Do you know how to get rid of Win32/Crypt.exe virus?

[Wasatch Rebel]

My AV software just found this virus on my pc. Do any of you know how to get rid of it?

[Iceaxe]

I usually run this free program on-line

http://housecall.trendmicro.com/

If Housecall finds a virus it will either remove it for you if it can or it will tell you how to remove the virus manually.

Good Luck

[asdf]

My AV software just found this virus on my pc. Do any of you know how to get rid of it?

What anti-virus software are you using? Before you scan make sure you disable your system restore feature.

Right click on My Computer->Properties->System Restore
Check Turn off system restore.Click Apply .
Then Scan again with you A/V software.

still have the virus?

Download Spybot and update. - http://www.safer-networking.org/en/mirrors/index.html
Download Adaware and update. - http://www.download.com/Ad-Aware-SE-Personal-Edition/3003-8022_4-10399602.html?tag=tab_rev

Download the McAfee Dos scan (free).
http://forums.mcafeehelp.com/viewtopic.php?t=55121

After eveything is installed, boot to safe mode (system restore needs to be off).
Run spybot, fix problems,
Run Adaware, fix the problems.
Reboot the comptuer into Dos Mode, Follow the steps for the McAfee Scan.

Reboot, you should be cool

[rockgremlin]

JimFlint --

Here is the absolute best virus/spyware removal website -- HANDS DOWN!!

http://forums.spywareinfo.com/

They have a crack team of virus removal specialists on call 24/7, and are ready to tackle any virus or spyware problem you may have. You will be assigned a personal virus removal specialist, who will walk you through the virus removal steps, and solve any problems you may have along the way. These guys are DAMN good!! I have used them several times in the past, and they have always exceeded my expectations. Its a free service too, which is an added bonus.

The only down side is that they are very busy, so you have to submit your problem, and then wait for one of the specialists to respond, which may take a few days. They have a system in place, but with a little patience, I guarantee these guys will hook you up.

[Alex]

If all above doesn't work, run this:

http://www.spywareinfo.com/~merijn/programs.php#hijackthis

and post your log in here. I can take a look at it and let you know what you should do.

[nelsonccc]

A lot of the new viruses will replicate themselves in your registry. So when you run a spyware program it will find the virus, it will delete it, but when you restart your computer it will replicate back into your registry. I always scan my registry after i use the spyware to make sure i got it.

Getting these viruses is ahlf the fun since we all know that you only get these viruses from PORN SITES. :naughty:

[Wasatch Rebel]

It's Grisoft AVG free edition. I turned off restore and ran it. The Grisoft found it again, but couldn't do anything with it. I'm going to try some of the other suggestions ASAP. Thanks!

[Alex]

The easiest way to remove any virus is to know where the file is, reboot into safe mode and delete the file.

You boot into Safe mode by pushing F8 and selecting the Safe Mode.

Good Luck

[asdf]

The easiest way to remove any virus is to know where the file is, reboot into safe mode and delete the file.

You boot into Safe mode by pushing F8 and selecting the Safe Mode.

Good Luck

This is true, but if you delete this virus and you still have some spy/malware on you computer it can just to recreate the virus. Then you are back to square one.

Where is Jumar with his McAfee skills?

[Wasatch Rebel]

The easiest way to remove any virus is to know where the file is, reboot into safe mode and delete the file.

You boot into Safe mode by pushing F8 and selecting the Safe Mode.

Yeah, I don't know where the file is, but I've done all the virus scans in safe mode and AVG still finds it, but can't do anything with it. I know enough about comps to know that you need to turn off system restore, go into safe mode and then do the scans. So, right now I'm waiting on that website to get back to me, but I have found out that it's a virus that changes its name everytime you reboot your computer. I've also posted a hijackthis log at motherboards.org to see if they can help me. I don't want to turn off my computer before someone from there or elsewhere gets back to me though because the file name will change making my hijackthis log null and void.

Anyway, thanks for the tips and help, all of you. BTW, I think it came from a game site that my son visited and downloaded from as it was not on my computer one day, but the next day, after he downloaded something from there, the virus showed up.

[Iceaxe]

BTW, I think it came from a game site

So is that what they call a site with lots of pictures of naked ladies? :lol8:

[Wasatch Rebel]

So is that what they call a site with lots of pictures of naked ladies? :lol8:

That's what some call it. I try to avoid it like the plague--too tempting. :nod: