Support NeoGAF

[isamu]

Hi guys. I've got a problem with my PC. It is currently infected with a virus. Let me explain what it does...

Upon booting up my PC, it gets infected each time with some random Exe located in the windows/system folder. Upon each boot up, it gets to where my wallpaper shows up, but that's it...no icons or anything.

At this point I must then go into the Ctrl-Alt-Delete menu, remove this damn exe file, and that's when Windows will sucessfully finish loading and everything is OK. Then I permenantly delete this random exe file which always shows up in my C:Windows>>System folder. The problem is this happends EVERY time I boot up my PC and some random exe file keeps coming back and is always different...with strange names such as "Byemzck.exe", "ccZeurt.exe", or some other crap. And not even Norton Anti Virus 2003, Spybot or Adaware is detecting whatever this virus is that is causing this to happen. Can anyone recommend anything short of completely reinstalling windows? Your help would be greatly appreciated.

 

[Bob White]

This doesn't make you a bad person.

 

[isamu]

Hi Bib do you know I can resolve this?

 

[Bob White]

Wish I did. I've had a virus that locks my comp up every now and then at random times.

At least I think it's a virus.

 

[Diablos]

I CAN'T FIND THE INTERNET!

 

[fbcamp]

So have you tried using regedit or msedit to get rid of any suspicious boot up files? If not, and you don't know what to do, then I'll tell you.

 

[isamu]

please tell me....i havent tried that yet

 

[GDGF]

Go to google and find a program called 'stinger'. It's helped me when all other anti virus programs couldn't.

 

[Incognito]

Looks like all the Lemur pics finally caught up to you.

 

[isamu]

Looks like all the Lemur pics finally caught up to you.

Gradual Zero please go back to OA.

Thanks Lost...Ill try that

 

[SickBoy]

In IE: housecall.trendmicro.com

-SB

 

[tenchir]

I had that problem before, just boot in Safe Mode and scan it again. The Anti-Virus couldn't disinfect it before because the files it needs to clean/quarauntee/etc... is possibly a system file that can't be modify if it's not in safe mode.

 

[isamu]

Thanks. But will NAV scan my PC in Safemode? What anti-virus program did you use? And if it won't detect it in mormal mode, what makes you think it'll detect it in safe mode?

 

[RobotChant]

Stop the program from booting up by using msconfig.

Go to run, type msconfig, click on the startup tab, uncheck any suspicious programs.

 

[isamu]

Thanks RobotChant... but I had tried that a once before and there is nothing checked on the list that I have scheduled to run other than NAV related items and the mandatory stuff like Task Montior, System Tray, Country Selection, and one other file called "PTSNOOP"...which I don't know what it's there for, but always comes back if I uncheck it and has been there for the longest.

Let me ask you though....I know I can check or uncheck whatever I don't want to start up, but is there anyway to remove the file from the list? Not necessarily delete it, but just remove it from the list in the menu?

 

[Mustang]

Welcome to the wonderful world that is Windows.

 

[Aby]

Thanks. But will NAV scan my PC in Safemode? What anti-virus program did you use? And if it won't detect it in mormal mode, what makes you think it'll detect it in safe mode?

Yes it will scan even in safe mode. You cannot connect to the internet though wich is not a problem cause you don't need to for the scanning.

 

[habeem4999]

Like lost said, dl Stinger(you can get it here http://vil.nai.com/vil/stinger/ ) and scan with it if you haven't already. Also, you said you scanned with norton, adaware and spybot, but did you update the definitions on all them? Are you using the latest versions. Getting the latest definitions is very important. Click update in the programs. It will be your friend in no time

 

[tenchir]

Thanks. But will NAV scan my PC in Safemode? What anti-virus program did you use? And if it won't detect it in mormal mode, what makes you think it'll detect it in safe mode?

Yes, it should work in Safe Mode, it would only need to connect to the internet for updated virus definitions. Are you sure your NAV is not detecting it? My McAfree AV detected it(it was a trojan), but couldn't remove it without me booting into Safe Mode and running the scan again.

If no AV or adware software can detect it, it's either a new virus/trojan..... or you might have installed a software and it installed that.

 

[RobotChant]

Sorry isamu, I have no ideas. The only thing I can think of is when you're in the task manager, instead of "end process", you should right click the exe file and "end process tree", if you haven't already tried that. I remember having similar problems but things were fixed when I did the things you and I mentioned.

 

[Diablos]

1. Download the Windows 98 bootdisk exe from www.bootdisk.com
2. Insert a blank disk
3. Run the executable
4. Get the file delpart.exe and put it on the Windows 98 bootdisk
5. Restart with the bootdisk
7. Use delpart to delete your FAT32 and/or NTFS partitions
8. Type fdisk /mbr
9. Reboot with the Windows XP CD in your drive
10. Reinstall



I mean, seriously, at this point, you're fucked. Google doesn't even have any matches for those executables. Then again this could be a new virus, so I guess patience won't hurt anything...

Try making another user and see if the same thing happens. Some of those viruses are user-specific... that's what I experienced when I was trying to get rid of a virus on someone's comp.

 

[Lemurnator]

I just got a virus too.

 

[isamu]

Thanks for those suggestions...Well, I scanned in Safemode using NAV today and didn't pick up anything. My PC started OK but I have a feeling the virus is still there. I guess I'll about what I want to do next. I am thinking of backing up all my data to another drive and doing a cumplete reinstall...see the Maxtor HD thread. I'll letcha know if I have any other Qs.

 

[ShadowRed]

Dude just freaking format and be done. It would be a lot less time consuming than scanning your HD every boot and deleting virus files.