Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Some days back I started receiving below message in Chrome whenever I open site with a secure connection such as https://www.facebook.com or https://www.gmail.com

Security certificate has been revoked

I was able to access the same two sites in other browsers.

See error snapshot at: https://chrome-a-googleproductforums-com.googlegroups.com/attach/f60e44de58e4f45e/Twitter%20Not%20Trusted.JPG?view=1&part=2

Upon Googling about the error I found that my system has been infected with malware. I did System Restore (using SysRestore Pro) but failed and system was unable to restore to previous state. Then I tried to run the antivirus scan from Micrsoft Security Essentials but the application was unable to open. Also whenever I downloaded/open any antivirus/anti-malware or such similar kind of tools, it denied each time, throwing different errors for each application. Moreover the antivirus application downloaded was considered as a virus!!! (too funny) and downloaded remain incomplete

I then tried to use Windows 7 System Restore but that too failed and after some steps of system recovery it threw below error

Windows failed to start. A recent hardware of software change might be the cause. To fix the problem
1.Insert your Windows installation disc and restart the computer.
2.Choose your language settings, and then click "Next".
3.Click "Repair your computer."
If you do not have this disc, contact your system administrator or computer manufacturer for assistance.
File: \Boot\BCD
Status: 0x000000f

My concern here is how to remove malware from the system once I start my PC??

share|improve this question
    
Check your system/hardware clock, is it correct? The certificates are time-based so that can be an issue. Though, one browser only.. Also, are your root certificate authorities in place in Chrome's settings? –  Ashtray Aug 5 '13 at 11:45
    
What software was detecting your downloads as malware? Did you follow the instructions in the error? –  Ramhound Aug 5 '13 at 12:07
    
@Alex - If I am not mistaken Chrome uses the operating systems Certificate Store. Firefox uses its own Store. This means that Chrome and IE should both present the same problem and it possible firefox would not. Its not mentioned what the other browsers are. Opera and Safari should both use the operating system's certificate store also. –  Ramhound Aug 5 '13 at 12:13
    
@Alex: Yes I checked that my system clock was running correct. Moreover I have not touched/changed certificate settings in Chrome –  Romil N Aug 5 '13 at 13:34
1  
@SmithPascalJr. - You should use a Windows 7 Pro already loaded with Service Pack 1. You need to solve the booting problem before we can help you. There are tools to boot into a disk to scan your hdd. –  Ramhound Aug 5 '13 at 14:09

2 Answers 2

Option 1

Repair windows start-up by booting from windows DVD

If you can get it to boot, use chameleon to get malwarebytes running.

Run malware bytes full scan and find out the full damage report. Clean up if possible and then check for rootkits using anti-rootkit.

I would then run a full scan with your favourite flavour of AV until you're happy your system is clean.

Option 2

Just get your data off using a linux live DVD and re-install windows. Run the anti-rootkit as soon as windows is installed.

I like option 2

share|improve this answer

Run msconfig and select the Boot tab. Select Safe and networking and then apply. Restart the computer and it will boot in safe mode with internet access but the virus wont be active.

Download microsoft safe scanner from the microsot website and run it. The safe scanner will find the maleware/virus and remove it and ask if you want to reboot. Before you reboot run msconfig again and select the boot tab. De-select the safe option and apply.

Restart the computer and it should be good.

share|improve this answer
    
Hello and welcome to superuser.com. How do you know that the virus won't be active when booting into safe mode? –  Mogget Nov 18 '13 at 6:30

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.