Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

This past month, i've been having many issues with malware, you can tell by looking at my profile, I'm so sick of it to the point where I'm really thinking to dump my windows, once and for all and go for linux. But it's easier said than done.

I've also had many troubles with my graphic card, it doesn't load linux, unless i use nomodeset, and many games don't work on windows. So I'm asking this question to help me determinate the issue.

Before I start, I'd like to say that this is the final question regarding this subject, if this topic won't fix my problem, I'll decide next week whether to dump windows or reinstall it.

I'm using windows 7, 64 bit, in the last 2 weeks, I installed and uninstalled the following antivirus in the hope of fixing the problem, MWB pro, MWB rootkit, windows anti rootkit, kaspersky anti rootkit, avg 2013 internet security, MSE, and bitdefender internet security 2014, which I'm using now, because avg license expired, and spybot and no I didn't install 2 real time anti virus at the same time.

All of those removed some malware (I don't like to say virus), but every time i start windows, 2 or 3 minutes later, i see a command prompt, that opens up and closes faster than you can blink, i strongly believe it's a spyware, but i can't prove it.

So i decided to fix it, yesterday, I downloaded bitdefender downloader, ran the downloader and went to sleep while it was downloading, next day my brother said that he had to turn off my laptop because i had bluescreen, which is strange.

There's a user here, i think he's Ramhound, he said Do not try to scan a potentially infected system while running it. Shut it down, boot from something else, then scan from that other booted

So I downloaded today bitdefender rescue cd, boot it up on my usb and scan the pc, got 25 infections, with the same Trojan horse

enter image description here

I tried to delete them all (delete not fix) 23 got deleted, 2 got renamed.

And I tried to restart windows and see what i got (i captured it on my phone), when the windows starts, i see this and this (same thing, captured twice).

Why is this happening? By the way I checked the running processes, nothing suspicious, same thing with msconfig services (unless i'm missing something, since hackers sometimes use a name of a real program so the user wouldn't know about malware running on their system)

share|improve this question
    
please note that is a Heuristics match. –  Lorenzo Von Matterhorn Sep 21 '13 at 0:41
2  
refer to this answer: superuser.com/a/512901/179299 note: your best option is a format. –  Lorenzo Von Matterhorn Sep 21 '13 at 0:42
    
The graphical glitch isn't malware –  Ramhound Sep 21 '13 at 0:50
    
@Ramhound i've seen malware do that. some sort of full screen app recording mouse clicks based on coords/pixelization colors. –  Lorenzo Von Matterhorn Sep 21 '13 at 0:55
1  
Note that when a trojan is detected, it may not be running at all, but may be detected on your disk while at rest. if you can confirm that the trojan has never executed, there is no danger from it. Finally, if you are having repeated problems with malware, you are most likely downloading stuff you shouldn't (from a purely technical perspective, not a value judgement). the best anti-malware is a good dose of skepticism, and common sense, even if it means you sometimes can't get what you want. –  Frank Thomas Sep 21 '13 at 5:57

1 Answer 1

up vote 0 down vote accepted

Download and run ComboFix. You'll need to uninstall your antivirus software before it'll run, I'd recommend doing this all in Safe Mode. I've yet to encounter something ComboFix can't clean out, after getting passed reputable AV software.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.