Help Norton and Kaspersky can't find virus or worm!

Hi Trax1963,

What is it that you are looking for?

I have a bug in this computer and it is able to stop all kinds of security scans. All this just after a reinstallation of windows. It is also trying to burn out my cpu and memory... Its a computer killer as i like to call it...

Hi Trax1963,

I understand that this is a big problem for you, but please do not bump your thread. This sounds as though it could be a worm that is prevalent at the moment.

When you reinstalled Vista, were you still connected to a network? I recommend that you should disconnect completely from the network whilst reinstalling as without any form of security active on your system it is extremely vulnerable.

The best solution that I can think of is for you to reinstall again. If you have access to an old Win98 or Win98SE disk, then insert it and boot from that. This might sound silly, but what you are going to do is to use that disk to format your hard drive with a completely different file system structure. Make sure that you choose the full and not the quick format option (if you get the choice). Once the disk is formatted, delete the partition. Remove the 98 disk and insert the Vista disk and reboot. Install Vista as normal. Before you connect to a network of any description, install your AV software. Please note that you should only install one as having more installed can actually cause problems because they can conflict with each other. Don't worry about it being out of date as it will update itself when you go online.

No i don't have Old 98 disks.
I did not have 2 antivirus systems running together i tried them seperately. And have now tried a third called Trend micro. To no avail so i will have to reboot and also loos 1 TB of data with it...Unless someone has a better idea!

Hi,

You could try running the free Malwarebytes.org.

If you need to reformat completely, as Dwarf suggests, you can do it by booting in with Gparted free.

SourceForge.net: GParted: Downloading ...

D/l iso , burn to cd with isoburner - do not format cd, if autoplay pops up , just close it.

http://www.ntfs.com/downloads/Iso-burner.zip


Edit: If it is preventing scans in Windows, you can use these bootable anti-malware apps. -Avira includes an iso burner - the FSecure you need to burn as above

http://www.free-av.de/en/tools/12/avira_antivir_rescue_system.html


http://www.raymond.cc/blog/archives...d-300-to-clean-virus-from-unbootable-windows/

http://www.f-secure.com/linux-weblog/files...elease-3.00.zip

Hope it helps

SIW2

Thanks for the suggestion SIW2. I have Trojan Remover as Malware Bytes does not work on my 64bit. But will use the rest of the info Cheers mate!
Little fed up now after days of problems. Tired and just want to go to bed ZZZZZZzzzzzzzzzzzzz!

That's strange - malwarebytes works perfectly on all my 64 bit operating systems , including Windows 7. Whatever you have on there may be blocking it - try the bootable Avira.

Good Luck

SIW2

Norton, Kaspersky and PcCillin or Trend Micro didn't work although each of them found crap on my computer that i never knew i had...The best was Trend Micro. But i am afraid that i am about to loose 1Tb of info that took me many years to accumilate. The reason for this is that PcCillin found 10 bits of crap in that drives recycle bin...Ah well i'll do it tommorow i think!

Why don't you download SUPERAntiSpyware? Its better than all 3 you mentioned (I own all of what you tried). Kaspersky is only better in the anti-virus department (picks more up traces) but SuperAntiSpyware does pick up the nasty original files.

Lifetime free - if u don't want it to autoupdate or autoprotect (onetime $20 lifetime license otherwise). Make sure you set it , in the Preferences, to NOT ignore file locations.

BTW all anti-malware products are set to ignore specific locations on a computer , to "speed up" the process. That is 50% of the reason why most A/V software misses a lot of stuff. They often ignore the System Restore folders (where most powerful malware reside to "reinstall" themselves - NORTON specifically ignores this location).

The other 50%? It's a crappy software !

If you doubt my opinion, get rid of Norton (download their Norton Removal Tool), keep Kaspersky and install SuperAntiSpyware FREE edition to scan after Kaspersky to see what it missed - and it will be a lot !

Superantispyware is the first thing i tried. Nothing works..Not even the recovery disk.

Ok Iv'e tried..

Superantispyware
Trojan Remover
Kaspersky
Norton IS
Trend Micro (PcCillin)
Trend Micro Housecall
Avira AV
Avira Reboot disk

Any suggestions...any

Just to let you all know i had to delete everything and reformat all drives. There are some real dangerous viri out there and i would not want anyone to have to spen at least 40 hours on trying to kill a virus and have to do a complete system reboot. So my advice is steer clear of all those nasties by not having a computer in the first place. If you do then remember 'I told you so...'


Oh and the Viri was in D:$recycle bin How it got there hell knows?

This gets worse...After formatting all drives re-installing of windows. Then put Kaspersky on before anything else whilst not being connected to a network...in D: the viri is still there. As you can see below Kapersky scans over D:$recycle bin and starts to burn out my memory. It gets worse as you as time goes by...

Capture.JPG


I am going to format the drive a few times and try again!
50+ hours lost...in time.

Seems like Kaspersky is working on a backup you have? So how you expect it to remove? may be not possible - if it even detects something that is.

You said virus stops scans and yet you are scanning. Story is confusing

Try get some details of claimed virus. Why are you so sure there is an infection? You are not saying a rescue/live-cd "dont work"? You spend many hours but seem to move too fast somehow. If you really have a virus living a life on its own even when separated from OS! I suggest you give those live-CDs another try. Good ones are Aviras, Kasperskys and Bitdefenders

Also post RSIT log - run this http://images.malwareremoval.com/random/RSIT.exe after it is done you have 2 log files in c:\rsit - attach them to a post so people have better chance of evaluating mystery virus.

This is a Vista forum, mainly - may be this is out of normal peoples league and you should contact a dedicated anti-virus/malware removal forum? Just a suggestion. Try http://www.bleepingcomputer.com/forums/ there are lots to chose from. Be sure you read rules etc. before posting or you risk not getting help.

Trax1963 said:

This gets worse...After formatting D: the viri is still there.

Capture.JPG


I am going to format the drive a few times and try again!
50+ hours lost...in time.

Click to expand...

G'Day Trax1963......see post here; http://www.vistax64.com/system-security/209297-ultimate-malware-removal-guide-2.html#post962937

@
DK70

Thanks for your comments. I'm sorry it's so confusing but i am working fast trying to get rid of this bug. Have been at it so long now little sleep and quite fed up...Might be cheaper and easier to install new drives...Never thought of that before. It's cheaper than taking it to a specialist....If all else fails i'll do that!

This
Windows Live OneCare safety scanner: Free online tool for PC health and safety

Froze on 97%...

Well i've tried everything now thanks for all your suggestions i'll buy some new Hard drives and move on from here now thanks all concerned...

Onecare on Vista 64bit can be a bit buggy so I would not put too much into that. Ive had it freezing as well.

If I were you I would like to see what Kaspersky live-cd pick up.

Specialist? Yeah good luck with that, like you cant scan on your own. Try one of the many removal forums if you want a specialist to have a look. Cost you nothing.

Tried Avira Boot CD and guess what...It didn't find anything although it did say unable to scan $recycle bin... Oh! and it would only scan half of D: It didn't bother with E: I: H: J:K: X: or Y:

Oh! by the way, i bought a new Drive 250Gb 16Mb for only £43 at a well known site in the UK. Cheaper than taking it to a specialist eh...

Yeah possible you have to select/scan drives one at a time in "Directory - Search path" box.

Unable to scan recycle bin sounds a bit weird. Recycle bin works? you can empty it?

The idea of a live-cd is no matter how infected computer is it will still be scanned - I would continue to scan away until problem is solved.

Seems like the only way you can be infected now is because you restore virus through backups? - and somehow activates it while remaining undetectable.

I thought bios virus died like in the 90s, yeah they did