Really BAD virus, help

[Alsisgevat]

Hi,a dood at work had this virus on his pc,when ever he copies any file from an external device the virus kicks in and atomaticly copies everything on the external over to your local drive without you knowing,and when you open mycomputer your entire drive is suddenly full,all files are copied severall times and all the files even files that are gigabytes in size showe next to it 99kb.The virus is known as something with "rotinom",the worst part is he tried every antivirus and none of them pick it up or remove it.Can anyone that knows something about this rotinom crap please reply on what to do!

 

[Jacee]

See this .. ThreatExpert Report: Trojan.Win32.Agent.cwen, Mal/Behav-043, Trojan:Win32/Rotinom.A..

It sounds like the external device is infected

 

[Alsisgevat]

Naw,we thought of that but it efects any external,even flash drives

 

[mitchell65]

This might help. if not I think you may be looking a format and re install
http://www.microsoft.com/security/p...e=Trojan:Win32/Rotinom.A&ThreatID=-2147413137
You don't say what operating system is involved nor what anti virus software was running at the time of the infection!

 

[brianzion]

found this
Encyclopedia entry: Trojan:Win32/Rotinom.A - Learn more about malware - Microsoft Malware Protection Center

and this
http://www.spydig.com/file-diagnosis/exe-2 rotinoM htdiwdnaB.html

http://support.kaspersky.com/desktop

http://support.kaspersky.com/viruses

http://support.kaspersky.com/find?w...t_type=relevance&fts_type_sel=k&search=search

 

[Alsisgevat]

Well Mitchell 65,i thought it to be logical because its a windows 7 forum,people would assume the operating system was windows 7,more precise ultimate 64 bit.As for the anti viruses we used Norton,avg,Mc-afee,avast and viper.

 

[Dinesh]

Hi there, Download Hitman Pro 3.5.4 Build 98 Free Trial - This software can help you find and remove new unknown threats. - Softpedia and run a scan.

 

[Alsisgevat]

Thanx Dinesh,ill try it

 

[Jacee]

I suggested to Alsisgevat, that the friend register at a well know anti-malware forum and download the diagnostic tools that we use.

A "trained" eye will know what to look for in those logs, and will be able to help more than any 'one' application can do.

 

[Alsisgevat]

To Any that read this thanx for all the replies,JACEE,i did as you said and sovar it seems the virus is gone,the bad thing is it was quarantined by the latest Avast,and those file were then picked up with Viper(viper was suggested by threat-expert)In the end Viper removed all infected files,which then cleaned out the external completely,after a external format,it clean.So if you get a virus that copies everything you have on your local drive use Viper,the link is supplied by one of the guys earlier in the thread,it worked....at a price

 

[Tews]

Glad you got it all sorted out.... Remember though, had you imaged your drive, your problem could have been resolved with a simple restore and would have saved you some $$$...

http://www.sevenforums.com/tutorials/663-backup-complete-computer-create-image-backup.html?ltr=B

 

[Dinesh]

To Any that read this thanx for all the replies,JACEE,i did as you said and sovar it seems the virus is gone,the bad thing is it was quarantined by the latest Avast,and those file were then picked up with Viper(viper was suggested by threat-expert)In the end Viper removed all infected files,which then cleaned out the external completely,after a external format,it clean.So if you get a virus that copies everything you have on your local drive use Viper,the link is supplied by one of the guys earlier in the thread,it worked....at a price

Glad to hear that you got it sorted with the help of Avast and Viper.

 

[Alsisgevat]

Thanx,but if i used that hitman pro first i never had to loose anything,i tried it on a buds pc which had the virus too (he got it of my external when copying files-before the hole loosing all data) and it ran a sort of online scan and found the virus and deleted it without him having to change or loose anything,so now my anti-virus is viper and i constantly run the hitman pro,even though its just for 30 day trails

 

[Alsisgevat]

Glad you got it all sorted out.... Remember though, had you imaged your drive, your problem could have been resolved with a simple restore and would have saved you some $$$...

http://www.sevenforums.com/tutorials/663-backup-complete-computer-create-image-backup.html?ltr=B

If only i knew...but wouldnt the virus infect the back ups after i recopy them,or something like that?