Help on LUDER.A worm removal

[angbebeko]

hello there, Im kind of a newbee around here. My problem is that I have run an antivirus software at my computer (AVG) and it detects a worm called LUDER.A, I have heal the infected files (around 800 files infected) but to no avail. Because of this I placed all the files in the virus vault. After restarting my computer, I cannot now log on to my PC. It logs off automatically everytime I try to start my computer.

Is there any way that I can still fix this? Or do I have to reformat and reinstall windows?

Your help will be very much appreciated.

Thanks in advance

[GTO]

Hi angbebeko. Welcome to the 2-Spyware.com forums!

If you have the genuine Windows installation CD, try repairing your system. Please follow these instructions from Microsoft.

[angbebeko]

I tried repairing windows like you adviced but I still can't logon to my pc. Its like nothing change, when I try to login I automatically logoff.

Any other advice?

[GTO]

Hi angbebeko.

Use a clean computer to download the HijackThis program. Unpack the downloaded file and copy its content (HijackThis.exe) to a floppy disk. Then start the infected system in Safe Mode. Insert a floppy with HijackThis. Now run a scan. After it's finished, post your HijackThis log here.

If you are not familiar with HijackThis, please read this tutorial.

[angbebeko]

Will I be able to run hijakthis in command prompt? I can't even logon in safe mode it still logs me off automatically

[angbebeko]

Well I just tried it and it does not work in command prompt, so I guess I will not be able to use this one.

Still need help in this one, I just wonder if my pc can be fixed without me reinstalling windows again.

[GTO]

Hi angbebeko.

Unfortunately, I cannot help you to repair your system without reinstalling. This is not because I refuse to help or do not know how to resolve this problem. The real reason is that I need a physical access to your computer in order to repair it. Unfortunately, it is impossible, and using the "trial and error" way here would be very difficult .

You should reinstall the system, or you can take your computer to your local technician.

Don't forget to backup all the important data first :!:

[angbebeko]

Its ok, I've already reinstalled windows and everything seems to be ok, although AVG detected a new worm in my pc afterwards but was able to clean my pc.

I have just one question, why is it that everytime I restart my computer the system32 folder always opens up?

[GTO]

Hi angbebeko.

Can be several reasons. But most probably this has something to do with that worm. Maybe its startup entries are still in the registry. This can also be a system bug. In such case the issue will be resolved after several restarts.