Just put a new copy of w7 pro on sisters laptop by phone. Just one quick question. Will a format of the drive get rid of it completely? Nod32 says its in the operating memory. Nothing is loaded on the computer so a format would not be a problem. Thanks for any advice. p.s. I told her to wait to go online because I had not finished installing Nod32. She didn't listen obviously!
Install https://www.malwarebytes.org/mwb-download/ and tell her to run a custom scan on the hard drive.
Hello and thanks for the help. Here is what I have done so far. I downloaded superantispyware and ran it. it missed the Trojan. I then sent her a copy of spyware hunter 4 paid copy. updated and ran it. It caught it an cleaned. On reboot it was back and nod32 caught it and cleaned it. But it still remained. It is in the operating memory. So rather then do a reg hack I thought a clean install would be best at this point . just want to make sure the clean install is all I need to do to get rid of it.
It should be all you need, I would use the diskpart clean command,
During installation, once the Languages screen opens, do this:
1. Press SHIFT+F10 - a cmd window will open
2. Type diskpart and hit enter
3. Type list disk and hit enter
4. Type select disk # and hit enter - # = the disk number you wish to clean/format
5. Type clean and hit enter
Once complete (its quick) close the Window and continue with installation.
Just out of curiosity what are you using for install media?
I'm using a cd I picked up for 68.00 w7 pro. I have not tried malwarebytes yet. My sister is at the wheel and she is not so savvy with computers. But I do like the diskpart Idea. Thanks everyone for the help. This is the best forum ever!! Your all super people! I will let you know how it goes.
Malwarebytes found it but after reboot it came right back. I'm going to go with derekimo's suggestion . Thanks to all of you! Larry D
Yeah, that's what I would do, specially since it's a recent install anyway.
I was asking about the install media in case you may have got a sketchy downloaded one but you should be good with the disc and the diskpart clean to wipe the drive.
You mention doing this over the phone, was the first install an upgrade or clean install?
The os came with the coa so it has to be liget right? Im on the phone with her now and she is having trouble getting it to boot from the rom. I walked her thru the bios to have it boot from the rom, but I do not know why it's not. Because I'm remote I cant access the bios. I just hope she didn't doo something wrong! Damn!! Im thinking about trying to remove it thru the reg? Is it possible?
Quote