iEntry 10th Anniversary Forum Rules Search
WebProWorld
Register FAQ Calendar Mark Forums Read
IT Discussion Forum Having IT issues? Got IT questions? Who doesn't? If you can't get your Apache to work with your MySQL or your php is choking on your ODBC... Let's see if we can help you come up with some ideas.

Share Thread: & Tags

Share Thread:

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 09-03-2008, 02:52 AM
WebProWorld New Member
 
Join Date: Sep 2008
Location: Florida
Posts: 20
eautocad RepRank 0
Default You cant fix this, I'm sure.

I know you can't fix this problem.. Here's the issue:


I got a virus on my computer, so I did the usual format and reinstall. Still there! whaaaatt your crazy right? No...


This computer is junked now because somehow a virus burnt itself to every read-only chip on the board and peripherals defying all logic of electronics as we know it... How do i know its on all periphs? I tried using them on other boards and then those boards were infected and rendered useless..... I know you can't fix this problem.

Can you? I've talked to every IT person I know and they are stumped, as well as I... I've got CS background and I just can't see how it could have "burnt" itself to read only chips... what in the world!!!!

If i can't figure it out in a week, I have someone at USF that is going to run lab tests on the chips to see if my house was broken into and chips were resoldered, and do some csi to see exactly how this happened

My prof said if it's what he thinks it is than this might be in the paper and on cnn... keep an open eye!
__________________
Add URL free to 6,000+ Websites RSS&Widget
View pagerank, traffic, quality, backlinks, and more!
Reply With Quote
  #2 (permalink)  
Old 09-03-2008, 02:28 PM
wige's Avatar
Moderator
WebProWorld Moderator
 
Join Date: Jun 2006
Location: United States
Posts: 2,651
wige RepRank 9wige RepRank 9wige RepRank 9wige RepRank 9wige RepRank 9wige RepRank 9wige RepRank 9wige RepRank 9wige RepRank 9wige RepRank 9wige RepRank 9
Default Re: You cant fix this, I'm sure.

Sounds like you got a rootkit type virus to me. Pretty common.

Doing a simple format and reinstall will generally not eliminate most rootkit type viruses. They install in what is more or less the boot sector of the hard drive, so that when you reformat and resinstall the Operating System they can immediately reinfect the system. There are special steps that generally must be taken in order to clean out this "invisible" area of the boot drive and eliminate the infection. Probably the easiest is to install Linux, and have GRUB rewrite your boot partition, then cancel the installation and run the Windows boot partition formatter to reset that partition to allow Windows to run.

That being said, I have heard of viruses that can infect the BIOS. Your ROM is not completely read only, this is why you can install updates to the system BIOS. If a virus does manage to get into your BIOS chip, cleaning the system may require special steps, generally starting with forcing an update of the BIOS. However, if your BIOS is infected (confirm by replacing all hard drives, and reinstalling the OS - do not connect to the network or any peripherals - if the virus is still there, it's probably in the BIOS) I would generally recommend sending the motherboard to the computer manufacturer for repair, since you might end up toasting the BIOS if problems occur. I have to say, though, this would be an extremely rare type of attack, and is unlikely to be the culprit. There is only so much you can do at the BIOS level, and only so much room on the chip to install the virus.

You did mention peripherals. It is very unlikely that peripheral devices would become infected. However, other computers on the network could be infected, and reinfect your system when you connect to the network. It is also theoretically possible that the router could be infected with a virus that is infecting the computer. Printers and other peripherals with embedded servers could also be attacked. However, again, this is extremely unlikely due to the variety of such devices, and the resources necessary to stage an effective attack.
__________________
The best way to learn anything, is to question everything.

Last edited by wige; 09-03-2008 at 02:31 PM.
Reply With Quote
  #3 (permalink)  
Old 10-11-2008, 07:29 PM
TrafficProducer's Avatar
WebProWorld 1,000+ Club
WebProWorld MVP
 
Join Date: Jul 2003
Location: United Kingdom
Posts: 1,642
TrafficProducer RepRank 4TrafficProducer RepRank 4TrafficProducer RepRank 4
Default Re: You cant fix this, I'm sure.

When formating did you try

fdisk /mbr

This will rewrite the Master Boot Record

(It is a low level format, It will wipe the Partitions, fdisk can be used to create new
Partitions)
Virus burnt itself to every read-only chip: This should not be possible; but read:-
Virus Warning:

How to reformat a computer if CMOS has virus? - Yahoo! Answers

https://answers.launchpad.net/ubuntu/+question/38591

Install, (I assume you are using), windows and do a virus scan before putting on any more software.
Use more than one Anti-virus tool. double check each bit of software.
Reply With Quote
  #4 (permalink)  
Old 09-01-2009, 05:30 AM
WebProWorld New Member
 
Join Date: Apr 2008
Location: Vienna, Austria
Posts: 15
Ladana RepRank 1
Default Re: You cant fix this, I'm sure.

You could try rootrepeal and rootkitrevealer (easily found googling). It helped me track down some bastards, and later removed them by booting from a knoppix dvd. Both tools are very handy to have in general and free too.
Reply With Quote
  #5 (permalink)  
Old 09-17-2009, 11:53 AM
WebProWorld New Member
 
Join Date: Jan 2009
Posts: 15
redcar RepRank 0
Default Re: You cant fix this, I'm sure.

I'm not sure about the peripherals becoming infected and would be the first one I've come across. My first thought as above was a rootkit virus.
__________________
Redcar | Gateshead | Durham
Reply With Quote
  #6 (permalink)  
Old 09-18-2009, 06:19 AM
WebProWorld New Member
 
Join Date: Aug 2009
Posts: 16
divengrabber RepRank 0
Default Re: You cant fix this, I'm sure.

ok got your question


First download new version of Avira Antivirus. Install it in your computer.


Start your pc in safe mode.

Then Install your software. Run the software.

This software remove all your computer virus and unregistered file which creating problem while working. After completing the scanning process shut down your computer and starts normally.


Try This.

Thanks.
__________________
SEO Company
Reply With Quote
  #7 (permalink)  
Old 10-23-2009, 12:01 AM
WebProWorld New Member
 
Join Date: Jun 2009
Posts: 20
kylelmoon RepRank 1
Default Re: You cant fix this, I'm sure.

Dont just format and reinstall... Remove every partition you got in your harddisk and create a new one.
Try low level formatting if this wont work.
I heard viruses invading the PC Bios though... But try first my suggestion before throwing your pc away.
Reply With Quote
  #8 (permalink)  
Old 10-23-2009, 05:54 AM
TrafficProducer's Avatar
WebProWorld 1,000+ Club
WebProWorld MVP
 
Join Date: Jul 2003
Location: United Kingdom
Posts: 1,642
TrafficProducer RepRank 4TrafficProducer RepRank 4TrafficProducer RepRank 4
Default Re: You cant fix this, I'm sure.

Yes; I know two harddrives that have been trashed because the users use bit-torrent/utorrent to download and install software which had this type of virus.

I think this virus embeded in the Harddrive electonics, not the BIOS.

Maybe if you can try the harddrive in another computer, but as stated use SFDISK to wipe and format from a boot DOS disk.
Reply With Quote
  #9 (permalink)  
Old 10-23-2009, 10:16 AM
wige's Avatar
Moderator
WebProWorld Moderator
 
Join Date: Jun 2006
Location: United States
Posts: 2,651
wige RepRank 9wige RepRank 9wige RepRank 9wige RepRank 9wige RepRank 9wige RepRank 9wige RepRank 9wige RepRank 9wige RepRank 9wige RepRank 9wige RepRank 9
Default Re: You cant fix this, I'm sure.

Quote:
Originally Posted by TrafficProducer View Post
I think this virus embeded in the Harddrive electonics, not the BIOS.
By the hard drive electronics, do you mean the boot sector (a partition of the hard drive where the bootloader lives - these viruses are called rootkits) or that it infected some other component of the hard drive such as the front-end cache?
__________________
The best way to learn anything, is to question everything.
Reply With Quote
  #10 (permalink)  
Old 10-23-2009, 03:43 PM
TrafficProducer's Avatar
WebProWorld 1,000+ Club
WebProWorld MVP
 
Join Date: Jul 2003
Location: United Kingdom
Posts: 1,642
TrafficProducer RepRank 4TrafficProducer RepRank 4TrafficProducer RepRank 4
Angry Re: You cant fix this, I'm sure.

Quote:
Originally Posted by wige View Post
By the hard drive electronics, do you mean the boot sector (a partition of the hard drive where the bootloader lives - these viruses are called rootkits) or that it infected some other component of the hard drive such as the front-end cache?
hard drive electronics; I was actually thinking of the chip, (IC) hard drive electronics, that is phyical hardware re-written to....

But.. I'm no expert
Reply With Quote
Reply

  WebProWorld > Webmaster, IT and Security Discussion > IT Discussion Forum

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -4. The time now is 09:07 PM.



Search Engine Optimization by vBSEO 3.3.0