1. This forum is in read-only mode.

Virus keep returning even after I deleted it

Discussion in 'Non-Emulation Help' started by Sedna, Sep 7, 2009.

Thread Status:
Not open for further replies.
  1. Sedna

    Sedna Member

    Once upon a time, I was surfing for some pretty illegal stuff and downloaded a virus. This virus wrecked my mIRC, Media Converter SA, and crashed my computer everytime I connect to the internet. So, I reinstalled my Windows XP. Complete reinstall. Everything went well for an hour, and then, it returned, it a brutal manner.

    I downloaded MalwareBytes before my internet crashed and ran a system scan. Lo and behold, look how many viruses it picked up.

    http://i307.photobucket.com/albums/nn313/Seloloving/1.png
    http://i307.photobucket.com/albums/nn313/Seloloving/2.png
    http://i307.photobucket.com/albums/nn313/Seloloving/3.png

    Even after I removed them, they return on the next bootup to harass me.

    So, yeah, please, I need help. I am using Windows Service Pack Two and can't update to 3 due to some...*cough* matters.
     
  2. meganova

    meganova Well-Known Member

    o_O
    That looks like suicide?I think..

    Your antivirus?
     
  3. Sedna

    Sedna Member

    No it is not kitty porn if that is what you have in mind. :p

    Sorry, I don't get your question?
     
  4. meganova

    meganova Well-Known Member

    [​IMG]
    [​IMG]
    [​IMG]

    o_O
    That's looks serious..
    Have you tried to Format it?(i mean the option where it takes a long time to format. )
    ;D
     
  5. Sedna

    Sedna Member

    Um...what do you mean, I have already formatted my computer.
     
  6. mds64

    mds64 Well-Known Member

    Your kiding-it survived a reformat?

    Was it a total re-format as in everything wiped clean-it's the only way...
     
  7. Sedna

    Sedna Member

    Yes it was total, everything went.
     
  8. Hypr

    Hypr Well-Known Member

    Sedna, turn off System Restore. (Control Panel -> System -> System Restore tab)

    Then, reboot into Safe Mode and run a full-scan on your computer again. That should prevent the virus from activating on startup, in which it duplicates itself elsewhere on your harddrive, usually in the System Restore.

    I don't like the looks of this problem myself...

    Also, log on to another computer which is clean and has internet access so that you can contact us here. While the computer is in Safe Mode, it won't be able to access the internet at all, unless you choose to enable Network (which I don't recommend in situations like this.)
     
  9. mr.nintendo

    mr.nintendo Well-Known Member

    Trojan is a virus that recopies and recopies itself an your computer and takes unnecessary space but i didn't know that it also crashes your pc
     
  10. mds64

    mds64 Well-Known Member

    They can do alot these days...
     
  11. TirithRR

    TirithRR Well-Known Member

    System Restore probably won't help. Infact, many viruses copy itself into the system restore files to survive normal deleting, since windows is not allowed to delete system restore files. So once removed through normal means, the virus is safely hidden in system restore, waiting to repopulate itself once you reboot.

    As far as surviving a format... if it really did, then the virus is either on your local network or in what ever programs you install after your OS. If you didn't format correctly, and instead just reinstalled your OS over your existing install, then the virus was never deleted to being with.

    What anti-virus and anti-spy/malware programs do you have?

    Get a temporary file cleaner like CCleaner.
    Run it and delete all of your temporary internet and program files.
    (You don't really need to do this... but it can't hurt).

    Start with Spybot S&D and AVG Free.
    Run both scans, one after the other, letting them fix the issues.
    Then right click on "My Computer".
    Click Properties.
    Click the "System Restore" tab.
    Mark the Checkbox next to "Turn off System Restore"

    Don't worry about this. Due to the wide spread virus infection, it is likely that all your system restore points are infected anyway, even if not because they were made when it was infected, but just because the virus planted itself in them.

    Once you hit apply, all your system restore points will be deleted.
    Reboot your computer
    Run AVG and Spybot S&D again to see if it comes up with anything.
    If not, you are probably lucky and in the clear. Test out a few things and see if the virus still exists.

    If it does still exist, then you'll probably want to bring out the big guns like Malwarebytes Anti Malware.
     
  12. Loonylion

    Loonylion Administrator Staff Member

    A virus cannot survive a format unless it is on a drive other than the one you format. Most likely you reinstalled the pirate software that gave you the virus in the first place.
     
  13. mr.nintendo

    mr.nintendo Well-Known Member

    maybe it has copied itself to the boot sector of your harddrive
     
  14. Hypr

    Hypr Well-Known Member

    Wait!

    Sedna, does your harddrive have a backup partition on it? Make sure to scan that!

    Also, how exactly did you reinstall Windows XP? Was it from the disc or from the recovery partition?
     
  15. Fragata

    Fragata Well-Known Member

    It might be something that you installed, like do you keep all your drivers on a flash and then stick that in? Because it could be that...
     
  16. snebbers

    snebbers Well-Known Member

    That's true, as some Viruses are known to copy to external hardware to lay dorment, such as CDs and Removable disk Drives.
     
  17. theunderling

    theunderling Well-Known Member

    Maybe he could post his "Hijack This" log LOL.
     
  18. TirithRR

    TirithRR Well-Known Member

    Do not post Hijack This logs...
     
  19. anandjones

    anandjones Well-Known Member

    Is this the Windows Security Suite? I got infected with that a few days ago; also used MalwareBytes to remove it. Are you referencing to some sort of guide?
     
  20. Sedna

    Sedna Member

    Have tried this before I posted this thread. Did not work, thanks though. :)

    I did as you said, downloaded AVG and scanned the computer, it registered over 3000 viruses/spyware/crap. I then removed them, HOWEVER, it corrupted my system and I had to reinstall Windows again, however, when I return, the virus seems to be gone, but still, something called services.exe and svchost.exe is still running, I am pretty sure they are viruses, but how can I check? I don't want to risk running AVG again.
     
Thread Status:
Not open for further replies.