Member Avatar for anand1987raja

I have windows xp sp3 installed in my system with xp sp2....but i have real problem in my computer..i got once virus in my computer....after that i format it ....but it is not gone.....i think i got virus from pendrive.....whenever installing my xp i got virus.....i am using net...i used 4 types of different cd to install xp...but i cant rid it...i got them in one week.so please anyone can help me.......

  • 5 Contributors
  • 6 Replies
  • 114 Views
  • 1 Day Discussion Span
  • Latest Post Latest Post by Bob_180_Bob

Dani AI

Generated

The symptoms you describe — repeated reinstalling but the infection returning (and the Internet slowing afterward) — match two common situations: the machine is being reinfected from external media or the malware lives outside normal Windows files (boot sector/MBR or a device/installer). and were right to ask for logs; those help. and pointed toward scanning and formatting, which are useful steps but not always enough for persistent threats. The approach below ties those ideas into a clear cleanup workflow.

Do this in order and do not reconnect the PC to the network until the system is confirmed clean:

  1. Remove every USB device, external drive and network cable. Work offline.
  2. Use a clean, trusted rescue environment (bootable rescue CD/USB from a clean machine) to scan the hard drive so the malware cannot hide inside the running Windows. If you find nothing but the problem returns after you plug in a pendrive, treat that drive as the source.
  3. If you choose to reinstall, fully remove partitions and wipe the disk (not a quick format). Overwrite or rebuild the MBR/boot code from recovery before reinstalling. For XP’s Recovery Console the commands are:
    fixmbr
fixboot

    A full wipe or MBR rewrite prevents many boot-sector infections from surviving a reinstall.

Before restoring any personal files, scan them on a separate, updated machine. Do not restore executables, installers or unknown .lnk/.exe files from backups. Clean or re-create installation media from a known good source rather than burning ISOs from an infected PC. Finally, after reinstall and before going online, update the system and install a modern AV, then connect and monitor. If uncertainty remains, capture and post startup/process logs and the event viewer output (as suggested) so helpers can examine what’s active just after boot. Upgrading away from unsupported XP will greatly reduce future risks.

Recommended Answers

All 6 Replies

Member Avatar for Doctor Inferno

Post a HijackThis log in the virus & nasties forum

Member Avatar for gerbil

If when installing Windows you choose to format during setup then the virus files will be lost [not deleted, just lost]. A quick format will do the job. A Windows Repair will NOT rid your machine of the pest.
May i suggest doing an online Virus scan and then installing an antivirus resident service?
==Please use IE or Firefox to do an online scan at panda:-
-First Register [otherwise there will be no disinfection, merely detection] with a valid email address for the free online virus scan and follow through.
Unlike Kaspersky this scan does not require Java.
Please ATTACH to your post the log it produces.

Member Avatar for anand1987raja

i done all the measure but i cant find out...i find virus only after my net slowdown..i think it will stealth in ram or harddisk.....so please me to get rid off it

Member Avatar for caperjack

i done all the measure but i cant find out...i find virus only after my net slowdown..i think it will stealth in ram or harddisk.....so please me to get rid off it

so you ran all the programs in the links above and still have problems .post the log generated by malwarebytes .

also it was suggested you run hijackthis and post a log in the spyware forum ,but you can post it here if you wish .get hijackthis here .
http://www.download.com/Trend-Micro-HijackThis/3000-8022_4-10227353.html

Member Avatar for Bob_180_Bob

Please explain what you did when you did a fresh install 4 times or 4 types of CD.
Please post the log of Hijack this!

Post a detailed report

Go to:- www.majorgeeks.com/download3155.html download and run Hijack this. “Do not try to do any repairs yourself.” Save the report and send it with your next post along with any error logs.
To check error logs, go to “START” “RUN” type “eventvwr.msc” Click “OK” and check if there any errors in the logs. Include any information that could help:-
Send information that may help resolve your problem. Remember, no one here can see your PC; you are the only one that can tell someone else about the problem.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.