My avast is infected by a virus

[ClaudiaHorn]

Omg, NO!  Too late!  I'm running rmvirut.exe as I type this.  Should I stop it now or is the damage already done?

Awcrap!  Where do I go for instructions on reformatting my pc, please?  I know a guy in a nearby town who could probably do it all for me, but I can't afford to pay someone to do it right now.  Doubt that I'll get to it tonight, but any input would be welcome.  Very welcome!

Thanks, Snowhite.

 

[SNOWHITE]

For reformatting see this tutorial :

http://spyware-free.us/tutorials/reformat/

Let me know if you have any questions,  also can you tell me at what site have you downloaded the keygen? Just please don't use http:// or www. in your post, only i need the name of the site.

[ClaudiaHorn]

Thanks for the link Snowhite.  The site where I downloaded the crack is just called 'Keygen'.  I'd downloaded cracks from there several years ago with no problem.  My, how things change!

So far I'm surprised that the only problems I've had have been with WinMedia Player & avast, and a game called Kyodai.  My Word & Excel, and all my 3d terrain generating programs are working just fine.  Guess it's just a matter of time before my whole pc is shot to hell, right?

Thanks again!

Dia

[marcjessa]

Hmm.. Hi.. btw.. after seeing your system process, i've notice something like - "getright.exe" running on your computer.. based on my research..  it is a WORM!.. yes.. it is..

getright.exe - Here is the scoop on cozit worm as it pertains to computer network security. The big question: what is getright.exe and is it spyware, a trojan and if so, how do I get rid of cozit worm..

hmm.. http://www.auditmypc.com/process/getright.asp

Try to download antispyware software.. weeee..

Hmm.. It's my opinion.. though..     


thank's

JM

[marcjessa]

Okay essex; did as you instructed.  I've copied the logfile as follows (it's pretty lengthy):

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:11:57 AM, on 9/23/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Omniquad Total Security\MyPrivacy\mpsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\CTHELPER.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\GetRight\getright.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\SEC\Natural Color\NaturalColorLoad.exe
C:\Program Files\ProSaver Screensaver Manager\ProSaver.exe
C:\Program Files\Common Files\Sonic Shared\CineTray.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

Well.. A WORM.. 

[mauserme]

Or maybe just a download manager   

http://www.bleepingcomputer.com/startups/GETRIGHT.EXE-1835.html

http://www.processlibrary.com/directory/files/getright

http://www.liutilities.com/products/wintaskspro/processlibrary/getright/

[SNOWHITE]

What is wrong with you guys  do you ever read the whole topic before replying and add some post?

[marcjessa]

Hmm.. that's an opinion though..     

Trying to help..

Oh, btw.. avast! don't have its own Self-defense system..??

Hmm.. ClaudiaHorn.. Everything will be okey..

Thank's

[ClaudiaHorn]

Hi, I'm back with a question (or two).  I now know that I'm going to have to reformat my pc (_*sigh*), but from what I'm looking at, I have two options (I think - told you I'm no whiz when it comes to this tech stuff).  My late husband had to reformat my pc two years ago when his pc (which was networked to mine) contracted a nasty virus; he used a disc he'd burned called 'MadBoot'.  Do I use this disc, or just reformat using my XP Pro disc?  I don't want to try to do anything fancy such as creating a whole bunch of partitions (he'd done that on his pc; installing both Windows ME & XP64); I have a portable hard drive on which I'd backed up all my stuff a few months ago & just now finished backing up all my recent data (no exe files! - just pics, text, etc.).  I've printed up a bunch of 'how to reformat' instructions; just don't know which method is better (and more user friendly).  Any advice on this anyone?

Also; after I'm finished reformatting (in say, about 6 or 7 days    ), how do I download my avast - I mean, I just repurchased & registered a few months ago and don't want to have to pay all over again.  Is there an option for people like me who've had to reformat to just redownload?  Sorry, I've been too busy to check the other forums here to search for an answer. 

Thanks again in advance!   

[Rafel]

If you has got a license, copy it in a paper o something, and after formating,  download AVAST Pro and enter your license, and voilà.
I have got a notebook with all my licences and i have got three HD(well, Cand E ara the same disc with a partition),and in the secondary HD(D), i've got an .txt file with all my licences in a .rar file with password
If i were you i'd format with XP pro disc
To format a PC is very easy.
In a few weeks i'll install a new video card, and i'll format without problems.

PS
Sorry my poor english

[ClaudiaHorn]

Thanks Rafel!  From now on I'll be keeping separate discs containing registration/license numbers, passwords, etc.  Lesson learned!!!

And yeah, I kind of thought it would be easier to reformat with the XP disc.  Thanks again!!

[Dwarden]

Hmm.. Hi.. btw.. after seeing your system process, i've notice something like - "getright.exe" running on your computer.. based on my research..  it is a WORM!.. yes.. it is..

getright.exe - Here is the scoop on cozit worm as it pertains to computer network security. The big question: what is getright.exe and is it spyware, a trojan and if so, how do I get rid of cozit worm..

hmm.. http://www.auditmypc.com/process/getright.asp

Try to download antispyware software.. weeee..

Hmm.. It's my opinion.. though..     


thank's

JM

please stop spreading false informations -> GetRight is valid software (i use it myself)

wonder if it's too hard to use google about "getright" / "getright.exe" to seel Your self

official website www.getright.com

also GetRight exist for over decade
http://www.getright.com/getright_history.html

p.s.
don't be fooled by 'process identification' websites , today is common lot of malware mask as 'trusted' applications
so You can't simply say it's 'badware' or it's clean

[fireangel120]

ok I a unsure how this forum stuff works I have one virus that cnat be put in the chest it is the win32:downloader-kk....PLEASE HELP I DONT KNOW HOW TO FIGURE THIS OUT or even how to use this forum....who can I contact to help me,I keep getting these annoying pop ups even though my pop up blocker is set to high!!!!!!!!!!!HELP!!!!!!!!!!!!!!!!!!!!

[DavidR]

Please start a New Topic of your own as this seems unrelated to the original subject and will just confuse the topic and we will try to help. 

- Go to this link, http://forum.avast.com/index.php, scroll down to the Viruses and Worms forum and click it, click the New Topic button at the top of the list and post there.