Nasty virus...need help

M

merlin803

New Member
I am trying to help out a friend who's pc has one or more nasty viruses and am running out of ideas...

It has blocked every thing I have tried, it is basically just booting up and then a timer starts and it then reboots again.

I can't access control-alt-delete or anything else in Windows. I tried a couple different virus boot disks and it blocks those from running, it blocks booting to safe mode also.

i tried booting from the windows XP disc and it just brings up a blue screen.

At this point, could I take out the hard drive and put it into another pc to format it? Could it infect the other pc if I try this?
 
well,if its the virus that i know, when te timer of shutdown starts,modify your date
for 2009 (change only one year back)and the timer gonna tell you that in 365 days he will shutdown giving you enough time to fix it.
After modifying the date,download a good anti-virus and run it.
Hope that helps
 
canivari said:
well,if its the virus that i know, when te timer of shutdown starts,modify your date
for 2009 (change only one year back)and the timer gonna tell you that in 365 days he will shutdown giving you enough time to fix it.
After modifying the date,download a good anti-virus and run it.
Hope that helps
Click to expand...

Thanks for the suggestion but the task bar is not visable and really nothing is accesable at all in Windows. This one is a real bugger......

The only thing else I can think of to do is install the hard drive into my pc and try to scan and remove the virus but I really don't want to put my pc at risk either....
 
merlin803 said:
Thanks for the suggestion but the task bar is not visable and really nothing is accesable at all in Windows. This one is a real bugger......

The only thing else I can think of to do is install the hard drive into my pc and try to scan and remove the virus but I really don't want to put my pc at risk either....
Click to expand...

what about crtl+alt+del ?
if itys possible to open taskmanager,then choose file,new task run
and write ""timedate.cpl" without the quotes and hit enter so you can acess
date and time so you can change the time.
Hope that helps
 
Do ctrl-alt-del to bring up task manager. Click on application tab, click on new task. type shutdown -a in the open box. This will stop the countdown. Have you tried booting to safe mode? If you can and it doesn't restart then perform the following procedure by downloading this file on a different computer and transfer it to the infected computer via a usb flashdrive.

Download and Run ComboFix
If you already have Combofix, please delete this copy and download it again as it's being updated regularly.
Note: Do not mouseclick combofix's window whilst it's running. That may cause it to stall

Combofix should never take more that 20 minutes including the reboot if malware is detected.
If it does, open Task Manager then Processes tab (press ctrl, alt and del at the same time) and end any processes of findstr, find, sed or swreg, then combofix should continue.
If that happened we want to know, and also what process you had to end.

In your next reply please post:
  • The ComboFix log
  • A fresh HiJackThis log
  • An update on how your computer is running

Most likely you have been running this machine without a fully updated antivirus program and running a firewall.
 
Unfortunatley I can't boot into safe mode and control-alt-delete no longer works.

I also can't run Combofix or any other program.
 
Then you will need to take this hard drive out and put it in another machine and scan it using a fully updated antivirus program with a full scan using malwarebytes.
 
Possible but not probable. I've had to do that same procedure many times and have never been infected from doing it.
 
merlin803 said:
Unfortunatley I can't boot into safe mode and control-alt-delete no longer works.

I also can't run Combofix or any other program.
Click to expand...

Ok, in that case try this:
-Download ERD commander and burn it to a cd.
-boot from him
-Download and Run ComboFix as John said before.
Hope this help
 
You must log in or register to reply here.
Back
Top