• Listen to a special audio message from Bill Roper to the Hive Workshop community (Bill is a former Vice President of Blizzard Entertainment, Producer, Designer, Musician, Voice Actor) 🔗Click here to hear his message!
  • Read Evilhog's interview with Gregory Alper, the original composer of the music for WarCraft: Orcs & Humans 🔗Click here to read the full interview.

how can i remove an infection that cause bluescreen when scanned

Status
Not open for further replies.

Deleted member 219079

D

Deleted member 219079

Hm I use 64 gB hard drive as my OS one, so I can easily reinstall OS after virus overwhelm. (Hope they can't hop to other drives as well :S)

So my suggestion to prevent great data loss caused by this is using multiple hard drives. For example you can get this 250 gB hard drive for $49.99
 
Level 12
Joined
Mar 13, 2012
Messages
1,121
formatting the harddrive cause damage to it. i knew one person that formattet a harddrive and had trouble with it ever since. if i knew what the file was named i could just delete it myself but since it cause bluescreen when scanned i dont find out what it is named.

You seem to be a special person. Somehow you know about tech and manage to use programs and on the other hand you are like grandmother finds internet with very unique believes and "knowledge".

ontopic: Its hard to help you with such a vague description. The cause might be malware or just a faulty program. For both there are thousands of possible answers depending on what exactly you got. Or maybe a hacker is in your computer again. Have you thought about switching back to typewriters?
 

Dr Super Good

Spell Reviewer
Level 65
Joined
Jan 18, 2005
Messages
27,290
formatting the harddrive cause damage to it.
Yes and no.

There is actually truth to this. Formatting a drive, especially with a new OS or moving partition logic, can often require considerable I/O and take several hours to complete. This will introduce some wear onto the drive. In the case of mechanical drives this will be the high RPM spinning and head movement required to perform the I/O. In the case of SSDs this will be the production of dirty blocks and reduction of average block life due to the I/O performed.

However if a drive in in such a condition that the above make a noticeable performance difference then it will likely fail soon anyway even with casual use. So for the most part the above can be written of purely as part of the drives average usage and considered as normal use degradation over the life of the drive.

i knew one person that formattet a harddrive and had trouble with it ever since.
I am guessing he accidently chose the wrong partition format. Some of the older partition formats perform very badly, to the point of being unusable, on modern large sized drives as they were only designed for partitions holding a few thousand files in a couple of MB.
 
Level 35
Joined
Oct 9, 2006
Messages
6,395
Without much description of the problem I would recommend the following:

Start in safemode (f2 or f8 when its starting, then select). (Read guide here)

First if you can make a scan for virus infection and similar using an antivirus program, given what you say I recommend an online scanner like Housecall (be very careful about using other scans, as they tend to be rather untrustworthy). If it works, of course follow the removal process and continue in this guide :wink:, if not - skip to next step.

Next Step:
Then in safemode: download superantispyware (or download from another computer and trnasfer it), same thing for malwarebytes anti-malware and AdwCleaner.

Then scan and clean using all above programs, and yes still in safe mode. Adwcleaner might restart a couple of times, so use that last.

Check for any spyware you might have using ad-aware (guide and download link here).

Then there is the option that you are dealing with rootkit, either checkout blacklight for removing it (comprehensive guide here) or try TDSSKiller if you Read user instructions on the site.

For more information and tips here is another guide for removal.


Now finally make sure every program you have is up to date, as that ensures a safer system. Guide and program link here. This also includes checking any drivers you have that might be too old.

And if all else fails (last resort), safemode -> backup files -> reformat it (make certain if you use on of the more effective methods that you have a copy of your OS).
 
  • Like
Reactions: pyf

Dr Super Good

Spell Reviewer
Level 65
Joined
Jan 18, 2005
Messages
27,290
A BSoD is caused when the OS enters an unrecoverable state as such this means that the virus is kernel level and as such there is no way to recover from it as it might have compromised the entire OS (even safe mode). Only solution is complete reinstall of the OS (standard procedure with kernel level viruses, the reason why they cost so much to fix since that comes to several hours per PC in a cooperate environment).
 
Level 35
Joined
Oct 9, 2006
Messages
6,395
A BSoD is caused when the OS enters an unrecoverable state as such this means that the virus is kernel level and as such there is no way to recover from it as it might have compromised the entire OS (even safe mode). Only solution is complete reinstall of the OS (standard procedure with kernel level viruses, the reason why they cost so much to fix since that comes to several hours per PC in a cooperate environment).

Well, as he does not actually describe his situation it sounds very much like it only occurs at certain situation. As such it is not unlikely that it can be removed (as you say yourself, it might have - but no certainties), even more so since I have seen it done multiple times and done so myself. In that situation it caused the BSoD indirectly and not because it was so embedded in the system by itself. However I would still recommend that list as it is a very wise thing to do no matter the situation when an infection is suspected. That said it could also simply be another reason entirely that he is experiencing BSoD (e.g. setup, drivers and so forth) hence why I prefer to "easier" solution before the last solution. Also if he posted the error code he gets from the BSoD it might help to identify which cause is the most likely.
 
Level 21
Joined
Mar 2, 2010
Messages
3,069
malwarebytes anti-malware is itself malware and a different program is required to remove it. my father got it on his pc by accident and i spent quite a bit of time getting it removed. safemode cant be entered very easily on my pc because of a lockout by the producer. that means that safemode can only be accessed by shutting down the pc incorrectly. i am scanning the pc with ad-aware though.
 
Level 35
Joined
Oct 9, 2006
Messages
6,395
malwarebytes anti-malware is itself malware and a different program is required to remove it. my father got it on his pc by accident and i spent quite a bit of time getting it removed. safemode cant be entered very easily on my pc because of a lockout by the producer. that means that safemode can only be accessed by shutting down the pc incorrectly. i am scanning the pc with ad-aware though.

Well, that is incorrect. There is malware who pretends to be and then there is the actual program. The reason it pretends to be that program is because it is a good program :wink: As for removal you should keep in mind that with certain security programs always to use special removal options as they burrow deep to follow what they remove.

Also use more than one given that they find different things (should be clear from my earlier post).
 

Dr Super Good

Spell Reviewer
Level 65
Joined
Jan 18, 2005
Messages
27,290
Most security software has kernel level drivers to help prevent removal by malware. An old trick was to uninstall any active security software by tricking the user to give you administrator permission and removing the files/registry links.

Additionally by the program being kernel level it has transparent access to certain driver related operations such as I/O and communications allow it to block malicious data before a process has a chance to process it. This is especially useful when trying to stop an exploit in a process that is no longer updated since the security software can detect the malicious data (that will take advantage of the un-fixed exploit) and block it before it reaches the process without the process even being aware what is happening.
 
Status
Not open for further replies.
Top