Solved VRTF.tmp Malware, automatically dwnlding from unknown server

Intel Extreme dx79si desktop motherboard...
April 15, 2012 at 03:17:05
Specs: Windows XP, 3.7 GHz / 1950 MB
Recently my computer was hit by a Malware named as "VRTF$.tmp". Whenever i tried to connect to internet it starts downloading files like VRT1.tmp, VRT2.tmp and so on..
I tried Malware bytes, Bit defender 2012 but no success received. Currently Running NORTON IS 2011 but in histroy list it shows a many no.s of blocked messages.
They are displayed as
´╗┐Category: Firewall - Activities
"Unused port blocking has blocked communications. Inbound TCP connection from 202.156.219.101, local service Port (36409) ."

See More: VRTF.tmp Malware, automatically dwnlding from unknown server

Report •


#1
April 15, 2012 at 07:32:45
✔ Best Answer
This virus tends to add an entry into the registry that directs to
C:\WINDOWS\TEMP\VRT1.EXE

suggested option switch over to safe mode
remove this file if found
C:\WINDOWS\TEMP\VRT1.EXE
then can I have you run hijackthis and post the log / send me a pm with a copy.
Should be able to remove it fairly easily for you this way.
Thanks for the log in advanced, hopefully we can get you up and running fairly easily.

mike


Report •

#2
April 15, 2012 at 17:38:07
Re #1.

The problem with using PM's to fix issues is that nobody else on the forum benefits. Logs can be posted right here as long as they have been requested. If you do go that way could you posts a summary of the processes used and the outcome please?

Always pop back and let us know the outcome - thanks


Report •

#3
April 16, 2012 at 08:16:45
I just wanted to give the option, some people are uncomphortable with posting logs. :) always better to have more minds on a solution than mine. However it looks like there may be no response to this one,yet at least

mike


Report •

Related Solutions

#4
April 16, 2012 at 11:07:26
'krazzykunal'
Try these 2 fully working trials and run them till they run clean
1- Trojan Remover
2- Hitman Pro
They may find and help you remove the problems you are having.

Some HELP in posting on Computing.net plus free progs and instructions 7 Golds


Report •

#5
April 16, 2012 at 11:57:12
mikelinus

No problem, just best to have the outcome on here. As you say, poster might not return anyway.

EDIT:
Glad to see we were wrong about that.

Always pop back and let us know the outcome - thanks


Report •

#6
April 16, 2012 at 18:26:48
thanks all for ur replies...
I was out of station so cant reply you guys...

@mikelinus I tried scan with norton , removes virus and restore the MBR.. all luks good..

Computing.net is the BEst site i hv ever Visited... It provides me Help When ever i Want..


A BIG THANKS AGAIN for u GUYS :)


Report •

#7
April 17, 2012 at 06:43:58
Thanks for the feed back, I am glad to hear that it was easily fixed.

mike


Report •

#8
November 9, 2012 at 08:16:30
i am facing vrtf.tmp n vrt1.exe n many anonymous exe's in my taskmanager which slow down every process, n uses high page file size too , i reduced pf size but, i tried formatting but it comes back again and again and again facing this problem since a year tried many virus-scanners, cleaned registries many times but no output
a solutions will be thankful as soon as possible

Report •

#9
November 9, 2012 at 10:02:00
Avatar rahulpahuja

It seems you have to clear the Master Boot Record.

The last input to this thread was in April, so few helpers will see your #8.

There is a possibility that mikelinus will return but it seems some detailed advice might have been given outside the forum. Otherwise it's best to start a new thread, but by all means give a link to this one.

Always pop back and let us know the outcome - thanks


Report •

Ask Question