Unknown Virus

September 1, 2009 at 13:04:33
Specs: Windows XP
I have a virus that has been affecting my computer for sometime. I have ran numerous scans with Norton Antivirus, SpyDoctor, Malibytes, and even reformated my hard drive. No detection and still comes back after reboot. I can only stop it's attack by running an antivirus scan.

When I start my computer the search companion starts. When I exit the program it starts again. When I try to execute a program from the desktop it will only allow me to select the last icon on the screen. Multiple searches pop up as well. When using the start menu I cannot select a program because another search appears.

After running a virus scan the search program will stop. then what appears to be a dialog box appears with a small sun icon on one side and a larger sun icon on the other side appears. I cannot select or do anything about it. It just blocks my view of the screen and while it is present I cannot mouse select any text to copy and paste. After awhile this rectangular box with the sun looking icons will dissappear then pop up which will pause a game my family might play.

I have better than average computer experience but never experienced anything like this before.

Please help if possible

Thank you

See More: Unknown Virus

Report •

September 1, 2009 at 15:30:01
Disconnect that computer from the internet.
Do a virus scan in safe mode.
Restart windows in normal mode, while computer has no connection to the internet.

Post the result.

Please send a reply, if you solved the problem !!!

Report •

September 2, 2009 at 14:15:25
Thank you for your response.

Before reading your reply I read about a similar problem on this site. The suggestion was to try AVZ Antiviral Toolkit. I did try this and it detected a Trojan-Downloader.Bagle. Immediately after Norton Antivirus detected and removed a W32.Almanahe.B!inf, W32.SillyFDC, W32.Sality.AE, and Packed Generic viruses. Somehow, I believe the W32.Almanahe B worm was still on my computer after reboot because it was found on the C:/ drive and the virus that caused the search window to start was still affecting the computer after windows installation and before I plugged in my external drive and the internet. The other viruses were found on my external drive. The problems I had explained in the first message are gone. A great start but it's not over.

I thought all was well so I installed the remaining Window Updates needed and then started to update new drivers from HP; Broadcom Wireless Lan Driver, Broadcom Wireless Lan Utility Driver and Touch Pad Driver. These were execution files which started to install but I'm not sure because the programs were running in the background. I could not see them as programs running in the Task Manager but I could see that the program was still processing by looking at the Task Manager but no window popped up at the end stating the program installed successfully or finished installing.

I rebooted the computer and a virus I had gotten rid of several months ago returned. I have since learned that this virus or viruses are effecting more than I had previously thought. When Windows starts there's a continuous error beeping sound. If I press the space bar a few times on the laptop keyboard the sound stops. Then the transfer files window pops up and before I can react a continuous string of letters begins typing in the space provided to transfer files. It has typed ffffffffffff and qqqqqqq. It will continue to type until I hit the space bar a couple of times to cause it to stop. I then close the window and this problem dissappears until I reboot again. At least so far. This virus or maybe viruses also seems to have control of my laptop keyboard as well. If I begin to type, either nothing happens or the wrong letters or numbers will type instead. I had unplugged the internet when this was happening so I don't think this is coming from an outside source. I have a wireless keyboard and mouse attached which work fine.

When I rebooted another thing happened. My desktop monitor that is plugged into the laptop didn't get a signal from the laptop so it will not work until I can fix this problem because the buttons allow it to synchronize. I tried to use the Control Panel Display but I only got dual screen.

After unplugging the internet I restarted the computer in Safe mode. Executed a full virus scan using Norton Anti Virus but it found no viruses. I then attempted to disable system restore but apparently the virus has changed the settings to Group Policy will not allow me to disable system restore. I then attempted to change the Group Policy which became difficult because the Group Policy was erased or I could find it or find a list of actions to edit.

I have deleted unecessary files from my external drive using Uniblue SpeedMyPC File Shredder.

I hope to successfully regain control of my computer once again. It's the first time I've ever had a virus affect any PC I've owned that could not be cleaned or deleted before it could create a problem. I plan to rescan both drives with Norton, AVZ, Spy Doctor, Microsoft Malware ect... If you have any other solutions please let me. Thank you

Report •

September 2, 2009 at 15:04:45
Not yet, but do also check the Internet Explorer Add-ons.
A few month ago, my friend had a problem with a virus that was installed as an Add-on for the Internet Explorer, which is started automatically, when windows starts up.

Please send a reply, if you solved the problem !!!

Report •

Related Solutions

September 3, 2009 at 03:05:16
You can do also "System Restore" if you dont have any options..

Report •

September 3, 2009 at 05:12:43
What I recommend is a scan from out side of Vista , Avira have a free Linux based rescue disc , From a good computer preferably , d\l from the link below , The downloaded .exe file creates an ISO to burn to CD . The rescue disc boots to German but a click on the UK flag......
You will of course need to configure Avira to tell it what to do with the infected files it finds . If you have Internet connection it can be updated but only in memory



Report •

Ask Question