Virus in HDD

Helllearner

Member
Oct 27, 2010
115
0
0
Hey guys,

My HDD has got a strange virus .... it will open but then it shows it partition in it again and that partition wont open .....at first my avast antivirus found out the virus but then it got hung suddenly and crashed. Now I cannot seem to access the drive and all of my important data.
This is what it does

64419195.jpg

60619501.jpg


Now my antivirus wont even detect the virus anymore...

Any help is appreciated!


ok,
I seem to found to virus name
~$WQTS.USBDrv
 
Last edited:

Bubbaleone

Golden Member
Nov 20, 2011
1,803
4
76
You've probably caught a rootkit. Download ComboFix, but rename it to something else before you save it to your desktop, because this type of virus will disable antivirus programs it recognizes. Nothing fancy; just rename ComboFix.exe to ZyX.exe, for example, then save it to your desktop.

Once you double-click to start ComboFix DO NOT touch the mouse or keyboard until it's completely finished. You'll know when it's done because it will automatically open a scan log, in Notepad, on your desktop. If ComboFix can't kill it from the Windows environment you'll need to burn a copy of Kaspersky's Rescue Disk 10, then boot the disk and run the Kaspersky virus scan from it's Linux environment.
 

Ketchup

Elite Member
Sep 1, 2002
14,558
248
106
Since it is only showing a link to itself, I wonder if the virus or Avast found a way to mark files on that drive as hidden?

You could try going to Folder Options and un-checking the 2 hidden file options.

Edit: just saw Bubbaleone's post. Would be a good thing to do.
 

Helllearner

Member
Oct 27, 2010
115
0
0
Thx for the replies.

I tried malware bytes to remove the virus. It did find 3 but it didn't help much at all..also I checked cmd to see the files and this is what I found
42757709.jpg



I shall try combo fix and see if that works


EDIT 2:

Combofix did the work!!! thx a lot guys!!
 
Last edited:

VirtualLarry

No Lifer
Aug 25, 2001
56,570
10,195
126
Make sure that you scan with another AV. Recent versions of combofix, were themselves infected with a virus.