Metanet Forums

I stuck a USB key into my computer and a message popped up from zonealarm firewall that some program was trying to connect (I think it started with B and had an X in it). I didn't recognise it, looked it up and there was some stuff about trojans. I was worried, I updated AVG antivirus and it detected something. I clicked info, it tried to bring up the virus encyclopedia and it crashed. I rebooted my computer from the power switch and after the bios it had a loading bar on a black background. After that it had the "problem last time, do you want to start windows normally" thing but it wouldn't let me press the arrow keys or enter and it made a funny tone, and a loading bar came up on top of that, and at that point I turned off the computer at the power. I'm running XP SP2.

Can anyone help? i had some very important stuff that wasn't backed up.

EDIT: I don't think it was the USB, I checked another computer with the same USB and it's fine

The first thing I'd do would be to get a live CD (e.g. Knoppix) and then copy all important data onto another drive.

maestro wrote:The first thing I'd do would be to get a live CD (e.g. Knoppix) and then copy all important data onto another drive.

Seconded, except that you should use Yubanto Lunix because it's more user-friendly.
Then boot into safe mode (spam F8 as your computer boots), load up your anti-virus and anti-spyware software, and let it all rip.

I tried that already, it makes a tone when I try to press any key including F8, The only thing I can do is enter the BIOS.

Never used Linux before.. is there any risk if I move the HD to another computer and copy files over?

mattk210 wrote:I tried that already, it makes a tone when I try to press any key including F8, The only thing I can do is enter the BIOS.

Never used Linux before.. is there any risk if I move the HD to another computer and copy files over?

Just make sure you're not booting from the infected hard drive and you shouldn't have anything to worry about.

For one thing, check to make sure that your keyboard isn't the problem. Try it on another computer and see if you just get the system bel sound when you press a key. It's possible, (though unlikely) that something in the keyboard broke at the same time you got the virus and the keyboard is always detecting 2 or 3 keys pressed (so pressing anything else will make the beep). If it makes the bel character sound every time you press a key, it's obviously detecting the keyboard though, and it's probably just the computer being corrupted. Never know though.

But, yeah, if you can't use the keyboard, there's really nothing you can do other than what's been suggested.

Mathematician's first step to solve a problem: try the trivial case first, then mess around with it!

when I moved the hard disk, it couldn't open and temporarily froze every time I tried it. Avg gave the error: could not open folder when I tried to scan it. I was running it as a slave. Am I screwed?

EDIT: I also tried the windows xp CD, which said it was an unknown filesystem, and I somehow managed to choose safe mode on the dialog, but it just brought up a list of files and rebooted.

Try Yubanto.

I use Mcafee 8.5 and Windows defender at the same time and this eliminates all viruses that it finds as well as scanning everthing on the computer
Defender runs a scan everyday to make sure that the computer is updated


that seems to take care of everything

Screeg wrote:

Tsukatu wrote:Try Yubanto.

Is that the same thing as Ubuntu?

Yes.

Thanks everyone for the help. I obviously couldn't run McAfee or any software because I couldn't even access the filesystem. I did end up trying a Linux Live CD, with no success. I eventually took it to a professional who apparently ran some special utilities on it and I have my computer back now. Case closed.

mattk210 wrote:Thanks everyone for the help. I obviously couldn't run McAfee or any software because I couldn't even access the filesystem. I did end up trying a Linux Live CD, with no success. I eventually took it to a professional who apparently ran some special utilities on it and I have my computer back now. Case closed.

Did you sneak a peek or ask what those utilities were at all?

No, but they seemed pretty specialized from the way he talked about them. If you actually need to know if you have the problem yourself I can go and ask..

mattk210 wrote:No, but they seemed pretty specialized from the way he talked about them. If you actually need to know if you have the problem yourself I can go and ask..

I was just curious, don't worry.

The most common file recovery software you'll see techs use (and my personal favorite) is R-Tools Technology's R-Studio. The package most home users would want is $49.99 (R-Studio NTFS) or $79.99 (R-Studio Complete). there's also R-Studio for Mac ($79.99) and the technician network license ($899. Luckily, this is only for service shops, so home users don't need to worry about that kind of investment).

R-Studio isn't terribly difficult to use, just be sure to read the manual. As the installer will warn you, NEVER install software to a machine you want to recover files from. there's a definite risk that the software you're installing will overwrite sections of the files you want to recover.

Symantec also has an offering, but I'm not terribly familiar with it. I'm sure there are others out there as well.

I'v had the thing where it say it wasent shut dow right but I don't know about your keys not working.If you were using a USB drive then I think that the drive was made wrong or it wasn't made for you'r computer.try using another USB.thats alll I can think of

Get a Mac and you are all better :D

Xaiier wrote:Get a Mac and you are all better :D

Crap. Total crap.
Really, even the fact that Apple touts how secure macs are creates an enormous security vulnerability, regardless of the OS itself. The reality is that, the way things are going right now, sooner or later OS X is going to end up with a significant market share, and Apple is going to have to start actually dealing with security. And based on Apple's past handling of these issues, it's going to be a very awkward day. Apple has shown several times that it doesn't have the security capabilities of MS. Apple's claims that OS X is 'simply secure' will be their own downfall as malware writers find thousands of identical security configurations with a slow patch cycle.

pff, so then they make AV. *nix in all its forms is currently less vulnerable to malware, and if the day arises that swathes of viruses start attacking random nix boxes, then the AV software on hand will have to get better aswell. at the moment, having a mac or running nix makes your box a lot safer. in any case, this thread is over. it should have stopped at

atob wrote:I was just curious, don't worry.

or definitely

lolzers wrote:unquoteable horror

but now it needs to die. if you want to discuss the technicality behind viruses and their paraphernalia (AV and the like), start another topic.

[quote="mattk210]I don't think it was the USB, I checked another computer with the same USB and it's fine[/quote]

It doesn't mean that there's no virus in it, maybe the other computer has weaker antivirus.

You know, this issue is actually resolved (a long time ago). Make another topic if you want to discuss viruses on macs.

if youre short on money, use all those free antivirus demos on another usb, and boot in safemode.