Author Topic: Win32:Mutant-AX [Trj] in library Winnt32.dll  (Read 3367 times)

0 Members and 1 Guest are viewing this topic.

Offline Redwid

  • Newbie
  • *
  • Posts: 2
Win32:Mutant-AX [Trj] in library Winnt32.dll
« on: July 12, 2008, 09:22:12 AM »
Hi everyone!

In 5-10 minutes after PC is on I see the virus notification: Rootkit Win32:Mutant-AX [trj] in library Winnt32.dll

I spend a lot of time, but I didn't fix and delete it.

My config:
1. Windows XP;
2. Avast 4.8 Home Edition;

I used AVZ4 with different scripts. But Winnt32.dll is still in my PC!

Could anyone help me?

Offline Jtaylor83

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 1066
Re: Win32:Mutant-AX [Trj] in library Winnt32.dll
« Reply #1 on: July 12, 2008, 10:09:06 AM »
You could have send it to the Virus Chest where it can't do no harm.

I suggest you try one of these Antispyware programs.

SuperAntiSpyware Free

Spybot-Search & Destroy

Spyware Terminator (exclude the toolbar, add on, and the antivirus module)

I hope these will help.
« Last Edit: July 12, 2008, 10:16:41 AM by Jtaylor83 »
Avast 6.0, MalwareByte's Anti-Malware, CCleaner, Defraggler, DownloadHelper, WOT, NoScript, KeyScrambler, Thunderbird, Firefox, Windows XP SP3.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67250
Re: Win32:Mutant-AX [Trj] in library Winnt32.dll
« Reply #2 on: July 12, 2008, 03:01:09 PM »
I suggest:

1. Disable System Restore and reenable it after step 3.
2. Clean your temporary files.
3. Schedule a boot time scanning with avast with archive scanning turned on. If avast does not detect it, you can try DrWeb CureIT! instead.
4. Use SUPERantispyware, MBAM or Spyware Terminator to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.
5. Test your machine with anti-rootkit applications. I suggest avast! antirootkit or Trend Micro RootkitBuster.
6. Make a HijackThis log to post here or, better, submit the RunScanner log to to on-line analysis.
7. Immunize your system with SpywareBlaster or Windows Advanced Care.
8. Check if you have insecure applications with Secunia Software Inspector.
The best things in life are free.

Offline Redwid

  • Newbie
  • *
  • Posts: 2
Re: Win32:Mutant-AX [Trj] in library Winnt32.dll
« Reply #3 on: July 12, 2008, 09:34:42 PM »
Thanks!
I used SuperAntiSpyware Free, Spybot-Search & Destroy, Spyware Terminator, avast! antirootkit.
And now seems like everything are OK.

I attached HijackThis and RunScanner log.

Why avast shouldn't do this step to repair system?