Virus that always come back after reformat?

Question

I reformatted 4 times and this virus keeps on coming back. Yes it is a full reformat. The virus disable taskmanager/registry. I think it may be the brontok worm but not sure. It makes weird files in my c dirve.. example : i7g4i7i1u8r6.exe and others, there all different after each reformat. I am desperate for help.

Please do not tell me to get an anti-virus program or "after reformat it should be gone"

Answer 1

You should try an Anti-Virus program first, then if that fails, try to reformat your hard drive and it should be gone!  Just kidding, maybe you should go buy a new hard drive since thy've gotten so cheap, before you give yourself a stroke! lol  Good luck.

Answer 2

You need 3 things before starting:

1 - a disk with all your drivers and the security apps installers: for the drivers go to the manufacturer site ; for the security apps go to

antivirus - http://www.avast.com/

antispyware - http://www.microsoft.com/downloads/detai...

................. - http://www.safer-networking.org/en/downl...

firewall - http://www.personalfirewall.comodo.com/

also it would be a good ideea to replace IE (it's a malware magnet junk) with http://www.opera.com/

They are all the best in their category and FREE

Once you downloaded them just burn them to a good quality disk.

2 - http://dban.sourceforge.net/ download it and burn the iso to a disk   - you need it because A FULL FORMAT WILL NOT ELIMINATE MODERN MALWARE

3 - a XP install disk: either your recovery disk (that came with the pc) or a geniune retail one, you should be able to borrow one.

Insert the DBAN disk and reboot.  Now all you have to do is to follow the instructions on the screen and wipe the whole hard disk. When it's done click Exit and, while the pc is rebooting, disconnect the internet line and insert the XP install disk.

Now you can do a truly clean install without the fear of a leftover malware.

After that reinstall all the drivers and all the security soft. Reconnect the internet line and allow all to update (for Spybot you have to do it manually).

Answer 3

Did you format ALL partions on the Hard disk?

Answer 4

This will remove brontok, it's a specialist removal tool from BitDefender for just that purpose:

http://www.bitdefender.com/VIRUS-157247-...

Also try:

Trojan and Worm Remover:

http://www.simplysup.com/tremover/downlo...

The program will work for a full 30 days, after which it will expire.

More details:

http://cotojo.wordpress.com/2008/03/07/t...

Answer 5

If you are getting infected by the same virus each time, then it seems like too much of a coincidence. I would suggest two courses of action:

A) Fix the current infection and move on:

The easiest way to fix it is using Malwarebyte's Anti-Malware (Turn off system restore, Download it, update it, do a full scan, and remove everything it finds).

I would also recommend the following programs to make sure that you don't get infected again in the future:

Spybot - Search & Destroy

Avira AntiVir Personal

Spyware Doctor Starter Edition

B) Format carefully

This doesn't mean that you should do a full format as opposed to a quick one, just that you take mindful steps as you do so. Are you formatting just one hard drive (In other words, could it be getting reinfected by a hard drive that is not getting formatted?) ? Do you go online right away afterward? Are you using a flashdrive on the machine that might have the virus on it?

Ideally you would download the 4 above mentioned programs and burn them onto a disk, or put them on a flash drive that you know is clean. Then, once you format, and before you connect the computer to the internet for the first time, install all the security programs. Then, the first website you should visit is Update.Microsoft.com to get the latest security patches for your operating system, as well as updating the definitions of all the security programs.

I hope this helps.

Answer 6

someone needs a new computer :]

Answer 7

I'm not sure how you're reformatting, but the most effective way to wipe out your hard drive is to remove and recreate the C: partition. Power down the machine completely. Then boot from the Windows Setup CD. Let Setup run and tell it you want to do a full install of Windows again.

When it gets to the screen that asks WHERE to do the install, read carefully. You can delete the C: partition. Move to the next screen and you will be able to recreate a partition in the non-partitioned space. Reformat the new partition as NTFS and continue with the installation. The only way a virus will be able to survive this routine is if it resides in the partition table on the hard drive. That's very rare today, because viruses are much larger than a partition table.