ENTIRE HDD Erased!

   Warning

Ok no more arguing or I'll start handing infractions out.

GEWB said:

Sounds like it is "hiding" in memory or in the MBR which is NOT affected by format commands unless specified to do so.

Regards,
GEWB

Spybot run from Safe Mode will actually restart to somehow get to whatever it detects hiding in the memory.

Very cool Worth one-milllllllllllion dollars.

Tepid said:

gregrocker said:

GEWB said:

Sounds like it is "hiding" in memory or in the MBR which is NOT affected by format commands unless specified to do so.

Regards,
GEWB

Spybot run from Safe Mode will actually restart to somehow get to whatever it detects hiding in the memory.

Very cool Worth one-milllllllllllion dollars.

Spybot is not just scanning memory, and I don't think (but don't know) if it even touches the MBR.

On restart, it takes over as soon as possible to scan the drive before any files can get locked and become in use, so what it finds it can delete.

I think all this is a moot point. The OP is reinfecting the system himself. It's not "hiding" somewhere.

After reading through about 80% of the recommendations here it would appear that the OP is a little hard headed or just doesn't get the big picture.

Now I realize he is doing all he can to save all his information, albeit at this point it is only causing him problems, hence, the files are corrupted; so he needs to bit the bullet and start over. This is a lesson learned as to the necessity of backing up your files, keep UAC active, and ensure you have a good AV installed and activated.

In fact this "Thread should be used to demonstrate the importance of backing up your system, and ensuring that all your files should be placed on some form of external media."

Zidance24, yes you may add, that is great advice.

The irony is that after I low leveled formatted, (all my data and projects are now on my MacOS X partition/installation) I installed W7 again, I installed everything that I usually install, UAC, turned down to minimum, AVG Free Antivirus, and the system is TROUBLE FREE, it s been a week now ..... I am going to keep it there for a few weeks there and see if it gets infected or smt...

something doesnt seem quite right here.

the only way I know a computer can get affected whilst its idle is if there is a remote exploit through open network ports. So the question is, is this a machine behind NAT? if not get that firewall enabled on the router.

In such a scenario UAC may not save the user.

Generally speaking this is the ideal scenario.

PC behind a NAT or firewall enabled router.
Run as limited user account.
Enable software restriction policy.
Scan http/email/IM traffic for viruses.
Restrict activex
Install a security hosts file
Use an adblocker, as a side affect they tend to block various drive by viruses.
Restrict flash, even IE8 can now have the feature to enable flash per website.
Install spywareblaster
If possible use firefox, opera or chrome instead of IE but not necessary if done all the other stuff anyway.

In such a configuration the machine would very unlikely get a successful infection.