Possible Computer Virus or Asus Laptop is toast - Help Needed!

[hightech]

I have an Asus Laptop running Windows 7 purchased in Jan 2012 which was working fine until a few days ago.

3 Days ago, I started having the entire desktop flash a few times and Windows was reporting a Display card error. This flash was seen on all my external monitors so I don't think the LCD itself is a problem.

Yesterday, I got about 12+ I/O Error messages on my system saying the Hard Drive could not be accessed and an NTFS Error. Weird thing was that this scanning software pops up and tells me all these errors and then tells me that I need to purchase some license to fix it. When I click the link it wants a credit card #. This made me think I got some virus as when I click the taskbar to go to programs, I see nothing but a big black screen. All my files on my desktop are gone and my hard drive shows space but when I try to browse, I see nothing.

I ran a Windows system restore to a few days ago before all this weird stuff happened and the system still does not show my files.

Any idea what is going on and how do I fix it? Is my HD really toast, and do I need to contact Asus to get it RMA'd. How does the process work?

Worse case is that I am planning a vacation in a few days and have some files for itinerary and bookings that were just about to get backed up when this happened... @#$$@#$!

I would really appreciate some help on this.

[gnuman]

To me it sounds like you got some sort of virus maybe also a hardware issue at the same time. What I'm thinking is that maybe this virus made all your files hidden. What you can do is download Ubuntu and burn a CD and boot off of it to see if you can access the files.

Windows restore files can be affected by a virus. Another thing you can try is maybe to do a location where you know there are files open up command prompt Start > cmd and do attrib -h *.* in a folder you know that should have files. Also maybe download spybot search and destroy and run it in safemode.

[hightech]

Thanks for the suggestion gnuman. I will try what you suggested and check out spybot.

[xalex0]

That's a virus for sure. And I don't think there is anything wrong with the hardware. Try booting with a live CD: http://www.hirensbootcd.org/download/

[HotYaris]

What genius anti-virus program did you pay for that allowed this to happen?

[_Allan_]

Download the trial version of Kaspersky - it's the #1 A/V program in the world, according to av-comparatives.org (a bipartisan company.)
Also, the hidden files IS a virus/spyware of some sort. I had it (before Kaspersky) and the only way to 'fix' it is right click on "C" drive, and go to Properties > Uncheck "hidden" > Select "All folders and files"

[wilsonlam97]

Reformat and reinstall windows.

[xalex0]

Reformat and reinstall windows.But first find and recover the travel documents.

[dahhunter]

Boot with a Hirens Disc run a full scan with Malwarebytes, Clean the start-up.

THen Boot into Safe Mode with Networking..

Download the newest version of Combo Fix.
Run that.

Then reboot into normal mode, Run another scan of Malwarebytes, and combo fix. you should be good to go.

Or Back up your files to an external HDD or thumb stick, then format and reinstall.

[hightech]

Thanks all for your suggestions. I was using Microsoft Anti Virus and had the system scanned the day before with the latest virus definitions.

I will try using the Disc to see how things go.

[Jim R]

Check out this link

Recovery-rogue-Desktop-icons-missing-Empty-program-files (http://www.experts-exchange.com/Software/Internet_Email/Anti_Spyware/A_6209-Windows-XP-Vista-Recovery-rogue-Desktop-icons-missing-Empty-program-files.html)

This link, describing some of your symptoms is also mentioned on above page.

http://www.bleepingcomputer.com/virus-removal/remove-windows-recovery

[hightech]

Thanks Jim R. That is exactly what happened to my PC.

The question I have now is that since Microsoft Anti Virus didn't stop this from happening, is there something out there that is better then this? i don't mind spending $ on software assuming it indeed will stop things like this from happening. I downloaded the latest definition files for Microsoft and it did detect this virus but the damage had been done.

[xalex0]

The question I have now is that since Microsoft Anti Virus didn't stop this from happening, is there something out there that is better then this? i don't mind spending $ on software assuming it indeed will stop things like this from happening. I downloaded the latest definition files for Microsoft and it did detect this virus but the damage had been done.There are some things that money can't buy. The antivirus programs mainly catch the programs that have already been added to their definitions. So if the malware is new enough, it probably won't be detected by any antivirus. It is the user who should change habits and behave defensively with their computer: use the login account that has limited rights, run NoScript and adblock, only open firewall ports that you actually use, perform regular backups, don't run programs from suspicious sources, if you must then scan at virustotal.com first, and if still suspicious run them from within sandoxie. It surely does diminish the convenience, but is definitely much better than the experience of dealing with malware infestation.

[Jim R]

Thanks Jim R. That is exactly what happened to my PC.

The question I have now is that since Microsoft Anti Virus didn't stop this from happening, is there something out there that is better then this? i don't mind spending $ on software assuming it indeed will stop things like this from happening. I downloaded the latest definition files for Microsoft and it did detect this virus but the damage had been done.

I am with Shaw Cable in Calgary and they provide a free protection suite. They recently changed to McAfee, but I didn't like it, so I reinstalled the previous F-Secure suite from a backed up install package download. It still automatically updates from F-Secure from the original licensing key provided by Shaw, so there is probably more than just me that isn't fond of the new McAfee suite.

In addition to the free protection suite from Shaw, I also run MalwareBytes free version. This type of application looks for additional malware aimed at infecting your computer. AntiVirus software alone just doesn't cut it any more.

I don't use Microsoft's Internet Explorer although I do allow it to update since it is so closely tied to the OS. I use FireFox v3.6.28 as the newer versions aren't compatible with the RoboForm add-on and this is a deal breaker for me. I also run the AdBlockPlus and NoScript Add-Ons to FireFox which greatly controls the amount of advertising and completely controls what Java scripting is permitted. Sometimes it can be a pain to manually permit scripts to run on certain sites you must allow scripting in order to view correctly, but at least you have control over that decision whether or not to trust the site. Permissions can also be temporarily allowed for scripting.

I also use a Hosts file, and this is a bit of a pain when it comes to Red Flag Deals since there is so much redirection through other sites normally blocked by the standard Hosts file available for download. Its a matter of going through the Hosts file and modifying it according to what Red Flag Deals needs for redirection. See the site http://www.mvps.org/winhelp2002/hosts.htm for more information on Hosts files.

I volunteer at Experts Exchange My Profile (http://www.experts-exchange.com/M_6292023.html) Current ranking at 2,921 of 118,000 participating experts at the site.

[JAC]

I also use a Hosts file, and this is a bit of a pain when it comes to Red Flag Deals since there is so much redirection through other sites normally blocked by the standard Hosts file available for download. Its a matter of going through the Hosts file and modifying it according to what Red Flag Deals needs for redirection.

Consider a Tomato-capable router in combination with All-U-Need Ad Blocking and PixelServ. Saves you having to update the HOSTS file on every PC in your home.

[_Allan_]

Thanks Jim R. That is exactly what happened to my PC.

The question I have now is that since Microsoft Anti Virus didn't stop this from happening, is there something out there that is better then this? i don't mind spending $ on software assuming it indeed will stop things like this from happening. I downloaded the latest definition files for Microsoft and it did detect this virus but the damage had been done.
Good job on ignoring what I said ...


Download the trial version of Kaspersky - it's the #1 A/V program in the world (2011, Jan-Mar. 2012), according to av-comparatives.org (a bipartisan company.)
Also, the hidden files IS a virus/spyware of some sort. I had it (before Kaspersky) and the only way to 'fix' it is right click on "C" drive, and go to Properties > Uncheck "hidden" > Select "All folders and files"

AV-Comparatives has released a new version, and it can be found at their website, but here is an image from their PDF.
BTW, the lists are ALPHABETICAL ORDER. Kaspersky has a 96.4% score, while GData FSecure have 96.6% and
http://img840.imageshack.us/img840/5865/avcomparativesmarjun201.jpg

[xalex0]

BTW, the lists are ALPHABETICAL ORDER. Kaspersky has a 96.4% score, while GData FSecure have 96.6% and
Untrue.
Also, one should take into account the fact that Symantec (the previous winner) and MSE were not included.

[_Allan_]

Untrue.
Also, one should take into account the fact that Symantec (the previous winner) and MSE were not included.


The participation is limited to not more than 20 international well-known Anti-virus products, which vendors agreed to get tested and included in the public test-series of 2012.

See http://av-comparatives.org/comparativesreviews
http://img818.imageshack.us/img818/8184/avcomparativesmar2012pr.jpg


The best info I could find for "over all" was in December 2011 -
http://img193.imageshack.us/img193/5868/avcomparatives201112ove.jpg

[xalex0]

The participation is limited to not more than 20 international well-known Anti-virus products, which vendors agreed to get tested and included in the public test-series of 2012.So the fact that some vendors have not agreed to participate does not make them any worse. It probably speaks more of the deficiencies with the testing methodology. Moreover, there are reports of shady business practices on their side: http://www.melih.com/2011/11/27/av-comparatives-org-bullying-censorship-and-financial-deals-with-anti-virus-vendors/



The best info I could find for "over all" was in December 2011 -I thought you wanted to compare apples to apples:
http://av-comparatives.org/images/docs/avc_prot_201112_en.pdf

And I'm not sure if you are disputing the "untrue" part of my post.

[hightech]

Thanks Allen, xalex0 and others. I will look at the information you suggested and try to put Humpty Dumpty back together again :)