Dr. Web Cureit seems to remove most of the infected files, without much hassle.
I'm scanning through my samba server (about 200GB of data) for the last 11 hours, using Dr. Web Live cd.

And i'm scanning the machines using dr web and mrt.
Seems to be effective.

Also i am forcing all users to use Firefox with NoScript and Thunderbird (i'm blocking IE and Outlook)

Hopefully that will work.


> Windows Malicious Removal Tool have detection for Virut Family (aka Vitro). Scan
> using MRT:
http://www.microsoft.com/dow> nloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en
>
> Malwarebytes' Anti-Malware should be able to detect that too:
> http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html
>
>
>
>

one can never destroy the power of evil