Possible virus/malware on a Windows 7 PC - need advice

Greyish99 · 27 Jun 2012

Hi,

I have a desktop computer running Windows Home Premium 64 bit, with 12 gb memory and plenty of disk, 2 x Nvidia Geforce 560 Gtx TI. Its been running just fine since it was new like 8 months ago. This weekend i moved, and upon using the PC for the first time in my new flat, it started to act up, with these symptoms:

- Cannot start Spotify - cursor hangs, and then i get the "not responding"
- Cannot set the computer to an earlier point, just hangs "not responding"
- I can use Internet Explorer to surf the net, but its sluggish
- Copy/paste often hangs
- Some options in controlpanel dont work, just get "not responding"
- i have tried to scan with Avast, which is the Av i use, stops at the same spot early in the scan. I have tried Avira Control Center, the scan hangs after a while. I have tried Malwarebytes antimalware, soon as i click it, it just tries to start it seems, cursors spins a little, then goes calm. If i look under processes, i can see the mbam.exe *32 run, but nothing happens. Last i tried the Microsoft Security Scanner, it starts up, scans up to 98%, then just sits there.

I am no computerexpert, but it seems to be some sort of virus, because all the normal actions you would take to fix a computer, has been blocked.

Now, is there a way out of this other than scratching the harddrive, and i also have 2 external drives attached to this PC, do they all need to be scratched/formatted?

Avast has not warned me about any viruses far as i can remember.

Any help would be appreciated :)

Oyvind,
Norway

Hanna 1 · 28 Jun 2012

Welcome to the forum
Try to download WDO on a clean machine from this site and read about it:

What is Windows Defender Offline?
Then in safe mode run MBAM and see what happens if you are sure that your computer is infected.

Golden · 28 Jun 2012

Welcome Oyvind,

This may not be malware, but rather a system files issue brought on th by the move (perhaps a bump etc.). Please try the following:

1. Click the Start Orb
2. In the Search box, type cmd
3. Right-click on cmd.exe when it appears in the list, and choose 'Run as administrator'
4. In the console window that opens, type sfc /scannow and hit enter.

Copy & paste the results here in your next reply.

Regards,
Golden

Greyish99 · 28 Jun 2012

Hi,

Golden: My computer runs Norwegian, so i just try and translate what the screens say. It looks like nothing bad was found, it says something like this:

Control 100% completed
Windows resourceprotection did not find any integrity violations.

I have downloaded WDO on another clean Windows 7 PC. I have read the instructions, that tells me to goto the dir where the file is, its called mssstool64.exe. When i doubleclick it, it starts, but doesnt seem to do anything. Instructions tell me to insert a recordable CD or DVD, then doubleclick the MSSS_Media.iso file, but mine isnt called that. Then it says that it will automatically open a burner program. (I have Nero) None of that happens. To make a bootable CD i guess i need that iso file to burn, but when i click to download the WDO, i only get the .exe file, which doesnt seem to do anything.

Need some more assistance i guess

Update: I used my portable PC, and managed to create a CD, also created a second one. I then put it one into the infected PC, and one into another PC i have. Both booted from the CD after hitting a key when prompted. The infected PC now shows a grey screen with a blue window saying "Windows defender Offline", but have been doing that for 1,5 hours now, not showing me the screen where i can choose the type of scan i want. On the other PC, after like 20 minutes with the "Windows defener Offline screen", it showed me the screen where i chose full scan, and has now gone through more than a million files.

So, i see no heavy disk activity on the possibly infected PC, why doesnt it show me the screen where i can actually start the scan? Hmm, im kinda lost here, since the PC booted from the CD, can a virus really preventing the WDo from running properly?

Oyvind
Norway

Golden · 29 Jun 2012

Greyish99 said:

Control 100% completed
Windows resourceprotection did not find any integrity violations

Hi,

Thats OK, it means there aren't any system file corruptions, so we can rule that out.

I still doubt that there is a malware problem, but I think its good to persist with a scan none-the-less. If you still have issues with WDO, I recommend running the ESET online scanner from this link:

ESET :: Get a FREE Online Virus Scan

Regards,
Golden

Greyish99 · 29 Jun 2012

Hi,

I just tried the ESET online scanner, but the scan never really starts, the popup window just sits there at 0%, doing nothing.

The WDO i have gotten to start once, but it said it needed updates, so it started downloading but just before the end, it halted and never continued. I tried a USB, it boots from it, but never pops the scanwindow, im at my wits end here atm.

Golden · 29 Jun 2012

Hi,

OK, whew. Lets try the BitDefender scanner.

Download this USB installer tool, and then run it:

Universal USB Installer – Easy as 1 2 3 | USB Pen Drive Linux

From the pull-down list select 'Bitdefender Rescue CD' and then download the ISO from the link. Select the ISO once it is downloaded, and then select the USB drive you want to install it to (note the USB drive will be formatted). See image below.

Possible virus/malware on a Windows 7 PC - need advice-capture.jpg

1. Boot directly from the USB drive.

2. Bitdefender will load (note the splash screen stays on the screen for quite a few minutes and it looks like nothing is happening, but just leave it).

3. After a few minutes, BitDefender will update its definitions from the web (make sure the internet cable is plugged into the computer) and then scan your system. This will take several hours.

4. A summary of the scan will be displayed once it is finished.

Regards,
Golden

Greyish99 · 29 Jun 2012

Hi,

i was a bit confused when i saw the Linux images

Well, so far it downloaded the virus definitions, and now just started scanning. Its 1 am here so i am going to bed, but hopefully in a few hours it will have found something. I take it that it has some sort of clean/quarantine function?

Thanks for all the help so far, its appreciated.

Oyvind
Norway

Golden · 29 Jun 2012

Hi,

It will clean anything it finds automatically, and show that in the summary results.

Regards,
Golden

Greyish99 · 30 Jun 2012

Hi,

The scan came back clean, it said no threaths found. I was actually hoping it would find something, so i could be done with this. One thing that started to happen at the same time as this, is that the computer wont shut down or restart properly. It just hangs on the "shutting down" screen, and never actually shuts down or restarts, i have to push the power button. Yesterday, there was a Windows update that was trying to install, it said installing 1 our of 1, do not turn off the computer... But, in the end i had to, because it never shuts down.

Im not sure how accurate the bitdefender is, since it didnt find anything, can i assume that i dont have a malware/trojan/virus, or is it more complex than that? I can format the hardrive and reinstall Win 7, but thats the last solution, but getting close to it i guess.

Oyvind
Norway