W32/Chir Virus.B

[Rajike]

Guys, I got a real problem with a virus called W3/Chir.B

I installed Sniper Ghost Warrior Skidrow and my antivirus software (avira Free version) stated saying A lot of programes containing virus eg skype.exe containing a virus w32/chir

and i the command was reapir in avira and i restarted my pc , but i always keep saying a software containg a virus


How can i delete this virus?
Please help me

 

[Rajike]

Guys i am really getting trouble with this this makes me stop running my programes

 

[Golden]

On a different computer, follow this to create a bootable DVD/USB, then run on infected computer:
http://www.sevenforums.com/tutorials/166445-windows-defender-offline.html

 

[Rajike]

Its hard to find another computer here, amd i cant copy paste

A lil differ help?

 

[Golden]

Try this:
Free Online Virus Scanner | ESET

 

[Rajike]

Is it okey to run this scan without turning off avira?

I scaned found some virus but there are no remove option

 

[Golden]

You missed the remove option. Scan your ENTIRE system again - its fine to scan with Avira installed, just dont run it at the same time.

 

[cottonball]

Rajike,

The Eset scan will run a little faster if you temporarily disable Avira.

Info on disabling protection programs:
How to disable your security applications - Tech Support Forum
How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs



This Scanner is implemented as an ActiveX control, so it is best run on Internet Explorer.
Right click the IE shortcut and select: Run as Administrator

Download: Free Online Virus Scanner | ESET

On the Eset website, click on: Run ESET Online Scanner
Click: Start

When asked, allow the add/on to be installed
Click: Start again

On the next prompt, Computer Scan Settings, check: Remove found threats
Next, click on: Advanced Settings


Make sure these options are checked:

• Scan for potentially unwanted applications
• Scan for potentially unsafe applications
• Enable Anti-Stealth Technology

Click: Scan


When the scan is complete


If threats are found, in the Scan Results prompt:

• Click on: List of threats found
• Click on: Export to text file
• Save to the Desktop and name it ESET Scan Results
• Click on: Back
• Place a check on: Uninstall application on close
• Click on: Finish, and close the program.

Please provide the ESET report in your reply. so we can determine if any further action is necessary.

 

[Rajike]

Eh, shows thousands 10k+ viruses and some are trusted, will they get removed too,


Or can any one tell me about rescue disk's
Tried kaspersky dont work, how about avg?

 

[cottonball]

Rajike,

There is a file infector on your computer.

You say there are 10,000+ files involved, some of which are legit.
Any files are "disinfected/cured", can remain corrupted. As a result, programs do not work, and, all sorts of errors appear. Actually, the malware continues to spread, even as you read this. I can't offer a reasonable guarantee that the Virus will be altogether gone.

A format and install is the best and the safest solution.

You may want to post your concern at the following forum:
Installation & Setup - Windows 7 Help Forums

 

[Rajike]

There is a command called repair in avair so i repair the trusted

So that injecter stuff, how can i find it?

 

[cottonball]

Rajike,

Let me restate that 'repairing' 10,000+ files corrupted by a file infector is not an action I would recommend.

So, if you wish to proceed, you do so at your own risk.

Your AntiVirus should find the infector.

As far as the 10,000+ infected files detected, if you want Avira Antivir to automatically repair them:
•Right-click on the small umbrella icon in the system tray > Configure Antivir
•Check: Expert Mode
•Go to Scanner > Scan > Action on detection
•In the right pane switch mode from Interactive to Automatic
•Select the Primary action (in your case: repair)
•Check: Copy file to quarantine before action. This keeps track of the potentially harmful files.
•Click OK to validate.


The Secondary action is activated only if you use repair as the Primary one.
In case the file can't be repaired, depending on how you configured the Secondary action, Avira either deletes, ignores, or sends the file to Quarantine.

The image below has the Primary action as delete. You will need to change it to repair.

 

[Rajike]

I think that will delete all the files infected with it? btw when i repair it again engulf it

 

[cottonball]

I think that will delete all the files infected with it?

If the computer does not work normally, do not be surprised.

 

[Rajike]

Is there a way to find that injector with out delete other accected stuff


and if i format partition :c will it fix the problem?

 

[cottonball]

As stated before, a format and install is the best and the safest solution.

You may want to post your concern at the following forum:
Installation & Setup - Windows 7 Help Forums

 

[Rajike]

Thanks for all info, but is it okey if i only format partition ' :c ' as files on ' :d ' ' :e ' (.exe files only and fixable) are also littlely infected

 

[cottonball]

A file infector can infects all .EXE files found in drives C to Z!!

It appends its virus code to the target files and modifies them to point to virus code.

 

[keebsuk]

Once you have done a fresh install, before you use the internet, you may want to consider your surfing habits and what you download/install on your PC. It doesn't matter what AV you run if you don't take prudent steps to avoid re infection.

Andy

 

[Rajike]

so, i didnt got the answer is it enough to format only :C

and fresh install? you ment fully format whole pc?