New Virut variant: No way to wipe out completely?

[Nocturnal]

Has anyone seen the new variant of Virut that is on the prowl infect the MBR to the point of a clean install being infected as well? I haven't personally. Each time I've reinstalled Windows I've rescanned and done several different things to ensure it isn't still there.

I'm hearing otherwise from another group I'm a part of. Any ideas?

 

[StormSide]

Looks like it has been around for more than a year ....

https://forums2.symantec.com/t...r-MBR/ba-p/305374#A180

 

[Nocturnal]

Yes, Virut has been around for quite some time but there is a new variant of Virut, something along the lines of Virut.x (not entire sure of the entire name) but it has recently surfaced about a month or two ago.

 

[balloonshark]

Nocturnal,

If you feel like reading a bit. http://forum.avast.com/index.php?topic=42709.0

I only read the first page, but it's a nasty ah heck. I'm not sure about the mbr thing, but then again folks could be reinfecting themselves again as they rebuild their systems by using media that has been infected prior.

 

[Nocturnal]

Yes, apparently these folks that were discussing it forget that many people use thumb drives. Spyware/viruses these days are often times looking for any removable media and in doing so, infecting them. This causes havoc. You clean the system, they use the machine again, bam, infected again once they put in their thumb drives with autorun on.

 

[balloonshark]

Here's a little more info from a forum that I'm a member of (under a different user name). http://www.wilderssecurity.com/showthread.php?t=234153