MajorGeeks Support Forums

Go Back   MajorGeeks Support Forums > ----------= PC, Desktop and Laptop Support =---------- > Malware Removal
Register FAQ Members List Calendar Casino Mark Forums Read

Malware Removal Malware removal forum. Please see the READ ME FIRST thread before you post. Forum is staffed by a small number of volunteers, please be patient.


Reply
 
Thread Tools Display Modes
  #21  
Old 09-10-12, 21:14
chaslang's Avatar
chaslang chaslang is offline
MajorGeeks Admin - Master Malware Expert
 
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 80,626
Thanks: 62
Thanked 7,759 Times in 4,197 Posts
Default Re: Smart hdd virus

Please bootup again with the G-Parted CD and tell me what you see listed for Partitions. Also which ones are Active, Hidden, Boot,....etc.
__________________
"There are 10 types of people in this world. Those who understand binary and those who don't."


Support Majorgeeks on Facebook:

Majorgeeks Newsletter
Reply With Quote
  #22  
Old 09-10-12, 21:43
dogmoat dogmoat is offline
Private First Class
 
Join Date: Jun 2012
Posts: 33
Thanks: 1
Thanked 0 Times in 0 Posts
Default Re: Smart hdd virus

I have the following partitions listed
partition file system label size used unused flags
/dev/sda1 fat 16 DELLUTILITY 100 mb 338kb 99.67kb diag
/dev/sda2 ntfs Recovery 14.65gb 9.43gb 5.22gb
/dev/sda3 ntfs OS 581.41gb --- ---- boot
unallocated unallocated 15mb

there is a warning flag by the OS partition
error says ntfs is inconsistent. Run Chkdsk/f on Windows then reboot it TWICE! Unable to read the contents of this file system! Because some of the operations may be unavailable.
Reply With Quote
  #23  
Old 09-10-12, 23:13
chaslang's Avatar
chaslang chaslang is offline
MajorGeeks Admin - Master Malware Expert
 
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 80,626
Thanks: 62
Thanked 7,759 Times in 4,197 Posts
Default Re: Smart hdd virus

If you change the boot flag to the 100MB partition, what happens?
__________________
"There are 10 types of people in this world. Those who understand binary and those who don't."


Support Majorgeeks on Facebook:

Majorgeeks Newsletter
Reply With Quote
  #24  
Old 09-10-12, 23:38
dogmoat dogmoat is offline
Private First Class
 
Join Date: Jun 2012
Posts: 33
Thanks: 1
Thanked 0 Times in 0 Posts
Default Re: Smart hdd virus

upon boot it asks for a command
C:\>
Reply With Quote
  #25  
Old 09-11-12, 09:34
chaslang's Avatar
chaslang chaslang is offline
MajorGeeks Admin - Master Malware Expert
 
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 80,626
Thanks: 62
Thanked 7,759 Times in 4,197 Posts
Default Re: Smart hdd virus

At that C: prompt, type the below and hit enter, tell me if any problems are detected. This may take a while to run. Note DO NOT use the /f option! Just enter it as I show below.

chkdsk
__________________
"There are 10 types of people in this world. Those who understand binary and those who don't."


Support Majorgeeks on Facebook:

Majorgeeks Newsletter

Last edited by chaslang; 09-11-12 at 21:53.. Reason: typo
Reply With Quote
Sponsored links
  #26  
Old 09-11-12, 21:19
dogmoat dogmoat is offline
Private First Class
 
Join Date: Jun 2012
Posts: 33
Thanks: 1
Thanked 0 Times in 0 Posts
Default Re: Smart hdd virus

It says "bad command or file name"
Reply With Quote
  #27  
Old 09-12-12, 00:50
chaslang's Avatar
chaslang chaslang is offline
MajorGeeks Admin - Master Malware Expert
 
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 80,626
Thanks: 62
Thanked 7,759 Times in 4,197 Posts
Default Re: Smart hdd virus

That's what I suspected. At the C: prompt what happens if you type the below and hit enter?

D:

Does the prompt change to show drive D? If so, what is the full prompt? Also if it changes to drive D, what happens if you type dir and hit enter?
__________________
"There are 10 types of people in this world. Those who understand binary and those who don't."


Support Majorgeeks on Facebook:

Majorgeeks Newsletter
Reply With Quote
  #28  
Old 09-12-12, 01:07
dogmoat dogmoat is offline
Private First Class
 
Join Date: Jun 2012
Posts: 33
Thanks: 1
Thanked 0 Times in 0 Posts
Default Re: Smart hdd virus

upon command
D:
"invalid drive specified"
the prompt stays on drive C.
Reply With Quote
  #29  
Old 09-12-12, 02:22
thisisu's Avatar
thisisu thisisu is offline
Malware Consultant
 
Join Date: Apr 2006
Location: Houston, TX
Posts: 8,179
Thanks: 270
Thanked 1,437 Times in 1,356 Posts
Default Re: Smart hdd virus

@Chaslang
Just a heads up that the fix you posted here was incorrectly run.

The user may need to toggle the 581.41gb partition inactive and then back to active.
__________________
Facebook . Twitter . Blog . VirusTotal
Reply With Quote
  #30  
Old 09-12-12, 11:04
chaslang's Avatar
chaslang chaslang is offline
MajorGeeks Admin - Master Malware Expert
 
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 80,626
Thanks: 62
Thanked 7,759 Times in 4,197 Posts
Default Re: Smart hdd virus

Quote:
Originally Posted by thisisu View Post
@Chaslang
Just a heads up that the fix you posted here was incorrectly run.

The user may need to toggle the 581.41gb partition inactive and then back to active.
Ah, good catch! Thanks thisisu!

dogmoat, you need to go back and run the fix in message # 19 properly. You were not booted into the System Recovery Environment. And as noted by thisisu, you may need to first make the 581.41 GB partition inactive and then toggle back to Active.
__________________
"There are 10 types of people in this world. Those who understand binary and those who don't."


Support Majorgeeks on Facebook:

Majorgeeks Newsletter
Reply With Quote
Sponsored links
  #31  
Old 09-12-12, 21:45
dogmoat dogmoat is offline
Private First Class
 
Join Date: Jun 2012
Posts: 33
Thanks: 1
Thanked 0 Times in 0 Posts
Default Re: Smart hdd virus

I am still getting the error msg while trying to boot in OS (581.41 partition)

says "windows failed to start. A recent hardware or software change might be the cause. To fixthe problem:
1. insert your windows installaton disc and restart your computer.
2 choose your language settings, and then click next.
3. Click repair your computer.

If you do not have this disc, contact your systems admin or computer mftr for assistance.

File: \Boot\BCD
status: 0xc000000f
info: An error occurred while attempting to read the boot configuration data."
Reply With Quote
  #32  
Old 09-12-12, 22:57
chaslang's Avatar
chaslang chaslang is offline
MajorGeeks Admin - Master Malware Expert
 
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 80,626
Thanks: 62
Thanked 7,759 Times in 4,197 Posts
Default Re: Smart hdd virus

Did you rerun the fixlist.txt fix with FRST? If so, please attach the new resulting Fixlog.txt
__________________
"There are 10 types of people in this world. Those who understand binary and those who don't."


Support Majorgeeks on Facebook:

Majorgeeks Newsletter
Reply With Quote
  #33  
Old 09-12-12, 23:44
dogmoat dogmoat is offline
Private First Class
 
Join Date: Jun 2012
Posts: 33
Thanks: 1
Thanked 0 Times in 0 Posts
Default Re: Smart hdd virus

fixlog.txt is attached
Attached Files
File Type: txt Fixlog.txt (5.6 KB, 7 views)
Reply With Quote
  #34  
Old 09-12-12, 23:48
thisisu's Avatar
thisisu thisisu is offline
Malware Consultant
 
Join Date: Apr 2006
Location: Houston, TX
Posts: 8,179
Thanks: 270
Thanked 1,437 Times in 1,356 Posts
Default Re: Smart hdd virus

Make sure you are attaching the correct (latest) log, this one still tells us that the fix was run incorrectly.

Code:
ATTENTION: THE TOOL IS NOT RUN FROM RECOVERY ENVIRONMENT AND WILL NOT FUNCTION PROPERLY.
Refer back to post #15 for instructions on how to get into the recovery environment / System Recovery Options.
__________________
Facebook . Twitter . Blog . VirusTotal
Reply With Quote
  #35  
Old 09-13-12, 00:36
dogmoat dogmoat is offline
Private First Class
 
Join Date: Jun 2012
Posts: 33
Thanks: 1
Thanked 0 Times in 0 Posts
Default Re: Smart hdd virus

try this one
Attached Files
File Type: txt Fixlog.txt (5.4 KB, 5 views)
Reply With Quote
Sponsored links
  #36  
Old 09-13-12, 02:31
chaslang's Avatar
chaslang chaslang is offline
MajorGeeks Admin - Master Malware Expert
 
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 80,626
Thanks: 62
Thanked 7,759 Times in 4,197 Posts
Default Re: Smart hdd virus

Okay is there any change in the ability to boot up Windows.
__________________
"There are 10 types of people in this world. Those who understand binary and those who don't."


Support Majorgeeks on Facebook:

Majorgeeks Newsletter
Reply With Quote
  #37  
Old 09-13-12, 09:26
dogmoat dogmoat is offline
Private First Class
 
Join Date: Jun 2012
Posts: 33
Thanks: 1
Thanked 0 Times in 0 Posts
Default Re: Smart hdd virus

No-- I still cannot boot into Windows; I get the same error msg
Reply With Quote
  #38  
Old 09-15-12, 01:41
chaslang's Avatar
chaslang chaslang is offline
MajorGeeks Admin - Master Malware Expert
 
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 80,626
Thanks: 62
Thanked 7,759 Times in 4,197 Posts
Default Re: Smart hdd virus

Try doing a Startup Repair from the System Recovery Options. See how we booted in message # 15 but this time choose Startup Repair not Command Prompt.

More info on Startup Repair is in the below although this mentions booting from the Windows 7 DVD instead of the built in Recover Options.

http://www.sevenforums.com/tutorials/681-startup-repair.html
__________________
"There are 10 types of people in this world. Those who understand binary and those who don't."


Support Majorgeeks on Facebook:

Majorgeeks Newsletter
Reply With Quote
  #39  
Old 09-16-12, 14:22
dogmoat dogmoat is offline
Private First Class
 
Join Date: Jun 2012
Posts: 33
Thanks: 1
Thanked 0 Times in 0 Posts
Default Re: Smart hdd virus

sorry, that did not work either
Reply With Quote
  #40  
Old 09-16-12, 17:34
chaslang's Avatar
chaslang chaslang is offline
MajorGeeks Admin - Master Malware Expert
 
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 80,626
Thanks: 62
Thanked 7,759 Times in 4,197 Posts
Default Re: Smart hdd virus

Please see message # 15 again and boot up to the System Recovery Command prompt. When you get to the command prompt, just type dir and hit enter. What do you see? Also what is the prompt that you see when you first get to the command prompt?
__________________
"There are 10 types of people in this world. Those who understand binary and those who don't."


Support Majorgeeks on Facebook:

Majorgeeks Newsletter
Reply With Quote
Sponsored links
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Got the S.M.A.R.T. virus, not so smart on my part jimpeel Malware Removal 22 05-18-12 01:24
SMART Check Virus flyer85 Malware Removal 14 05-08-12 12:34
how to remove smart virus snipermike The Lounge 4 04-19-12 23:00
HELP, smart hdd virus, zelda610 Malware Removal 3 04-17-12 22:50
Please Help: Very Smart Virus Took Over My Comp. jkeck Malware Removal 4 06-02-07 19:18


All times are GMT -5. The time now is 19:33.

MajorGeeks.Com Menu

MajorGeeks.Com \ All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ NEW! PC Games \ System Tools \ Macintosh \ Demonews.Com \ Top Downloads

MajorGeeks.Com \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds


All content Copyright MajorGeeks.com source code Powered by vBulletin® Version 3.8.4
Copyright © 2009 vBulletin Solutions, Inc. All rights reserved.
Ad Management by RedTyger