01-28-2012 05:26 PM
Virut and Ramnit is in my thinking close enough to to think the same way with removal, keep in mind there will be changes with newer variants.
See this thread, My Norton log is attached in that thread, showing some of the 2,000+ files infected, when I purposely infected my computer. http://community.norton.com/t5/Norton-Internet-Sec
Here is a thread where a user used my instruction, and as stated on page 2, he beat it. Norton was fixed for the curing after this thread. http://community.norton.com/t5/Norton-Internet-Sec
01-28-2012 06:47 PM
Thank you all for the hasty responses.
Quads, it seems you've posted the most useful information in regards to removing the virus.
Anywho, I've run my Norton scan, a Dr. Web Cureit scan, and a Malwarebytes scan and all have come up clean. I had successfully removed the infected files Norton had found. My CPU usage has seemed to return to normal (after ten minutes of monitoring), and I can't find any rogue services or processes running. I checked my registry files to ensure the worm hadn't altered any (using the threat logs posted), and I'm going to safely assume I've eradicated the files. If by chance I missed the parent file of the worm, I'll refer back to the instructions posted in your thread Quads to delete the virus entirely (if I haven't already).
Thank you everyone for your asistance and whatnot. Nice to have a community of people with a better handle on this then me. I'm pretty computer savvy, but this was a little out of my reach admittedly.
Regards, everyone. (:
02-28-2012 02:00 PM
Been long enough, you should be all clear, with all the Norton updates and all.
One thing that can be done after knowing you have the all clear long enough and due to the way the Virut and Ramnit Virus works is to turn off System Restore, delete all Restore points that may have infected .exe and .dll files. Once that is done Turn System Restore back ON and create a new restore point.