Overclock.net › Forums › Software, Programming and Coding › Networking & Security › How can I get rid of this nasty virus?
New Posts  All Forums:Forum Nav:

How can I get rid of this nasty virus? - Page 6

post #51 of 85
Quote:
Originally Posted by Shoulin View Post
You aren't understanding me, if you take a HDD from ANOTHER computer and hook it up to yours to fix the one from the OTHER computer, it won't infect yours. If the other HDD was infected in another computer, it can't openly infect yours if you just hook it up externally. That's almost like hooking up an MP3 player to your computer, it won't do anything.

Now if you have a second HDD, yea it can infect that one, that is another scenario entirely. But we are saying hooking up the infected HDD to another computer that isn't infected externally. If he does that to run scans on it, the infected HDD is more or less just attached as free weight at that point and can't do anything but accept the scans.
No I dont think you understood what I was saying.

Does Hard drives have firmware?
Does the O/S query the hard drive device driver that queries the added hard drive firmware?
Gunslinger
(13 items)
 
  
CPUMotherboardGraphicsRAM
1090 MSI 890FXA GD70 5870 Corsair 
Hard DriveOSMonitorPower
C300 Windows I-INC Thermaltake 850 
Case
HAF 932 
  hide details  
Reply
Gunslinger
(13 items)
 
  
CPUMotherboardGraphicsRAM
1090 MSI 890FXA GD70 5870 Corsair 
Hard DriveOSMonitorPower
C300 Windows I-INC Thermaltake 850 
Case
HAF 932 
  hide details  
Reply
post #52 of 85
Quote:
Originally Posted by Wheezo View Post
Isn't TDSS Killer made to remove rootkits?

I've never used it, but maybe give it a go.

[url]
That is a good program, has removed some rootkits that nothing else could ever remove on some computers at my work.
3930k
(20 items)
 
  
Reply
3930k
(20 items)
 
  
Reply
post #53 of 85
Quote:
Originally Posted by Kmon View Post
No I dont think you understood what I was saying.

Does Hard drives have firmware?
Does the O/S query the hard drive device driver that queries the added hard drive firmware?
They do but the OS doesn't touch them unless you run a bat file that requires it to, which is usually not done unless you are out of windows and running from a USB drive.
    
CPUMotherboardGraphicsRAM
Core i7 3930k @ 4.75GHz (1.32v) ASUS Rampage IV Extreme EVGA 980 GTX 4x8Gb Corsair Vengeance DDR3-2133 
Hard DriveHard DriveCoolingOS
Kingston HyperX 3K, OCZ Vertex 3 120Gb Barracuda 2tb, 2x WD Black 4Tb Corsair H105 2x SP120 QE | 3x SP140 QE  Windows 10 Home 64-bit 
MonitorKeyboardPowerCase
Dual 27" BenQ IPS 1440p Corsair K70  Corsair AX860i Corsair Carbide Air 540 
MouseMouse PadAudio
Logitech G502 Razer Vespula Creative Sound Blaster Z 
  hide details  
Reply
    
CPUMotherboardGraphicsRAM
Core i7 3930k @ 4.75GHz (1.32v) ASUS Rampage IV Extreme EVGA 980 GTX 4x8Gb Corsair Vengeance DDR3-2133 
Hard DriveHard DriveCoolingOS
Kingston HyperX 3K, OCZ Vertex 3 120Gb Barracuda 2tb, 2x WD Black 4Tb Corsair H105 2x SP120 QE | 3x SP140 QE  Windows 10 Home 64-bit 
MonitorKeyboardPowerCase
Dual 27" BenQ IPS 1440p Corsair K70  Corsair AX860i Corsair Carbide Air 540 
MouseMouse PadAudio
Logitech G502 Razer Vespula Creative Sound Blaster Z 
  hide details  
Reply
post #54 of 85
Run....Kasperky TDSS Killer, It will remove rootkit.

Or

FIX MBR Command and re-write Bootloader


Then Run Norton Power Eraser with rootkit scan or Hitman Pro.

Then Use C-cleaner, Clear your temp files and fix reg errors

Then run a Full scan of your favorite AV Scanner.


(I remove Malware ALL Day at work)
Edited by Bigo1087 - 8/5/11 at 8:55pm
Daily Driver
(18 items)
 
  
CPUMotherboardGraphicsGraphics
Intel Core i7 3930K ASUS RAMPAGE EXTREME IV PNY GTX 470  PNY GTX 470  
RAMHard DriveHard DriveOptical Drive
1GGB (3 x4GB) Corsair Dominator GT 2300 MHZ Corsair Force GT  Western Digital Caviar Black  LG BD-ROM 
CoolingCoolingCoolingOS
Corsair H100 CPU AIO ARCTIC COOLING Accelero XTREME Plus II  ARCTIC COOLING Accelero XTREME Plus II  Windows 7 Ultimate 64 bit 
MonitorPowerCaseMouse
Dell U2711 Corsair AX1200 Coolermaster HAF 932 Black Edition Logitech G9X 
Mouse PadAudio
Roketfish Gaming Pad AUDIO ENGINE A5+ 2 
  hide details  
Reply
Daily Driver
(18 items)
 
  
CPUMotherboardGraphicsGraphics
Intel Core i7 3930K ASUS RAMPAGE EXTREME IV PNY GTX 470  PNY GTX 470  
RAMHard DriveHard DriveOptical Drive
1GGB (3 x4GB) Corsair Dominator GT 2300 MHZ Corsair Force GT  Western Digital Caviar Black  LG BD-ROM 
CoolingCoolingCoolingOS
Corsair H100 CPU AIO ARCTIC COOLING Accelero XTREME Plus II  ARCTIC COOLING Accelero XTREME Plus II  Windows 7 Ultimate 64 bit 
MonitorPowerCaseMouse
Dell U2711 Corsair AX1200 Coolermaster HAF 932 Black Edition Logitech G9X 
Mouse PadAudio
Roketfish Gaming Pad AUDIO ENGINE A5+ 2 
  hide details  
Reply
post #55 of 85
You can use win2flash to install windows xp from a usb.

Sent from my Nexus S using Tapatalk
Changeable
(13 items)
 
  
CPUMotherboardGraphicsRAM
Phenom X2 555BE 3.2GHz Gigabyte 870A-UD3 Sapphire Radeon HD 4670 A-Data 4GB 
Hard DriveOSMonitorPower
Samsung Spinpoint F3 1TB Windows 7 Acer 1080p Seasonic X650 
CaseMouse
NZXT Beta Evo Logitech G500 
  hide details  
Reply
Changeable
(13 items)
 
  
CPUMotherboardGraphicsRAM
Phenom X2 555BE 3.2GHz Gigabyte 870A-UD3 Sapphire Radeon HD 4670 A-Data 4GB 
Hard DriveOSMonitorPower
Samsung Spinpoint F3 1TB Windows 7 Acer 1080p Seasonic X650 
CaseMouse
NZXT Beta Evo Logitech G500 
  hide details  
Reply
post #56 of 85
Quote:
Originally Posted by ezveedub View Post
If it doesn't work, its because the AV software doesn't have the virus definition. That's generally with fresh new viruses, but most are recognized within a week or so.

In most cases, I have saved the OS system, but if the PC was booted up several times and used with the virus on it, it will start to destroy data, making the installed OS unrepairable.
Most anti-virus software detected rootkit via behavior analysis and not thru a signature. Signatures are way too easy to defeat. A little bit of encryption and code obfuscation works too well.
Gunslinger
(13 items)
 
  
CPUMotherboardGraphicsRAM
1090 MSI 890FXA GD70 5870 Corsair 
Hard DriveOSMonitorPower
C300 Windows I-INC Thermaltake 850 
Case
HAF 932 
  hide details  
Reply
Gunslinger
(13 items)
 
  
CPUMotherboardGraphicsRAM
1090 MSI 890FXA GD70 5870 Corsair 
Hard DriveOSMonitorPower
C300 Windows I-INC Thermaltake 850 
Case
HAF 932 
  hide details  
Reply
post #57 of 85
Quote:
Originally Posted by Bigo1087 View Post
Run....Kasperky TDSS Killer, It will remove rootkit.

Or

FIX MBR Command and re-write Bootloader


Then Run Norton Power Eraser with rootkit scan or Hitman Pro.

Then Use C-cleaner, Clear your temp files and fix reg errors

Then run a Full scan of your favorite AV Scanner.


(I remove Malware ALL Day at work)
Okay but I know a few rootkits the steps above will not work.
Gunslinger
(13 items)
 
  
CPUMotherboardGraphicsRAM
1090 MSI 890FXA GD70 5870 Corsair 
Hard DriveOSMonitorPower
C300 Windows I-INC Thermaltake 850 
Case
HAF 932 
  hide details  
Reply
Gunslinger
(13 items)
 
  
CPUMotherboardGraphicsRAM
1090 MSI 890FXA GD70 5870 Corsair 
Hard DriveOSMonitorPower
C300 Windows I-INC Thermaltake 850 
Case
HAF 932 
  hide details  
Reply
post #58 of 85
Quote:
Originally Posted by Kmon View Post
Okay but I know a few rootkits the steps above will not work.
Interesting.....Care to elaborate....?

Also BTW....

at work I normally run TDSS in Physical Enviorment (PE mode) mode outside of windows...
Edited by Bigo1087 - 8/5/11 at 9:05pm
Daily Driver
(18 items)
 
  
CPUMotherboardGraphicsGraphics
Intel Core i7 3930K ASUS RAMPAGE EXTREME IV PNY GTX 470  PNY GTX 470  
RAMHard DriveHard DriveOptical Drive
1GGB (3 x4GB) Corsair Dominator GT 2300 MHZ Corsair Force GT  Western Digital Caviar Black  LG BD-ROM 
CoolingCoolingCoolingOS
Corsair H100 CPU AIO ARCTIC COOLING Accelero XTREME Plus II  ARCTIC COOLING Accelero XTREME Plus II  Windows 7 Ultimate 64 bit 
MonitorPowerCaseMouse
Dell U2711 Corsair AX1200 Coolermaster HAF 932 Black Edition Logitech G9X 
Mouse PadAudio
Roketfish Gaming Pad AUDIO ENGINE A5+ 2 
  hide details  
Reply
Daily Driver
(18 items)
 
  
CPUMotherboardGraphicsGraphics
Intel Core i7 3930K ASUS RAMPAGE EXTREME IV PNY GTX 470  PNY GTX 470  
RAMHard DriveHard DriveOptical Drive
1GGB (3 x4GB) Corsair Dominator GT 2300 MHZ Corsair Force GT  Western Digital Caviar Black  LG BD-ROM 
CoolingCoolingCoolingOS
Corsair H100 CPU AIO ARCTIC COOLING Accelero XTREME Plus II  ARCTIC COOLING Accelero XTREME Plus II  Windows 7 Ultimate 64 bit 
MonitorPowerCaseMouse
Dell U2711 Corsair AX1200 Coolermaster HAF 932 Black Edition Logitech G9X 
Mouse PadAudio
Roketfish Gaming Pad AUDIO ENGINE A5+ 2 
  hide details  
Reply
post #59 of 85
Quote:
Originally Posted by Shoulin View Post
They do but the OS doesn't touch them unless you run a bat file that requires it to, which is usually not done unless you are out of windows and running from a USB drive.
I dont think so, the BIOS will query the firmware to identify the attached drives that is why they show up in BIOS. Once the firmware is queried it opens a threat vector.
Gunslinger
(13 items)
 
  
CPUMotherboardGraphicsRAM
1090 MSI 890FXA GD70 5870 Corsair 
Hard DriveOSMonitorPower
C300 Windows I-INC Thermaltake 850 
Case
HAF 932 
  hide details  
Reply
Gunslinger
(13 items)
 
  
CPUMotherboardGraphicsRAM
1090 MSI 890FXA GD70 5870 Corsair 
Hard DriveOSMonitorPower
C300 Windows I-INC Thermaltake 850 
Case
HAF 932 
  hide details  
Reply
post #60 of 85
there is a program called "ComboFix" that will clean your computer out better than any other AV out there.
Bender
(18 items)
 
  
CPUMotherboardGraphicsGraphics
Core i5-2500k @ 4.6Ghz Gigabyte Z68X-UD3H-B3 Sapphire AMD R9 290X Tri-X (1050/1300mhz)  EVGA GeForce GTX 1080 (How do you OC?) 
RAMHard DriveHard DriveOS
8GB 1600Mhz OCZ Vertex 3 240GB SSD OCZ Vertex 3 240GB SSD windows 10 64bit 
MonitorKeyboardPowerCase
Asus MG279Q Logitech G510  Corsair TX750 CM II 690 Advanced 
MouseMouse PadAudioAudio
CM Sentinel Advance  some big corsair one beyerdynamic DT 770 Pro 250 Ohm SoundBlaster Z Soundcard 
  hide details  
Reply
Bender
(18 items)
 
  
CPUMotherboardGraphicsGraphics
Core i5-2500k @ 4.6Ghz Gigabyte Z68X-UD3H-B3 Sapphire AMD R9 290X Tri-X (1050/1300mhz)  EVGA GeForce GTX 1080 (How do you OC?) 
RAMHard DriveHard DriveOS
8GB 1600Mhz OCZ Vertex 3 240GB SSD OCZ Vertex 3 240GB SSD windows 10 64bit 
MonitorKeyboardPowerCase
Asus MG279Q Logitech G510  Corsair TX750 CM II 690 Advanced 
MouseMouse PadAudioAudio
CM Sentinel Advance  some big corsair one beyerdynamic DT 770 Pro 250 Ohm SoundBlaster Z Soundcard 
  hide details  
Reply
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Networking & Security
Overclock.net › Forums › Software, Programming and Coding › Networking & Security › How can I get rid of this nasty virus?