Worm:Win32/Conficker.C again

Helping another friend, to fix the same virus infection, Worm:Win32/Conficker.C. But this time, the situation is different.

Doing the same procedures like last time. But, during the scanning in safe mode, the computer suddenly turned off. Then I tried to restart. When log in to Windows, suddenly, “blue screen of death” come out, and the computer restarted. So, could not log in to Windows anymore.

SystemRescueCD, my favourite. Use it in order to backup the data from C: drive. Then, using the ntfs-3g to mount the D: drive, found a message something like:

The disk contains an unclean file system(0,0). The file system wasn’t safely closed by Windows. Fixing.

After copying the important data from C: to D:, I guessed Windows could not be logged in might because of improper shutdown. Therefore, I tried to use ntfs-3g to mount the C: drive, in order to get the message above.

Right, the message was displayed for C: drive.

Now, restart the computer. YEAH! No more problem log in to Windows. Problem solved.

Then, it was possible that the safe mode will cause the computer shutdown at certain time. So, without using safe mode, Malicious Software Removal Tool was used to remove the virus. Success!