IPB

Welcome Guest ( Log In | Register )

 
Reply to this topicStart new topic
> NEW X DRIVE ON SYSTEM AFTER FLASHDRIVE DOWNLOAD, VIRUS?
KZVIRUS
post 26.08.2007 20:50
Post #1


Newbie
*

Group: Members
Posts: 5
Joined: 26.08.2007




Hello,
I have a new X drive on my system, including the usual C,D, system backup E on a XPSP2 OS, after a colleague downloaded files from her flashdrive. The AV does not detect this drive as incorrect. It changes sizes, is part of the C drive and cannot be deleted. What do I do? Thank you for any help.
Go to the top of the page
 
+Quote Post
dawgg
post 26.08.2007 21:16
Post #2


Forum Elite
**************

Group: Moderators
Posts: 6828
Joined: 6.04.2006
From: London




Is there an autorun.ini file in your friend's flashdrive?... if there is, open it with notepad, see if it refers to any specific filename. If it shows a filename, see if a file with the same name is located in the flashdrive and send the file to Kaspersky's VirusLab using instructions posted here: http://forum.kaspersky.com/index.php?showtopic=13881

Await further information of how to remove the drive from other users
Go to the top of the page
 
+Quote Post
KZVIRUS
post 28.08.2007 11:11
Post #3


Newbie
*

Group: Members
Posts: 5
Joined: 26.08.2007




QUOTE(dawgg @ 26.08.2007 21:16)
Is there an autorun.ini file in your friend's flashdrive?... if there is, open it with notepad, see if it refers to any specific filename. If it shows a filename, see if a file with the same name is located in the flashdrive and send the file to Kaspersky's VirusLab using instructions posted here: http://forum.kaspersky.com/index.php?showtopic=13881

Await further information of how to remove the drive from other users
[right][snapback]425487[/snapback][/right]

Go to the top of the page
 
+Quote Post
KZVIRUS
post 28.08.2007 11:20
Post #4


Newbie
*

Group: Members
Posts: 5
Joined: 26.08.2007




QUOTE(dawgg @ 26.08.2007 21:16)
Is there an autorun.ini file in your friend's flashdrive?... if there is, open it with notepad, see if it refers to any specific filename. If it shows a filename, see if a file with the same name is located in the flashdrive and send the file to Kaspersky's VirusLab using instructions posted here: http://forum.kaspersky.com/index.php?showtopic=13881

Await further information of how to remove the drive from other users
[right][snapback]425487[/snapback][/right]



hELLO AND THANK YOU FOR YOUR SUGGESTIONS-
Flashdrive not available any longer. My laptop's OS inidcates "X" drive with recycler and system volume information files which cannot be deleted. No other files are currently on the "X" drive as I deleted previous copies of several "C" drive folders. Security features of "X" drive indicate it is admin share and "Adminsitrators" have full access. I cannot delete through special permissions, etc.
Go to the top of the page
 
+Quote Post
dawgg
post 28.08.2007 19:18
Post #5


Forum Elite
**************

Group: Moderators
Posts: 6828
Joined: 6.04.2006
From: London




All i can think of is you to use a disk partition program such as PartitionMagic or DiskDirector to either merge the drives or delete the X-drive and expand the C-drive (if there is space... expand C:\ to the space the current X-drive is occupying)
Go to the top of the page
 
+Quote Post
KZVIRUS
post 28.08.2007 20:21
Post #6


Newbie
*

Group: Members
Posts: 5
Joined: 26.08.2007




QUOTE(dawgg @ 28.08.2007 19:18)
All i can think of is you to use a disk partition program such as PartitionMagic or DiskDirector to either merge the drives or delete the X-drive and expand the C-drive (if there is space... expand C:\ to the space the current X-drive is occupying)
[right][snapback]426419[/snapback][/right]


I would rather delete this drive. It has a tracking.log which keeps coming back after I delete it and when I try to change the "H" attribute an error message pops up "X:|Sy...|MountPointMangerRemoteDatabase"; i deleted the X drive in the registry and checked for X:|system volume information, no references found; but a G drive popped up after rebooting which has 1 folder="System Volume Information" which has 2 files = "MountPointManageRemoteDatabase" and "tracking.log"; the contents of the tracking.log file is below, as are attempts to find out where it is.

tracking.log =
ì§CfþïѲ® ÀO¹8m   pc139223223129 2˜Ài![MFª
Rú¨Â% óKÉréÇ › › ÿÿÿÿ  ›        
  

   
      !  !  $ "  % #  & $  ' %  ( &  ) '  * (  + )  , *  - +  . ,  / -  0 .  1 /  2 0  3 1  4 2  5 3  6 4  7 5  8 6  9 7  : 8  ; 9  < :  = ;  > <  ? =  @ >  A ?  B @  C A  D B  E C  F D  G E  H F  I G  J H  K I  L J  M K  N L  O M  P N  Q O  R P  S Q  T R  U S  V T  W U  X V  Y W  Z X  [ Y  \ Z  ] [  ^ \  _ ]  ` ^  a _  b `  c a  d b  e c  f d  g e  h f  i g  j h  k i  l j  m k  n l  o m  p n  q o  r p  s q  t r  u s  v t  w u  x v  y w  z x  { y  | z  } {  ~ |   }  € ~     ‚ €  ƒ  ˜ –  ™ —  š ˜  › ™  š 
etc.....


Backup Status
Operation: Backup
Active backup destination: File
Media name: "DRIVE X Backup.bkf created 8/28/2007 at 6:40 AM"

Backup of "X: "
Backup set #1 on media #1
Backup description: "Set created 8/28/2007 at 6:40 AM"
Media name: "DRIVE X Backup.bkf created 8/28/2007 at 6:40 AM"

Backup Type: Normal

Backup started on 8/28/2007 at 6:40 AM.
Backup completed on 8/28/2007 at 6:40 AM.
Directories: 5
Files: 4
Bytes: 53,593
Time: 1 second

----------------------

Verify Status
Operation: Verify After Backup
Active backup destination: File
Active backup destination: C:\Documents and Settings\Administrator\Desktop\DRIVE X Backup.bkf

Verify of "X:"
Backup set #1 on media #1
Backup description: "Set created 8/28/2007 at 6:40 AM"
Verify started on 8/28/2007 at 6:40 AM.
Verify completed on 8/28/2007 at 6:40 AM.
Directories: 5
Files: 4
Different: 0
Bytes: 53,593
Time: 1 second

----------------------

Disk Defragmenter
Volume (X:)
Volume size = 1.00 GB
Cluster size = 2 KB
Used space = 8 MB
Free space = 1,020 MB
Percent free space = 99 %
Volume fragmentation
Total fragmentation = 0 %
File fragmentation = 0 %
Free space fragmentation = 0 %
File fragmentation
Total files = 7
Average file size = 24 KB
Total fragmented files = 1
Total excess fragments = 11
Average fragments per file = 2.57
Pagefile fragmentation
Pagefile size = 0 bytes
Total fragments = 0
Folder fragmentation
Total folders = 5
Fragmented folders = 1
Excess folder fragments = 0
Master File Table (MFT) fragmentation
Total MFT size = 352 KB
MFT record count = 27
Percent MFT in use = 7 %
Total MFT fragments = 2
--------------------------------------------------------------------------------
Fragments File Size Most fragmented files
None
Go to the top of the page
 
+Quote Post
dawgg
post 28.08.2007 20:33
Post #7


Forum Elite
**************

Group: Moderators
Posts: 6828
Joined: 6.04.2006
From: London




Are there any suspicious files located in the drive? if there are, send them to Kaspersky's Viruslabs... instructions as to how to do this are posted here: http://forum.kaspersky.com/index.php?showtopic=13881

Also you may wish to contact Kaspersky Support via one of the following methods and see if they can help...
PersonalCabinet: https://support.kaspersky.com/en/PersonalCabinet
Helpdesk: http://support.kaspersky.ru/helpdesk.html?LANG=en
(select VirusDisinfection where it says "type of request")
Go to the top of the page
 
+Quote Post

Reply to this topicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 



Lo-Fi Version Time is now: 22.11.2009 10:26