Help - Search - Members
Full Version: NEW X DRIVE ON SYSTEM AFTER FLASHDRIVE DOWNLOAD
Kaspersky Lab Forum > English User Forum > Virus-related issues
KZVIRUS
Hello,
I have a new X drive on my system, including the usual C,D, system backup E on a XPSP2 OS, after a colleague downloaded files from her flashdrive. The AV does not detect this drive as incorrect. It changes sizes, is part of the C drive and cannot be deleted. What do I do? Thank you for any help.
dawgg
Is there an autorun.ini file in your friend's flashdrive?... if there is, open it with notepad, see if it refers to any specific filename. If it shows a filename, see if a file with the same name is located in the flashdrive and send the file to Kaspersky's VirusLab using instructions posted here: http://forum.kaspersky.com/index.php?showtopic=13881

Await further information of how to remove the drive from other users
KZVIRUS
QUOTE(dawgg @ 26.08.2007 21:16)
Is there an autorun.ini file in your friend's flashdrive?... if there is, open it with notepad, see if it refers to any specific filename. If it shows a filename, see if a file with the same name is located in the flashdrive and send the file to Kaspersky's VirusLab using instructions posted here: http://forum.kaspersky.com/index.php?showtopic=13881

Await further information of how to remove the drive from other users
[right][snapback]425487[/snapback][/right]

KZVIRUS
QUOTE(dawgg @ 26.08.2007 21:16)
Is there an autorun.ini file in your friend's flashdrive?... if there is, open it with notepad, see if it refers to any specific filename. If it shows a filename, see if a file with the same name is located in the flashdrive and send the file to Kaspersky's VirusLab using instructions posted here: http://forum.kaspersky.com/index.php?showtopic=13881

Await further information of how to remove the drive from other users
[right][snapback]425487[/snapback][/right]



hELLO AND THANK YOU FOR YOUR SUGGESTIONS-
Flashdrive not available any longer. My laptop's OS inidcates "X" drive with recycler and system volume information files which cannot be deleted. No other files are currently on the "X" drive as I deleted previous copies of several "C" drive folders. Security features of "X" drive indicate it is admin share and "Adminsitrators" have full access. I cannot delete through special permissions, etc.
dawgg
All i can think of is you to use a disk partition program such as PartitionMagic or DiskDirector to either merge the drives or delete the X-drive and expand the C-drive (if there is space... expand C:\ to the space the current X-drive is occupying)
KZVIRUS
QUOTE(dawgg @ 28.08.2007 19:18)
All i can think of is you to use a disk partition program such as PartitionMagic or DiskDirector to either merge the drives or delete the X-drive and expand the C-drive (if there is space... expand C:\ to the space the current X-drive is occupying)
[right][snapback]426419[/snapback][/right]


I would rather delete this drive. It has a tracking.log which keeps coming back after I delete it and when I try to change the "H" attribute an error message pops up "X:|Sy...|MountPointMangerRemoteDatabase"; i deleted the X drive in the registry and checked for X:|system volume information, no references found; but a G drive popped up after rebooting which has 1 folder="System Volume Information" which has 2 files = "MountPointManageRemoteDatabase" and "tracking.log"; the contents of the tracking.log file is below, as are attempts to find out where it is.

tracking.log =
ì§CfþïѲ® ÀO¹8m   pc139223223129 2˜Ài![MFª
Rú¨Â% óKÉréÇ › › ÿÿÿÿ  ›        
  

   
      !  !  $ "  % #  & $  ' %  ( &  ) '  * (  + )  , *  - +  . ,  / -  0 .  1 /  2 0  3 1  4 2  5 3  6 4  7 5  8 6  9 7  : 8  ; 9  < :  = ;  > <  ? =  @ >  A ?  B @  C A  D B  E C  F D  G E  H F  I G  J H  K I  L J  M K  N L  O M  P N  Q O  R P  S Q  T R  U S  V T  W U  X V  Y W  Z X  [ Y  \ Z  ] [  ^ \  _ ]  ` ^  a _  b `  c a  d b  e c  f d  g e  h f  i g  j h  k i  l j  m k  n l  o m  p n  q o  r p  s q  t r  u s  v t  w u  x v  y w  z x  { y  | z  } {  ~ |   }  € ~     ‚ €  ƒ  ˜ –  ™ —  š ˜  › ™  š 
etc.....


Backup Status
Operation: Backup
Active backup destination: File
Media name: "DRIVE X Backup.bkf created 8/28/2007 at 6:40 AM"

Backup of "X: "
Backup set #1 on media #1
Backup description: "Set created 8/28/2007 at 6:40 AM"
Media name: "DRIVE X Backup.bkf created 8/28/2007 at 6:40 AM"

Backup Type: Normal

Backup started on 8/28/2007 at 6:40 AM.
Backup completed on 8/28/2007 at 6:40 AM.
Directories: 5
Files: 4
Bytes: 53,593
Time: 1 second

----------------------

Verify Status
Operation: Verify After Backup
Active backup destination: File
Active backup destination: C:\Documents and Settings\Administrator\Desktop\DRIVE X Backup.bkf

Verify of "X:"
Backup set #1 on media #1
Backup description: "Set created 8/28/2007 at 6:40 AM"
Verify started on 8/28/2007 at 6:40 AM.
Verify completed on 8/28/2007 at 6:40 AM.
Directories: 5
Files: 4
Different: 0
Bytes: 53,593
Time: 1 second

----------------------

Disk Defragmenter
Volume (X:)
Volume size = 1.00 GB
Cluster size = 2 KB
Used space = 8 MB
Free space = 1,020 MB
Percent free space = 99 %
Volume fragmentation
Total fragmentation = 0 %
File fragmentation = 0 %
Free space fragmentation = 0 %
File fragmentation
Total files = 7
Average file size = 24 KB
Total fragmented files = 1
Total excess fragments = 11
Average fragments per file = 2.57
Pagefile fragmentation
Pagefile size = 0 bytes
Total fragments = 0
Folder fragmentation
Total folders = 5
Fragmented folders = 1
Excess folder fragments = 0
Master File Table (MFT) fragmentation
Total MFT size = 352 KB
MFT record count = 27
Percent MFT in use = 7 %
Total MFT fragments = 2
--------------------------------------------------------------------------------
Fragments File Size Most fragmented files
None
dawgg
Are there any suspicious files located in the drive? if there are, send them to Kaspersky's Viruslabs... instructions as to how to do this are posted here: http://forum.kaspersky.com/index.php?showtopic=13881

Also you may wish to contact Kaspersky Support via one of the following methods and see if they can help...
PersonalCabinet: https://support.kaspersky.com/en/PersonalCabinet
Helpdesk: http://support.kaspersky.ru/helpdesk.html?LANG=en
(select VirusDisinfection where it says "type of request")
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.