Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Virus remains after formatting

24 Jul 2012   #1
fralo

 
 
Virus remains after formatting

Hi all,

Upon running MalwareBytes it reports that I have "Trojan.DNSChanger". The log says quarantined successfully and then requires reboot. Next time I run it, though, and it's still there.

So I decided to reformat and reinstall OS. I'm never had to do this before but am certain I did it correctly, having watched a youtube tutorial. I booted from my CD, highlighted the partition, clicked "delete". It then says 'unallocated space' as expected. I proceed with the install. But upon completion, the trojan remains!

In normal mode, I keep getting repetitious messages appearing on the taskbar saying something like 'malwarebytes: stopped outgoing message (svchost.exe).

I'm quite the novice, so any help you could provide is greatly appreciated.

Thank you.


My System SpecsSystem Spec
.
24 Jul 2012   #2
DustSailor

Microsoft Windows 8.1 Pro 64-bit
 
 

Try this out for a reinstall: SSD / HDD : Optimize for Windows Reinstallation

Whenever it says to "clean all", do it, not just a "clean", as in:
Quote:
Now type clean all <enter> you will get a blinking cursor telling you that clean all is working like in the second snip down, just relax and let it work.
NOTE: You could type clean instead to do the same thing quicker, but just without a secure erase.


Let me know how it goes.

Tutorial Credit:
Bare Foot Kid
My System SpecsSystem Spec
24 Jul 2012   #3
dwarfer66

 

What are you reinstalling after the Win install?
My System SpecsSystem Spec
.

24 Jul 2012   #4
DustSailor

Microsoft Windows 8.1 Pro 64-bit
 
 

Quote   Quote: Originally Posted by dwarfer66 View Post
What are you reinstalling after the Win install?
Dwarfer makes a good point, make sure you aren't downloading anything until you have an antivirus installed
My System SpecsSystem Spec
24 Jul 2012   #5
karlsnooks

MS Windows 7 Ultimate SP1 64-bit
 
 

fralo,
After carrying out the instructions given by Dust Sailor then:

1. Install immediately MSE (Microsoft Security Essentials). Use the link in my signature.

2. Fully and completely update your Win 7.

3. Make a system image backup using Windows Backup and Restore to an external USB drive. This is so that you can reinstall a known good system in case you immediately reinfect yourself which shouldn't happen if you have carried out Step 1.

Here is the link to the tutorial for a system image backup:Backup Complete Computer - Create an Image Backup
My System SpecsSystem Spec
24 Jul 2012   #6
fralo

 
 

Okay, I followed the instructions to no avail. But here's what I did step by step.

1) Booted from WINDOWS 7 CD.
2) At language screen, hit shift/f10 to go cmd prompt
3) diskpart
4) list disk
5) select disk 0
6) clean all
7) exit
8) exit

Now back at the install screen, I made it to the listing of partitions. Selected disk 0 (unallocated space).

After install, trojan remains.

It also affects the screen when booting up. There are different colors, checked background. Before it actually gets to the Starting Windows logo, there are a bunch of "aa" scattered across the screen.

Thank you all for your help thus far. I may have to just get a new hard drive.
My System SpecsSystem Spec
24 Jul 2012   #7
karlsnooks

MS Windows 7 Ultimate SP1 64-bit
 
 

and where did you get this windows 7 "cd"?
My System SpecsSystem Spec
24 Jul 2012   #8
karlsnooks

MS Windows 7 Ultimate SP1 64-bit
 
 

Incidentally,
I guarantee you that if you performed a CLEAN ALL, then no virus survived.

This means you infected the system after the clean all.

The clean all writes zeroes to each and every byte on your hard disk.
My System SpecsSystem Spec
24 Jul 2012   #9
Kevin Ismail

Windows 7 Ultimate x64
 
 

Hi Fralo.

Just another question. Do you have multiple partition? (C:, D:. E:, etc)
If yes, then it most likely the viruses or malwares reside in any drives other than C: drive.
As we always aware, when windows done installing, it then initially search for any other drives, read it, and lettering it. But it also will read a folder named "System Volume Information" on each drive. The problem is most of recent viruses and malwares reside inside those system protected folders and manipulate windows to read and execute them.

My suggestion is before reinstalling windows try to delete any files or folder inside "System Volume Information" on each drive. It sometime can be reached using bootable linux system.

Hope that helps a little.

Kevin

Edit: You have to know the folder also has some saved automatic or manual system restore data. When deleted, it will loss. But with newly installed windows, you might not need it anyway.
My System SpecsSystem Spec
24 Jul 2012   #10
karlsnooks

MS Windows 7 Ultimate SP1 64-bit
 
 

kevin,
Clean ALL will take care of that if they are all on the same physical drive.

If he has multiple physical hard drives, then the other drives should be physically removed.
After Win 7 is installed, then running WDO over all hard drives will be a necessity.
My System SpecsSystem Spec
Reply

 Virus remains after formatting




Thread Tools




Similar help and support threads
Thread Forum
USB drive formatting back to FAT32 after formatting to NTFS
Last night, I tried to transfer a video file as I've done dozens of times. It didn't work. I tried a second time and realized it was because the file was more than 4GB which FAT32 USB drives will not accept. I successfully formatted the new USB drive to NTFS. My question is can I convert it...
Hardware & Devices
Virus "Please update your internet explorer" even after formatting
Hi! I'm having problems with a virus : everytime i enter in a site(for example "google.it") i get an "error"(virus) wich says "Please update your internet explorer"; it doesn't matter wich browser i use(explorer,chrome,etc) or wich search engine(google,bing,etc). So i decided to reset the router...
System Security
Keep getting infected with virus even after formatting pc
Hello. I am having a pretty serious issue with a virus that keeps re-infecting my pc even after I format and reinstall Windows. I will try to provide as much detail as possible about my situation. I have been dealing with this repeated infection for quite some time now and have tried a few...
System Security
Windows 7 clean reinstall but virus(?) remains-- help
Did a clean reinstall of Win7 to remove a virus(?) couldn't detect any virus with lots of anti-virus apps. 'Virus' - behavior: automatically ran strings of dashes (-------------) endlessly in search boxes; opened successive copies of emails as quickly as I could close them in email program;...
System Security
7 Is on,but Vista remains
Hi all-haven't posted lately because I haven't broken anything in quite some time.Anyway,I threw a copy of 7 on a lappy running Vista,and after the dog and pony show of drivers and Acer crapware,it's running pretty darn good on 1 Gig of Ram.Problem is,the install didn't delete everything from the...
Installation & Setup
Desktop Remains Frozen,Help!
Hi, My desktop remains frozen after i turn my pc on...initially everythings fine but after half an hour or so the desktop freezes,i cant click on an icon, nor can i right click on an empty area. It gets really frustrating as i have to access the files placed on my desktop by opening my computer...
BSOD Help and Support


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 17:21.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App