Virus keep returning even after I deleted it

Once upon a time, I was surfing for some pretty illegal stuff and downloaded a virus. This virus wrecked my mIRC, Media Converter SA, and crashed my computer everytime I connect to the internet. So, I reinstalled my Windows XP. Complete reinstall. Everything went well for an hour, and then, it returned, it a brutal manner.I downloaded MalwareBytes before my internet crashed and ran a system scan. Lo and behold, look how many viruses it picked up.http://i307.photobucket.com/albums/nn313/Seloloving/1.png
http://i307.photobucket.com/albums/nn313/Seloloving/2.png
http://i307.photobucket.com/albums/nn313/Seloloving/3.pngEven after I removed them, they return on the next bootup to harass me.So, yeah, please, I need help. I am using Windows Service Pack Two and can't update to 3 due to some...*cough* matters.

Replying to #1

o.O
That looks like suicide?I think..Your antivirus?

Replying to #2

No it is not kitty porn if that is what you have in mind. :pSorry, I don't get your question?

o.O
That's looks serious..
Have you tried to Format it?(i mean the option where it takes a long time to format. )
;D

Replying to #4

Um...what do you mean, I have already formatted my computer.

Your kiding-it survived a reformat?Was it a total re-format as in everything wiped clean-it's the only way...

Replying to #6

Yes it was total, everything went.

Sedna, turn off System Restore. (Control Panel -> System -> System Restore tab)Then, reboot into Safe Mode and run a full-scan on your computer again. That should prevent the virus from activating on startup, in which it duplicates itself elsewhere on your harddrive, usually in the System Restore.I don't like the looks of this problem myself...Also, log on to another computer which is clean and has internet access so that you can contact us here. While the computer is in Safe Mode, it won't be able to access the internet at all, unless you choose to enable Network (which I don't recommend in situations like this.)

Trojan is a virus that recopies and recopies itself an your computer and takes unnecessary space but i didn't know that it also crashes your pc

Replying to #9

They can do alot these days...

System Restore probably won't help. Infact, many viruses copy itself into the system restore files to survive normal deleting, since windows is not allowed to delete system restore files. So once removed through normal means, the virus is safely hidden in system restore, waiting to repopulate itself once you reboot.As far as surviving a format... if it really did, then the virus is either on your local network or in what ever programs you install after your OS. If you didn't format correctly, and instead just reinstalled your OS over your existing install, then the virus was never deleted to being with.What anti-virus and anti-spy/malware programs do you have?Get a temporary file cleaner like CCleaner.
Run it and delete all of your temporary internet and program files.
(You don't really need to do this... but it can't hurt).Start with Spybot S&D and AVG Free.
Run both scans, one after the other, letting them fix the issues.
Then right click on "My Computer".
Click Properties.
Click the "System Restore" tab.
Mark the Checkbox next to "Turn off System Restore"Don't worry about this. Due to the wide spread virus infection, it is likely that all your system restore points are infected anyway, even if not because they were made when it was infected, but just because the virus planted itself in them.Once you hit apply, all your system restore points will be deleted.
Reboot your computer
Run AVG and Spybot S&D again to see if it comes up with anything.
If not, you are probably lucky and in the clear. Test out a few things and see if the virus still exists.If it does still exist, then you'll probably want to bring out the big guns like Malwarebytes Anti Malware.

A virus cannot survive a format unless it is on a drive other than the one you format. Most likely you reinstalled the pirate software that gave you the virus in the first place.

maybe it has copied itself to the boot sector of your harddrive

Loonylion · #12A virus cannot survive a format unless it is on a drive other than the one you format. Most likely you reinstalled the pirate software that gave you the virus in the first place.

Wait!Sedna, does your harddrive have a backup partition on it? Make sure to scan that!Also, how exactly did you reinstall Windows XP? Was it from the disc or from the recovery partition?

It might be something that you installed, like do you keep all your drivers on a flash and then stick that in? Because it could be that...

That's true, as some Viruses are known to copy to external hardware to lay dorment, such as CDs and Removable disk Drives.

Maybe he could post his "Hijack This" log LOL.

Do not post Hijack This logs...

Is this the Windows Security Suite? I got infected with that a few days ago; also used MalwareBytes to remove it. Are you referencing to some sort of guide?

Hypr · #8Sedna, turn off System Restore. (Control Panel -> System -> System Restore tab)Then, reboot into Safe Mode and run a full-scan on your computer again. That should prevent the virus from activating on startup, in which it duplicates itself elsewhere on your harddrive, usually in the System Restore.I don't like the looks of this problem myself...Also, log on to another computer which is clean and has internet access so that you can contact us here. While the computer is in Safe Mode, it won't be able to access the internet at all, unless you choose to enable Network (which I don't recommend in situations like this.)

Have tried this before I posted this thread. Did not work, thanks though. :)

TirithRR · #11System Restore probably won't help. Infact, many viruses copy itself into the system restore files to survive normal deleting, since windows is not allowed to delete system restore files. So once removed through normal means, the virus is safely hidden in system restore, waiting to repopulate itself once you reboot.As far as surviving a format... if it really did, then the virus is either on your local network or in what ever programs you install after your OS. If you didn't format correctly, and instead just reinstalled your OS over your existing install, then the virus was never deleted to being with.What anti-virus and anti-spy/malware programs do you have?Get a temporary file cleaner like CCleaner.
Run it and delete all of your temporary internet and program files.
(You don't really need to do this... but it can't hurt).Start with Spybot S&D and AVG Free.
Run both scans, one after the other, letting them fix the issues.
Then right click on "My Computer".
Click Properties.
Click the "System Restore" tab.
Mark the Checkbox next to "Turn off System Restore"Don't worry about this. Due to the wide spread virus infection, it is likely that all your system restore points are infected anyway, even if not because they were made when it was infected, but just because the virus planted itself in them.Once you hit apply, all your system restore points will be deleted.
Reboot your computer
Run AVG and Spybot S&D again to see if it comes up with anything.
If not, you are probably lucky and in the clear. Test out a few things and see if the virus still exists.If it does still exist, then you'll probably want to bring out the big guns like Malwarebytes Anti Malware.

I did as you said, downloaded AVG and scanned the computer, it registered over 3000 viruses/spyware/crap. I then removed them, HOWEVER, it corrupted my system and I had to reinstall Windows again, however, when I return, the virus seems to be gone, but still, something called services.exe and svchost.exe is still running, I am pretty sure they are viruses, but how can I check? I don't want to risk running AVG again.