General Explanation
Type: Virus
Degree of destruction: High
Prevalence: High
What is a Virus?
A computer virus such as Virut is a type of malware that is not capable of reproduction. viruses can infect all execution and accessible file in the system and generally infect .com, .exe, .dll expansions. Viruses are looking for not infected (host) files when executing and for their reproduction they need a host file to place their codes among the host file codes. Then the malicious code will be executed each time the program runs.
What is Virut malware?
Virut malware is a virus type. Virut is polymorphic and changes some sections of the goal file, leading the execution procedure to its code which is in the final part of the part. The virus infects the execution files and files will be distributed this way. This virus provides illegal access to the infected system by opening a backdoor and connecting it to an IRC server and allowing the remote attackers to enter the victim’s system also this virus is a basis for downloading malicious software on the victim’s system.
Technical Explanation
The malicious operation by the Virut virus
Virut injects its infected code into some systemic processes such as winlogen.exe and explorer.exe and hooks on Windows functions. This virus will infect execution files after executing. Also, digitally sign the files with a digital signature will be invalid after being infected (system32 systemic files can be checked)
Execution of this virus in the system will enhance the activity of the CPU.
This virus will infect the portable drives (Flash, External Hard, etc) and Share directories in the network.
How to deal with it and disinfect the system
Padvish Antivirus by having UMP capability which is a part of behavioral protection will prevent the system from being infected by the portable drives. Therefore, to prevent the system from being infected by any malware which is transferred by a portable drive such as Virut malware and it is recommended to install Padvish to protect your system.
If your system is infected by the Virut malware, act as follows:
- Install Padvish on your system
- Connect the portable drive to the system
- Scan the portable drive by Padvish to disinfect both the system and the portable drive.
Note: Choose to disinfect in the next boot to completely perform the disinfection, if it is not successful.