Curse

bathazard · Aug 20, 2008, 10:34 AM // 10:34

My friend has a virus infected in his computer...
Details...
from what i know, his computer is pretty 'sweet' as some might say and so there should be no reason for random blue screens.

this is nothing compared to the other happenings...

He first noticed this when the virus started to delete certain files and adventually destroyed the files needed for logging on...
so he wiped his comp and started again, to find that this virus was in his back up files.

So were back at square one, it won't open task manager, so we can't see any strange processes that we could delete...

so anyone have any ideas?

Josh567 · Aug 20, 2008, 11:21 AM // 11:21

ohh i think i have tht 2. does it says when u cntrl+alt+del tht acsess it denied by administrator?

Evil Genius · Aug 20, 2008, 11:38 AM // 11:38

I think your going about the wrong way by hoping to see the process in task manager. I take it he has XP or Vista currently installed and thus is able to install more programs? If so:

Quote:

Installation Order

This process has been found to be the very best in eliminating and terminating infections. This process will also help to prevent infections from spreading as the infections are removed. You will also want to update each programs definitions/database if updates are available.

1. Install SpywareBlaster.
2. Install CCleaner.
3. Install RogueRemover Free.
4. Install SUPERAntiSpyware.
5. Install Malwarebytes Anti-Malware.
6. Install Spybot S&D.

Order of Operations

By following the directions listed below, you increase your chances for a fast reply on getting your HijackThis log and your computer cleaned.

Please follow these directions:

1. Boot your computer into Safe Mode by pressing F8 before the Windows logo screen on bootup.
2. Run SpywareBlaster.
3. Run CCleaner.
4. Scan for viruses with the Recommended Software and Online Virus Scanners.
5. Run RogueRemover Free.
6. Run SUPERAntiSpyware.
7. Run Malwarebytes Anti-Malware.
8. Run Spybot S&D.
At this point you should reboot your computer and run HijackThis to post a log on our forums.
9. Run HijackThis.
10. Run Windows Update.

Content taken from http://wiki.lunarsoft.net/wiki/PC_Cleanup under the Creative Commons Attribution-Noncommercial-No Derivative Works 3.0 Unported license.

zamial · Aug 20, 2008, 12:17 PM // 12:17

If you can not get into the machine it is time to format the drive and reinstall the operating system.

DarkGanni · Aug 20, 2008, 01:56 PM // 13:56

My suggestion would be reformat the pc a 2nd time, trash that CD and download everything you had on it.

I had a similar problem 3 years ago where I had this virus infecting all my executables after reinstalling windows it reappeared and discovered it was on a backup cd. I written down all the software I had on the cd on a piece of paper and started from fresh but I got rid of it and thats what really mattered to me.

- Ganni

Jwnz · Aug 20, 2008, 03:32 PM // 15:32

The Ctrl+Alt+Delete can be adjusted. I know I'm not saying much 'cause I don't know where to change the setting, but it can be enabled and disabled.
I'll see if I can find it.

Painbringer · Aug 20, 2008, 04:33 PM // 16:33

When he / she reformatted did they ensure the boot sequence was cd or dvd first?

Did you ensure it was reformat or just a copy of windows that was done on the first recovery.

Your quote

" adventually destroyed the files needed for logging on... "

Can you actually pull open windows or does it stall and nothing happens.