Solved Heat Damage or Virus?

[SevSaint]

I have been struggling with my HP Pavillion DV7 laptop for about 2 weeks. Over that course of time i have did a system recovery several times to no avail. I have tried many virus softwares and nothing.

What happens? At some time in point after windows loads up, could be hours of use or a few days, the computer starts to hang. Anything i click on it freezes and 2 minutes later finally something happens. Then after frustration i shut it down, by pressing on/off button, and when i restart the system will not boot. Not even in safe mode. It hangs even there!

I have monitored the heat using speed fan and the temp never reaches above 190F, but in the past it got hot and blue screened. Also note that my network card shuts off randomly and only by disabling it manually and re enabling it does it work again.

I think i have a boot sector virus that reinstalls itself in my system, but am totally unfamiliar with removing it other than using the fixmbr under the bootrec.exe in command prompt. Before i mess with that i wana make sure i know what i am doing and if it is the right method.
Also note my HP Pav has a recover partition that does the re installation of the OS. So if it is a boot sector virus wouldn't it be on my Partition drive and not my normal one? I am really lost right now and dont wana lose the computer.

 

[Jacee]

Have you checked the power supply?

 

[SevSaint]

the charge is 100 percent.... right now i can't even do a system recovery from my partition it keeps giving me an error.

 

[Jacee]

See if a different AC Adaptor causes the same problem.

 

[AddRAM]

You could have a bad hard drive.

You can either, order the recovery dvd`s , or reinstall windows yourself. But you should get any data you can off the hard drive before proceeding.

190F is pretty hot in my opinion.

 

[ICIT2LOL]

You could have a bad hard drive.

You can either, order the recovery dvd`s , or reinstall windows yourself. But you should get any data you can off the hard drive before proceeding.

190F is pretty hot in my opinion.

Agree AddRam the Tcase is 105C and this is running 88C way too hot for my liking and certainly for a laptop.
ARK | Intel® Core

 

[SevSaint]

ya its running hot and im sure its a lot of dust in there, going to blow it out and see if that helps on temp, but right now i can't even recover from the partition, i also did a f9 default on bios to see if it helped on boot but still long boot times.

Im letting the adapter cool off, been off for a day now, and seeing if i can reboot with no problems. If i can boot with cold pc, adapter than i know its a power issue. Otherwise im thinking its a virus.

 

[SevSaint]

small update, i finally got logged on the computer and am running in safe mode doing some diagnositcs with command prompt, checking mem, and scanning for missing system files. Also note i ran rkill and it terminated a local host with IP 127.0.0.0 local host. have no idea what thats about

 

[SevSaint]

ok ok.. sfc scannow reported several problem files.. but now the computer is back to its old self, long load times, will not shut down hardly.. going to try to find a friend with same adapter and see if it works.. is it safe to use the same voltage,amp etc.. or no.. what should i look for?

 

[ICIT2LOL]

Check out the Start tab in msconfig I just keep the security ticked everything else I untick.

Try this too it might save you a bit of time http://www.sevenforums.com/tutorials/11728-optimize-windows-7-a.html

Now if you need to run any more rootkit stuff there is this Best Free Rootkit Scanner and Remover

plus you could try thee too


http://www.superantispyware.com/

http://www.malwarebytes.org/products/malwarebytes_free/
http://www.bleepingcomputer.com/download/adwcleaner/

download from bleeping computer and just get rid of anything that comes up.

With the adaptor just make sure the volts are the same and it can supply the same current (amps - minimum what you have already) .

 

[SevSaint]

okay thanks for the link on the tdsskiller..
After scanning with it and modifying options i had a suspect tdss file and did some search to make sure if it was an infection. After searching i downloaded adwcleaner, an option posted by someone on bleeping computers to someone else, and it found several infections. I have avast and maleware and some how they missed it..

Any suggestions on my next step. I wana create a restore point after i know for sure im clean and then do a disk image backup. Ill do a disk cleanup before running my restore point to clean up the old, if any, restore points. BTW my restore point thingy was off, and i didn't turn it off. Another reason i think i am infected.

 

[ICIT2LOL]

okay thanks for the link on the tdsskiller..
After scanning with it and modifying options i had a suspect tdss file and did some search to make sure if it was an infection. After searching i downloaded adwcleaner, an option posted by someone on bleeping computers to someone else, and it found several infections. I have avast and maleware and some how they missed it..

Any suggestions on my next step. I wana create a restore point after i know for sure im clean and then do a disk image backup. Ill do a disk cleanup before running my restore point to clean up the old, if any, restore points. BTW my restore point thingy was off, and i didn't turn it off. Another reason i think i am infected.

Yep mate that was me on the previous post re ADW LOL!! and look no security is 100% foolproof not even the Kaspersky I use it is impossible because the malware has to be developed and put out before it can be recognised as such so that is why your security and mine is everyday constantly updating

Now to move on just how are you going to back it up? Myself I would do either a clone to a spare drive or am image but if you are infected it will pass over too but not to worry the drive can then be thoroughly scanned with whatever is needed.
The alternative is a clean install and just bring over the data you want from that drive.

For your disk clean up I don't know what you are using but most members use CCleaner it is good for a lot of other things too CCleaner - Download download from piriform and watch out for any ads there may be. If yo get stuck using it post back

For the imaging / cloning Macrium is good for doing both operations but use whatever you feel comfortable with
Macrium Reflect FREE Edition - Information and download and see this http://www.sevenforums.com/tutorials/73828-imaging-free-macrium.html very good tutorial and WHS is more than helpful.

Hna g in there mate we can get you out of this

 

[SevSaint]

should i scan some more.. and how do i know the tdss scanned by tdsskiller is an infection? i don't want to delete it untill i know for sure so i don't mess up my computer.
should i do some more scans with something else or anything?

 

[d00p98uy]

Do a scan with MalwareBytes Anti-Malware(MBAM) download the free version from the link below:
Malwarebytes : Malwarebytes Anti-Malware removes malware including viruses, spyware, worms and trojans, plus it protects your computer

Then a scan with MalwareBytes Anti-Rootkit(MBAR) from the link below:
Malwarebytes : Malwarebytes Anti-Rootkit

While that's going start VipreRescueScanner from here:
VIPRE Rescue - VIPRE Computer Recovery Solution

after those are done, do another scan with adwcleaner and post the log from C:\AdwCleaner

then as ICit2lol suggested, make sure to back up your data after we're in the clear

--tell us how it goes!

 

[ICIT2LOL]

Yep do as Red says the TDSS Killer you can remove the infection mate it is just about 100% correct I have yet to have any problems with it (TDSS) and I use Kaspersky as normal anyway it has never been out of whack.

If you want run the SAS and the ADW again and for more rootkit scans

Best Free Rootkit Scanner and Remover try some from here if you want.

 

[d00p98uy]

TDSS Killer you can remove the infection mate it is just about 100% correct

Actually, i thought that too until the other day when it came up with a false-positive (or false-negitive maybe? -- It thought a preinstalled sony app was a virus) on my mothers VIAO Computer, but, you can just post a screenshot or ask about the program if you are unsure

 

[ICIT2LOL]

Yep Red I suppose there is always a slip through never had problems as I said but hey it happens.

Sev those other rootkits remember you can always try those or Hitman Pro Home - SurfRight the 3.7 version.

 

[SevSaint]

okay thanks for the imput you guys are awesome.
i never deleted the tdss file that was deteced by tdss killer and now my laptop is back to its old self. going to rerun the tdss killer and remove the infected tdss file thingy.. then going to follow red fangs advice.. ill post back once i get through with all the scans!

 

[ICIT2LOL]

Ok mate I'll leave you with Red then.

 

[SevSaint]

oh my goodness im back at square one..
slowly the computer is getting worse. it was running fine after adwcleaner ran the first time.. i got on facebook, no bad sites or nothing then it started acting slow again.. the first major sign was a major error when i started up from avg.
then no restore points found, ran rkillx64 and it found changed values in registry. now its constantly slow.

I cant recover from my partition either. each time i hit f11 it takes me straight to windows startup. i am trying from disk, but the recovery option is totaly greyed out. this virus is major, major, major pain in the butt. I ran the following
hitman, adwcleaner, maleware root kit, tdsskiller, avg quick scan antispyware.
Mostly finding tracking cookies. adwcleaner logs states nothing just system specs and no threats.
I am totally lost with this problem.. Even safe mode with network is to slow to run anything