Link to home
Start Free TrialLog in
Avatar of tonyadam
tonyadamFlag for United States of America

asked on

what is the most effective way to clean a severely infected laptop

Toshiba laptop with W7 Home.  System appears to be severely (or deeply) infected.  Have already tried the normal steps and it remains a problem.  Examples, MS clone firms calling to say that the system in infected and to call MS.  Music playing in the background....sometimes etc. etc.  I can remove the drive from the laptop and connect to a clean system.  Is that the most "EFFECTIVE" way to clean the system?
Avatar of John
John
Flag of Canada image

The honest and effective answer to this question is usually the same: Back up the system, format the hard drive and reinstall Windows. In the state it is in, you will find yourself in a black hole trying to clean it up. Such damage is rare in my client machines, but reimage is what we do in such cases.
Avatar of Larry Struckmeyer MVP
The most effective way is fdisk/restore from backup or system recovery from hidden partition.   Scanning from a bootable AV DVD is sometimes effective, as might be removing and scanning while attached as a not booted drive from another computer.  But the most effective is to wipe and reinstall.

Pay no attention to unsolicited phone calls... that is a scam.  They don't know anything about your computer until you allow them to connect to it, at which point they will clean not your computer but your bank account.
John Hurst--
For my education.  Wouldn't using an image after formatting reintroduce the malware?
I used Reimage is as a shorthand.  I said before that:  Back up, format and reinstall Windows.

I would not use an old image (made from the machine) unless I knew for a certainty that is was virus free. We have such images at clients and so we use those as well.
John Hurst--
Thanks.
If you connect the drive to clean system then it will infect the clean system as well. What is your goal? Repair the current system or get rid of virus problems from the drive? The most effective way is wiping the HDD, not simply formatting it. But is this exactly what you want?
Have you scanned the drive with Malwarebytes? With Kaspersky and other antiviruses? A teial version must be ok for your needs.
Avatar of tonyadam

ASKER

John Hurst....what is "Reimage is"?  My challenge is that this Toshiba system does not have a factory image.  I suppose I could down load a W7 from somewhere and then fight with MS to get it activated as "legal".
You can run into problems trying to use a retail Windows 7 DVD with an OEM key. Drivers can be another issue.

Best to get recovery media from Toshiba.
Unfortunately, there doesn't appear to a way to download a recovery disk from Toshiba.  I agree that it would be best.  I don't mind working thru the driver's issue even though it is a pain.  Many functions on retail systems are unnecessary for a "standard" system install.  However, I don't know where to get a W7 64 bit version to download.
You can try New Egg, Tiger Direct, Software King and such places but you have to pay for the license. Microsoft does not appear to be distributing it any more.

Another possibility is to upgrade to Windows 8 if you have to purchase anyway.
Do you know of any discounted W8 64 bit version upgrades?  Interesting idea.
Try the sources above including Software King. I have used them before.

My ThinkPad X230 is Windows 8.1 Pro 64-bit and I have it working quite well (Desktop only, No Metro). Windows 7 is now at end of life, although it will get security upgrades until 2020.
>>  Do you know of any discounted W8 64 bit version upgrades?  Interesting idea  <<  then you must have a running OS that is ok first - which you don't have.
ARe you sure there is no factory reset partition ?  it is often hidden
you can start it by holding the ZERO key during boot; here's the complete description :
http://en.kioskea.net/faq/4811-toshiba-laptop-reset-to-factory-settings
Call Toshiba for restore media.

If there is a Windows Key sticker on the bottom of the box, any Windows DVD of the same version will accept that key.  Borrow one from a friend or find one from a highly reliable seller on Ebay.  What is not allowed is to move that key to a different computer.
Nobus...I should have mentioned that the original HD in this laptop failed.  I had fortunately made an image of the OS when new and used it to re create the OS when I replaced the drive.  Unfortunately, I no longer have that image.  I've ordered the Toshiba factory DVD ($30) which isn't a bad price and will go that route to bring the system back to current.   As a clarification question though....wouldn't I see the factory recovery partition by looking at Disk Management?
Yes, usually it is visible there but has no drive letter. And you are not able to assign a drive letter to it.
ASKER CERTIFIED SOLUTION
Avatar of nobus
nobus
Flag of Belgium image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
take the hard disk out of the laptop and put it into an enclosure and connect it to another company and back up your files into a folder, then format the hard disk. replace hard disk into the laptop and reinstall the windows on your laptop.
and once fully installed and configured - best take an image of the whole drive
you can use the fre paragon software for thsi :  http://www.paragon-software.com/home/br-free/download.html
I did a full format of both the OS partition and the data partition and then attempted the restore utilizing the Toshiba restore CDs which arrived yesterday.  Unfortunately, disk 2 of the 3 set volume is corrupted.  I'm now awaiting another shipment from Toshiba.  I would prefer to have a successful restore, new image and the creation of a restore factory image partition which I assume the CDs will create before closing this question.  I'm assuming that this will not be possible until about Monday, Oct. 6.  Thank you for your patience.
no problem; i'll be 'round
I've requested that this question be deleted for the following reason:

Not enough information to confirm an answer.
tonyadam - we are waiting for your reaction !
My apologies for the delay in my response. The Toshiba Recovery CDs (second shipment) finally did arrive 12 days after they were ordered.  I personally think this is unsatisfactory.  Regardless, after restoring the system and doing well over 200 MS updates, the system is up and running OK.  Thanks again for everyone's help.
You are certainly free to award points to whomever you wish.  But as far as I can see, the person awarded said "do what John Hurst and Larry said".    I think you should have at least split them.

But your call.  Next time, give some thought to the awarding of points.
OK...but I don't know how to change it now.  I'll make it up to John Hurst next time.
tonyadam--
You click the Request Attention button at the bottom right of your first post and request an adjustment.