Help. FDISK and FORMAT(ed) hard drive and VIRUS is still present! - Techist - Tech Forum

Go Back   Techist - Tech Forum > Computer Software > Microsoft Windows and Software
Click Here to Login
Closed Thread
 
Thread Tools Display Modes
 
Old 04-05-2005, 10:23 PM   #1 (permalink)
Junior Techie
 
Join Date: Nov 2004
Posts: 43
Default Help. FDISK and FORMAT(ed) hard drive and VIRUS is still present!

I'm trying to fix a computer for our neighbor. It appears to have a nasty virus on it. I fdisked and formatted the hard drive, but I'll be darned if the evil virus isn't still there. I am guessing it must have infected the master boot record?
How can I get rid of it????

I can't install any anti-virus software or anything. The virus will not allow any programs to run. I can boot into safe mode.

O/S is Windows XP home edition
__________________

__________________
System Specs:
Pentium 4 - 2 GHZ processor
MOTHERBOARD - Gigabyte Ultra GA-8PE667
VIDEO - NVIDIA Geforce FX 5500 OC
HARDDRIVE - 120 Gig Maxtor
MEMORY - 512 MB ram
Wyluli is offline  
Old 04-05-2005, 10:48 PM   #2 (permalink)
Techie Beyond Description
 
Apokalipse's Avatar
 
Join Date: Jun 2003
Location: Melbourne, Australia
Posts: 14,559
Default

go to the XP recovery console, and type 'fixmbr' and 'fixboot'
__________________

__________________
Apokalipse is offline  
Old 04-06-2005, 12:18 AM   #3 (permalink)
Chillin Techie
 
Join Date: Nov 2004
Location: USA
Posts: 11,861
Default

download the utility in my signature it will erase the mbr too.
__________________
The Ultimate Hard Drive Utility PowerMax 4.23. (It now has the ability to clean a Boot Sector virus on the quick erase option.)
The best browser Netscape 8
Have you accidently delete something? Look here (trial. the better one) and here(free)
EricB is offline  
Old 04-07-2005, 05:00 PM   #4 (permalink)
Junior Techie
 
Join Date: Nov 2004
Posts: 43
Default

So doing a low level format will erase the MBR?
Then installing Windows XP Home Edition will get her up and running again?

"go to the XP recovery console, and type 'fixmbr' and 'fixboot'"

I know that doing fixmbr and fixboot does not always eliminate viruses. I'll give it a try tho.

Thanks.
__________________
System Specs:
Pentium 4 - 2 GHZ processor
MOTHERBOARD - Gigabyte Ultra GA-8PE667
VIDEO - NVIDIA Geforce FX 5500 OC
HARDDRIVE - 120 Gig Maxtor
MEMORY - 512 MB ram
Wyluli is offline  
Old 04-07-2005, 06:47 PM   #5 (permalink)
Chillin Techie
 
Join Date: Nov 2004
Location: USA
Posts: 11,861
Default

Quote:
Originally posted by Wyluli
So doing a low level format will erase the MBR?
Then installing Windows XP Home Edition will get her up and running again?
yes and yes
__________________
The Ultimate Hard Drive Utility PowerMax 4.23. (It now has the ability to clean a Boot Sector virus on the quick erase option.)
The best browser Netscape 8
Have you accidently delete something? Look here (trial. the better one) and here(free)
EricB is offline  
Old 04-07-2005, 07:21 PM   #6 (permalink)
PowerQuest / Opera
 
TheMajor's Avatar
 
Join Date: Jun 2004
Location: Netherlands
Posts: 10,177
Default

How do you know there's a virus?
Did you scan with AV?
__________________
TheMajorMMX - Intel P200 MMX @ 225Mhz - V-Tech (PcPartner) Baby-AT mb w/ Intel Triton TX chipset - Nvidia Riva TNT2 M64 w/ 16MB - 256MB M-Tec SDRAM - Still running.....
TheMajor is offline  
Old 04-07-2005, 08:23 PM   #7 (permalink)
Chillin Techie
 
Join Date: Nov 2004
Location: USA
Posts: 11,861
Default

most of the time, your AV will miss a boot sector virus
__________________
The Ultimate Hard Drive Utility PowerMax 4.23. (It now has the ability to clean a Boot Sector virus on the quick erase option.)
The best browser Netscape 8
Have you accidently delete something? Look here (trial. the better one) and here(free)
EricB is offline  
Old 04-09-2005, 05:01 PM   #8 (permalink)
Junior Techie
 
Join Date: Nov 2004
Posts: 43
Default

Quote:
Originally posted by TheMajor
How do you know there's a virus?
Did you scan with AV?
I know there is a virus because the system is all screwed up. Programs keep popping up and .exe files do not work etc...
There is a program called HWCLOCK.exe running in task manager which appears to be malicious.

I did a low level format, reloaded everything, the computer is STILL infected.

I guess I will try going into safe mode and see if I can delete this file from there. (when I try to delete it, it does not allow me to do so from windows)

This is a really evil virus, formatting didn't get rid of it, it spreads like wildfire, anti-virus can't clean it all out. I'd love to get hold of the person that wrote it and bash there head in.
__________________
System Specs:
Pentium 4 - 2 GHZ processor
MOTHERBOARD - Gigabyte Ultra GA-8PE667
VIDEO - NVIDIA Geforce FX 5500 OC
HARDDRIVE - 120 Gig Maxtor
MEMORY - 512 MB ram
Wyluli is offline  
Old 04-09-2005, 05:34 PM   #9 (permalink)
True Techie
 
Join Date: Apr 2005
Posts: 241
Default

when you went and did all that, it did infact remvoe the virus... what happened is you got it again, are there any other computers on the network? did you have the network cable plugged in (internet access) were you running a firewall at anytime?
__________________
If all you can see is Darkness Within the Light, You are blind to this world.
http://img25.exs.cx/img25/7382/blade4ls.gifhttp://img222.exs.cx/img222/1324/z1irvineshksvan6uv.gif
ShadowFalls is offline  
Old 04-09-2005, 05:46 PM   #10 (permalink)
Chillin Techie
 
Join Date: Nov 2004
Location: USA
Posts: 11,861
Default

Quote:
Originally posted by Wyluli
I know there is a virus because the system is all screwed up. Programs keep popping up and .exe files do not work etc...
There is a program called HWCLOCK.exe running in task manager which appears to be malicious.

I did a low level format, reloaded everything, the computer is STILL infected.

I guess I will try going into safe mode and see if I can delete this file from there. (when I try to delete it, it does not allow me to do so from windows)

This is a really evil virus, formatting didn't get rid of it, it spreads like wildfire, anti-virus can't clean it all out. I'd love to get hold of the person that wrote it and bash there head in.
do you do the full format with the power max ultility? they have 2 option. high and low level
__________________

__________________
The Ultimate Hard Drive Utility PowerMax 4.23. (It now has the ability to clean a Boot Sector virus on the quick erase option.)
The best browser Netscape 8
Have you accidently delete something? Look here (trial. the better one) and here(free)
EricB is offline  
Closed Thread

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off




Copyright 2002- Social Knowledge, LLC All Rights Reserved.

All times are GMT -5. The time now is 08:14 PM.


Powered by vBulletin® Version 3.8.8 Beta 1
Copyright ©2000 - 2017, vBulletin Solutions, Inc.