"HiPerfCooker-WMI namespace" malware / infection.
I have 4 PC's that are infected with a "HiPerfCooker" infection in the WMI namespace. They range from an Intel d850mv, ASUS P4P800-E Dlx & P4C800-E Dlx, topping it off with an ASUS P7P55D Pro. All of the PC's upon loading the OS (ranging from Win2k Pro, WinXP Home & Pro, Vista Ulimate (32bit) up to Win 7 Ultimate 64 bit. All of them have the HiPerfCooker loadingfirst in the WMI namespace at the root level. It creates an annonymous login for remote administration and sets a security policy that keeps me from doing squat about it via "access denied" BS messages. I've tried zeroing out the HD's with every oem floppy and CD drive tool on the drives ranging from WD's, Maxtors and Seagates. I've flashed the bios's of the ASUS P4P & C mobos using AFU236U engineering sample using advanced command switches that erase the boot block and rewrite the bios at the same time. No sequence of zeroing out HD's / flashing bios's / formatting & reinstalling OS has cleared this malware from the four PC's (fyi: two are mine / two are my fathers. My brother has two infected ones too, but he's waiting on the solution and not worried with the problem so far). I'm not an IT Pro but a pretty good PC repair tech with over 10 yrs experience. I thank you in advance for diving into the deep end with me on this one. More tech specs, hardware lists, cpu & memory details, etc are yours for the asking. I fear this will not be easy even for a SuperGeek from the Microsoft realm, but I hope to be wrong...and please remember my motto: Geeks are great, nerds are something else altogether...
June 12th, 2010 10:24pm

Restart your PC and press F8 repeatedly and chose:Safemode with NetworkingThere login and try to login to:http://onecare.live.com/site/en-us/default.htmAnd run full system scan and see if problem resolve.If not contact support:https://consumersecuritysupport.microsoft.com/default.aspx?productkey=pcsafetymalware&faq=1&mytask=diagnostics
Free Windows Admin Tool Kit Click here and download it now
June 13th, 2010 2:00pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics