hmmmmmmmmmmmmmmmmm
this one time at virus camp...
umm so yah...
i got to the cmd prompt in safe mode using the fresh (over top install, not fully formatted, infected drive)
inserted my burned cd with my batch files and copied my batch files to my c drive
tried to run them... and they screwed up... poorly written bunch of errors
so rather than give up or look for new batch files to use.. or write my own cuz im lazy like that...
i did this:
in the cmd prompt: C:\explorer
explorer starts, at this point i dont care if the virus was running (didnt seem like it was anyways)
open my c drive and took every file except the windows install and put them in one folder
right clicked that folder (called it dex) , went to security, owned all the files (made sure to check the sub directories thing)
picked my nose for a while while the system sat there and applied the ownership attributes
came back a bit later and in cmd prompt typed this
C:\del /s /f C:\dex\*.exe
let that finish out
then typed in the cmd prompt
C:\del /s /f C:\dex\*.dll
then
C:\del /s /f C:\dex\*.js
then
C:\del /s /f C:\dex\*.htm
then
C:\del /s /f C:\dex\*.html
then
C:\del /s /f C:\dex\*.tmp
then
C:\del /s /f C:\*.exe
C:\del /s /f C:\*.dll
C:\del /s /f C:\*.htm
C:\del /s /f C:\*.html
C:\del /s /f C:\*.js
C:\del /s /f C:\*.tmp
C:\del /s /f C:\*.com
those last lines killed all the *.exe, html, htm, js, tmp, com, dll in the new windows install
restalled windows, reinstalled my net adaptor, downloaded avast, scheduled a boot time
the damned thing got to 90% before it found one vitro...
in the only place i forgot to look, in the system volume information, and now that i think about it... this crucial little thing for the del cmd
C:\del /s /f /a:h
the /a:h is the big one (i think?) cuz i may have overlooked the hidden files...
but.... im running on my fresh (over the top of the old install) installation running right now, with avast running in the background... no virus alerts so far...
_____
just owned the system volume information
(please wait system is picking its nose)
started cmd and ran this
C:\del /f /s C:\system~1\*.exe
then
C:\del /f /s C:\system~1\*.dll
then
C:\del /f /s /a:h system~1\*.exe
then
C:\del /f /s /a:h system~1\*.dll
so far so good...
ill prolly be back here crying about this damned virus in a few hours again...
but for the moment, i have a fresh OS, my AVS (avast) is running, and all of my old data, mp3, avi, etc etc etc (minus the dll, exe, etc etc etc)