Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Hard Drive Appears Nearly Empty


  • Please log in to reply
1 reply to this topic

#1 warcat

warcat

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:12:14 PM

Posted 20 May 2011 - 12:05 AM

I have an HP/Compaq nc8000 laptop running Win XP Pro. When XP starts up in normal mode, I just have my normal background screen, but it is completely blank; no shortcut icons, no recycle bin, not even the start button. Ctrl-Alt-Del will not even bring up task manager. I rebooted in safe mode, got a Start button and went to my computer. When I opened the C drive, the root directory only showed a log file from Roxio. It made it appear that there is nothing else on the hard drive. I went into control panel, and it does show the programs installed under add/remove programs. While in safe mode, I ran Malware Anti-Malware Bytes from a flash drive. Did a quick scan and it found 366 infections, which MBAM fixed. Rebooted in normal mode -- still no icons, start button or task manager access. Restarted in safe mode, C drive still appearing as virtually empty, ran MBAM again, but it did not find anything this time. I also ran chkdsk on one of the reboots and it returned no errors on the hard drive. Suspect it is still infected by a virus or viruses. Is it worth it to find them, or would it be better to just wipe the drive and reinstall XP?

Edited by Andrew, 20 May 2011 - 03:24 AM.
Mod Edit: Moved From XP To AII - AA


BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 33,373 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:12:14 PM

Posted 20 May 2011 - 07:25 AM

Please post the complete results of your MBAM scan for review.

To retrieve the Malwarebytes Anti-Malware scan log information, launch MBAM.
  • Click the Logs Tab at the top.
  • The log will be named by the date of scan in the following format: mbam-log-date(time).txt
    -- If you have previously used MBAM, there may be several logs showing in the list.
  • Click on the log name to highlight it.
  • Go to the bottom and click on Open.
  • The log should automatically open in notepad as a text file.
  • Go to Edit and choose Select all.
  • Go back to Edit and choose Copy or right-click on the highlighted text and choose Copy from there.
  • Come back to this thread, click Add Reply, then right-click and choose Paste.
  • Be sure to post the complete log to include the top portion which shows MBAM's database version and your operating system.
Logs are saved to the following locations:
-- XP: C:\Documents and Settings\<Username>\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-yyyy-mm-dd
-- Vista, Windows 7, 2008: C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-yyyy-mm-dd



The symptoms you describe can be indicative of a side effect from the HDD Defrag family of rogue security programs which changes file attributes to "hidden", making them appear invisible so the user thinks some of their files have been deleted. Newer variants of the FakeHDD rogue delete Quick Launch and Start Menu items/folders.

Please download unhide.exe by Grinler and save to your Desktop. Double-click on the file to run the tool.

After running it, all files will have the "hidden" attribute removed. This includes files that are normally hidden by the operating system and any files you may have intentionally hidden. The tool is designed not to remove hidden attribute for system files. If Quick Launch and the Start Menu were deleted, unhide.exe will attempt to restore them back to their proper location. When done you will need to restore the hidden attributes to those files manually. To do that, open Windows Explorer, go to Tools > Folder Options > View and make that change there.

Note: Do not clean out your temporary files/folders until this issue is resolved.
Microsoft MVP - Consumer Security 2007-2014 MVP.gif

Member of UNITE, Unified Network of Instructors and Trusted Eliminators




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users