MicroAv.exe

[ljrobb]

Okay, i got this nasty virus over the weekend on Saturday.  I ran ever kind of antivirus, I tried everything others tried, I tried the superantivirus.  NOTHING got rid of this virus.  I spent hours.  I finally had to reinstall my operating system and start from scratch.  Sorry guys.  that's all I found that worked.  I was fortunate in that I had all my important files stored on an external hard drive.  It's just time consuming to re-install the operating system.  Maybe someone else will find something to rid their system of this virus but I wasn't able to.  Good luck.

[Lisandro]

Okay, i got this nasty virus over the weekend on Saturday.  I ran ever kind of antivirus, I tried everything others tried, I tried the superantivirus.  NOTHING got rid of this virus.  I spent hours.  I finally had to reinstall my operating system and start from scratch.  Sorry guys.  that's all I found that worked.  I was fortunate in that I had all my important files stored on an external hard drive.  It's just time consuming to re-install the operating system.  Maybe someone else will find something to rid their system of this virus but I wasn't able to.  Good luck.

Sorry for that... maybe next time we can help on cleaning before the radical solution of reformatting... welcome to avast forums

[shooters345]

OK, I've got the same virus. and it's tough as hell, its driving me nuts, especially because it's on my brothers PC and I (his older brother) have to fix it.

so I removed the micro AV folder and everything in it, I ran ccleaner and cleaned the registry, deleted the PChealth folder. made sure in msconfig there are no YUR*.exe files started when I  would start up the PC. so now when I scan with superantispyware or a program like that, It wont find any trace of micro AV, but still... I get those pop ups about my PC being infected, and these pornicons on my desktop. with ctrl+alt+delete I can stop the pop ups, but the porn Icons stay. and if I even can start the PC. it will just freeze in about 3 minutes... most of the time it will freeze in the screen were you can choose the user. the only way to use it is safe mode.

I also have show hidden folders in folder options

(using vista)
 
please help.. because it's driving me nuts...

i'm experiencing exactly the same crap. any suggestions??

[Lisandro]

i'm experiencing exactly the same crap. any suggestions??

I suggest:

1. Clean your temporary files.
2. Schedule a boot time scanning with avast with archive scanning turned on. If avast does not detect it, you can try DrWeb CureIT! instead.
3. Use SUPERantispyware, MBAM or Spyware Terminator to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.
4. Test your machine with anti-rootkit applications. I suggest avast! antirootkit or Trend Micro RootkitBuster.
5. Make a HijackThis log to post here or this analysis site. Or even submit the RunScanner log to to on-line analysis.
6. Disable System Restore and then reenable it again.
7. Immunize your system with SpywareBlaster or Windows Advanced Care.
8. Check if you have insecure applications with Secunia Software Inspector.

[Silva]

i just cant get rid of this. had an attack after dling some game from bittorent and i guess i trusted the site too much. after superaantispyware and mbam i only have left this reg key which is driving me nutz since it give me a regdll error: " Could not load vetidika.dll" I just cant shake it, no deleting no editing, after reboot its back, after some digging i found that it can stil be in use at the time of reboot and thats why its stil gonna be there after. you take it out of startup, you say exit without save aand if you enter msconfig again its back there.

[Lisandro]

i found that it can stil be in use at the time of reboot and thats why its stil gonna be there after.

Did you run avast at boot time?

[Silva]

sure, avast was running all the time. that thing about it being in use was foun on some microsoft support site. im ataching a jpeg, if its wrong then del.

[Lisandro]

I suggest you boot in Safe Mode and delete that dll file (sending to Recycle bin).
But didn't avast detect it as being infected? Can't avast send it to its Chest (quarantine)?

[airraidcrash]

Hey,
I'm not as computer literate as most of you guys on here but I've had nothing but trouble from this virus. First it had the porn icons and the MicroAV pop-ups etc. so I tried to use my Antivrius software but it didn't help to remove the virus. So I went on Safe mode and attempted to remove the files in C:\WINDOWS\system32 but it said they were being used or I didn't have permission to delete this file. I attempted to log on to my PC normally and I was unable to get to my Local Disk Drive C! The option to click on "All Programs in the start menu completely disappeared! I attempted to go through Safe mode WITH Networking but it said this version of Windows needs to be activated and I need to do this. It gives you the options "Yes" or "No" and clicking on either does NOTHING at all. The same problem happened when I tried to log on normally (not in Safe mode). So, I'm currently using a friend's laptop as I'm not even able to get into Safe mode using networking. This has hit me like nothing before on my PC! I have no idea what to do as I cant even do a system restore as it says "no available restore points". Will I have to completely wipe my PC or is there someway I can get rid of this annoyance?? I really don't want to lose everything!!
I hope somebody can help me! Thanks a lot!
Matt

[Lisandro]

airraidcrash, if you can't even boot/logon, maybe you need to search for a bootable CD to scan your computer.
Try using the Avira rescue CD. Download the file, or get someone to do it  for you, double click on file, and you will be prompted to burn to CD. Insert CD into the infected PC and boot up. Choose option 2 for virus scanning. Choose language, then PRESS SPACE, then enter. The download is updated daily. Good luck and post back.
http://www.free-av.com/en/tools/12/avira_antivir_rescue_system.html

[Silva]

that dll doesnt exist anymore. the problem is the registry entry, not the dll. when i restart i get that error that dd cant load, because it isnt there. and i just cant get rid of the reg entry. i thinking theres a service started that needs it( so far i believed its BITS but looks like not)

p.s. whats error 42060 (the file was not repaired) in avast boot scan ? and why can it move a file to chest but if it ties to repair cant move it after

[Jtaylor83]

Do Step 5 in Tech's post. Post an HJT log.

[Silva]

looks that there are more than 1 dll i dont have on my hard.. i seached the web for those names and couldnt find any. i need to apologize for editting the log but i replaced some information i considered private with "what was it", i hope its ok. if any1 has an ideea how to help me get rid of those i thank you in advance.

[airraidcrash]

"airraidcrash, if you can't even boot/logon, maybe you need to search for a bootable CD to scan your computer.
Try using the Avira rescue CD. Download the file, or get someone to do it  for you, double click on file, and you will be prompted to burn to CD. Insert CD into the infected PC and boot up. Choose option 2 for virus scanning. Choose language, then PRESS SPACE, then enter. The download is updated daily. Good luck and post back.
http://www.free-av.com/en/tools/12/avira_antivir_rescue_system.html"

Thanks for this. I'm downloading this now and when I get home I will try this out! I'll post back when I can to advise if this has worked or not. Thank you again!

[Lisandro]

Thanks for this. I'm downloading this now and when I get home I will try this out! I'll post back when I can to advise if this has worked or not. Thank you again!

You're welcome. Yeah, post back the results.