Forum Home
Press F1
 
Thread ID: 123660 2012-03-09 08:00:00 Reformating to remove trojan/virus Clod (7853) Press F1
Post ID Timestamp Content User
1263975 2012-03-09 08:00:00 I have a hard drive that has been infected with "PC Performance & Stability Analysis Report" which appears to have PUM.Hijack start menu and PUM.Hidden desktop as the virus/trojans. Is it possible that by re-formating the Cdrive it would remove the bugs and make the D drive usable to recover some files or (as I suspect) the bugs will also be in the D drive. That is I reinstalled Windows then scanned with malwarebytes from disc plus any other applications recomended by google. I realise if I reformatted the whole thing it would be wiped clean of everything virus and files and I can use it as a 2nd hard drive. Otherwise I'll just do the removal as recomended by malwarebytes in safe mode. Its just been lying around for a while in an old computer so I thought I'd see whats possible. Plus I can learn something maybe :clap Clod (7853)
1263976 2012-03-09 08:27:00 Could try Anti-rootkit utility TDSSKiller support.kaspersky.com if you already have not

Also do a Highjack This report and post the log here for speedy to look at
Lawrence (2987)
1263977 2012-03-09 11:27:00 I think its a rogue program (www.bleepingcomputer.com) Speedy Gonzales (78)
1263978 2012-03-09 11:41:00 I had a virus once... As soon as i knew i reformatted. Its the easiest and best way to get rid of all viruses. But then again all my important information is old and on other drives. Slankydudl (16687)
1263979 2012-03-09 20:25:00 Reformatting should give you access to the D drive, but as you mention it does run the risk of re-infection. A safer way to recover files would be using a Linux Live boot CD providing you had somewhere to copy them to, of course there's always the possibility that you'll copy the virus along with the files and still end up infected. Myself If didn't need anything on the boot disk I'd do it something like this;

1. Disconnect the D drive (if it's a separate physical drive)
2. reformat and reinstall windows on the C drive
3. Install anti-virus and anti-malware software
4. Make a backup image of the C: drive
5. reconnect the D drive and scan the Bejeebus out of it

If D is just a partition you can still do this, it's just not quite as safe and you need to be careful not to access the D drive before being adequately protected.
You could just try and remove the infection, often it can be quite successful but personally it leaves me with the nagging doubt it's not truly gone.
On top of that the last nasty virus I did battle with took longer to remove than I would have spent doing the steps I suggested.
dugimodo (138)
1263980 2012-03-09 20:38:00 Thanks dugimodo, thats what I was thinking. It doesn't worry me terribly if the files get deleted so I'll give the D reformat option a go. Clod (7853)
1263981 2012-03-09 23:51:00 There is no need to reformat - you can just reinstall windows over top & no lose any data. If you want to keep it tidy, you can boot off a Ubuntu CD and move everything into an old data folder first. Greven (91)
1263982 2012-03-10 00:03:00 That wont remove this, if you install over windows. Unless you do a clean install. You would still have to remove it first Speedy Gonzales (78)
1263983 2012-03-10 00:08:00 It won't remove the file, but the file will no longer run unless you manually run it. Sure it would be better to remove the virus without reinstalling, but it sounds like Clod is already dead set on a reinstall. Greven (91)
1263984 2012-03-10 00:14:00 Reinstalling over the top is a dirty way to install. Can cause issues, not to mention it's messy.
And anyway a reinstall is always a last resort when something might be lurking that the usual methods can't find.

If cleaning isn't working with various malware tools, do it manually.
pctek (84)
1 2