»
 

Go Back   ResellerRatings Store Ratings > ResellerRatings Forums > Tech Support

Reply
 
LinkBack Thread Tools Display Modes
Old 11-03-2003, 05:14 AM   #1 (permalink)
Registered User
 
Join Date: Nov 2003
Posts: 3
justravis is on a distinguished road
file eating monster: virus, XP or hard drive

Something is eating away at my files on my new Maxtor 160gb in this particular folder.

Subfolders in Undecoded Folder:
art
ebook
home_video
jokes
movies
mainstream
various_clips
web_content

Subfolders in Various Clips:
Commercials
Jackass
Punkd
Sports

First, all of the folders in Various_Clips disappeard. The folder only contained 2 files, I never saw before, that had names containing special symbols. They were 1.8 & 3.2 gb. I assume those 2 files were a conglomeration of the folders that used to be in Various Clips.

The next day, 3 of the subfolders in Undecoded, including Various_Clips, were converted to 32k files with the same name. They have no file extension. Opening them in notepad only reveals garbage.

Free Space has not changed, so I assume my files are still there.

Now here have been my actions:
1. Norton Virus found and deleted W32.HLLW.Winur.B
http://securityresponse.symantec.com...w.winur.b.html
2. Defraged hard drive using XP, which according to the graph, was necessary.
3. Norton virus no longer found viruses.
4. Norton Disk Doctor diagnosed and made repairs.

When I booted into WinXP after repairs, another folder in Undecoded was converted into a 32k file, so it seems as though the problem persists.

Norton System Info sees a Found.001 folder in the root of the drive. It has many File.00#.chk files in it.

Screencap of Undecoded folder is attached.

ANY IDEAS WOULD BE GREATLY APPRECIATED???????
Attached Images
File Type: jpg image002.jpg (24.0 KB, 58 views)

justravis is offline   Reply With Quote
Old 11-03-2003, 08:09 AM   #2 (permalink)
Registered User
 
meese's Avatar
 
Join Date: Jun 2003
Location: NJ
Posts: 1,096
meese is on a distinguished road
Go to the command prompt and run chkdsk. See if it comes back with any errors.

This can be the beginning of the end of your hard drive. If you have anything worth keeping I would back it up while you can.
meese is offline   Reply With Quote
Old 11-03-2003, 08:47 AM   #3 (permalink)
Registered User
 
Join Date: Feb 2003
Location: Hell in a Bucket
Posts: 22
the janitor is on a distinguished road
make sure system restore is turned off when scanning. better yet scan in safe mode.
the janitor is offline   Reply With Quote
Old 11-03-2003, 11:29 PM   #4 (permalink)
Registered User
 
Join Date: Jan 2003
Posts: 43
Gyurza is on a distinguished road
Send a message via AIM to Gyurza Send a message via Yahoo to Gyurza
Yes, i would concider that too, just deleted some viruses in my Computer too.."DO NOT USE KAZAA" every other file is a virus..i guess the record companies are findiding the way to get people pay for music and programs..Uncheck system restore, scan for viruses in safe mode...restart and go to your regedit. go to...
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run..on the right you will see..
"PowerManager"="%windir%\svchost.exe"
Delete it.....and go check system restore....and reboot.. you are free of viruses...Check every CD you Burned ..they are infected too.. i can asure you that.
let me know what happens..
Gyurza is offline   Reply With Quote
Old 11-03-2003, 11:31 PM   #5 (permalink)
Registered User
 
Join Date: Jan 2003
Posts: 43
Gyurza is on a distinguished road
Send a message via AIM to Gyurza Send a message via Yahoo to Gyurza
PS.. You have to load as a Administrator in safe Mode.
Gyurza is offline   Reply With Quote
Old 11-04-2003, 08:15 PM   #6 (permalink)
Registered User
 
Join Date: Nov 2003
Posts: 3
justravis is on a distinguished road
My latest step, as reccomended, was to run a web anti-virus @ http://housecall.trendmicro.com/.

It found and cleaned a PE_HANTANER.A virus ( http://www.trendmicro.com/vinfo/vir...e=PE_HANTANER.A ) from the D:\System Volume Information\_restore(6FC1419A-6CD4-469A-857A-95035305CC02)\RP34\A0005063.exe

I'm new to WinXP, so I dont know if that path has any significance. Just trying to give details to help you help me. Thanks for all your reccomendations. Hopefully I can try them all in the next few days and remedy the problem the best I can.
justravis is offline   Reply With Quote
Old 11-04-2003, 09:31 PM   #7 (permalink)
Registered User
 
AzKidd69's Avatar
 
Join Date: Oct 2001
Location: Mesa, AZ
Posts: 1,325
AzKidd69 is on a distinguished road
looks like housecall found the virus in a restore point ( at least that's what the path points to)
AzKidd69 is offline   Reply With Quote
Old 11-04-2003, 09:49 PM   #8 (permalink)
Registered User
 
Join Date: Jan 2003
Posts: 43
Gyurza is on a distinguished road
Send a message via AIM to Gyurza Send a message via Yahoo to Gyurza
So like i told you before.. let copy again for you...
Do This.
First go to..My Computer/rightclick on it/properties/system restore/check turn off system restore.
..Step 2...Reboot in safe mode/Administrator/scan for viruses/
..delete what you find/....
Step 3..Rebooot..normal mode/ go to RUN..
regedit/.....
Step 4..HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\C urrentVersion\Run
on the right you will see..."PowerManager"="%windir%\svchost.exe"
if is not there.. you are good to go....
Now follow steps..number one. to turn system restore on...
Reboot.. you are cool again.
REMENBER>>>>Always check all your CDS with your files with antivirus beofore you open them....Capiche.!!!Entiendes.?
GOOOd.. Boy..
let me know what happends....
Gyurza is offline   Reply With Quote
Old 11-05-2003, 01:42 AM   #9 (permalink)
Registered User
 
Join Date: Nov 2003
Posts: 3
justravis is on a distinguished road
yeah....saw it the first time...i was just trying reccomendations in the order i was told them.

Disabled system restore. Booted into Safe Mode as Admin. Norton did not find anymore viruses.

Actually looked for PowerManager Registry entry before I ran TrendMicro housecall. It wasnt there then and it is not there now.
justravis is offline   Reply With Quote
Reply




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Most Active Discussions

Recent Discussions

All times are GMT -6. The time now is 07:04 AM.