So a friend of mine sends over Daemon Tools via e-mail. Nifty little program that lets you mount ISO files onto a virtual drive. Problem is, the crypatapi.dll file that makes Daemon do what it does, had Win32/Virut (a nasty polymorphic extort virus) embedded into it. This little bugger patches winlogon.exe (bypassing windows firewall) and explorer.exe (allowing it to write code to the processes running, random EXE and SCR files, and the RAM). It also infects your System Restore. I had just installed Windows from a fresh format (so I hadnt’ installed any Anti-Virus apps yet) and had to format again. First thing I installed was AVG Anti-Virus & Spyware. It found 63 infections on my backup drive ALL *Virut* infections. Need to know how to heal with AVG and not Delete these files. I have a CSV file I can send to you should you want to look over the details.
Nevermind, since I have the CSV, I will delete the files and re-download them clean. Thanks though.