Virus remains after formatting (bis)

Page 2 of 2 FirstFirst 12

  1. Posts : 4
    Windows 7
    Thread Starter
       #11

    samuria said:
    How do you know you have a virus?
    Me said:
    I also burned on DVD the tool I use to detect the virus.
    So I run this tool after the installation. Funny fact, this tool (called ZHP Diag/Cleaner > don't laugh, I trust it, it was the only one to detect my problem and I think my host file being rewritten with ads -among other stuff- is a fair proof it wasn't me being paranoid with a bad tool) detect those viruses only after I change my language setting for non unicode programs to japanese (that's how I usually set my computer).

    samuria said:
    Is it now connected to the internet?
    I said I turned my router and every computer in my home off while I was doing this whole process (from booting my PC to after I run my tool to check for viruses). I didn't connect anything apart from the DVD I burned from a computer which was just recently bought, in another unrelated house. I don't see what I can do for you to believe my network is not related to my problem...

    samuria said:
    Then OP mentioned on not to install drivers, again thinking the virus is on the drivers.
    I never said the viruses were on the drivers...
    But like I am not skilled enough, I turned off my router and so on, so even if MS install drivers or not is not relevant to my problem.

    RoasterMen said:
    Maybe the OS you are trying to install comes with a virus?
    Me said:
    I must add based on this old thread that my windows DVD is supposed to be clean. I dled it with the help of the Microsoft Windows and Office ISO Download Tool which was recommended by How to Geek. Even if it was infected, I don't think there is a single chance it was infected by the exact same virus.
      My Computer


  2. Posts : 117
    Windows 7 Home Premium 64bit
       #12

    Does the Clean All command write zeros to the boot sector? Maybe try to clean the drive with DBAN. Disconnect all other hard drives from your PC if you try this.

    Do you have a spare hard drive? Try changing out the infected hard drive with the spare. Disconnect all other hard drives in your PC, disconnect from your network and the internet. Do a clean install, change your language settings, and check for the virus. If the virus is present, it has to be in your Windows 7 installation media. The first thing I would do is download a new Windows 7 ISO file and check the SHA1, it has to match Microsoft's SHA1 exactly.

    The only problem with this test is you might end up with two infected hard drives.

    I never had to change the language. Do you have to install anything? If you do, maybe the language pack is infected?

    Keep us updated if you find a solution.
      My Computer


  3. Posts : 117
    Windows 7 Home Premium 64bit
       #13

    Another thing I woul do before I went on the Internet is change my DNS settings. Change it to use Google's public DNS server.

    Preferred is 8.8.8.8

    Alternate is. 8.8.4.4
      My Computer


  4. Posts : 10,485
    W7 Pro SP1 64bit
       #14

    Pizz said:
    I didn't connect anything apart from the DVD I burned from a computer which was just recently bought, in another unrelated house.
    Visit that house again (or use a computer that you hope is clean) to create bootable discs with offline* scanners.

    *offline, as in the operating system being scanned is not running during the scan.

    You can scan the drive after the diskpart > clean all step (prior to installing any OS).

    You can scan it again after installing the OS and again after installing the stuff needed to get online.


    Pick one or all three:

    https://support.microsoft.com/en-us/...-protect-my-pc

    How to create a Bitdefender Rescue CD

    https://www.f-secure.com/en/web/labs_global/rescue-cd

    Take a picture of what the scanners find and post the image(s) to this thread. That way, we know the name of the infection that you are dealing with.
      My Computer


  5. Posts : 3,784
    win 8 32 bit
       #15

    What was written to the Host file and was there any other virus we need s name it tells us what we are dealing with
      My Computer


  6. Posts : 708
    Windows 7 x64
       #16

    samuria said:
    What was written to the Host file and was there any other virus we need s name it tells us what we are dealing with
    I would think that OP may do have a serious "DNS and a browser hijackers".
    What i am to say is i am not internet /virus geek, so do correct if i am wrong.

    This is where the issue which OP cannot identify which one and how many.

    We usually do have some fixed bookmarks to certain websites, which i do.
    When i click on the bookmark to visit that particular website, it went thru another IP Address in name, with a lot of unknown characters.
    This may be common.

    From this point, some of the OP websites links may had been changed, as not easily recognized and unable to authentic it as correct or not.

    I hope that this theory is not correct.

    Thanks for reading.

    Eric.
      My Computer


 
Page 2 of 2 FirstFirst 12

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 10:53.
Find Us