System32 restore

[d7e7r7]

Hi guys,
I got a bad virus on my pc and have been able to clean it up. Suspect it was the Win32/Virut so run the cleaner and can now access my pc but everything is haywire now. My desktop has no background and the icons are non existant but they are there (text). Seems rundll.exe and other vital files from the System32 folder are gone, does anyone know of a program or something I can use to rebuild this folder? FYI I have my Vista disk.

 

[gregmcc]

If you had a virut.n version then your out of luck. This version corrupts files - the virus cannot be removed so the file is deleted. The best bet is to reinstall because you will have flaky .exe files all over the place.

 

[FuNkEr]

Give MalwareBytes ( http://www.malwarebytes.org/ ) a go...
*edit* sorry, I see you were able to clean it (the virus) up.

 

[DJNgoma]

Hi guys,
I got a bad virus on my pc and have been able to clean it up. Suspect it was the Win32/Virut so run the cleaner and can now access my pc but everything is haywire now. My desktop has no background and the icons are non existant but they are there (text). Seems rundll.exe and other vital files from the System32 folder are gone, does anyone know of a program or something I can use to rebuild this folder? FYI I have my Vista disk.

Have you tried repair the Vista installation? This means reboot of the Vista disc and selecting repair.

 

[d7e7r7]

If you had a virut.n version then your out of luck. This version corrupts files - the virus cannot be removed so the file is deleted. The best bet is to reinstall because you will have flaky .exe files all over the place.

thanx everyone for the help. how do i know which version of the virus i had? i do have flaky exe's ALL over and they in the Kaspersky quarantine. eg. notepad files wont open because it must have infected notepad too. whenever i try run a .txt file it says it's not a valid win32 application

 

[d7e7r7]

thanx to those who tried to help... seems alls clear now... gonna run KAV on depe scan now when i go to sleep.... glad i didn't lose my photos...

 

[ld13]

This little baby cured all of my files that had that Virut piece of gemors... ftp://ftp.drweb.com/pub/drweb/cureit/cureit.exe . All of the other apps just deleted files like mad, cureit removed it totally. Although I'm not sure what version of Virut I had.

I ran it from a partPE liveCD, then in windows again and then I just ran the /sfc scannow XP command and everything was 100%

 

[d7e7r7]

If you had a virut.n version then your out of luck. This version corrupts files - the virus cannot be removed so the file is deleted. The best bet is to reinstall because you will have flaky .exe files all over the place.

FYI Kaspersky tells me it was the virus "Virus.Win32.Virut.ce"