Wiping My Computer?

October 16, 2005 at 05:49:07
Specs: Windows XP Home, 2,200+ AMD / 512 MB

My computer has recently been infected by a worm which unfortunately i cannot delete, every now and again a window pops up saying "this file was found to be infected and was deleted". Dispite having 2 anti virus programmes (Sophos and Norton) alongside Norton Internet Firewall.

I am new to computers but my friend has told me that wiping out my computer may be the last resort, but as my computer is almost brand new (1 week old) it may be a viable option. I would like to know how to totally wipe all files from my computer so that i may re-install windows and get rid of the worm

Also, will wiping my PC definately get rid of the worm?

If anyone can help i would be most appreciative. Thanking you in advance,
Rob


smoke a joint and play C+C Generals, happy days...


See More: Wiping My Computer?

Report •


#1
October 16, 2005 at 06:12:35

Wipeing & formatting are 2 different things, I think formatting is what you want to do, but as your friend say's, for you being new, it is a last resort. Formatting will get rid of the virus, but lets try removing the virus.

What messages are you getting about the virus & have you turned off system restore?


Report •

#2
October 16, 2005 at 06:54:11

Have you tried the following website To destroy your infected file:
http://www.windowsecurity.com/trojanscan/
http://www.pandasoftware.com/products/activescan.htm

http://www.kaspersky.com/virusscanner

Ps:you should try all the Solutions out there b4 you Format your HDD
Bon Courage.


Report •

#3
October 16, 2005 at 08:04:27

Thankyou, i am currently looking at those websites and will try any tips you can give me. I am getting messages from Sophos saying "Virus Detected: etc." They are all temp files? I have had about 200 - 300 of those messages all in temp files for example temp40A.

Also getting messages from norton saying "Infected file detected <insert file location> file deleted" When i get the next detection i will post the location of the files being deleted by norton and also the name of the virus if i can.

As soon as i got the first message yesterday, i updated norton once again and ran a full system scan, coming up clean (??) and also updated and scanned with Sophos AntiVirus to no avail =s

I'll go onto http://www.windowsecurity.com/trojanscan/ now and keep u up to date with my progress. I have hardly any programmes on my computer at the moment as it is new, so i am leaning more to wanting to wipe my hard drive and reinstall windows xp etc. I have all of the CD's here to do that.

Also could you please explain the difference between wiping and formatting?

Thankyou again i appreciate the help

smoke a joint and play C+C Generals, happy days...


Report •

Related Solutions

#4
October 16, 2005 at 08:17:50

OK heres another Norton pop-up;

"Virus Alert
High Risk
Norton AntiVirus has detected and removed a virus from your computer.

Object Name --- C:\WINDOWS\Temp\tmp33.tmp
Virus Name --- W32.Alcra.B
Action Taken --- The file was automatically deleted."

I have had numerous of these messages and even though it says the file was deleted, more keep coming, always in "Temp"

smoke a joint and play C+C Generals, happy days...


Report •

#5
October 16, 2005 at 09:12:25

Also nowadays you need protection from Spyware,
which anti-virus programs may not remove.
Spyware info.from Microsoft

Here is a program that I use, at most computer stores,
including Office Depot, Office Max:
Spyware X-terminator
They say-
Spyware X-terminator will provide you with constant protection against Spyware, Adware, Dialers, Browser Hijackers, Trojans, Cookies, Key Loggers, Trackware, and other Malware while browsing the internet.

Also, be sure to update any software online
after installation, and every 1-2 weeks.
Virus and Spyware scans work better in Windows Safe-Mode.
A
Description of the Safe Mode Boot Options in Windows XP

Also bad things can hide in System Restore files. Turn off System Restore before doing scans.
Right click My Computer,
then System Restore tab.


Report •

#6
October 16, 2005 at 09:19:30

When you get a named virus with Norton, it's always worth going to the Symantec website & do a search for it - you will then get precise removal instructions. Generally they follow the same path of turn off System Restore, empty the browser cache & Windows/temp folders, update you AV signatures then run an AV scan, possibly in Safe Mode. On top of this Symantec will also tell you how to remove registry items which are often the cause of the re-occurence - it's worth doing this even if the item has been removed as Norton doesn't always do the clearing up of the registry.

Give this a go before wiping your drive as it will give you a lot of experience should the same thing happen again, & it gets really tedious doing a format/reinstall every week.

Incidentally, just for the sake of keeping your system clean in the future you may want to consider doing the following: If you're on broadband, in Internet Explorer, go to tools/options/advanced & put a tick in 'Empty Temporary Internet Files folder...' If you're on dial-up this will slow down browsing so you may not want to do it. Also download a system cleaner - 'ccleaner' is a good free one (do a Google for it) - running this regularly will keep your temp files folder clean & help stop future problems.

"I know that I'm mad - I've always been mad..."


Report •

#7
October 16, 2005 at 09:26:01

As far as restoring your computer to factory new
condition, and since your computer is new and under a warrenty, call or e-mail the computer's
manufacturer to learn how to do it.

My computer is made by Compaq. All I have to do
is boot the computer using a "Recovery CD", and select from a list of options. One is called
"Factory Restore". That will format and restore me to factory condition.


Report •

#8
October 16, 2005 at 16:27:45

"Also could you please explain the difference between wiping and formatting?"

Wipeing allows you to select certain files or free space & then delete your files in a secure way.
Such programs are > Simple File Shredder, Eraser, AnalogX SuperShredder, AbsoluteShield File Shredder.
http://www.snapfiles.com/Freeware/security/fwerase.html

Formatting removes everything off your hard drive.

==========================================

System Restore option in Windows Me/XP
http://www.augustana.ab.ca/other/cns/virus/
http://www.adamtj.org/repository/howto/W32.Blaster.Worm/
Users of Windows Me and Windows XP should temporarily turn off System Restore. Windows Me/XP uses this feature, which is enabled by default, to restore the files on your computer in case they become damaged. If a virus, worm, or Trojan infects a computer, System Restore may back up the virus, worm, or Trojan on the computer.

Windows prevents outside programs, including antivirus programs, from modifying System Restore. Therefore, antivirus programs or tools cannot remove threats in the System Restore folder. As a result, System Restore has the potential of restoring an infected file onto your computer, even after you have cleaned the infected files from all the other locations.

Also, a virus scan may detect a threat in the System Restore folder even though you have removed the threat.

For instructions on how to turn off System Restore, read your Windows documentation, or one of the following articles:

How to turn off or turn on Windows XP System Restore
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001111912274039?OpenDocument&src=sec_doc_nam


Report •

#9
October 17, 2005 at 02:46:51

So i should simply reformat? That is the thing i had in mind, wiping as you put it might still leave the worm on my hard drive. Do people agree this is my best option, and are there any sites to help me with the process?

smoke a joint and play C+C Generals, happy days...


Report •

#10
October 17, 2005 at 03:43:19

Being a newbie, formatting & installing has a lot of possible problems, you need an really experienced computer person with you.

If you are having trouble removing virii, you are going to find the formatting side harder, without help.


Report •


Ask Question