Infection Cleanup Assistance

Iconic

Member
Reaction score
0
Location
Edmonton, AB
I have come across an infection that I have not had any dealings with and am in need of assistance or advice. Here is the scenario:

Client called me saying that her monitor is showing everything in a tinge on Green, blue or red randomly when she turns on the computer. Which ever color is displayed stays that way for the duration of when the computer is turned on but the color may change to a different one when the PC is restarted or it may show the same color. It will also display perfectly normal at random startups with no tinge at all.

When I was looking at the system I noted that it would stated "access denied" when attempting to install any security/malware/cleanup software, so I proceeded to troubleshoot based on the assumption there was an infection or an issue with the video card. After an hour of digging through the HD and finding absolutely nothing I brought the PC back to my shop to work on.

First things first I connected the HD up to my imaging station to take a complete image of the drive, during the backup my Antivirus pops up stating it found an infection in the Boot sector of the hard drive I am backing up. I let it clean the infection after the image was successfully finished. I also ran a full scan on it with several AV's from my work desk station before I plugged the HD back into the customers computer, but all other scan came up clean. When I booted up the customers PC with the drive back in it the screen proceeded to display in a different tinge as it did before after bootup. I re-installed the video drivers and the color was corrected until I rebooted the system once again.

Knowing that I have a full image already completed I proceeded to wipe the drive and install from scratch. After reinstalling all seemed OK until I finished installing the drivers and updating the OS to to SP3 since it is Windows XP. After applying these updates I rebooted and windows displayed in a tinge of green. I re-installed the video drivers and all was well until the next reboot, at which point windows was displayed in a tinge of blue.

I attempted to see if any restrictions had appeared once again by trying to install MSE for an AV and windows blue screened. I attempted to run a install of Flash, Java, Silverlight and Adobe Reader with MSE from ninite.com and the ninite windows was automatically closed at the point it starts to download each software install package.

Any suggestions on how I can clean this up would be greatly appreciated.
 
I have come across an infection that I have not had any dealings with and am in need of assistance or advice. Here is the scenario:

Client called me saying that her monitor is showing everything in a tinge on Green, blue or red randomly when she turns on the computer. Which ever color is displayed stays that way for the duration of when the computer is turned on but the color may change to a different one when the PC is restarted or it may show the same color. It will also display perfectly normal at random startups with no tinge at all.

When I was looking at the system I noted that it would stated "access denied" when attempting to install any security/malware/cleanup software, so I proceeded to troubleshoot based on the assumption there was an infection or an issue with the video card. After an hour of digging through the HD and finding absolutely nothing I brought the PC back to my shop to work on.

First things first I connected the HD up to my imaging station to take a complete image of the drive, during the backup my Antivirus pops up stating it found an infection in the Boot sector of the hard drive I am backing up. I let it clean the infection after the image was successfully finished. I also ran a full scan on it with several AV's from my work desk station before I plugged the HD back into the customers computer, but all other scan came up clean. When I booted up the customers PC with the drive back in it the screen proceeded to display in a different tinge as it did before after bootup. I re-installed the video drivers and the color was corrected until I rebooted the system once again.

Knowing that I have a full image already completed I proceeded to wipe the drive and install from scratch. After reinstalling all seemed OK until I finished installing the drivers and updating the OS to to SP3 since it is Windows XP. After applying these updates I rebooted and windows displayed in a tinge of green. I re-installed the video drivers and all was well until the next reboot, at which point windows was displayed in a tinge of blue.

I attempted to see if any restrictions had appeared once again by trying to install MSE for an AV and windows blue screened. I attempted to run a install of Flash, Java, Silverlight and Adobe Reader with MSE from ninite.com and the ninite windows was automatically closed at the point it starts to download each software install package.

Any suggestions on how I can clean this up would be greatly appreciated.

Have you tried using a known good monitor? Swapping video cards assuming the video is not on board? Safe mode?
 
try in safemode with low res mode. see if it works? do all the work in that mode and then once all clean see how you get on. but yeah i would do what the others said and try a new gfx card
 
Yeah, Use a Live Cd to rule out issue. If it works perfectly fine in Live Cd then its a issue with windows. If it does the same in Live Cd, then you possibly have a hardware issue. Thats what I would try at this point.
 
Thanks everyone, I had not tried a live cd yet which now that I think about it should have been my first thing to try when the color started changing again after the windows re-install. Since this is occuring on the customers monitor and my own at the shop I know it is not the cable or monitor.

I will update if a live CD comes back with no issues after a couple reboots.
 
So I have rebooted the PC 3 times with the Ultimate Boot CD for Windows and in all 3 cases the video was displayed properly with no tinting of color or sign of video issues. I am now wiping the entire drive completely instead of just a format and will attempt windows re-install once again from scratch to see if that caught what ever is causing this.
 
First things first I connected the HD up to my imaging station to take a complete image of the drive, during the backup my Antivirus pops up stating it found an infection in the Boot sector of the hard drive I am backing up. I let it clean the infection after the image was successfully finished.

So didn't the infection remain with the backup? I would think you would want to kill the infection before backing up.

Interesting post though.
 
So I have rebooted the PC 3 times with the Ultimate Boot CD for Windows and in all 3 cases the video was displayed properly with no tinting of color or sign of video issues. I am now wiping the entire drive completely instead of just a format and will attempt windows re-install once again from scratch to see if that caught what ever is causing this.


Have you tried a new video card at all? That's the far more logical thing to do.

In my opinion, using a live CD to test is completely useless. It's not loading the video drivers needed to use the card to its full extent...and failing video cards can behave "normally" using a standard vga driver...but when the actual driver is loaded, you might start to see problems.

Before reloading, or anything, you should have swapped the video card and tested that way.
 
Back
Top