I have a computer that keeps on restarting again and again when the screen shows: “windows is restarting…”
Even when I start in safe mode…
Is there a way of making a diskette that will scan and remove that virus?
Is that Sasser?
Thanks!
Yvon
Which is your operational system?
XP SP2
I made a startup scan before all that and it found 1929 files infected… X-(
I restarted and it seems there was still something hidden somewhere. It was then that it began restarting over and over.
If I could start it on a diskette with a virus scanner or something to fix it…
Could it be an hardware problem?
Thanks
Maybe you should try AVG rescue disks or Sophos (http://www.sophos.com/support/disinfection/trojan.html)
Do you know if your file system is NTFS or FAT32?
Very unlikely…
NTFS
XP SP2 should have removed the Sasser vulnerability, but I suggest you run a boot-time scan from within avast!
With the number of infected file almost two thousand you system most be seriously compromised and it may be best to save/backup your data files, pictures, music, etc. and format and do a clean install.
It is quite possible that it could be hardware, but hardware usually ends up being an untidy crash, either a black screen or BSOD not a “windows is restarting…” screen. The usual suspects in hardware are high CPU temperatures, bad memory stick/s or PSU (power supply), all of which are difficult to track down/pin point.
I’m sorry… The link for Sophos doesn’t work…
The computer had a bad memory stick and I replaced it. That was the main reason why the computer had been brought to me. It couldn’t start and/or had weird behaviour. Now it works fine on that part of the problem.
As of backing up the data files, I would like very much to, but I can’t even get to the drive! It is my intention to format that junk, but I want to save the data first. If I could just start windows to burn a couple of CD’s. I tried the recuperation console on the XP CD, but I don’t think that can help, since the problem is most probably coming from an infection.
Yvon
I’ve tried some seconds ago and not a problem.
You can boot from DOS and use some NTFS reader driver, then saving the files into a USB driver.
Generally only to write into NTFS is needed a pay driver. For reading, it’s free.
You should check into the BIOS if the USB can be read (boot) or you’ll need a driver for it.
I don’t know about burning CD at DOS…
I’m not sure I understand how to boot from DOS… That option is not available in the startup option (F8). (Computer is not near right now either)
As a last option…
What would happen if I put that HD into another computer as a slave and transfer the data. Would the later become automatically infected?
At least it could allow me to burn data.
Yvon
There are some Linux version CDs that run from the CD they can see NTFS drives so you could possibly be able to get in that way.
Lots of info on google.
http://www.google.co.uk/search?q=Linux+run+from+live+CD
You could put the HDD in as a slave and extract the data to a folder in another drive/partition then ensure that the data if fully scanned. This should then pose little risk to the host system you put the infected HDD in.
OK, Thanks a lot guys, I’ll try that “plug into another computer” thing and see what happens.
That will be the easiest for me since I’m not that familiar with Linux (and I don’t have a CD at hand).
Nothing like a fresh install!
I’ll post the results…
Yvon
No problem, a belated welcome to the forums.
Your fast responses were considered as an early welcoming…
Yvon