
Even though we have not found a fix I really do appreciate the time and energy you have spent on my issue.

You're most welcome, sorry the news was not better.
Please let me know if you have any further questions.
Cypher Admin/Teacher
June 6, 2011, 10:02 AM UTC
As the resolution of this issue requires a reformat, and there have been no further questions posted regarding that process, this topic is now closed.

You can help support this site from this link:
Donations For Malware Removal

✨ Ask AI about this thread

No ads, no affiliate links — generated on request from this thread's own archived content, not written by forum staff. Never run a scan/removal tool as a self-service step if the original thread describes it being done under a helper's direct supervision, and don't include your name, email, or other personal details in a follow-up question. See our privacy page for details on how this works.