Amazing Virus

[imiddleton25]

Been asked to clean an infected PC up from school nurse
No problem i thought
slaved drive and scanned for virus, spy ware etc
out disk back in PC booted up
Default screen background changed to a security warning
Cant change it as desktop and screen saver tabs gone
ran spy bot remover (slow cup of tea time)
I bugg*r when i come back Blue screen of death
reboot try again this time am in the room when is BSD again
Noticed something odd about keyboard so press enter and BSD goes away to be replaced with the windows booting up little bar going across screen
Press enter a couple more times back to my spy bot scan.

The virus has a screen background (easy to do)
Also BSD screen saver (you can download this great practical joke on colleagues)
but the moving images in the fake windows boot up thats clever and almost convincing.

Hopefully nearly there now but thought i would share this with you Incase you get one yourselves.

[somabc]

Been asked to clean an infected PC up from school nurse
No problem i thought
slaved drive and scanned for virus, spy ware etc
out disk back in PC booted up
Default screen background changed to a security warning
Cant change it as desktop and screen saver tabs gone
ran spy bot remover (slow cup of tea time)
I bugg*r when i come back Blue screen of death
reboot try again this time am in the room when is BSD again
Noticed something odd about keyboard so press enter and BSD goes away to be replaced with the windows booting up little bar going across screen
Press enter a couple more times back to my spy bot scan.

The virus has a screen background (easy to do)
Also BSD screen saver (you can download this great practical joke on colleagues)
but the moving images in the fake windows boot up thats clever and almost convincing.

Hopefully nearly there now but thought i would share this with you Incase you get one yourselves.

F-Secure Rescue CD for all your anti-virus needs!

FREE F-Secure Rescue CD 3.00 to Clean Virus from Unbootable Windows Raymond.CC Blog

[imiddleton25]

Yes but its not just a virus its the tricking you into thinking BSD removing windows settings and looking like its booting when its not.Cleaned the virus no problem its al the rest thats the problem.

[somabc]

Are you sure thats part of the virus, it could just have been their screensaver already?

[imiddleton25]

No they had picture of the family dog before.

[somabc]

Clever, very Clever Indeed!

[MK-2]

Yep, had one of them here too. Sounds exactly the same actually. Did she by any chance open an email attachment?
Had it on one of our finance machines. Even now that I've cleared up as much as possible, Sophos still tells me everyday it's picked up a file from it. Probably trying to replicate files again.

That one sure is a to get rid of without wiping!

[RabbieBurns]

One of the staff here brought in her personal computer from home with something which sounds the same. (it was the school nurse as well incidently!)

The background image was changed, and as soon as it got to the log on screen, it would blue screen. I didnt check to see if it was a real blue screen or a fake, I just booted into safe mode and ran malware bytes, and it cleared the whole thing up no problem

Malwarebytes.org

[kennysarmy]

don't you just love it when the staff bring in their personal computers problems to YOU!
I think one day I might interupt THEIR lessons to talk about J4 tutoring for my daughter...

[RabbieBurns]

to be fair it had a school related document the headmaster needed urgently on it which she couldnt get access to, plus she is really hot, so I didnt mind helping

[tech_guy]

plus she is really hot, so I didnt mind helping

You sound just like me!

[DSapseid]

Yep and me!! LOL

[marco84]

Ive always found doing work for people is alot easier if you have something nice to look at!!!!

[dirtydog]

done a few of these for personal machines... hard to get rid of although one program did succeed. easier to wipe IMO.

[ChrisP]

read the first line and thought it was going to be a joke