Downloaded virus, and I've tried everything to get rid of it.

[p0tluck84]

I downloaded a virus about a month and 1/2 ago. As soon as I opened the program I got a bsod " irqL_not_not_less_then_or_equal_to" then my laptop turned off. I tried to reformat before I tried to get rid of the virus. It did not work I had to restore using system Image. Obvious now that was the wrong thing to do. Well It got rid of the bsod's, but now I cannot run any kind of bootdisk because it will turn off about the middle of whatever I'm running. I've tried reformatting with win7 bootdisk, spotmau's bootdisk "Partition wipe, disk wipe", killdisk, hitachi disk fitness test disk. I've also ran scanners ; AVG anti-virus, Avira antivirus(which was what I was running and also scanned the program before opening it with avira.), Gmer, Sophos anti-rootkit, kaspersky anti virus scanner, mbr check, tdss killer, etc..... hah....just about everything I could download... And found nothing. So I've still got something screwing me up but none of these programs can find it... Possibly buried it after trying to format and using sytem image. Since it wont let me do anything with the boot disks is that in Would it be coming from MBR? Any help is very appriciated.

 

[Golden]

Hi,

That does sound MBR related. You need to try and scan prior to Windows loadup. To do that please follow these steps:

1. Download and burn the F-Secure ISO file to a CD using something like IMGBURN.
2. Turn on your PC, then enter the BIOS before it has a chance to load the Windows OS.
3. In the BIOS, make sure the CD/DVD drive is first in the boot sequence.
4. Insert the F-Secure bootable CD into the CD/DVD drive, and boot the PC.

The PC will now boot using Linux. F-Secure will then update its anti-malware database (ensure you leave your ethernet cable plugged into your router/modem). Follow the prompts to do a scan of your system - it may take quite some time.

Make a note of the malware that it finds, and post the names here as we may need to do some additional work depending on what it finds.

Note that if some critical system files are infected, F-Secure deletes them, and your system may not be bootable. In this case, you will need to do a clean Windows install, preferable after a secure wipe of the hard disk. Make sure any critical data is backed before scanning.

Regards,
Golden

 

[ICIT2LOL]

Hiyya potluck

Think you'd better change your username first mate doesn't look good eh?

Seriously I had similar problems about a year ago and was going loopy loo and although I am no great expert - have you considered a factory default?? Cured mine - twice as I didn't have my security set properly.

While I am on it what is your ISS or have you got a mix of stuff?? You didn't mention MBAM, HiJack this, either - try those?

If you could find the name of the rottten thing you perhaps download it to VirusTotal VirusTotal - Free Online Virus, Malware and URL Scanner

Other than that ?new HDD and complete reinstall?

Like I said no expert but worth a try as it is you have nothing to lose eh?

 

[Jacee]

I had to restore using system Image

That may be the source of your problem

 

[p0tluck84]

Hello Golden and thanks for the reply. I will try that , But I've been having problems loading ANY boot cds. Although since it will be linux it MIGHT help. If it doesn't erase anything "Malware or Virus" a clean reinstall will be useless. As when I run my rescue cd from win 7 to restore factory defaults, whatever I downloaded is making it to where It turns my computer off midway. Thanks and I will try and let you know.


Jacee- The system image I used came from my sister-In-laws computer which is the same exact computer as this one. But I do think I might have buried that thing in my harddrive somewhere , and thats why nothing is picking it up.

ICit2lol- I have used MBAM and Hijack this and had numerous people look at my logs. No scanning program I've downloaded (which is about 15) has found any kind of malicious software. I cannot find the program I downloaded because I tried to format computer right after I knew I had the virus and it erased it "Or part of it". Then I restored with system image. I cannot remember where I downloaded that thing either so. Im out of luck kinda like my name implies

 

[TCG]

As when I run my rescue cd from win 7 to restore factory defaults, whatever I downloaded is making it to where It turns my computer off midway.

Are you saying that your machine is randomly turning off while on a fresh install/restore of windows? Is it actually turning off or is it rebooting the computer?

 

[brady]

save critical data and reformat

 

[Jacee]

save critical data and reformat

Best advice

 

[p0tluck84]

TCG- Well now it wont even let me get to the restore part. When I click the option to restore my computer to factory defaults it tells me "cannot find image path M:\images\d2d\.*swm" <-- Im pretty sure thats the path... Thats where I'm at now. Before When I could get into the format process It would run to about half way and then my computer would completly turn off...Anything that I run that has to do with scanning my harddrive for errors like the hitachi drive fitness test, formatting,partition wiping, disk wiping, or anything else it will run for alittle while or not long at all then shut down...I cannot install fresh...Maybe the virus I got messed me up that bad and will have to get new HDD like ICit2lol said. I'm trying everything possible to avoid that..I've found some decent priced HDD , But most are expensive...

 

[Golden]

Mmm....sounds like your recovery partition might be stuffed. If thats the case, it will be extremely difficult to fo a factory reset. It might be time to consider purchasing a retail copy of Windows 7...

Did you try the bootable F-Secure option?

 

[p0tluck84]

Not yet but I'm downloading it now. If recovery partition is messed up will retail win 7 most likely fix it? Any other options you can think of.

 

[Golden]

Hi,

A retail Windows 7 completely replaces the OEM on your disk - there is no need for an OEM once you have the retail Windows 7.

Regards,
Golden

 

[Jacee]

You can create a system rescue CD SystemRescueCd
This will help you get your files off that computer.

Or, you can make a bootable anti-virus rescue CD using one of these .ISO files
FREE Bootable AntiVirus Rescue CDs Download List

Be sure to burn at a slow speed to ensure a good burn.

 

[p0tluck84]

I ran F-secure MBR scan last night and I woke up and my comp was off...:/ errrr.... So I guess my next step will be new win7...Thanks for everyones help I dont know when I will have it, but It will be either this weekend or next...Will post back then...Thanks again

 

[seth500]

save critical data and reformat

Best advice

If you can use KillDisk it will set the algorithm to 3 passes of wiping the drive to make sure all data is destoyed, it would take a while. Do it from the MBR not from the Partition....

 

[Britton30]

Hi p0tluck84,
If you have Norton or want to buy it, there is a dowloadable Norton Boot Recovery Tool (NBRT) that has saved a couple of friends computers for me. It runs before boot and has cleaned some nasty malware up for me. It does take quite a bit longer to run than a normal scan.

 

[ICIT2LOL]

Hmmm

Have to agree with Jaycee the system image if you think about it logically would have to have the problem in it eh?

Again what is your ISS - did you try a factory default - and there is always CCleaners drive wipe if you need to go that far, mind you and remember I am no expert I'd be inclined to take out the old HDD and put a new one in and renistall your OS - thats of course if the wretched thing's not into anywhere else I suppose!

Do you need all this grief??

 

[Golden]

I ran F-secure MBR scan last night and I woke up and my comp was off...:/

Yep, thats unusual to say the least. A fresh install is required - can you give us more detail about your hardware?

 

[jimbo45]

Hi there
I'm of the old school that still thinks that if for whatever reason you have got a Virus on your machine only a COMPLETE FRESH re-install or a restore of a known CLEAN w7 image will do.

As NO program can guarantee 100% protection against Virus infections -- most people accept this -- then why do they assume that a Virus removal program can be 100% effective too. As Dr Spock in the original Startrek series (still IMO the best series ever) said it's just not logical.

I certainly would NEVER trust a computer that had been infected with a Virus where the same Virus was removed by a program running on the INFECTED windows system itself.

Remember that after you HAVE detected a Virus then you are using an INFECTED OS to make repairs --totally illogical and IMO not a satisfactory solution either.

Just bite the bullet and either CLEAN W7 install or restore a CLEAN known safe image from a backup.

Cheers
jimbo

 

[ICIT2LOL]

Agreed jimbo

Hi there
I'm of the old school that still thinks that if for whatever reason you have got a Virus on your machine only a COMPLETE FRESH re-install or a restore of a known CLEAN w7 image will do.

As NO program can guarantee 100% protection against Virus infections -- most people accept this -- then why do they assume that a Virus removal program can be 100% effective too. As Dr Spock in the original Startrek series (still IMO the best series ever) said it's just not logical.

I certainly would NEVER trust a computer that had been infected with a Virus where the same Virus was removed by a program running on the INFECTED windows system itself.

Remember that after you HAVE detected a Virus then you are using an INFECTED OS to make repairs --totally illogical and IMO not a satisfactory solution either.

Just bite the bullet and either CLEAN W7 install or restore a CLEAN known safe image from a backup.

Cheers
jimbo

As I said in mine wipe , factory default, replace the HDD and / or the OS - hell how do you know it's not jammed / embedded itself in the RAM / chipset, your system images / back ups or other component as well - could be anywhere what would you do then??

Sorry OP fo the pessimisim but we all know now there are really devious buggas out there now.

One only has to look at the exploits of Assange and Co - not to mention the crim elements. It's a sad fact of life though eh?

Anyway good luck - I'm not terribly savvy but havebeen through what you have before wising up to the infinite number of ways that these pondlives use.