Hello everyone. My computer has a virus / malware that could not be eliminated. I have tried everything. It affected two hard drives. I formatted with Windows and also Kali Linux using its services to search for the malware but could not find it. The virus has full possession of the computer, it controls the internet, makes browser windows pop up, surfing is impossible because nine times out of ten it appears I don't have privileges, and when I start a virus scan it shuts down my pc! Since it runs both on Windows and Linux I think that it's lodged in the motherboard and maybe it is a bootkit. Please, help. Grazie
Inactive Virus or rootkit on Windows and Linux
- Thread starter ivano
- Start date
- Status
I forgot to mention that I used Safe Mode on Windows, and despite the computer shutting down, some scans with virus removal programmes, malware, rootkits, etc., were successful but no threats were detected. How is this possible?
Broni
Posts: 56,041 +516
Please, complete all steps listed here: http://www.techspot.com/vb/topic58138.html
Make sure, you PASTE all logs. If some log exceeds 50,000 characters post limit, split it between couple of replies.
Attached logs won't be reviewed.
Make sure, you PASTE all logs. If some log exceeds 50,000 characters post limit, split it between couple of replies.
Attached logs won't be reviewed.
Hello Broni. Thank you for the feedback. Unfortunately, I can no longer connect as an error is returned regarding thebnetwork password which I enter correctly. More, any operation I try to do, the computer shuts down and restarts. Kindly, I'd like to know if it's possible that the virus has crept into the motherboard or somewhere else, since formatting with file overwriting carried out even with Linux has not solved the serious problem, thanks again
New update. I removed the infected hard disks. I connected a new hard disk via usb. Result: in no time, also this hard disk was infected (any window shakes, taskbar is compromised, impossible to use any browser, administrator password has been changed). More, the computer keeps rebooting, so it's impossible to do anything! I really don't know what to do.
And so, after everything I described, you think it's a technical problem. Honestly, it would be better, I could solve it in a short time. I don't think that's the case. I repeat that this virus / malware has destroyed three hard drives and it runs on both Windows and Linux. Thanks anyway for your feedback
Broni
Posts: 56,041 +516
Virus is just a piece of code, so it can't destroy any hardware. It can destroy hard drive content but not hard drive itself.
Since you replaced your hard drive, I don't see how the new one could be infected. Assuming you didn't move any files form the old to the new one.
Since you replaced your hard drive, I don't see how the new one could be infected. Assuming you didn't move any files form the old to the new one.
You are not up-to-date.
From the internet: "Security researchers have found a nasty new virus that borrows in to a computer's motherboard, infects PCs as soon as they boot up, and is particularly difficult to detect and dispose of".
You'd better inform yourself before writing your answers
From the internet: "Security researchers have found a nasty new virus that borrows in to a computer's motherboard, infects PCs as soon as they boot up, and is particularly difficult to detect and dispose of".
You'd better inform yourself before writing your answers
Broni
Posts: 56,041 +516
First of all, I don't consider your reply being too polite.
Secondly, so called UEFI malware is extremely rare.
www.bleepingcomputer.com
Then, if you still worry, it may be your case, you can install a trial version of one of Eset products, which is able to detect such malware.
www.eset.com
[HEADING=2][/HEADING]
Secondly, so called UEFI malware is extremely rare.
CosmicStrand UEFI malware found in Gigabyte, ASUS motherboards
Chinese-speaking hackers have been using since at least 2016 malware that lies virtually undetected in the firmware images for some motherboards, one of the most persistent threats commonly known as a UEFI rootkit.
UEFI Rootkit cyber attack - first-ever discovered | ESET
Some UEFI rootkits have been presented at security conferences as proofs of concept; some are known to be at the disposal of governmental agencies. However, until August 2018, no UEFI rootkit was ever detected in a real cyber attack.
- Status
Similar threads
