You are My Last Hope Before I Try This...

[HalfJoey]

Long Story Short:
1. Computer Started to restart and shutdown by itself. (once a week 2 weeks ago or so, i didnt think much of it at first)
2. Browsers started crashing and giving weird errors (FireFox and EI7)
3. Windows started giving me weird errors.
4. One shutdown error gives me a Lsass.exe error. I research this and it could be a Sasser worm.
5. Computer restarts at seemingly random times two days ago. This keeps up.
6. I cant back anything up from the OS install drive because it keeps restarting on its own.
7. I start in safe mode with no change using Start>Run>MSconfig
8. I run windows xp repair mode. When windows reboots to finish the repair i start up in safe mode then windows tells me it cant finish the repiar while booting in safe mode.
9. I get to the Windows Advance options (F8 while booting) and ask windows to stare Windows Normally. This doesnt work and safe mode still pops up and windows still tells me it cant finish in safe mode and to restart.

All i want to do is access windows, not have my computer shut down so i can backup information on that drive. I dont want to copy any of the system information, just pictures and what not.

I realized i just typed this out for no reason, well a vent sorta of, but my real question is...

If i hook up this infected OS HDD to another computer just to drag the files i need, will the healthy computer get infected? I wont be running the OS off the infected one. I'll just be using the healthy computer to access the infected HDD to drag into a back up external HDD.

I didn't try this at first because the only computer i can do this with is my moms and she is worried i'll spread the virus/worm to her computer. I didn't know what would happen so i didnt try that method first.

If this doesn't work ill have to go to the store and get an external HDD enclosure with SATA and get the information of my infected HDD that way. Will that work?

Thanks in advance, this forum has always been helpful to me.

 

[ex_reven]

Did you have any software based protection when it started?
I.e, antivirus, firewall and anti malware?
If not that might be the reason.
Assuming that you do have a number of nasties on your hard drive, it doesnt mean you cant use your mums computer to do it. You just need to be sure to take the appropriate precautions. Make sure your mum has an up to date antivirus program of good quality, as well as a good firewall. I also suggest you download various tools for her computer such as Ewido, Ad-Aware and Spybot. All of which are free.

If you need an antivirus and firewall, you could use Avast and Zone Alarm.
All of these programs are free and operate very well.

 

[HalfJoey]

I had an updated version of Kerspersky on my computer when this all when down. But i have a feeling the new Windows updates messed with it and something happened.

I will be sure to install a leaste one spyware and one anti-virus program on my moms computer before i do this.


any other suggestions?

 

[GJSNeptune]

Take a look at Knoppix maybe. I've never used it, but I read about people using it a lot, especially in emergency situations like this one.

The following "Highlights" are available on the download version of this Debian-based (www.debian.org) CD or DVD:
* Linux-Kernel 2.6.x
* KDE V3.x as the standard desktop with K Office and the Konqueror WWW-browser konqueror
* X Multimedia System (xmms) an MPEG-video, MP3, Ogg Vorbis Audio player and xine
* Internet connection software kppp,pppoeconf (DSL) and isdn-config
* Gnu Image Manipulation Program (GIMP) Version 2.x
* utilities for data recovery and system repairs, even for other operating systems
* network and security analysis tools for network administrators
* OpenOffice.org, the GPL-developed version of the well-known StarOffice(TM) office suite
* many programming languages, development tools and libraries for developers
* in total more than 900 installed software packages with over 2000 executable user programs, utilities, and games

 

[AT-2500]

and before you do anything, just unplug your internet cable, or put out your wlan stick and make sure there is no way for the computer to get into the internet.

you dont want to give the worm a chance to spread out, do you?

the torrents for knoppix are usually so fast they are even used to test the speed of your torrent program. if you want to download it per torrent.

 

[ex_reven]

and before you do anything, just unplug your internet cable, or put out your wlan stick and make sure there is no way for the computer to get into the internet.

This is a good point. Ive noticed that some viruses, particularly trojans tend to go absolutely apeshit when they have access to the internet. Its usually a good idea to pull the plug first.