<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>
<channel>
	<title>Comments on: Win32 Virtob/Virut removal</title>
	<atom:link href="http://www.hm2k.com/posts/win32-virtob-virut-removal/feed" rel="self" type="application/rss+xml" />
	<link>http://www.hm2k.com/posts/win32-virtob-virut-removal</link>
	<description>The research of an internet entrepreneur and IT consultant</description>
	<pubDate>Thu, 04 Dec 2008 20:00:47 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.6.5</generator>
		<item>
		<title>By: Blacksmith</title>
		<link>http://www.hm2k.com/posts/win32-virtob-virut-removal#comment-119440</link>
		<dc:creator>Blacksmith</dc:creator>
		<pubDate>Thu, 13 Nov 2008 08:47:20 +0000</pubDate>
		<guid isPermaLink="false">http://www.hm2k.com/posts/win32-virtobvirut-removal#comment-119440</guid>
		<description>Alright, I've grown extremely frustrated at this point. Considering that the company that sent me my computer did NOT give me a disc of my OS, I pretty much can't do what you're saying. As such, would that count as me being fucked? Seriously, I can't get rid of this damn annoying virus.</description>
		<content:encoded><![CDATA[<p>Alright, I&#8217;ve grown extremely frustrated at this point. Considering that the company that sent me my computer did NOT give me a disc of my OS, I pretty much can&#8217;t do what you&#8217;re saying. As such, would that count as me being fucked? Seriously, I can&#8217;t get rid of this damn annoying virus.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: fekalierex</title>
		<link>http://www.hm2k.com/posts/win32-virtob-virut-removal#comment-115130</link>
		<dc:creator>fekalierex</dc:creator>
		<pubDate>Wed, 29 Oct 2008 16:01:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.hm2k.com/posts/win32-virtobvirut-removal#comment-115130</guid>
		<description>i have same problem. i found that it's very suspicious when many programs that self crc-check wont run. Then i found that my programs after compilation and renaming from .ex_ to .exe grows up for about 50 kb. Today i had idea to check one of programs with content comparator. First file had non-exe extension and second was exe file of same program. It found 3 diffirencies. One in begin of file (i think it is like code call procedure used to execute viral code. Second was in middle and last was big code block that is actual virus. Some programs works with this append good, some checks crc and wont launch and sometimes (this was on patch-crack programs) can be unrecoverable corrupted (virut.b have problem infecting my gamecam crack so it began growing till it became 2 gb big.</description>
		<content:encoded><![CDATA[<p>i have same problem. i found that it&#8217;s very suspicious when many programs that self crc-check wont run. Then i found that my programs after compilation and renaming from .ex_ to .exe grows up for about 50 kb. Today i had idea to check one of programs with content comparator. First file had non-exe extension and second was exe file of same program. It found 3 diffirencies. One in begin of file (i think it is like code call procedure used to execute viral code. Second was in middle and last was big code block that is actual virus. Some programs works with this append good, some checks crc and wont launch and sometimes (this was on patch-crack programs) can be unrecoverable corrupted (virut.b have problem infecting my gamecam crack so it began growing till it became 2 gb big.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: joneywalker4u</title>
		<link>http://www.hm2k.com/posts/win32-virtob-virut-removal#comment-113989</link>
		<dc:creator>joneywalker4u</dc:creator>
		<pubDate>Sun, 26 Oct 2008 09:41:14 +0000</pubDate>
		<guid isPermaLink="false">http://www.hm2k.com/posts/win32-virtobvirut-removal#comment-113989</guid>
		<description>Thanks man it worked somewhat to cure w32.virut but too many files were infected and symantec antivirus deleted them before I could recover them via cure it.
Thanks once again.</description>
		<content:encoded><![CDATA[<p>Thanks man it worked somewhat to cure w32.virut but too many files were infected and symantec antivirus deleted them before I could recover them via cure it.<br />
Thanks once again.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Syam</title>
		<link>http://www.hm2k.com/posts/win32-virtob-virut-removal#comment-100880</link>
		<dc:creator>Syam</dc:creator>
		<pubDate>Thu, 18 Sep 2008 17:21:05 +0000</pubDate>
		<guid isPermaLink="false">http://www.hm2k.com/posts/win32-virtobvirut-removal#comment-100880</guid>
		<description>If you still ahve teh issue, Use avast and do a scan at boot time. You will have no option but to delete the exe files effected by the damn thing. Once done use the sfc /scannow and  use Xp CD whena sked for. This is what i did and it did solve.
Avira and avast detects it and warns, I ddinot pay heed and had to pay a huge price...</description>
		<content:encoded><![CDATA[<p>If you still ahve teh issue, Use avast and do a scan at boot time. You will have no option but to delete the exe files effected by the damn thing. Once done use the sfc /scannow and  use Xp CD whena sked for. This is what i did and it did solve.<br />
Avira and avast detects it and warns, I ddinot pay heed and had to pay a huge price&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: mikkypops</title>
		<link>http://www.hm2k.com/posts/win32-virtob-virut-removal#comment-91595</link>
		<dc:creator>mikkypops</dc:creator>
		<pubDate>Sat, 16 Aug 2008 11:40:17 +0000</pubDate>
		<guid isPermaLink="false">http://www.hm2k.com/posts/win32-virtobvirut-removal#comment-91595</guid>
		<description>thanks hm2k - i been looking for a solution to this for days and now that other useful info helps with other things too now

for the people who dont have the computer knowledge, unplug your hard drive out of your computer, put it in an external drive or just plug it in on the inside of a non-infected computer, make sure all the antivirus programs are up to date and scan it, especially with the cure-it. then when you plug it back into the original machine, install windows repairing it, then you should be able to install all your other programs
knowing that the possibility you dont have all the programs that are on your computer because most likely source for this bug is from illegal software installations from certain websites and torrents. music downloading included. funny enough that is the easiest way to do it, so hope that could help a little further</description>
		<content:encoded><![CDATA[<p>thanks hm2k - i been looking for a solution to this for days and now that other useful info helps with other things too now</p>
<p>for the people who dont have the computer knowledge, unplug your hard drive out of your computer, put it in an external drive or just plug it in on the inside of a non-infected computer, make sure all the antivirus programs are up to date and scan it, especially with the cure-it. then when you plug it back into the original machine, install windows repairing it, then you should be able to install all your other programs<br />
knowing that the possibility you dont have all the programs that are on your computer because most likely source for this bug is from illegal software installations from certain websites and torrents. music downloading included. funny enough that is the easiest way to do it, so hope that could help a little further</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: silu</title>
		<link>http://www.hm2k.com/posts/win32-virtob-virut-removal#comment-85928</link>
		<dc:creator>silu</dc:creator>
		<pubDate>Tue, 22 Jul 2008 06:54:39 +0000</pubDate>
		<guid isPermaLink="false">http://www.hm2k.com/posts/win32-virtobvirut-removal#comment-85928</guid>
		<description>my pc was goin pity fine . till yeserday. then sudenly a toolbar came int o the screen sayin that the system will be shut down in 15 mins. the bit defenmder is sayin its a win32.virtob virus. i havnt got a updated version . i am gonna try this out. mean while i am using th epc in safe mode. dont know what to do . some people told me that the virus would defragment the hard drive leadin to its crash. can you give a suggestion as what to do</description>
		<content:encoded><![CDATA[<p>my pc was goin pity fine . till yeserday. then sudenly a toolbar came int o the screen sayin that the system will be shut down in 15 mins. the bit defenmder is sayin its a win32.virtob virus. i havnt got a updated version . i am gonna try this out. mean while i am using th epc in safe mode. dont know what to do . some people told me that the virus would defragment the hard drive leadin to its crash. can you give a suggestion as what to do</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: hm2k</title>
		<link>http://www.hm2k.com/posts/win32-virtob-virut-removal#comment-68205</link>
		<dc:creator>hm2k</dc:creator>
		<pubDate>Tue, 13 May 2008 07:28:34 +0000</pubDate>
		<guid isPermaLink="false">http://www.hm2k.com/posts/win32-virtobvirut-removal#comment-68205</guid>
		<description>Which part did you find difficult to follow?</description>
		<content:encoded><![CDATA[<p>Which part did you find difficult to follow?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: akk234</title>
		<link>http://www.hm2k.com/posts/win32-virtob-virut-removal#comment-68200</link>
		<dc:creator>akk234</dc:creator>
		<pubDate>Tue, 13 May 2008 06:52:57 +0000</pubDate>
		<guid isPermaLink="false">http://www.hm2k.com/posts/win32-virtobvirut-removal#comment-68200</guid>
		<description>i am no geek and could not exactly follow the steps .
it will be very  kind of u to just elaborate the steps a bit more.
i really appreciate ur effort but i am sorry i have to ask u 4 a little more effort.
hope to get a reply soon.</description>
		<content:encoded><![CDATA[<p>i am no geek and could not exactly follow the steps .<br />
it will be very  kind of u to just elaborate the steps a bit more.<br />
i really appreciate ur effort but i am sorry i have to ask u 4 a little more effort.<br />
hope to get a reply soon.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: sure-blophy</title>
		<link>http://www.hm2k.com/posts/win32-virtob-virut-removal#comment-67790</link>
		<dc:creator>sure-blophy</dc:creator>
		<pubDate>Sat, 10 May 2008 20:05:02 +0000</pubDate>
		<guid isPermaLink="false">http://www.hm2k.com/posts/win32-virtobvirut-removal#comment-67790</guid>
		<description>Last year I used Dr Cure-it to get rid of w32.virut.w.  Had to scan several times to do this because it w32v would move around I guess.  This last month I made the mistake of downloading Googols free antispyware (Norton)etc.   Guess what?  My PC was immediately infected with w32v.  This showed up the first scan.  On the second scan about 5 more showed up and was eliminated but one of the w32v resisted being deleted or wipe off.  

I almost believe that Norton did this deliberately, ie, introduce w32v, to motivate the user to buy their non-free anti-spyware.  

ANYWAY AS YOU MIGHT GUESS DR. CURE-IT WAS UNABLE TO GET RID OF IT  ... EVEN A NEWLY UPDATED ONE!!!

if you know what to do besides reformatting my HD please let me know.

TIA  ;=)

Meanwhile I'm going to download an  Update of Dr CureIt again and re-scan.</description>
		<content:encoded><![CDATA[<p>Last year I used Dr Cure-it to get rid of w32.virut.w.  Had to scan several times to do this because it w32v would move around I guess.  This last month I made the mistake of downloading Googols free antispyware (Norton)etc.   Guess what?  My PC was immediately infected with w32v.  This showed up the first scan.  On the second scan about 5 more showed up and was eliminated but one of the w32v resisted being deleted or wipe off.  </p>
<p>I almost believe that Norton did this deliberately, ie, introduce w32v, to motivate the user to buy their non-free anti-spyware.  </p>
<p>ANYWAY AS YOU MIGHT GUESS DR. CURE-IT WAS UNABLE TO GET RID OF IT  &#8230; EVEN A NEWLY UPDATED ONE!!!</p>
<p>if you know what to do besides reformatting my HD please let me know.</p>
<p>TIA  ;=)</p>
<p>Meanwhile I&#8217;m going to download an  Update of Dr CureIt again and re-scan.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: J.W. Bush</title>
		<link>http://www.hm2k.com/posts/win32-virtob-virut-removal#comment-51854</link>
		<dc:creator>J.W. Bush</dc:creator>
		<pubDate>Sat, 15 Mar 2008 06:49:27 +0000</pubDate>
		<guid isPermaLink="false">http://www.hm2k.com/posts/win32-virtobvirut-removal#comment-51854</guid>
		<description>Thnx GOD.. you publish this paper.. All american will be thank to you! DONT FORGET to vote OBAMA!</description>
		<content:encoded><![CDATA[<p>Thnx GOD.. you publish this paper.. All american will be thank to you! DONT FORGET to vote OBAMA!</p>
]]></content:encoded>
	</item>
</channel>
</rss>
