Win32:Mutant-AX [Trj] in library Winnt32.dll

[Redwid]

Hi everyone!

In 5-10 minutes after PC is on I see the virus notification: Rootkit Win32:Mutant-AX [trj] in library Winnt32.dll

I spend a lot of time, but I didn't fix and delete it.

My config:
1. Windows XP;
2. Avast 4.8 Home Edition;

I used AVZ4 with different scripts. But Winnt32.dll is still in my PC!

Could anyone help me?

[Jtaylor83]

You could have send it to the Virus Chest where it can't do no harm.

I suggest you try one of these Antispyware programs.

SuperAntiSpyware Free

Spybot-Search & Destroy

Spyware Terminator (exclude the toolbar, add on, and the antivirus module)

I hope these will help.

[Lisandro]

I suggest:

1. Disable System Restore and reenable it after step 3.
2. Clean your temporary files.
3. Schedule a boot time scanning with avast with archive scanning turned on. If avast does not detect it, you can try DrWeb CureIT! instead.
4. Use SUPERantispyware, MBAM or Spyware Terminator to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.
5. Test your machine with anti-rootkit applications. I suggest avast! antirootkit or Trend Micro RootkitBuster.
6. Make a HijackThis log to post here or, better, submit the RunScanner log to to on-line analysis.
7. Immunize your system with SpywareBlaster or Windows Advanced Care.
8. Check if you have insecure applications with Secunia Software Inspector.

[Redwid]

Thanks!
I used SuperAntiSpyware Free, Spybot-Search & Destroy, Spyware Terminator, avast! antirootkit.
And now seems like everything are OK.

I attached HijackThis and RunScanner log.

Why avast shouldn't do this step to repair system?