Solved

Windows XP Worm or Virus

Posted on 2010-11-24
10
388 Views
Last Modified: 2012-05-10
Has anyone run into a worm or virus from the  internet the will now stop XP starting?  My brother in low has a HD that when you boot it goes thtough the Dell Welcome screen but then will not start XP.  I put his Hard Drive in an external case with usb and connected it ot my computer with the intention of running m AVG against it.  It removed my AVG program and when I tried to reinstall, it locked up half way through the reinstall.

It will not let me gett to the internet, help files, USB  Flash Drives, CD drive etc.
Thanks for any assitance.
0
Comment
Question by:millerfw
10 Comments
 
LVL 29

Accepted Solution

by:
Sudeep Sharma earned 300 total points
Comment Utility
Boot the computer in Safe mode with networking and follow the steps below:
To clean and to check if you system is clean do following:

Run malwarebytes in Safe Mode with Networking and update it before running a full system scan:
http://www.malwarebytes.org/mbam-download.php

Then try HitManpro to make sure anything which might be left behind is clean:
32bit
http://dl.surfright.nl/HitmanPro35.exe
http://download.cnet.com/Hitman-Pro-3/3000-2239_4-10895604.html

64bit
http://dl.surfright.nl/HitmanPro35_x64.exe

If issue is not resolved by these tools try TDSSKiller:
http://support.kaspersky.com/downloads/utils/tdsskiller.zip
http://support.kaspersky.com/downloads/utils/tdsskiller.exe

Tutorial on TDSSKiller:
http://support.kaspersky.com/viruses/solutions?qid=208280684

or you could also try FixTDSS.exe from Symantec

http://www.symantec.com/content/en/us/global/removal_tool/threat_writeups/FixTDSS.exe

If this does not resolve your issue then try Combofix:

Download Combofix
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
http://www.forospyware.com/sUBs/ComboFix.exe
http://subs.geekstogo.com/ComboFix.exe

Tutorial on how to use combofix:
http://www.bleepingcomputer.com/combofix/how-to-use-combofix

Post logs here for further analysis.

Sudeep
0
 
LVL 47

Assisted Solution

by:dbrunton
dbrunton earned 200 total points
Comment Utility
>>  Has anyone run into a worm or virus from the  internet the will now stop XP starting?

There is stuff out there that will do that but more information required as to symptoms.

>>  It removed my AVG program and when I tried to reinstall, it locked up half way through the reinstall.

Did you boot off your hard drive or his USB drive?

Here http://www.raymond.cc/blog/archives/2008/12/11/13-antivirus-rescue-cds-software-compared-in-search-for-the-best-rescue-disk/ is a list of anti-virus CDS.  Not all the links work as this list is outdated but some do.

Other experts will comment as well.
0
 

Author Comment

by:millerfw
Comment Utility
Ihave computer up and running again and the other HD is going to be replaced.  I am splitting the points.  Thanks
0
 
LVL 4

Expert Comment

by:Vishal Patel
Comment Utility
You can try to boot from antivirus bootable disk. This will not start your windows but load its own OS and boot.

0
 

Author Comment

by:millerfw
Comment Utility
I have different issue now.  I managedd to .  I managed to ruin the AVG and found no virus or worm.  After putting the HD back in the computer, I tried to boot from the windows xp install cd but now i get the message that the drive are not founde.  I have checked the cables and all.  I thinking mothrer board now
0
What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

 
LVL 9

Expert Comment

by:faizbaig
Comment Utility
Drive not found message at the startup or after booting from XP CD ?
-> Just in case boot sequence not change to boot from CD...you need to change boot sequence to boot 1st from DVD or CD rom.

and also you  can check via BIOS drive (hard drive) is getting recognizing...if not most likely connection problem or drive.
0
 
LVL 47

Expert Comment

by:dbrunton
Comment Utility
SATA hard disk?

If so look at the BIOS and change the drive interface to Legacy or IDE and try again.
0
 

Author Comment

by:millerfw
Comment Utility
In the BIOS there are only two settings on or off for all drive.  The suystem has two cd/dvd drive and neither one is being recognized.
0
 
LVL 47

Expert Comment

by:dbrunton
Comment Utility
Are the drives on one cable or on separate cables?

If they are on the one cable disconnect one drive and test.  No joy then reconnect and disconnect the other and test.
0
 
LVL 91

Expert Comment

by:nobus
Comment Utility
download ubcd, and run a diag on the drive, to know it's status; it can be a bad disk : http://www.ultimatebootcd.com/      
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

Can I legally transfer my OEM version of Windows to another PC?  (AKA - Can I put a new systemboard in my OEM PC?) Few of us are both IT and legal experts but we all have our own views of Microsoft's licensing rules and how they apply.  There are…
It is only natural that we all want our PCs to be in good working order, improved system performance, so that is exactly how programs are advertised to entice. They say things like:            •      PC crashes? Get registry cleaner to repair it!    …
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now