Desktop infected with virus, want to transfer files to laptop for disk format on desktop

Tombstone24

Honorable
Nov 30, 2013
83
0
10,630
My desktop is infected with a virus. What this virus is doing to my desktop is it allows me to log into my account but when I do the screen is black with just a cursor, and it causes CPU usage to reach 100% at all times. I can safely boot into safe mode just fine, which tells me it is a virus. I have run numerous virus scans on the following antivirus software: Ad Aware, Malwarebytes, superantispyware, and none of them have found it. I am considering a format of the hard drive and reinstallation of windows 7. There is one catch though. There are some files that I want to move to another computer to save from the total format of the hard drive. Can someone tell me how to safely do this (That is without infecting the laptop computer) or if it is not safe at all? Any help will be appreciated. By the way, all of the scanners I used are all updated newer than the virus.
 
First things first:
Safe Boot and enter msconfig. Look for any strange startup items and make sure they're ticked off. This should prevent that sort of virus from starting itself when you're not booted into safe mode. This should stop it - as it clearly relies on your windows boot to start working. Therefore, disabling it in MSconfig should undo the worst of it; just be aware there may be asymptomatic components working on the system.

Use a live-cd to pull stuff off, but to make it easier to get everything working, this is a good first step.

Second: I still doubt the sterilization this method offers, so your best bet is to boot on a linux disk (ubuntu CD or usb - very easy to make and free). The virus cannot activate here, and so your files should probably be safe to copy over. Kaspersky also offers a free live CD you can do this with - and the added advantage of a virus scanner.

Then just copy what you want off onto a drive and be done with it. I'd still make a point of scanning the items before connecting it, but unless they're archives, exe, or dll files, you're probably a-ok to copy most of them off.

Nobody is going to tell you it's absolutely safe, but I would be fairly confident recommending this course of action. Doing this process in linux makes it so that the virus should not be able to piggyback onto the drive.

Disclaimer: Viruses are a huge annoyance and obviously hard to detect completely. None of this is 100% safe, but it's worked for me before, and to my knowledge I have not been re-infected.
 

Tombstone24

Honorable
Nov 30, 2013
83
0
10,630


Been there done that with the msconfig thing. That did not help at all. In fact I ticked all startup things off.
 


It's certainly not recommended. Most of those exe files are going to be standard software programs anyway, and just copying them isn't going to transfer. Make sure before you wipe the drive that you use a Windows boot disk and pull up the registry if there's software you don't remember the keys to. (you can probably do this on linux as well. There's likely a free tool for it).

As for MSconfig, you're probably missing something. In my understanding, SafeMode is basically just a stripped MSconfig to the bare essentials. Anyhow, it shouldn't be relevant if you're using a linux disk or the kaspersky one.

Have you tried a boot scan with something like kaspersky? I know it's not the best AV, but rather than scanning from within the computer sometimes it'll work if you use a live-CD.

Edit: Yea, I'd strongly advise using: https://support.kaspersky.com/4162
It has a GUI regeditor as well as the other tools you'll need.
 
if you want to transfer any files you run the risk of transferring the infection as well.those tools you used to scan your computer,while good tools,are not antivirus programs.do you have an av program?i use avast as its the top rated free av and better than most paid ones.scan with it in safe mode and (here is the important part)post the logfile so we know what it found.cant get rid of all of it unless you know what your dealing with.also download,update and run a scan with hijack this from trend micro.dont fix anything yet just post the log.here are the links.

http://www.avast.com/index

http://sourceforge.net/projects/hjt/

note that if you install avast you must uninstall any other avtivirus program you have as you cant have two avs running at the same time.
 
download avast from a "clean computer".download it to a usb stick.boot your computer into safemode and plug in the stick.the files will either come up via autoplay or go to my computer and open the stick to view the files.there will be a setup file.just double click on it to install avast.
 
you are not going to infect the usb unless this is one tricky ah heck. as to your last post.something i should know here?? if avast doesnt find it it doesnt necessarily mean your out of the woods.i would also like to see a hijack this log.there are also other tools we can use to get rid of this.it would be nice tho to know what we are dealing with.
 

Tombstone24

Honorable
Nov 30, 2013
83
0
10,630
Another question. I use safe mode with networking, and Ad Aware seems to be able to update the definitions, so can superantispyware, but MS security essentials and Malwarebytes seem unable to do this. Can Avast! do this?
 
if you are running microsoft security essentials you have to disable it before running avast.mse is an antivirus program albeit not a very good one.not sure offhand if avast can update in safe mode but would think so if its in sm with networking.yes download the exe file to the usb.
 

Tombstone24

Honorable
Nov 30, 2013
83
0
10,630
Hold on a second. I heard that I can repair windows with the installation disk, and it is obvious that Windows files are being messed with. Could repairing windows alone rid my computer of this unholy monster without the use of antivirus?
 
if you can get into system restore you can restore your system to before this happened.hopefully this thing didnt disable system restore.what kind of restore disk(s) do you have,or is it an install disk? avast and mse wouldnt play nice with each other thats for sure.
 


If it's not triggering in safe mode, it's likely not able to activate there.
Get all of your AV stuff (Malware bytes and Avast in particular) and do a scan in safemode, installing using the previous instructions.

That should help get rid of it if it's there. I'd still use linux to pull the files off though.

As for your multiposting - please use the edit function. It's in the bottom left.

Safe mode and system restore is a good solid option. I would still wipe the comp after just to be sure it's dead and gone, but w/e floats your boat.
 

Tombstone24

Honorable
Nov 30, 2013
83
0
10,630
Avast would not install no matter what did. I have installed AVG to do the command line scanner but when it pops up, the command line scanner window lasts for about two seconds then closes. Does that mean it is not doing anything?