Member Avatar for princekool

Hi all;
My system has been acting crazy since yesterday, i first got weird file named IT_LKW_SUCKS i dont know where it came from and i deleted it then just after one minute the file appeared again. Tried deleting that file but it cant be deleted. ma hard disk has 3 drives (C,D,E) and i cant open any of the drives and my DVD-RW drive opens itself everytime. i scanned the whole system but didnt detect anythng (antivirus used: Symantec Antivirus). I dont want to format the whole system as i have very important files in drive D & E. Drive C is the windows drive of which i can format but i aint sure if the virus will still be gone by jus formatting C. Does anyone have an idea of how to get rid of this problem (its more of a nightmare to me) without formatting those 2 drives???? Please help me am just stuck:(

  • 5 Contributors
  • 9 Replies
  • 197 Views
  • 2 Months Discussion Span
  • Latest Post Latest Post by venera17

Dani AI

Generated

Good outcome for — copying the important files out and doing a clean install is the safest fix when you can’t be certain the system is clean. For others who land on this thread years later: repeated reappearing files, locked drives and explorer that won’t open are commonly caused by autorun/shortcut-worm behavior, a malicious shell extension that hooks Explorer, or simply a process holding file handles. Those possibilities guide the safest recovery order.

Safe, practical recovery workflow (priority order):

  • Physically disconnect any secondary/internal drives you don’t need to touch. This prevents infection spreading. This echoes ’ good advice.
  • Use a clean boot environment (a Linux live USB or Windows PE / rescue USB) to copy user data off the PC to an external disk before doing anything else. If Explorer won’t respond, a shell or live-OS is a reliable alternative to the address-bar trick that worked for .
  • From an administrative command prompt (or the live environment) reveal and remove hidden autorun/shortcut files, for example:
D:
cd \
attrib -s -h -r *.* /S /D
del /a autorun.inf

Run that separately on each affected drive letter, then scan the copied files on a known-clean machine before restoring them.

Cleanup and repair notes:

  • Run offline rescue scanners from a clean rescue CD/USB (this avoids active malware interfering). If you suspect boot-sector infection, repair the MBR from recovery: run Windows Recovery and use bootrec /fixmbr and bootrec /fixboot. Use msconfig or Sysinternals Autoruns on a clean system to remove persistent startup items.
  • Keep System Restore off while cleaning (it can hide infected restore points), then re-enable it only after you are certain the system is clean.

Prevention: disable autorun for removable media, keep a tested backup, keep AV/definitions up to date, and scan external drives on a clean system before reconnecting. Credit to , and for suggesting command-line and extra-scanner approaches — those are useful follow-ups when Explorer won’t cooperate.

Recommended Answers

All 9 Replies

Member Avatar for TT4Titans

first go into control panel - system turn off system restore.

download Hijackthis and post log.

Norton isn't a very good virus detector or cleaner anymore.Go here and download AVG it is free.

http://dw.com.com/redir?edId=3&siteId=4&oId=3000-2239_4-10695030&ontId=2239_4&lop=link&tag=tdw_dltext&ltype=dl_dlnow&pid=10695030&mfgId=6270610&merId=6270610&destUrl=http%3A%2F%2Fwww.download.com%2F3001-2239_4-10695030.html

Once we get the system clean you can turn back on system restore.

Member Avatar for princekool

first go into control panel - system turn off system restore.

download Hijackthis and post log.

Norton isn't a very good virus detector or cleaner anymore.Go here and download AVG it is free.

http://dw.com.com/redir?edId=3&siteId=4&oId=3000-2239_4-10695030&ontId=2239_4&lop=link&tag=tdw_dltext&ltype=dl_dlnow&pid=10695030&mfgId=6270610&merId=6270610&destUrl=http%3A%2F%2Fwww.download.com%2F3001-2239_4-10695030.html

Once we get the system clean you can turn back on system restore.

The system tool on the control panel doesnt open also, its same case with the drives.:(

Member Avatar for piyushchandra

hello prince kool,
what error message u get when you try to open ur drives,....?
try right click > explore...

Member Avatar for princekool

hello prince kool,
what error message u get when you try to open ur drives,....?
try right click > explore...

I dont get any error message, just dont open even when u click explore. you will for hours and nothing will be opened.

Member Avatar for Hosmer23

Try scanning it with Adaware. You can get a free download form my Company's website.

Or you can download the direct link by

Member Avatar for piyushchandra

i don't have much idea then, try to access your files thru command promt ,...

Member Avatar for princekool

Thanks all who tried to give me some ideas, was able to access my files from drop down option at the address bar on my computer.
Copied all the files i wanted and transfered to external hard disk and then formatted all the drives and installed clean copy of windows vista. So happy i managed to get rid off that virus.:)

Member Avatar for venera17

personally, i didn't think norton was very reliable when i had it. i recently switched to trend micro products and they have worked wonders. if you don't want to buy a full version, they also have great free downloads on their website [www.trendmicro.com]. i think a download called "hijack this" might help you in this situation.
i hope this helped and good luck!!

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.