[irwinm]

Hi Guys,

Newly registered but have been reading the forums for ages getting tips for removing viruses!!

I am having a problem with a Acer 2920 notebook. It had (maybe still has I think I got rid of it) the HDD failure virus which hides files and icons. I ran RKILL and then Malwarbytes in safe mode, this seemed to get rid of the virus. Then I ran unhide.exe to get the files, shortcuts etc back.

All seemed good but now the wireless internet is not working and some windows updates will not install.

The wireless is my biggest problem. It cant detect any networks. It shows with a exclamation mark beside it in device manager. I have tried to uninstall it and reboot but no joy.

Any ideas?

Thanks in advance
Michael

[Advertisements]

Welcome to GeeksToGo irwinm,

Let's take a look.


If the system is Vista/Windows7, when running any of the scan files we use, be sure to right click the file, then select "Run as administrator" to start the scan/tool.

And To make sure you have an accurate view of files there, make sure you can View Hidden Files. Also uncheck "Hide Extensions for Known File Types"


To keep them from interfering with the repairs, be sure to temporarily disable all antivirus/anti-spyware softwares while these steps are being completed. This can usually be done through right clicking the software's Taskbar icons, or accessing each software through Start - Programs. Here are some antivirus disable tips if needed.

------------------

Click here and download OldTimer's OTL to your desktop, then click that to open the scan display. At the top click "Scan All Users", then click "Run Scan". Make no other changes at this time.

When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are also saved in the same location as OTL.exe. Post the contents of those back here please.

-----------

Click here and download the installer for Gmer to your desktop, then click that file to run Gmer.


Once the opening scan finishes, click on Scan (again, before scanning, make sure all other running programs are closed and no other actions like a scheduled antivirus scan will occur while this scan completes. Also do not use your computer during the scan).

When completed, click on the Copy button and rightclick on your Desktop, choose "New" > Text document. Once the file is created, open it and rightclick again and choose Paste. Copy the information and post it here please.

Note - If Gmer shows it has located infection once it's opening scan completes, do not click the Scan button. We don't want hidden malware settings to cause any problems. Instead, just click on the Copy button and rightclick on your Desktop, choose "New" > Text document. Once the file is created, open it and rightclick again and choose Paste. Copy the information and post it here please.

-----------

Download aswMBR ( 511KB ) to your desktop.

• Double click the aswMBR.exe icon to run it
• Decline a download of avast itself if offered
• If avast! antivirus is already installed, go to the dropdown next to AV engine: and select (none)
• Click the Scan button to start the scan
• On completion of the scan, click the save log button, save it to your desktop and post it in your next reply.

A lot, but comprehensive, and will make sure we get a good view of everything.

[Jintan]

Welcome to GeeksToGo irwinm,

Let's take a look.


If the system is Vista/Windows7, when running any of the scan files we use, be sure to right click the file, then select "Run as administrator" to start the scan/tool.

And To make sure you have an accurate view of files there, make sure you can View Hidden Files. Also uncheck "Hide Extensions for Known File Types"


To keep them from interfering with the repairs, be sure to temporarily disable all antivirus/anti-spyware softwares while these steps are being completed. This can usually be done through right clicking the software's Taskbar icons, or accessing each software through Start - Programs. Here are some antivirus disable tips if needed.

------------------

Click here and download OldTimer's OTL to your desktop, then click that to open the scan display. At the top click "Scan All Users", then click "Run Scan". Make no other changes at this time.

When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are also saved in the same location as OTL.exe. Post the contents of those back here please.

-----------

Click here and download the installer for Gmer to your desktop, then click that file to run Gmer.


Once the opening scan finishes, click on Scan (again, before scanning, make sure all other running programs are closed and no other actions like a scheduled antivirus scan will occur while this scan completes. Also do not use your computer during the scan).

When completed, click on the Copy button and rightclick on your Desktop, choose "New" > Text document. Once the file is created, open it and rightclick again and choose Paste. Copy the information and post it here please.

Note - If Gmer shows it has located infection once it's opening scan completes, do not click the Scan button. We don't want hidden malware settings to cause any problems. Instead, just click on the Copy button and rightclick on your Desktop, choose "New" > Text document. Once the file is created, open it and rightclick again and choose Paste. Copy the information and post it here please.

-----------

Download aswMBR ( 511KB ) to your desktop.

• Double click the aswMBR.exe icon to run it
• Decline a download of avast itself if offered
• If avast! antivirus is already installed, go to the dropdown next to AV engine: and select (none)
• Click the Scan button to start the scan
• On completion of the scan, click the save log button, save it to your desktop and post it in your next reply.

A lot, but comprehensive, and will make sure we get a good view of everything.

[irwinm]

Jintan,

Thanks for your reply but I was under pressure to get this resolved so I did a full system restore

Thanks
Michael

[Jintan]

System Restore, if you can access it, is a good solution for malware removal. However, the latest malwares include things like bootkits that can survive that. Even if your system is symptom free, I would like to suggest you do at least the aswMBR and Gmer scans, and post those logs. Up to you, of course.

[irwinm]

Thanks Jintan it was a factory restore I did and it seemed to work ok. I scanned with Malwarebytes and Microsoft Security Essential afterwards and both were clear. Laptop is gone now friend took it back so cant run those other scans. You can close this now.
Thanks for your help
Michael

[Jintan]

I have had one situation where a bootkit (infected Master Boot Record - MBR) survived a factory restore. I had always assumed the restore rewrote the MBR, but at least once, this was not the case. aswMBR would likely verify that. You're probably wondering "Goodness, does this person ever just let it go?" But we have this opportunity, and it is just one scan to check.