How can I remove a stubborn virus from my computer?

  • Thread starter Thread starter Reflow718
  • Start date Start date
  • Tags Tags
    deleted Virus
Click For Summary

Discussion Overview

The thread discusses the challenges of removing a persistent computer virus that has affected the user's system, specifically targeting issues with antivirus software, file deletion, and system restore capabilities. The conversation includes various suggestions and methods for addressing the virus, as well as sharing personal experiences with different antivirus programs.

Discussion Character

  • Exploratory
  • Technical explanation
  • Debate/contested
  • Homework-related

Main Points Raised

  • The user reports an inability to delete a specific file associated with the virus, receiving an error message when attempting to do so.
  • Some participants inquire about the name of the virus and suggest alternative methods for file deletion, including moving the file to the desktop or using DOS commands.
  • There are suggestions to update antivirus software from another machine and run it from a CD to avoid modification by the virus.
  • Participants discuss the possibility of booting into Safe Mode or DOS to delete the file and the implications of deleting system drivers.
  • Some express skepticism about the effectiveness of certain antivirus programs, particularly Avast, and share personal experiences with other antivirus solutions.
  • There are recommendations to consider using Linux as an alternative operating system to facilitate virus removal.
  • One participant warns against manually removing the virus and suggests using ComboFix, while another cautions about the risks associated with it.

Areas of Agreement / Disagreement

The discussion contains multiple competing views on the best approach to remove the virus, with no consensus reached on a definitive solution. Participants express differing opinions on the effectiveness of various antivirus programs and methods for deletion.

Contextual Notes

Participants mention limitations such as the virus blocking antivirus updates and system restore options, as well as the potential risks of deleting system files. There is also uncertainty regarding the existence and nature of the virus file mentioned.

Who May Find This Useful

This discussion may be useful for individuals experiencing similar issues with virus removal, those seeking alternative methods for dealing with stubborn malware, and users interested in the effectiveness of different antivirus solutions.

Reflow718
Messages
2
Reaction score
0
My comp recently just caught an virus and I have tired many anti-virus programs to remove it and so far, no luck.

Avast reported the file that is infected, but is unable to delete it. So I decided to check it myself, it's a file in my systems/drivers and when I tired to delete it. It saids the following "Cannot delete uwvwibuv: Cannot read from the source file or disk.". I have tired using "Unlock" to delete it, doesn't work.

Note, this virus is also causing all my anti-virus programs not to connect online, so I cannot update them. I have tried using Malwarebytes-antiware, doesn't detect it. I can't use system restore because it's being blocked by group policy after "I caught the virus" (Worked before).
I had tired running in safe mode, checking task for unknown programs, and I can't delete it.

Anyone have any ideas or suggestions?
 
Computer science news on Phys.org
What is the name of the virus?
 
uwvwibuv
 
Try moving the file to desktop and then use Unlock, if that doesn't work, can you like copy and paste the file name, with the extension?
 
Have you been allowing Avast to automatically update? Their virus definitions and defenses get updated at least once a day, so they're much more current than McAfee or Symantic. If you can't access their site from your machine, get someone to download the most current home version and let it update once, then burn that to a CD and see if you can run it from the CD on your infected machine. If it's on a CD that has been finalized, the virus can't modify the files. Good luck.
 
If using Windows, can you not boot up in "system" mode and get to a DOS prompt before Windows loads? Usually during the boot process, while it's still in DOS mode, it briefly asks you if you want to boot up in DOS or Windows. But it's only for a few seconds and then defaults to Windows. Have to watch for the event and then quickly choose DOS. Or perhaps it is another mechanism on your machine such as pressing the F1 key during a particular point in the boot up. Find out how to do it. Then just use the DOS DEL command on the file. Even if the file has attributes that prevent normal deletion, you can override those attributes and still delete it. However since it's a driver, deleting it will likely prevent some program from running and if it's a system driver it may even impact the normal operation of the system or even prevent the system from working or even booting up.

Also, in Windows can do: All Programs/accessories/system tools/system restore. And then choose a date from the displayed calendar, say several days before the infection, to restore your system to a previous state. This restore only restores system files.
 
Last edited:
jackmell said:
If using Windows, can you not boot up in "system" mode and get to a DOS prompt before Windows loads? Usually during the boot process, while it's still in DOS mode, it briefly asks you if you want to boot up in DOS or Windows. But it's only for a few seconds and then defaults to Windows. Have to watch for the event and then quickly choose DOS. Or perhaps it is another mechanism on your machine such as pressing the F1 key during a particular point in the boot up. Find out how to do it. Then just use the DOS DEL command on the file. Even if the file has attributes that prevent normal deletion, you can override those attributes and still delete it. However since it's a driver, will deletion prevent some program from running correctly? May have to restore that driver from a disc or online.

Also, in Windows can do: All Programs/accessories/system tools/system restore. And then choose a date from the displayed calendar, say several days before the infection, to restore your system to a previous state. This restore only restores system files.

I don't think you can boot a OS in true DOS as of XP as far as I have experienced lately. I do know that if you make a DOS boot drive/stick (look up the process online) you can delete the file using this procedure. I bet there is another hidden file that will replicate the file again. Some malware removers can operate from a DOS OS so perhaps you can run one of these. I will have to do some more reading to be sure. Linux boot drives can be used for this as well.
 
Last edited by a moderator:
If you can, install LINUX as your operating system, then you'll be able to delete the virus and go back to windows, or you might like LINUX so much that you turn your back on Bill Gates and his evil empire forever.
 
  • #10
Jobrag said:
If you can, install LINUX as your operating system, then you'll be able to delete the virus and go back to windows, or you might like LINUX so much that you turn your back on Bill Gates and his evil empire forever.

lol i love linux, but not so much that i turn my back on bill gates:smile:
 
  • #11
The empire won back my heart with W7. Plus the empire has cooler outfits and theme music than the Rebellion. I just wish Bill would go ahead and put on the black robe. He is already pale and has bad hair. Halfway there.
 
  • #12
Which antivirus programs did you use? There's a new one in the market which I heard can remove harmful software that other popular software like Kaspersky & ENod can't. Try to check google for some rising antivirus reviews and see if it also works for you.
 
  • #13
Just for the record, I've found Avast to be an extremely poor AV solution.

I had a computer given to me for repair which had a virus that disabled one piece of AV and took over Avast. So be weary of what it tells you.
 
  • #14
A couple other hints:

You should be able to boot into "Safe Mode" on Widows, often hitting F8 during boot does this, but watch the prompts as they flash past. Then it's may be possible to delete files which are otherwise locked. When deleting, go look for Temporary Internet Files and other cached versions of the same thing.

When your anti-virus software can't connect, it's usually because someone-bad has installed a fake proxy which redirects those connection requests. Look for something like /hosts -- actually I don't remember the windows files that might be the culprits, so some google is in order. And check your Control Panel -> "Internet Options", they might slip the proxy in there as well.
 
  • #15
Don't try to manually remove the virus.

Start your computer in Safe-mode in the way described above. Follow this http://www.combofix.org/" and download ComboFix. Follow the instructions on their page and it should remove most any virus you would run across.

Also this is an old thread and his problem has probably been solved a while ago.
 
Last edited by a moderator:
  • #16
Pattonias said:
Don't try to manually remove the virus.

Start your computer in Safe-mode in the way described above. Follow this http://www.combofix.org/" and download ComboFix. Follow the instructions on their page and it should remove most any virus you would run across.

Also this is an old thread and his problem has probably been solved a while ago.


Just as a FYI if anyone comes across this thread; you should never run Combofix unless told to by someone trained with the program. It is very dangerous. See this: http://www.bleepingcomputer.com/forums/topic273628.html
 
Last edited by a moderator:

Similar threads

How can I fix the constant popup window on my PC after a virus removal?
  • · Replies 15 ·
Replies
15
Views
4K
What is the NWJS virus and how can I protect my computer from it?
  • · Replies 17 ·
Replies
17
Views
7K
Viruses: A pain in the head and my laptop.
  • · Replies 11 ·
Replies
11
Views
2K
Can I safely delete /run/timeshift/backup in Ubuntu 20.04?
  • · Replies 24 ·
Replies
24
Views
11K
Emails/Forums Say My IP is X, Avast Says My IP is Y....How Possible?
  • · Replies 4 ·
Replies
4
Views
1K
I have virus in my computer just can't delete it
  • · Replies 7 ·
Replies
7
Views
5K
Delete system files from Android phone
  • · Replies 16 ·
Replies
16
Views
8K
Calculators Experiencing Vista Anti-virus: What to Do?
  • · Replies 3 ·
Replies
3
Views
7K
How much can one delete from a Roaming file?
  • · Replies 4 ·
Replies
4
Views
2K
Calculators Virus Removal, New viruses acting as anti-virus scanners
  • · Replies 17 ·
Replies
17
Views
16K