What should I do with this nasty Virus ?

Question

it came from a flash memory when my friend ducked it into my PC.

now all I can see is: eradicated sound drivers[no sound coming out at all]

and these garbage-looking Chinese websites popping up from time to time from no where!

I tried several anti viruses: AVG KasperSky Nod 32

all reaches the point of sudden termination!

please help :(

Answer 1

First let find out what it is.

Boot in safe mode with networking & do a free online scan:

http://www.bitdefender.com/scan8/ie.html

Answer 2

USB flash drive use autorun.inf to launch virus.

Use the following instructions which I copied from my Y/A contacts

--------------------------------------...

You can boot up your PC in safe mode command prompt

[press F8 during bootup]

unhide the autorun.inf

c:\attrib -r -s -h autorun.inf

rename it the autorun.inf to txt

c:\ren autorun.inf to autorun.txt

create a FOLDER call autorun.inf to prevent re-infection

c:\mkdir autorun.inf

find out the virus file name

c:\type autorun.txt

It may show something like this

[AutoRun]

open=virusname.exe

shellexecute=virusname.exe

shell\Auto\command=virusname.exe

unhide the virus

c:\attrib -r -s -h virusname.exe

remove the virus

c:\del virusname.exe

del the autorun.txt

c:\del autorun.txt

Keep the autorun.inf folder to prevent future infection

Answer 3

www.threatfire.com

Answer 4

If there's a good computer shop in your area, you might want to take it there and let a pro do it.  

Answer 5

Download, install and run CCleaner  to clean up old temp files.

http://www.ccleaner.com   [Free]

Restart your PC in safe mode with networking

http://www.pchell.com/support/safemode.s...

Download, install and run a full scan with Malwarebytes

http://www.malwarebytes.org

Run a full scan with Micro Trend House Call

http://housecall.trendmicro.com/

After the scans, restart the PC and update your anti-virus, remember to only have one anti-virus installed on your PC

http://www.avast.com/eng/download-avast-...  [Free, if you do not have one]

Answer 6

i think your infected by spyware and that spyware is stoping your antivirus  from removing it , download good antispyware like spybot search and destroy and malwarebytes anti malware from >  Malwarebytes.org install if the spyware let it reboot >press F8> scan>remove infection>reboot if it fails , then download hijackthis from>www.download.com/Trend-Micro-Hijack... run the save it to your desk top then see hijackthis shows any suspect thing if you dont know how to use hijackthis then post your hijackthis  log at bleepingcomputer.com or see  how to use hijackthis >www.bleepingcomputer.com/tutorials/tuto...

Answer 7

Run the following free programs:

Malwarebytes Anti-Malware:

http://www.download.com/Malwarebytes-Ant...

Download, install, update and select Full Scan.

Remove all infections that it finds after scan.

Spybot S&D:

http://www.safer-networking.org/en/downl...

Download, install, update and Immunize, turn off Tea Timer then click 'Check for problems' then when complete select all and then 'Fix Checked'

Spyware Doctor Free Basic Edition - Realtime monitoring:

http://pack.google.com/intl/en/pack_inst...

Its free with Google pack, untick all boxes except Spyware Doctor. Download install, update and run.

SUPERAntiSpyware Free Edition:

http://www.download.com/SUPERAntiSpyware...

Download, install, check for updates, then select Scan your Computer, select your drive and select Perform Complete Scan

VundoFix:

http://www.symantec.com/content/en/us/gl...

Disconnect your computer from the internet

Run vundo

Restart your computer

Run the tool again to ensure no traces are left.

If there are the reboot into Safe Mode and run FixVundo again.

If your desktop has changed or icons are missing also use:

Wallpaper Hijacker Removal Tool:

http://www.majorgeeks.com/Wallpaper_Hija...

Note: You should hit all "Repair" buttons even though it may not say "Found!" This will fix a wallpaper hijack everytime if all repair buttons are pressed.

A-Squared Free:

http://www.download.com/A-squared-Free/3...

This is not a limited version but a full tool to clean your computer from Malware, Spyware, Trojans, Backdoors, Worms, Dialers and Keyloggers.

How to use:

http://cotojo.wordpress.com/2008/07/07

If the problem persists, turn OFF System Restore and scan with the above programs in Safe Mode, Right click My computer > select Properties > System Restore Tab > Tick Turn Off System restore on all drives.

After scans are complete and machine is clean remember to turn system restore back ON and create a new restore point.

Once your scans are complete and your machine is clean, uninstall some of the programs, I suggest that you keep Malwarebytes for manual scanning, Spyware Doctor for realtime monitoring and Spybot. The remainder can be removed to save drive space, but you may want to keep the installers for future use.