Problem with new antivirus software!

[dr_iton]

The problem is so that I possesed an antivirus before (McAfee 8.5), i don't know how I can not see it on my PC, in program files or in the list of add or remove programs.
So i tried to install a new antivirus but with no result, i can not install a new one.
Is there any one who can give me a tip how to fix this problem.
Also I can not visit the antivirus web sites.
Here are the properties of my PC:

Cheers.

[KingPincer]

Well i think that anti virus need some uninstaller or something. What anti virus is it? If you can't see it try going to run and type msconfig go to startup and you might see it there.

[reddevilggg]

My Computer - Double click on C: drive - Documents and Settings - Program Files

Does this help?

[dr_iton]

Thank you for your reply, but none of those helped me.
In fact I can not see the antivirus software on my PC, no where.
The problem is this: I can visit all of the web sites except every antivirus software site.
I downloaded another antivirus but the problem exists that I can not install it, i can begin to install, but after approximately 5 sec the installing window disappears.
Do you know where it can be the problem.
Cheers.

[evilfantasy]

Before you begin the SDFix instructions you should copy these instructions in a Notepad file and save them to your desktop or print them for easy reference. Much of SDFix will be done in Safe mode and you will be unable to access this web page after booting into Safe mode.

Download SDFix by AndyManchesta and save it to your desktop.

When using this tool, you must use the Administrator's account or an account with Administrative rights

* Now, double-click on the SDFix icon that should now be residing on your desktop. If a Open File - Security Warning box opens, click on the Run button.
* A window will now open showing SDFix being extracted into the C:\SDFix folder.     
* Once the installation program has finished extracting SDFix, it will open a Notepad with further instructions.
* DO NOT use it just yet.

Reboot your computer in Safe Mode using the F8 method. To do this, restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in "Safe Mode".

When your computer has started in safe mode, and you see the desktop, close all open Windows.

* Click on the Start button, click on the Run menu option, and type the following text from the Code Box into the Open: field then click the OK  button.

Code: [Select]

C:\SDFix\RunThis.bat
* SDFix window will open containing some brief info and a disclaimer on the use of the tool.
* Type Y on your keyboard and then press Enter to begin the cleanup process.
* It will remove any Trojan Services or Registry Entries found then prompt you to press any key to Reboot.
* Press any Key and it will restart the PC.
* When the PC restarts, the Fixtool will run again and complete the removal process then display Finished, press any key to end the script and load your desktop icons.
* Once the desktop icons load the SDFix report will open on screen and also save into the SDFix folder as Report.txt.
* Copy and paste the contents of the results file Report.txt in your next reply along with a new HijackThis log (from normal boot mode).

[dr_iton]

I downloaded the SDFix, i extracted it and tried to boot my PC from the safe mode, but it did not had a success to boot my PC in safe mode because the PC is restarting repeatedly.
So I am trying the following:
I am trying to fix it with the System File Checker  with this option:
Start ... run . .. and writing this command sfc /scannow and this sfc /scanboot .
Cheers.

[BC_Programmer]

you're infected. sfc will only replace system files, i twon't remove any infections.

[dr_iton]

Thank you anyway.
So i think only a format it will fix it. This is my conclusion.
Cheers.

[BC_Programmer]

Thank you anyway.
So i think only a format it will fix it. This is my conclusion.
Cheers.

Evilfantasy, I believe you may have wasted your time with this one...

[evilfantasy]

Have you already formatted?

[dr_iton]

Definitively I formated my PC and I don't have any problem now. Also I upgraded a flash BIOS.
Reason: I thought also the BIOS could be infected!
Cheers.

[evilfantasy]

With exception to flashing the BIOS that's always the most reliable way to rid malware.

Note to anyone thinking of flashing their BIOS. This is not something that is recommended unless you are very well prepared for what might go wrong. The rule of thumb with the BIOS is if it's not broke don't fix it!

[BC_Programmer]

On a similar note if your going to do your own thing anyway then don't bother making a thread asking for advice.

[patio]

I'm thankful you survived a BIOS flash for a software/infection issue...
Please don't pass this advice along to anyone else with issues.

[evilfantasy]

Additional note: BIOS malware is very, very rare.

[patio]

Add 3 very's to that.....

[BC_Programmer]

In fact, if I may be so bold to say so, it really only exists in theory.

[patio]

Thank You.

[evilfantasy]

I think the only confirmed BIOS infections were controlled. Just to prove it can be done.

This may be the best response I have ever seen to the mythical BIOS virus. ( please excuse my made up names )

-Conspiracy theorist says-

jboy, a virus can get into the bios a lot easier than you think. if you do not disable write to bios either by jumper or in the bios, a virus or wrong bios autoupdate can get in & screw the bios royally even with dual bioses. happened to a friend who got auto update for bios that was bad, ended up replacing board

-Non skeptic says-

Y'know, I was just waiting for the inevitable anecdote. It never fails.

There are viruses that can affect the BIOS, either by clearing or corrupting it (W32.Kriz, W32.Magistr.24876@mm, W32.Mypics etc) but they don't actually 'infect' the BIOS - certainly clearing a BIOS would do little to help if the infected files remain on the drive.

Maybe you can name one of these mythical virus that live in the BIOS, or provide a link?

A bad flash is not the same as a virus

There was no confirming response of such a virus spreading through the internet...

Full conversation

[BC_Programmer]

lol.

additionally there really isn't anything a virus could do in the BIOS anyway- Windows replaces all BIOS interrupts with it's own routines, so really the virus can't be used for things like hard drive infection (and even if it could, there is FAR too little space for both the infection routine and the Booting BIOS, so it would probably just end up being a computer that can infect hard disks when started, but not actually boot. Or it could do something really evil, like only allow certain hardware to be used or perhaps randomly swap master and slave arrangements. Although such a prospect would be a great piece of joke malware, as far as spreading (and thus meeting the definition of a virus) it really doesn't hold water.

Additionally most programmers who know enough ASM to do something like that aren't about to waste their time with such childish endeavours.

And as we all know infecting the BIOS while windows is running usually advises you not to perform any other tasks or have any other open applications. One can then logically conclude that almost all (if any) attempts by malware to infect a BIOS would not only be very system specific but also fail over 99% of the time, since the user, unaware that the BIOS is being flashed will go about their business as usual, which may or may not cause the flashing program, likely very badly written to specific hardware, to fail to flash the BIOS, or possibly hang the entire machine. In either case, the inevitable reboot will mean that you end up with the black screen and possibly a attempt to read the floppy (if there is a ROM in the motherboard as a fail-safe allowing for emergency flash via floppy).

[patio]

The only reason i scoff at this would be to follow the logic of the malware writers themselves...
Sure they may create temporary havoc for awhile but this would be simply and easily repaired...
Since the memory constraints are so shallow i doubt it could carry a payload...even small enough to replicate itself which is after all the ultimate goal .
So they simply do not waste their time on this...
I've been doing this awhile and the lst time i can remember seeing one was 1979 if i remember correctly.

[evilfantasy]

From what has been said it also sounds like it would be very easy for an antivirus to thwart such an attack. And also if it were a real threat then I'm sure all antivirus would advertise/boast "BIOS Protection" in the program descriptions. I've never seen one advertise it.

I've actually enjoyed this conversation.

[dr_iton]

I decided to upgrade my BIOS because i had a problem on booting, sometimes the BIOS could not read my devices like HDD, CD ROM (primary and secondary master and slave).
Problem was: The system freezes while booting up, so after I upgraded I don't have such a problem. Sometimes the booting was very slow, so I have had to wait up to 7-10 minutes to see my icons on desktop.
I know that upgrading the BIOS is not recommended to everyone but I could not find a better solution, now everythong works perfectly.
Cheers.