Sanity: HELP!!!

[Vercas]

Sality: HELP!!!

Guys, my computer has been infected with the W32/Sality.xx virus and it spread trough all my C drive in less than three hours.
Most of my applications don't work, the internet is 20 times slower, my antivirus programs are shut down literaly and the online scans are forbidden.
My brother's laptop is also infected with this virus, but .Y not .xx
His laptop is much slower, it shuts down without any warning and the screen's colors are damn fucked up.

BEFORE COMMENTING ABOUT THE MONITOR, NO, I HAVE NO MAGNETS AROUND OR CRAP.

HELP!!!

 

[Just_Spectating]

reboot and use a backup

 

[Kercyn]

Reboot in safe mode and use Autoruns.

 

[Vercas]

Can't install new programs... Installers don't run.
Also I can't see the safe mode thing anywhere...

 

[TDR]

Next time make sure to use Deep Freeze (look into it) and activate it before looking at porn sites.

If all else fails you'll have to format your C partition and reinstall windows (that's what I did in a similar case). Then install an antivirus and scan your other partitions. Just don't touch anything from the other partitions before you clean them up!

 

[Kercyn]

Can't install new programs... Installers don't run.
Also I can't see the safe mode thing anywhere...

When you reboot, press F8 during POST and you'll see a list of available options.
Safe mode prevents most apps from auto-starting, and that includes malware.

 

[Vercas]

Next time make sure to use Deep Freeze (look into it) and activate it before looking at porn sites.

If all else fails you'll have to format your C partition and reinstall windows (that's what I did in a similar case). Then install an antivirus and scan your other partitions. Just don't touch anything from the other partitions before you clean them up!

Te sparg!!!

I have no idea what is Deep Freeze and I am not looking at porn sites, you pervert!

When you reboot, press F8 during POST and you'll see a list of available options.
Safe mode prevents most apps from auto-starting, and that includes malware.

Ok I'll try that tomorrow if the computer will be able to turn on...
Yeah, the BIOS doesn't even start.
I press the button to turn on the computer, it shows it's on but the processor and the monitor show no sign of activity.

I'll try to save the hard disk, at least...

 

[Deathcom3s]

If all else fails, just reformat.

 

[TDR]

Te sparg!!!

I have no idea what is Deep Freeze and I am not looking at porn sites, you pervert!

I said look into it, it's something that can save your computer from shit like this. But I guess you'd rather say "I'll kick your ass" ("te sparg") to people who are trying to help you. gg.

 

[Kercyn]

I said look into it, it's something that can save your computer from shit like this. But I guess you'd rather say "I'll kick your ass" ("te sparg") to people who are trying to help you. gg.

Hahaha does te sparg mean "I'll kick your ass"?
In what language?

 

[TDR]

Romanian. Got a problem with that?

 

[Dionesiist]

Oh my, what ever happened here?

 

[TDR]

Some kid got viruses from downloading porn.

 

[Vercas]

Toti sariti pe mine cand am probleme...

Oh sorry...
My computer is LOST now. Seems the BIOS is infected too.
Next is my brother's laptop.

I cannot be seen online too much from now on...
Sorry guys.

Pentru TDR
Nu a existat si nici nu exista vreo un fisier obscen in computerul meu. Doar Firefox girl.

 

[Super-Sheep]

Firefox is a girl?

 

[Vercas]

No, it's a photo with a girl wearing a firefox girlie. Nothing special.
Stop off-topic-ing here!

How can I cleanse my hard drive if i can't open it anywhere?

 

[Kercyn]

Romanian. Got a problem with that?

No dude I don't got a problem ffs. I just asked! Why did you get offended? oO

 

[TDR]

Ooo so you racist? That's what it is right? You...you...SCUM! My feelings are hurt; the damage has been done

@vercas: http://lifehacker.com/157578/geek-t...ard-drive-and-install-windows-xp-from-scratch
I never understood why people find it so hard to search google before asking questions. I guess it's the need for social interaction. No problem, I'll be your own personal friend.

 

[Vercas]

Thanks a lot but I need to save important data from my hard drive!
Like my Warcraft III! Plus the installer and the 4.81 GB of maps including my WIP systems and spells!

Isn't there a way to do it?

Oh and of course I searched on google but all the methods I found include the BIOS.
I am no expert on computers and I know almost nothing about BIOS.
If I messed it up, I'm even more dead.

 

[Kercyn]

If you don't know how to install an OS, maybe you should ask somebody else to do it for you. Win XP are a mess when it comes to installing, and mistakes can be made very easily. About your data, you just need an external HDD, lots of DVDs or a second HDD inside your computer. Use a Linux live distro to transfer the files between the 2 disks.

 

[Vercas]

I can install an OS...
But the hard drive cannot be accessed in a computer.
I already said what happends.
(It happends everywhere I try to open it, in any computer.)

 

[Kercyn]

If you can run a live Linux distro, what would prevent you from accessing the HDDs? The infection is on the Windows partition, so...?

EDIT: I did a little bit of a research and I found this. Hope it helps. Found that one too.

 

[Vercas]

Hmmm.
This virus affects only Windows of 32 bit.
I guess Linux will be immune to it.

I'll ask a professional nerd to help me...

 

[Kercyn]

Actually, linux-based operating systems are immune to almost any type of virus. That's why no antivirus for Linux exists (ClamAV doesn't count, as it blocks Win viruses on Linux xD)

 

[Vercas]

Okay, I've got a strange problem now...
It works perfectly, even better than before.
Now the virus is gone!

How the hell is this possible?
Some days ago I had thousands of errors about this virus in the C drive and now it's nothing there.
I scanned the computer twice, with my antivirus programs and online...

Any idea what the hell could happend?

 

[Kercyn]

lol maybe it deleted itself

 

[Vercas]

I panicked so much about the virus and now it's fucking gone?
Maybe it changed his version and the antiviruses can't identify them!

 

[Kercyn]

Nah, Sality is a relatively new virus, I doubt it's been updated. I still recommend to format your drives though, just to be sure.

 

[Vercas]

The Sality virus destroyed the computers of my father's military base.
Someone still saved some data...

I'll save some data and then format the hard drive.

 

[Dr Super Good]

Well firstly, there is no way a virus can curropt your BIOS so do not talk nonsense. This is because all motherboard or atleast good ones BIOS's have ROM defaults allowing for an reset and also can not be manipulated or changed from the OS and only before the bootstrap loader (before any hard disk stuff even starts).

If your BIOS fails then your PC has suffered a hardware failure, buy a new motherboard.

Your disk is safe, as long as the data has not been already destroeyed or the driver has not broken physically (yes they are mechanical and so can suffer mechanical failure). All you need to do is get another PC, plug it in and use that to scan and remove the virus. As long as it is vista or 64 bit, it should recognize the drive imediatly and the virus should be completly inactive (as logically it can not run unless you run or let it be run somehow) so you can remove it with force and restore all data. To do this you will have to pull some pins off at the back to changed it from master (all C drives are master) to slave configuation so that it is a secondary storage medium and not the main boot drive.

If you want to be absolutly safe, run LINUX and get a program capable of letting linux identify and manipulate windows dives (linux by default can not see the partitions so be warned). The virus will be totally usless on linux due to the totally different method of opperation, so you can delete and repair until you are happy.

After you have removed the virus, or if you can not remove the virus, back up all the important data and make sure it is clean (virus check it as deeply as possiable). You are then after reconfiguring it to be a master drive, placing it back into the PC and then destroying the virtual contence of the disk, basically cleaning it and checking for faults and stuff. You then repartition it to be what it was like before. Finally reinstall your windows OS onto it and update / install antivirus. Your PC will be as good as new, and should run even faster than before due to the lack of garbage created over time. Oh ofcourse you then put your important old files back.

 

[Vercas]

OKAY!
You were right about the mechanical failure.
A part of the Hard Disk was cracked and stuck inside.
And the virus is just gone now...

I'm lucky it still works.
Now I'm back in busyness!

Strange, my computer is much faster now.