Virus alert Please HELP!

bathazard

bathazard

Krytan Explorer

Join Date: Jul 2006

W/

My friend has a virus infected in his computer...
Details...
from what i know, his computer is pretty 'sweet' as some might say and so there should be no reason for random blue screens.

this is nothing compared to the other happenings...

He first noticed this when the virus started to delete certain files and adventually destroyed the files needed for logging on...
so he wiped his comp and started again, to find that this virus was in his back up files.

So were back at square one, it won't open task manager, so we can't see any strange processes that we could delete...

so anyone have any ideas?

Josh567

Pre-Searing Cadet

Join Date: Jan 2008

Ross

Assassins Of The World {GODZ}

E/

ohh i think i have tht 2. does it says when u cntrl+alt+del tht acsess it denied by administrator?

Evil Genius

Evil Genius

Lion's Arch Merchant

Join Date: Dec 2006

Australia

Mo/

I think your going about the wrong way by hoping to see the process in task manager. I take it he has XP or Vista currently installed and thus is able to install more programs? If so:

Quote:
Installation Order

This process has been found to be the very best in eliminating and terminating infections. This process will also help to prevent infections from spreading as the infections are removed. You will also want to update each programs definitions/database if updates are available.

1. Install SpywareBlaster.
2. Install CCleaner.
3. Install RogueRemover Free.
4. Install SUPERAntiSpyware.
5. Install Malwarebytes Anti-Malware.
6. Install Spybot S&D.

Order of Operations

By following the directions listed below, you increase your chances for a fast reply on getting your HijackThis log and your computer cleaned.

Please follow these directions:

1. Boot your computer into Safe Mode by pressing F8 before the Windows logo screen on bootup.
2. Run SpywareBlaster.
3. Run CCleaner.
4. Scan for viruses with the Recommended Software and Online Virus Scanners.
5. Run RogueRemover Free.
6. Run SUPERAntiSpyware.
7. Run Malwarebytes Anti-Malware.
8. Run Spybot S&D.
At this point you should reboot your computer and run HijackThis to post a log on our forums.
9. Run HijackThis.
10. Run Windows Update.
Content taken from http://wiki.lunarsoft.net/wiki/PC_Cleanup under the Creative Commons Attribution-Noncommercial-No Derivative Works 3.0 Unported license.

zamial

zamial

Site Contributor

Join Date: Apr 2006

Usa

TKC

N/

If you can not get into the machine it is time to format the drive and reinstall the operating system.

DarkGanni

DarkGanni

Forge Runner

Join Date: Mar 2006

Malta

[CuTe]

E/

My suggestion would be reformat the pc a 2nd time, trash that CD and download everything you had on it.

I had a similar problem 3 years ago where I had this virus infecting all my executables after reinstalling windows it reappeared and discovered it was on a backup cd. I written down all the software I had on the cd on a piece of paper and started from fresh but I got rid of it and thats what really mattered to me.

- Ganni

Jwnz

Pre-Searing Cadet

Join Date: Aug 2008

Belgium

Children Of Drascir

E/

The Ctrl+Alt+Delete can be adjusted. I know I'm not saying much 'cause I don't know where to change the setting, but it can be enabled and disabled.
I'll see if I can find it.

Painbringer

Painbringer

Furnace Stoker

Join Date: Jun 2006

Minnesota

Black Widows of Death

W/Mo

When he / she reformatted did they ensure the boot sequence was cd or dvd first?

Did you ensure it was reformat or just a copy of windows that was done on the first recovery.

Your quote

" adventually destroyed the files needed for logging on... "

Can you actually pull open windows or does it stall and nothing happens.