Scanning virus filled hard drive

H

HollisBrown

New Member
My girlfriend's computer is quite infected with viruses and spyware to the point where it's a huge hassle to do virus scans on her computer. Her 256 mbs of ram doesn't help either. I'm planning on taking her hard drive out and installing it in my computer as a slave to remove all the viruses. Does this put my computer at risk? Is there some sort I program I can download that would protect me from any viruses on her hard drive or is the whole idea not too bright in the first place?

I'm running Microsoft Antispyware and Avast Antivirus. Both are updated and I have Ad-Aware installed as well. Thanks for any help.
 
HollisBrown said:
My girlfriend's computer is quite infected with viruses and spyware to the point where it's a huge hassle to do virus scans on her computer. Her 256 mbs of ram doesn't help either. I'm planning on taking her hard drive out and installing it in my computer as a slave to remove all the viruses. Does this put my computer at risk? Is there some sort I program I can download that would protect me from any viruses on her hard drive or is the whole idea not too bright in the first place?

I'm running Microsoft Antispyware and Avast Antivirus. Both are updated and I have Ad-Aware installed as well. Thanks for any help.
Click to expand...

it wont hurt tryin, but i heard that theres some sort of virus that corrupt motherboard too. so im not really sure if its safe to do it.
 
Dont put her HD in your computer or you will get infected also!

Post a hijackthis log so we can see what you have and help ya clean it up!
 
if it is really that infected with virus and you have your computer backed up you can just reformat the hdd. you can just let it run for a few days if you dont want to format. also when you get everything working make shure to install a firewall (if you dont have one) and a antivirus program a good one is antivir free also. good luck dude
 
Well, I ran Avast Antivirus and Microsoft Antispyware and deleted what came up. I also ran HijackThis and have a lob. Can someone please check it and see if everything's clear? Thanks a lot.
 

Attachments

First uninstall weather bug!

Then run a scan with ewido http://www.ewido.net/en/

Then open up hijack this and do a system scan only and check these entries!

R3 - Default URLSearchHook is missing

O2 - BHO: ATLDistrib Object - {2353FCBC-012D-487B-8BF3-865C0929FBEB} - C:\WINDOWS\system32\qoppo.

O4 - HKLM\..\Run: [084c0xog.dll] RUNDLL32.EXE 084c0xog.dll,b 217422

O8 - Extra context menu item: &AIM Search - res://C:\PROGRAM FILES\AIM TOOLBAR\AIMBAR.DLL/aimsearch.htm

O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)

O9 - Extra button: Dell Home - {DB860180-7D82-11D4-AD9A-00286FC10000} - http://smbusiness.dellnet.com/ (file missing) (HKCU)

Have hijack this fix these and reboot computer and post a new log!
 
I couldn't figure out how to uninstall weather bug, it's not in the Add/Remove programs list or in Program Files. I didn't run a scan with ewido because the computer is not hooked up to the internet. Is it nesseccary that I do this if I already scanned with 3 different adware removal programs? I removed the entries in hijack this and made a new log.

View attachment hijackthis.txt
 
if these doesn't work. Try reformating her computer. Back everything that is useful up first though.
 
Yes you need to run ewido, download it from your computer and save it to disk, msoevc.exe is a Trojan W32.Tilebot! ewido is an excellent trojan remover program! First run ewido and let it clean up what it can and then we will get the rest, you still have a few problems!
 
Open up hijackthis do a system scan only and check the following entries!

O2 - BHO: ATLDistrib Object - {2353FCBC-012D-487B-8BF3-865C0929FBEB} - C:\WINDOWS\system32\qoppo.dll

O4 - HKCU\..\Run: [WinFixer2006] "C:\Program Files\WinFixer_2006\uwfx6.exe" /min

O16 - DPF: {FFFFFFFF-CACE-BABE-BABE-00AA0055595A} - http://www.trueswitch.com/sbc/TrueInstallSBC.exe

O23 - Service: OSdebug (Microsoft Regulator) - Unknown owner - C:\WINDOWS\msoevc.exe (file missing)

Have hijackthis fix these, then reboot computer and post a new log!
 
HollisBrown said:
I couldn't figure out how to uninstall weather bug, it's not in the Add/Remove programs list or in Program Files. I didn't run a scan with ewido because the computer is not hooked up to the internet. Is it nesseccary that I do this if I already scanned with 3 different adware removal programs? I removed the entries in hijack this and made a new log.

View attachment 920
Click to expand...


If its not in the add/remove list. Then download sytem mechanic 6 trail uninstall it from the registry.
 
I've only had a quick look, but this should help until I get a good look.

Please print these instructions out for use in Safe Mode.

Please download VundoFix.exe to your desktop.
  • Double-click VundoFix.exe to extract the files
  • This will create a VundoFix folder on your desktop.
  • After the files are extracted, please reboot your computer into Safe Mode. You can do this by restarting your computer and continually tapping the F8 key until a menu appears. Use your up arrow key to highlight Safe Mode then hit enter.
  • Once in safe mode open the VundoFix folder and doubleclick on KillVundo.bat
  • You will first be presented with a warning.
    It should look like this
    VundoFix V2.15 by Atri
    By using VundoFix you agree that you are doing so at your own risk
    Press enter to continue....
    Click to expand...
  • At this point press enter one time.
  • Next you will see:
    Please Type in the filepath as instructed by the forum staff
    and then press enter:
    Click to expand...
  • At this point please type the following file path (make sure to enter it exactly as below!):
    • C:\WINDOWS\system32\qoppo.dll
  • Press Enter to continue with the fix.
  • Next you will see:
    Please type in the second filepath as instructed by the forum
    staff then press enter:
    Click to expand...
  • At this point please type the following file path (make sure to enter it exactly as below!):
    • C:\WINDOWS\system32\oppoq.*
  • Press Enter to continue with the fix.
  • The fix will run then HijackThis will open, if it does not open automatically please open it manually.
  • In HiJackThis, please place a check next to the following items and click FIX CHECKED:
  • After you have fixed these items, close Hijackthis.
  • Press enter to exit the program then manually reboot your computer.
  • Once your machine reboots please continue with the instructions below.

Then, please run this online virus scan: ActiveScan

Copy the results of the ActiveScan and paste them here along with a new HiJackThis log
 
You must log in or register to reply here.
Back
Top