Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.If you can please print this topic
it will make it easier for you to follow the instructions and complete all of the necessary steps.
Most authorities say that a PC with a polymorphic file infector can never again be trusted and should be reformatted. You should seriously consider reformatting and reinstalling Windows.
That said, if you wish we can attempt disinfection but you are cautioned that theoretically you can never be sure cleaning is 100% complete.
Read all these directions before proceeding.
When you have the .ISO file downloaded, you need to create a bootable disk or flash drive with it, using a clean PC to do that
. The .ISO file is a disk image. It should NOT be burned as a regular file. You need a program like BurnAware Free
that can burn an .ISO image. I think a CD is best as there is no way anything can write on it after it is made, but the USB may be more convenient and easier.
Be sure to read these:Download Kaspersky Rescue Disk 10How to record Kaspersky Rescue Disk 10 to an USB device and boot my computer from it?How to record Kaspersky Rescue Disk 10 to a CD/DVD and boot my computer from the disk?
- Go to a clean PC.
- Download the .iso image file.
- Create a CD (or flash drive if you prefer).
- At the infected PC: put the disk in the drive and reboot.
Follow the directions here
, but you will find some differences.
Familiarize yourself with How to create a report file in Kaspersky Rescue Disk 10?
Print the following directions:Boot from Kaspersky Rescue Disk 10:
Restart your computer and put the disk in the drive while booting.
Press any key. A loading wizard will start (you will see the menu to select the required language). If you do not press any key in 10 seconds, the computer boots from hard drive automatically.
Select the required interface language using the arrow-keys on your keyboard.
Press the Enter key on the keyboard.
In the start up wizard window that opens, select the Kaspersky Rescue Disk. Graphic Mode
Click 'A' to accept the agreement.
Select operating system from dropdown menu (select Windows whatever)
Select Objects to scan: check Disk boot sectors, Hidden startup objects, C:
Click My Update Center and update if any available
Back to other tab and click Start Object Scan.
(It took 3 hours to scan my 47G)
When scan has completed save a report:
On the upper part of the Kaspersky Rescue Disk window, click on the Report link.
On the bottom right hand corner of the Protection status - Kaspersky Rescue Disk window, click on the Detailed Report button.
On the upper right hand corner of the Detailed report window, click on the Save button.
After clicking Detailed Report and 'SAVE', a browse window opens.
Double-click on the \
All your drives will be shown and you can easily double-click C and save the report to C:\KasperskyRescueDisk10.txt.
Click on the Save button.
The report has been saved to the file.
Remove the disk from the drive (or disconnect USB) and reboot normally.
Can you now boot normally and run the DDS tool to completion?
Post the log if you can.