Need desperate Virus/Adware

[aolsuxs]

I use AVG antivirus and lavaspot for my spyware but have been slacking a bit and it seems to have caught me. Was using computer yesterday and noticed AVG detected a trojan, gave me the option to heal or move to vault. I moved to vault but I kept receiving warnings for it with similar file names. I tried healing option with same result. Throughout this time I notice IE would randomly open to various spam sites. Unfortuently I did not divert my attention to this at the time since I was preoccupied. Ran Adaware and figure it would clear it out.

I reboot the next day unfortuently it is stuck as soon as Windows is about to boot it reboots again. I tried Safemode, was successful, logged in and ran adaware again and antiviral, thought I was in clear.

Rebooted and again same problems but this time I cannot even access safemode. I get an error saying some file associated with "baseshjm32" is missing and to reinstall as it might help. Unable to access Windows now...any ideas?

 

[mechBgon]

If possible, slave the drive into a second computer and rescue any important data as your first step. After that, if it were me, I would nuke the entire Windows installation, reinstall Windows, get it secured, and try to avoid whatever brought on the previous attack. Would that be an option for your situation?

 

[Gatecrasher3]

you and me too bud
there is a bad bug going around
http://forums.anandtech.com/me...=2143854&enterthread=y

 

[bwatson283]

Build a UBCD and remove your crap from that way.

 

[robisbell]

if you can get online in safe mode, goto http://housecall.trendmicro.com

if you can't, you're looking a total drive and partition wipe of the drive, and reloading windows from scratch.

 

[cubby1223]

Hook the drive up as a slave to a clean computer. You're not going to infect the clean computer, and you'll be able to do a far more thorough job with the anti-virus scan.

 

[dclive]

Originally posted by: aolsuxs
I use AVG antivirus and lavaspot for my spyware but have been slacking a bit and it seems to have caught me. Was using computer yesterday and noticed AVG detected a trojan, gave me the option to heal or move to vault. I moved to vault but I kept receiving warnings for it with similar file names. I tried healing option with same result. Throughout this time I notice IE would randomly open to various spam sites. Unfortuently I did not divert my attention to this at the time since I was preoccupied. Ran Adaware and figure it would clear it out.

I reboot the next day unfortuently it is stuck as soon as Windows is about to boot it reboots again. I tried Safemode, was successful, logged in and ran adaware again and antiviral, thought I was in clear.

Rebooted and again same problems but this time I cannot even access safemode. I get an error saying some file associated with "baseshjm32" is missing and to reinstall as it might help. Unable to access Windows now...any ideas?

As others have suggested, attach the drive to another machine and scan it from the other machine (while booted into a clean copy of Windows), or build a UBCD or BartPE CD with current antivirus scanners on it.

 

[aolsuxs]

The problem I have with the UBCD is that I can only scan the CD Rom drive that I used to boot the CD with and not my HD, it doesn't seem to reconize anyother drives

 

[dclive]

The drivers for your disk controller aren't present then. Read the docs to see how to include them.

 

[robisbell]

I've gotten UBCD to work on most everything, including SATA 300, so there's another issue.

does the HDD show up in the BIOS?

 

[aolsuxs]

Wow I am killing my self, just tried to place the HD under another computer as a slave and now the new computer won't boot up windows. Even if I disconnected the original infected HD it won't boot. Gives me an "UNMOUNTABLE BOOT VOLUME" BSOD

 

[dclive]

Something else is wrong; the bad drive won't arbitarily run code; you have to either boot from it or run programs from it for that to happen. Run a chkdsk on the 'new' (now non-booting) HDD.

 

[dclive]

Originally posted by: robisbell
I've gotten UBCD to work on most everything, including SATA 300, so there's another issue.

does the HDD show up in the BIOS?

Depending on the mode the SATA controller is in (AHCI, RAID, etc.) it may or may not work with the built-in UBCD drivers.

 

[aolsuxs]

Which docs are you refering to to access the disc controllers?
I was thinking it was just booting from my CD before it has a chance to read my HD and thus I was thinking of switching the IDE cables

How do I access Chkdsk on the other drive?

Thanks again for your help

 

[aolsuxs]

Just an update...

I can use the disc tools to run diagnostics on my drive (no errors came up) but when I booth up either of the Anti virus programs they cant detect the HD still and only the boot drive that AV program is stored.

this is frustrating

 

[robisbell]

okay, use your xp cd to fix the mbr.

 

[dclive]

Inaccessible boot device means a STOP 7B, Windows can't mount the boot device. It has nothing to do with an MBR. He needs to boot with the XP CD and then run CHKDSK against this now-bad hard drive.

 

[aolsuxs]

Alright hopefully I can find the XP CD somewhere...

So I have do that to both computers right?

I am just lost how this could have happened to the second hard drive (The clean one that was set as master to the infected dirty one)

 

[dclive]

Let's look at one thing at a time. Your problem with the 'clean' PC is that you get the 7B error; let's start with that first.

 

[aolsuxs]

Ok so my search for my Windows XP CD is not looking good nor can I get a hold from any of my friends...

However I might be able to get access to a lap top, is it possible to connect an IDE hard drive to a lap top?

 

[dclive]

sure, just buy the appropriate adapter

 

[bwatson283]

nope, not unless you have a usb drive adapter

 

[aolsuxs]

Alright I may be able to get an adapater but I am little worried that I could screw up the lap top, ideally I just boot up the HD and run CHKDSK/AV/etc on the HD from the clean lap top correct?

I tried this approach earlier with my other PC but again now the new PC has this unmountable boot error

 

[dclive]

Just get an XP CD.

 

[aolsuxs]

Ok able to get XP CD and ran CHKDSK

The volume appears to contain one or more unrecoverable problems'