Page 1 of 4
Windows Security Center virus
Posted: Mon Jun 22, 2009 3:47 am
by andyman
can someone explain to me how this can be on a freshly formatted computer that has only been online for maybe 2 hours???? wtf is this and how do I make it go away permanantly?? It's been plaguing my two computers for the last 3 days!! no matter how many times i reformat this machine it still comes back nearly right away!!
Re: Windows Security Center virus
Posted: Mon Jun 22, 2009 4:10 am
by andyman
trying to work this solution...
http://forums.techguy.org/malware-remov ... virus.html
we'll see.
Re: Windows Security Center virus
Posted: Mon Jun 22, 2009 8:34 am
by Foo
Well it could have infected your HD boot sector, or one of the CD or other media you're using to load things back on.
It could also be spreading on your local LAN from another infected machine.
Re: Windows Security Center virus
Posted: Mon Jun 22, 2009 9:35 pm
by andyman
man no matter what i do this shit comes back withing seconds. I don't understand how a completely formatted drive with a fresh install of windows can get a fucking virus just about instantly.
It must be deeply embedded into something... what, i'll never know but for now this computer is pretty much fucked forever.
Re: Windows Security Center virus
Posted: Mon Jun 22, 2009 10:01 pm
by Peenyuh
Foo wrote:Well it could have infected your HD boot sector, or one of the CD or other media you're using to load things back on.
It could also be spreading on your local LAN from another infected machine.
Re: Windows Security Center virus
Posted: Mon Jun 22, 2009 11:32 pm
by §ìgñå
Does the XP your installing have at least SP1? If it doesn't and your installing while connected to the net and not behind a firewall your xp will be infected in only a few minutes.
make sure to install while not connected to the internet, and download service packs before you begin.
Re: Windows Security Center virus
Posted: Tue Jun 23, 2009 12:55 am
by andyman
It's xp pro sp3
Re: Windows Security Center virus
Posted: Tue Jun 23, 2009 5:51 am
by Captain
As Foo said, your boot sector might be infected. Try a new install with a fresh HDD.
Where'd you get the install disc from?
Re: Windows Security Center virus
Posted: Tue Jun 23, 2009 3:50 pm
by andyman
Captain Mazda wrote:As Foo said, your boot sector might be infected. Try a new install with a fresh HDD.
Where'd you get the install disc from?
That was the very first thing i did, new hard drive and OS copy.
Re: Windows Security Center virus
Posted: Tue Jun 23, 2009 4:00 pm
by AmIdYfReAk
OS copy, install or ghost?
Re: Windows Security Center virus
Posted: Wed Jun 24, 2009 2:52 am
by andyman
Went to comp usa and got a new hard drive and os disk... even if i were to get another hard drive, whats to say that one wont get the virus instantly? would a new motherboard be a better option?
Re: Windows Security Center virus
Posted: Wed Jun 24, 2009 3:18 am
by AmIdYfReAk
on another computer, Download a live OS on a USB key.. boot off of that and Format the disk and distroy all file systems.
if you REALLY want to be paranoid then you can do a low level format/Zero fill of the harddrive and see how that works out for ya
Also, is there any software that you are installing after said formats?
Re: Windows Security Center virus
Posted: Fri Jun 26, 2009 3:55 am
by andyman
AmIdYfReAk wrote:on another computer, Download a live OS on a USB key.. boot off of that and Format the disk and distroy all file systems.
if you REALLY want to be paranoid then you can do a low level format/Zero fill of the harddrive and see how that works out for ya
Also, is there any software that you are installing after said formats?
I don't know how to do any of that but it is definitely worth a try. The only program I'm installing is firefox right after a format.
Re: Windows Security Center virus
Posted: Fri Jun 26, 2009 5:35 pm
by obsidian
Download Ubuntu. Stick it in your drive and boot off of that using default settings. Use Ubuntu's built in file manager to zap the file system and then create a new NTFS partition.
Re: Windows Security Center virus
Posted: Fri Jun 26, 2009 6:25 pm
by AmIdYfReAk
Ubuntu live CD ^^^^
Re: Windows Security Center virus
Posted: Sat Jun 27, 2009 3:25 am
by andyman
Installed ubuntu, and the computer wont startup with that os. It starts to, then it says "MP-BIOS Bug: 8254 Self TImer not connected" then it goes to the splash screen, loads the bar all the way up, then it's just a black screen and nothing happens.
so scratch that unless i'm doing it wrong.
Re: Windows Security Center virus
Posted: Sat Jun 27, 2009 4:37 am
by AmIdYfReAk
is that on the live CD? or did you actually download and install it?
Re: Windows Security Center virus
Posted: Sat Jun 27, 2009 5:11 am
by Deathshroud
You might have a rootkit embedded in the BIOS. You could attempt to update the BIOS to see if that takes care of it.
EDIT: Actually, there might be a way to reset the BIOS, check the motherboard manual to see if its possible. This thing sounds like a pretty potent worm, I would cut off the infected computers from network access until you have fixed them both.
Re: Windows Security Center virus
Posted: Sat Jun 27, 2009 5:14 am
by obsidian
When you download the normal Ubuntu CD, you should have the option to install it, or load it as a Live CD (the default), as well as a few other things like memtest, etc. You want to load it up as a Live CD, this doesn't actually install anything to your hard drive, it just reads the OS off of the disc and loads everything to memory. You will be presented with the Ubuntu GUI where you should be able to find the disc manager (system > administration, I think) from which you should be able to wipe out the existing partitions and create a new one, then format it.
Re: Windows Security Center virus
Posted: Sun Jun 28, 2009 2:52 pm
by andyman
obsidian wrote:When you download the normal Ubuntu CD, you should have the option to install it, or load it as a Live CD (the default), as well as a few other things like memtest, etc. You want to load it up as a Live CD, this doesn't actually install anything to your hard drive, it just reads the OS off of the disc and loads everything to memory. You will be presented with the Ubuntu GUI where you should be able to find the disc manager (system > administration, I think) from which you should be able to wipe out the existing partitions and create a new one, then format it.
That was the first way I tried it, and it did the same thing so i thought maybe installing it would yield different results but no dice.
Re: Windows Security Center virus
Posted: Mon Jun 29, 2009 2:08 am
by obsidian
Well that's shitty. I've been using Ubuntu for a number of years now and I haven't been able to find a computer that Ubuntu won't start up on. Problems hunting for drivers... sure, but it should at least boot.
Re: Windows Security Center virus
Posted: Wed Jul 01, 2009 9:50 pm
by andyman
I have tried the power off way many times, no worky.
Ubuntu started up after I went into the pre-startup menu and selected 'Safe with graphic line'. I think I was just supposed to wait a long long time for the regular first startup. Either way, when it finally loaded the system, it asked for a username and password but never asked me for one. Now I can't log in.
Re: Windows Security Center virus
Posted: Wed Jul 01, 2009 10:16 pm
by Deathshroud
Did you try resetting or updating the BIOS yet?
Re: Windows Security Center virus
Posted: Wed Jul 01, 2009 10:50 pm
by andyman
Deathshroud wrote:Did you try resetting or updating the BIOS yet?
Not yet. I could do that tonight... I'll try the update.
My roommate wanted some media files from the laptop so i plugged in his external hard drive and gave them to him, now his laptop is infected lol
Re: Windows Security Center virus
Posted: Wed Jul 01, 2009 11:57 pm
by andyman
Updated the BIOS on the desktop, now it won't even begin to turn on. The read lights for the cd drives just flicker and that's it. FUCK THIS SHIT. Now i have to get a new motherboard.