Overclock.net › Forums › Software, Programming and Coding › Operating Systems › Windows › I have a horrible virus - no clue what to do
New Posts  All Forums:Forum Nav:

I have a horrible virus - no clue what to do - Page 6

post #51 of 67
Thread Starter 
Thanks for your advice Fullinator. Once Avira AntiVir finishes scanning (so far hasn't found anything), I'll follow your advice. I'm beginning to think it might be nested on one of my drives somewhere.

EDIT - One thing I've noticed is that using KillDisk leaves me with a message at the end of the wipe that says: "Bad signature in sector 0 on 80h"

I've tried using DBAN instead but the latest release isn't working for me and the release before that won't let me use my keyboard to select anything.

EDIT #2 - Managed to get DBAN to work. I unplugged all hard drives besides the boot drive and it's chugging along right now.
I've unplugged all peripherals besides my mouse and keyboard, which I actually switched out. My mouse has been acting strange for the past few months (always needs to be unplugged and plugged back in for it to work, multiple times a day). My mouse has a storage bank for gaming profiles, so who knows.. perhaps a virus could hide in that? Figured I'd unplug it to be safe.

EDIT #3 - Spoke too soon with DBAN. It will run for a few hours, but will inevitably fail. I've tried it twice. Gonna go back to using killdisk.
Edited by EmeraldICE - 6/19/11 at 3:41pm
NEW BUILD!!!!
(19 items)
 
  
CPUMotherboardGraphicsHard Drive
i7 2600k / 4.5ghz @ 1.32v Asus P8Z68-V PRO/GEN3 EVGA GTX 560 Ti Crucial m4 
Hard DriveHard DriveOptical DriveCooling
WD Black WD Black LG Bluray Reader Corsair H60 
OSMonitorKeyboardPower
W7 Pro x64 Acer H233H G15 Corsair HX750 
CaseMouseAudioOther
HAF X - Blue Edition G500 X-Fi Elite Pro nMediaPC LCD 
Other
Rosewill 74-in-1 card reader 
  hide details  
Reply
NEW BUILD!!!!
(19 items)
 
  
CPUMotherboardGraphicsHard Drive
i7 2600k / 4.5ghz @ 1.32v Asus P8Z68-V PRO/GEN3 EVGA GTX 560 Ti Crucial m4 
Hard DriveHard DriveOptical DriveCooling
WD Black WD Black LG Bluray Reader Corsair H60 
OSMonitorKeyboardPower
W7 Pro x64 Acer H233H G15 Corsair HX750 
CaseMouseAudioOther
HAF X - Blue Edition G500 X-Fi Elite Pro nMediaPC LCD 
Other
Rosewill 74-in-1 card reader 
  hide details  
Reply
post #52 of 67
Thread Starter 
I am absolutely fed up with this machine.
After the most recent DBAN failure, I turned off the computer to put in the killdisk DVD, and now my keyboard won't work; none of my keyboards will.
I can't get into BIOS, and when killdisk loads, I can't change any options. My mouse doesn't light up anymore either.

I'm about to just chuck this thing out the window.
NEW BUILD!!!!
(19 items)
 
  
CPUMotherboardGraphicsHard Drive
i7 2600k / 4.5ghz @ 1.32v Asus P8Z68-V PRO/GEN3 EVGA GTX 560 Ti Crucial m4 
Hard DriveHard DriveOptical DriveCooling
WD Black WD Black LG Bluray Reader Corsair H60 
OSMonitorKeyboardPower
W7 Pro x64 Acer H233H G15 Corsair HX750 
CaseMouseAudioOther
HAF X - Blue Edition G500 X-Fi Elite Pro nMediaPC LCD 
Other
Rosewill 74-in-1 card reader 
  hide details  
Reply
NEW BUILD!!!!
(19 items)
 
  
CPUMotherboardGraphicsHard Drive
i7 2600k / 4.5ghz @ 1.32v Asus P8Z68-V PRO/GEN3 EVGA GTX 560 Ti Crucial m4 
Hard DriveHard DriveOptical DriveCooling
WD Black WD Black LG Bluray Reader Corsair H60 
OSMonitorKeyboardPower
W7 Pro x64 Acer H233H G15 Corsair HX750 
CaseMouseAudioOther
HAF X - Blue Edition G500 X-Fi Elite Pro nMediaPC LCD 
Other
Rosewill 74-in-1 card reader 
  hide details  
Reply
post #53 of 67
Quote:
Originally Posted by EmeraldICE View Post
I am absolutely fed up with this machine.
After the most recent DBAN failure, I turned off the computer to put in the killdisk DVD, and now my keyboard won't work; none of my keyboards will.
I can't get into BIOS, and when killdisk loads, I can't change any options. My mouse doesn't light up anymore either.

I'm about to just chuck this thing out the window.
 
ThinkPad W510
(12 items)
 
The Arkbird
(14 items)
 
CPUGraphicsRAMHard Drive
i7 3840QM Quadro K2000M 4x8gb Intel 525 Series 240gb mSATA 
Optical DriveCoolingOSMonitor
Tray-load DVD Factory Windows 7 Pro 1080P "Ultrasharp" panel 
KeyboardPowerCase
Integrated Big 'ol brick M4700 chassis 
CPUMotherboardGraphicsRAM
i7 820QM 4318-CTO Quadro FX 880M 4x4gb 
Hard DriveOptical DriveCoolingOS
X-25M G2 DVD Stock Arch x64 
MonitorKeyboardPowerMouse
1080P touch screen IPS Clicky Brick Adapter UltraNav 
CPUMotherboardGraphicsRAM
4x Xeon E7440s HP DL580 G3 Motherboard Rev. 1.1 ATi Rage XL Samsung ECC DDR2 
Hard DriveOptical DriveCoolingOS
15K HP Ultra320 SCSI DVD Burner Bare Heatsinks + Chassis Airflow The Ever-Changing Distro... 
MonitorPowerCase
Only For Diagnostics.. 2x1300w (Redundant, Delta OEM) HP 4U Rackmount 
  hide details  
Reply
 
ThinkPad W510
(12 items)
 
The Arkbird
(14 items)
 
CPUGraphicsRAMHard Drive
i7 3840QM Quadro K2000M 4x8gb Intel 525 Series 240gb mSATA 
Optical DriveCoolingOSMonitor
Tray-load DVD Factory Windows 7 Pro 1080P "Ultrasharp" panel 
KeyboardPowerCase
Integrated Big 'ol brick M4700 chassis 
CPUMotherboardGraphicsRAM
i7 820QM 4318-CTO Quadro FX 880M 4x4gb 
Hard DriveOptical DriveCoolingOS
X-25M G2 DVD Stock Arch x64 
MonitorKeyboardPowerMouse
1080P touch screen IPS Clicky Brick Adapter UltraNav 
CPUMotherboardGraphicsRAM
4x Xeon E7440s HP DL580 G3 Motherboard Rev. 1.1 ATi Rage XL Samsung ECC DDR2 
Hard DriveOptical DriveCoolingOS
15K HP Ultra320 SCSI DVD Burner Bare Heatsinks + Chassis Airflow The Ever-Changing Distro... 
MonitorPowerCase
Only For Diagnostics.. 2x1300w (Redundant, Delta OEM) HP 4U Rackmount 
  hide details  
Reply
post #54 of 67
http://www.bleepingcomputer.com/comb...o-use-combofix

I am surprised at you OCN that noone's recommended he use this.
post #55 of 67
Thread Starter 
Alright, I managed to get the keyboard working again by clearing CMOS and unplugging/plugging it back in a million times.

Hey Kand, thanks for the tip, I actually ran that earlier this morning and the logs looked okay. It didn't find anything.
NEW BUILD!!!!
(19 items)
 
  
CPUMotherboardGraphicsHard Drive
i7 2600k / 4.5ghz @ 1.32v Asus P8Z68-V PRO/GEN3 EVGA GTX 560 Ti Crucial m4 
Hard DriveHard DriveOptical DriveCooling
WD Black WD Black LG Bluray Reader Corsair H60 
OSMonitorKeyboardPower
W7 Pro x64 Acer H233H G15 Corsair HX750 
CaseMouseAudioOther
HAF X - Blue Edition G500 X-Fi Elite Pro nMediaPC LCD 
Other
Rosewill 74-in-1 card reader 
  hide details  
Reply
NEW BUILD!!!!
(19 items)
 
  
CPUMotherboardGraphicsHard Drive
i7 2600k / 4.5ghz @ 1.32v Asus P8Z68-V PRO/GEN3 EVGA GTX 560 Ti Crucial m4 
Hard DriveHard DriveOptical DriveCooling
WD Black WD Black LG Bluray Reader Corsair H60 
OSMonitorKeyboardPower
W7 Pro x64 Acer H233H G15 Corsair HX750 
CaseMouseAudioOther
HAF X - Blue Edition G500 X-Fi Elite Pro nMediaPC LCD 
Other
Rosewill 74-in-1 card reader 
  hide details  
Reply
post #56 of 67
Quote:
Originally Posted by EmeraldICE View Post
Alright, I managed to get the keyboard working again by clearing CMOS and unplugging/plugging it back in a million times.

Hey Kand, thanks for the tip, I actually ran that earlier this morning and the logs looked okay. It didn't find anything.
It's time for a reinstall.
 
ThinkPad W510
(12 items)
 
The Arkbird
(14 items)
 
CPUGraphicsRAMHard Drive
i7 3840QM Quadro K2000M 4x8gb Intel 525 Series 240gb mSATA 
Optical DriveCoolingOSMonitor
Tray-load DVD Factory Windows 7 Pro 1080P "Ultrasharp" panel 
KeyboardPowerCase
Integrated Big 'ol brick M4700 chassis 
CPUMotherboardGraphicsRAM
i7 820QM 4318-CTO Quadro FX 880M 4x4gb 
Hard DriveOptical DriveCoolingOS
X-25M G2 DVD Stock Arch x64 
MonitorKeyboardPowerMouse
1080P touch screen IPS Clicky Brick Adapter UltraNav 
CPUMotherboardGraphicsRAM
4x Xeon E7440s HP DL580 G3 Motherboard Rev. 1.1 ATi Rage XL Samsung ECC DDR2 
Hard DriveOptical DriveCoolingOS
15K HP Ultra320 SCSI DVD Burner Bare Heatsinks + Chassis Airflow The Ever-Changing Distro... 
MonitorPowerCase
Only For Diagnostics.. 2x1300w (Redundant, Delta OEM) HP 4U Rackmount 
  hide details  
Reply
 
ThinkPad W510
(12 items)
 
The Arkbird
(14 items)
 
CPUGraphicsRAMHard Drive
i7 3840QM Quadro K2000M 4x8gb Intel 525 Series 240gb mSATA 
Optical DriveCoolingOSMonitor
Tray-load DVD Factory Windows 7 Pro 1080P "Ultrasharp" panel 
KeyboardPowerCase
Integrated Big 'ol brick M4700 chassis 
CPUMotherboardGraphicsRAM
i7 820QM 4318-CTO Quadro FX 880M 4x4gb 
Hard DriveOptical DriveCoolingOS
X-25M G2 DVD Stock Arch x64 
MonitorKeyboardPowerMouse
1080P touch screen IPS Clicky Brick Adapter UltraNav 
CPUMotherboardGraphicsRAM
4x Xeon E7440s HP DL580 G3 Motherboard Rev. 1.1 ATi Rage XL Samsung ECC DDR2 
Hard DriveOptical DriveCoolingOS
15K HP Ultra320 SCSI DVD Burner Bare Heatsinks + Chassis Airflow The Ever-Changing Distro... 
MonitorPowerCase
Only For Diagnostics.. 2x1300w (Redundant, Delta OEM) HP 4U Rackmount 
  hide details  
Reply
post #57 of 67
Quote:
Originally Posted by EmeraldICE View Post
OMG I SEE IT!

I checked msconfig and see the following:
Startup Item (all lowercase)------Manufacturer-------Command
java system update-----------------unknown----------%Temp%\\eumlm.exe
winupdate system-------------------unknown----------%Temp%\\icvcc.exe
windows updater--------------------unknown-----------%Temp%\\gaspci.exe
java checksys-----------------------unknown------------%Temp%\
tpmp.exe


I recognize these .exe's.
They are the ones that pop up first before the computer starts going haywire and triggers a bunch of other randomly named .exe's.

I feel like just deleting these won't help at all. Obviously it's installing itself from somewhere.

disable them and see if the problem persists.
Completely wipe your Temp folder
Patawic's Rig
(14 items)
 
  
CPUMotherboardGraphicsRAM
Thuban 1055T Gigabyte 880GMA-UD2H GIGABYTE GeForce GTX 460 1GB OC Corsair 4gb 1333mhz DDR3 
Hard DriveOptical DriveCoolingOS
Samsung F4 LG CH10LS20 Bluray CoolerMaster Hyper Z600 Windows 7 
MonitorKeyboardPowerCase
Dell P4211H x 2 Logitech G110 OCZ 750W Fatal1ty HAF 912 
  hide details  
Reply
Patawic's Rig
(14 items)
 
  
CPUMotherboardGraphicsRAM
Thuban 1055T Gigabyte 880GMA-UD2H GIGABYTE GeForce GTX 460 1GB OC Corsair 4gb 1333mhz DDR3 
Hard DriveOptical DriveCoolingOS
Samsung F4 LG CH10LS20 Bluray CoolerMaster Hyper Z600 Windows 7 
MonitorKeyboardPowerCase
Dell P4211H x 2 Logitech G110 OCZ 750W Fatal1ty HAF 912 
  hide details  
Reply
post #58 of 67
wow this is insane. I would say use a linux live disk if you can, hook up only one hard drive, zero out that hard drive, reset your bios, and then isntall windows on that single drive, see if the problem is still there.
post #59 of 67
Thread Starter 
Quote:
Originally Posted by thrasherht View Post
wow this is insane. I would say use a linux live disk if you can, hook up only one hard drive, zero out that hard drive, reset your bios, and then isntall windows on that single drive, see if the problem is still there.
Yeah, this is what I'm doing right now! Still got an hour left for zeroing the drive. Trying to narrow down where this thing is coming from.
NEW BUILD!!!!
(19 items)
 
  
CPUMotherboardGraphicsHard Drive
i7 2600k / 4.5ghz @ 1.32v Asus P8Z68-V PRO/GEN3 EVGA GTX 560 Ti Crucial m4 
Hard DriveHard DriveOptical DriveCooling
WD Black WD Black LG Bluray Reader Corsair H60 
OSMonitorKeyboardPower
W7 Pro x64 Acer H233H G15 Corsair HX750 
CaseMouseAudioOther
HAF X - Blue Edition G500 X-Fi Elite Pro nMediaPC LCD 
Other
Rosewill 74-in-1 card reader 
  hide details  
Reply
NEW BUILD!!!!
(19 items)
 
  
CPUMotherboardGraphicsHard Drive
i7 2600k / 4.5ghz @ 1.32v Asus P8Z68-V PRO/GEN3 EVGA GTX 560 Ti Crucial m4 
Hard DriveHard DriveOptical DriveCooling
WD Black WD Black LG Bluray Reader Corsair H60 
OSMonitorKeyboardPower
W7 Pro x64 Acer H233H G15 Corsair HX750 
CaseMouseAudioOther
HAF X - Blue Edition G500 X-Fi Elite Pro nMediaPC LCD 
Other
Rosewill 74-in-1 card reader 
  hide details  
Reply
post #60 of 67
Thread Starter 
Alright so I'm going to be following Fullinator's advice in an attempt to narrow down where this virus is hiding.

I've been thinking about just going ahead and getting a new computer (this one is four years old anyway), but I am now concerned about whether or not my data on those hard drives might be infected.
I have scanned them repeatedly with malwarebytes and kaspersky and nothing has come up infected, but this virus is insanely sneaky so I'm not sure if I can trust that.
How should I go about recovering the data or ensuring that it's virus-free?
IF I get a new computer, I'm a bit paranoid that I'll plug in an old hard drive and the virus will be spread again.

EDIT - Killdisk finished with no errors. I'm installing Windows right now with only one hard drive and one optical drive connected. Also, network has been disconnected. Gonna run like this for a while and see what happens.
Edited by EmeraldICE - 6/19/11 at 7:51pm
NEW BUILD!!!!
(19 items)
 
  
CPUMotherboardGraphicsHard Drive
i7 2600k / 4.5ghz @ 1.32v Asus P8Z68-V PRO/GEN3 EVGA GTX 560 Ti Crucial m4 
Hard DriveHard DriveOptical DriveCooling
WD Black WD Black LG Bluray Reader Corsair H60 
OSMonitorKeyboardPower
W7 Pro x64 Acer H233H G15 Corsair HX750 
CaseMouseAudioOther
HAF X - Blue Edition G500 X-Fi Elite Pro nMediaPC LCD 
Other
Rosewill 74-in-1 card reader 
  hide details  
Reply
NEW BUILD!!!!
(19 items)
 
  
CPUMotherboardGraphicsHard Drive
i7 2600k / 4.5ghz @ 1.32v Asus P8Z68-V PRO/GEN3 EVGA GTX 560 Ti Crucial m4 
Hard DriveHard DriveOptical DriveCooling
WD Black WD Black LG Bluray Reader Corsair H60 
OSMonitorKeyboardPower
W7 Pro x64 Acer H233H G15 Corsair HX750 
CaseMouseAudioOther
HAF X - Blue Edition G500 X-Fi Elite Pro nMediaPC LCD 
Other
Rosewill 74-in-1 card reader 
  hide details  
Reply
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Windows
Overclock.net › Forums › Software, Programming and Coding › Operating Systems › Windows › I have a horrible virus - no clue what to do