Latest Virus



Virus.Win32.Virut.q is a generic detection for the W32/Virut family of polymorphic, entry point obscuring (EPO) file infectors with IRC bot functionality.Aliases as virus.win32.virut.q (Kaspersky) W32.Virut.U (Symantec)
is a generic detection for the W32/Virut family of polymorphic, entry point obscuring (EPO) file infectors with IRC bot functionality.
It appends to the end of the last section of executable (PE) files an encrypted copy of its code. The decryptor is polymorphic and can be located either:
- Immediately before the encrypted code at the end of the last section
- At the end of the code section of the infected host in ’slack-space’ (assuming there is any)
- At the original entry point of the host (overwriting the original host code)
The decryptor will either receive control directly or an API call within the host code body will be overwritten to point to it (EPO technique). In all cases where host code is overwritten by the virus the original bytes are stored within the encrypted virus body, and are restored before transfering control back to the host.

Tags: Virus.Win32.Virut.q

Need help? Post you problem on Free Malware Remove Help forum

Virus.Win32.Virut.q Summary

Virus Name:Virus.Win32.Virut.q

Detected By:Kaspersky antivirus program

Virus Virus.Win32.Virut.q Detected times:236481times

Virus.Win32.Virut.q Overall Risk:Medium 736482

Virus.Win32.Virut.q file size:3664820 bytes

Virus.Win32.Virut.qwas first Detected by Kaspersky on Friday, September 5th, 2008 , 7:20 am,Virus.Win32.Virut.q is a new threats of Hacking,Malware,Spam,worm.

Remove Virus.Win32.Virut.q instruction:

1.Temporarily Disable System Restore;2.Reboot computer in SafeMode;3.delte Virus.Win32.Virut.q virus files and kill Virus.Win32.Virut.q file task process(if have);4.Delete/Modify any values added to the registry by Virus.Win32.Virut.q ;5.delete IE temp files,restart the computer and run a whole scan with Kaspersky. Virus.Win32.Virut.q virus files as following: