What is this virus ? - description inside

[redeyedbass]

Hi all,

A friend handed me a software (legit) under the ISO format.

What I usually do is mount these with Daemon Tools. This works great most of the time.

Except for this one. What happens is that, I start the setup.exe, shortly after, the system shuts down and reboots.

After that, the Windows installation is totally corrupt. I think it messes up the 100mb active partition, also corrupts ci.dll.

The system cannot be repaired at all.

If I restore an image (done with Windows' own image utility), no luck as the image does not have (it seems) the content of this crucial 100mb partition.

So you have to reinstall Windows, which recreates this 100mb part. and THEN restore the image.

Anyways, I tought this was Daemon Tools' SPTD fault as I heard bad things about it. So I uninstalled DT, extracted the ISO instead of mounting it, ran the setup.exe once again, then Action Center said "Windows has detected potentially harmful software" and BOOM reboot and same thing as mentionned above.

So it seems it's a virus, but I'd like to know if someone ever had this one and what is its name ? Malware Bytes did not detect anything and it's usually pretty good...

Thanks!

 

[Bill2]

Nobody can help you unless you tell us what exactly that software is.

BTW, such "legit" software from friends are usually cracked copies of commercial software. Even then, you must have ran the setup.exe despite windows' warning otherwise if you had cancelled you would have been fine.

Please stick to legit software that is either freeware or you have purchased yourself.

 

[richnrockville]

Hi all,

A friend handed me a software (legit) under the ISO format.

So it seems it's a virus, but I'd like to know if someone ever had this one and what is its name ? Malware Bytes did not detect anything and it's usually pretty good...

Thanks!

Welcome redeyebass to the windows 7 forums.

question. What was the software and how do you know it was legit?

Also, did you make a DVD/CD of the iso and then scan it with malwarebytes?

I don't believe that mwb can scan an .ISO to check for bad guys.

If you make the .iso into a dvd/cd then it can be checked with mwb.

Rich

 

[redeyedbass]

Guys, I'm not looking for help per se. I fixed the issue already.

I was just curious about the virus name and if anyone ever had it before.

I also had MWB scan the contents of the ISO once it was extracted to a directory.

The virus rebooted the computer before I could even completely read the Action Center's message.

 

[Golden]

Hi,

There is no way to tell which virus family your are referring to, let alone the name (there are too many variants out there). As Bill suggested, tell us what the program ISO was called, and that could be a clue we need to take a guess.

Regards,
Golden