3

So I got this computer from my cousin. As far as I can tell, it has LOTS of back-doors, trojans etc. installed. You can see the installed programs as below w/ lots of activeX:

enter image description here

I fear these backdoors would be integrated to the OS via updates (if such thing is possible). So is the safest course a fresh install or would Kaspersky do just enough so that I tell my cousin that she can use without any concerns?

Edit: What are we looking at?

The OS is in Turkish, this is the Uninstall Program window. The other languages: I don't know. The computer has only Turkish language installed as OS's native language.

Varaquilex
  • 3,846

2 Answers2

5

Using any of the Antivirus software is no guarantee that they keep your PC clean.

I am not an antivirus expert, but when a virus can breach your system, then there is the chance too it could hide itself from the Antivirus software(s).

E.g. There are a lot of rootkits out there which you can't remove, because they integrated your system such a low level. (You even don't know them, because they are not visible to you or your antivirus)

So I advice you to complete reformat your drive and reinstall your system. And if you don't have any super important data then do not make a backup because if the virus is smart enough it will copy itself to your backup, and infect your system again.

And if you use this computer to buy on the internet or use your net bank, then you definately SHOULD reinstall your system.

+1 Advice: If you connected this computer to your home network, and you use a bad firewall (eg: Microsoft default firewall) then you should inspect your other PC on your network.

Jan Doggen
  • 4,657
NoNameProvided
  • 2,450
1

Due to the intrusive and stealthy nature of viruses, your best option is probably to reinstall the OS.

Back up any necessary files (Only take what is ABSOLUTELY NECESSARY, as the virus can replicate using most files and file types, and you don't know the exact location or spread of the virus), and wipe the HDD. Reinstall the OS, and move from there.

Ideally, if you can create an Ubuntu (or other OS that can zero a HDD) boot disk, use the command:

sudo dd if=/dev/zero of=/dev/sda

MAKE SURE THAT sda IS THE HARD DRIVE IF YOU DO THIS!

which completely overwrites the hard drive with 0's. You WILL lose ALL data on the drive, and completely remove the virus from the hard drive. Then reinstall Windows. Make sure to use a clean computer to create the boot disk.

If you deal with sensitive information (finances (such as credit cards), or other information that could be used in identity theft), then I would highly recommend a full wipe and reinstall.

If the computer is completely offline, ideally with the network cable unplugged, then you could probably get away with cleaning up the PC and continuing use on the same OS. I still do not recommend this action, as the virus could travel over removable media that you use.

And as NoNameProvided said, inspect other computers connected to the infected computer. Although they may not seem infected, there are multiple types of infections that are near impossible to detect until it's too late.

Azulflame
  • 183