This question already has an answer here:
Got infected by a malware/virus by downloading and opening a .doc file in an email attachment, when restarting the machine it failed on boot several times, I used recovery mode to fix boot issue but then I realized that I have to wipe the disk so I reinstalled Win 10 using the second option that format the drive and makes hared to recover files, this option is called "remove everything".
When searching on the internet I found that this feature format the disk and replace every bit with 0 so I assume it's safe to use that machine again but I still have some doubts, I have no idea of how advanced the virus was.
I can't change the machine because I do not have enough money to buy another one, what are my options to stay safe from another infections and how to be sure there's no risk using the actual machine?
What I've done so far:
- Installed free Norton AV on Win 10 - run full scan all clean
- Installed Kaspersky Virus Tool Removal it can search on system memory, boot sector, startup objects and recovery partition
- Dual-boot with Ubuntu 17
- VPN on both os
- Router config (mac address filter, no upnp, new ssid name/pass, new admin account)
- Sometimes I use Tor but if my machine is still infected it's really worthless
- For banking I changed my credentials on android phone and if pc needed I run Tails on top of Ubuntu
Some other thoughts:
I'm using a Surface pro 4 that comes with a thing called secure boot and basically it looks for signatures or something like that before launching the os, it was enabled the moment I opened the virus, can still the BIOS get infected?
This machine comes with a lot of components, how hard is to install a virus on firemware of ssd, camera, sensors, gpu, ect?
I know the actual setup is pretty safe since I received another file attachment and suspicious links from the attackers. I did not bother to click on that.
I really appreciate any kind of help.