pop ups + virus's (2)

[BCA]

Hello all,

My friend is still having trouble with his laptop.
We have tried most spyware things under the sun and run both antivir and AVG with little luck. AVG picks up on four things:

emoti.bat - Virus Found IRC/Backdoor.flood...
ymnz.exe - Trojan horse Downloader.small.9.X...
zedlrk.exe - Trojan horse IRC/Backdoor.flood...
palp.exe - Virus Found IRC/Backdoor.flood...

these then come up again at a later point and then AVG finishes with only 90k objects scanned (theres 120odd+k objects on his computer from its healthy days) - and it says that it cannot "heal" or "delete" the 8 problems found.

It also mentions in the results that it has two following errors:

partition table (MBR) Reading Error
boot sector of disk C Reading Error


It also runs a little slower than before and has a fair few annoying pop ups coming up despite Zone alarm and such... we feel alot of the things on his computer arent being allowed to work properly (such as AVG and Zone alarm) as they are keeping everyone elses computer on this network (who live next to us anyway) completely trouble free.

All help is much appreciated,
thanks,
Ben CA

[BliarOut]

Ah,
MBR stuffed, now we're getting somewhere.... Back everything up first in case you need to reinstall, but try rewriting the MBR.

Edit:

Duff info..... Will try googling on MBR viruses in a bit!

>> Edited by BliarOut on Friday 28th October 16:08

[Jinx]

^^^agree^^^

A nasty master boot sector virus.
Some help here:

www.microsoft.com/resources/documentation/Windows/XP/all/reskit/en-us/Default.asp?url=/resources/documentation/Windows/XP/all/reskit/en-us/prkd_tro_oxhc.asp

Not for the light hearted.

[BliarOut]

AVG can fix it

www.grisoft.com/doc/VirusFAQ/lng/u

And then click on the 0803 Removing virus infection from system areas (Partition table, Boot sector) link

Edited to add:

Use one of the clean machines to make the boot disk!!!

>> Edited by BliarOut on Friday 28th October 16:59

[BCA]

Computer illiterate... how do I make a boot disk? / he doesnt have a disk drive/ im totally clueless!!!!!!!!!!!

[BliarOut]

BCA said:

Computer illiterate... how do I make a boot disk? / he doesnt have a disk drive/ im totally clueless!!!!!!!!!!!

Easiest way is to find someone locally who's computer savvy and get them to make one for you....

All it needs is a a 98/95 machine. Just get to a command, put a floppy in the drive and type sys a:

Doesn't solve the lack of a floppy drive though.....

Alternatively, you could boot from a 98 CD and press F8 at startup. Select safe mode, command prompt only.

[BCA]

BliarOut said:

Alternatively, you could boot from a 98 CD and press F8 at startup. Select safe mode, command prompt only.

I think I have a 98 CD, so would I just insert it, turn the laptop on and press F8 and select the above? - what would that achieve?

edit: how is it best to back everything up too??

>> Edited by BCA on Sunday 30th October 17:06

[GreenV8S]

The only completely safe solution at this point is to start again - clean the MBR, repartition the disk, reinstall the OS and reinstall your apps. You may be able to save the application data by pulling it off the PC before you reformat it, but would you need to be carefull to ensure it isn't infected.

Your other option is to spend the next few weeks learning more than you ever wanted to know about the guts of Windows, and hope that you eventually manage to outsmart all the virus writers who have managed to infect the machine.