Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

D Drive Files Replaced With Kdb Folder?


  • This topic is locked This topic is locked
18 replies to this topic

#1 siewpao

siewpao

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:09:20 PM

Posted 15 March 2008 - 03:22 AM

Hey guys I really need your help. Yesterday when i switched on my pc i wanted to listen to my favourite music. SO i clicked on my partition drive D: where i always keep my songs , and it showed only 1 folder. KDB folder. When i click on it it showed some really weird file names. I tried scanning my pc with anti virus and spyware, but nothing.

My question is this a virus??

If i format my pc, will my d drive files magically reappear???
???

Any advice is much appreciated.........Thanks in advance.............

BC AdBot (Login to Remove)

 


#2 Wildabeast

Wildabeast

    Bleeping Lurker...


  • Members
  • 1,259 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Nebraska, USA
  • Local time:09:20 PM

Posted 15 March 2008 - 03:41 AM

I really can't help you, but I can say that formattiing your hard drive will wipe out all your files, so I don't recommend doing that just yet. Hang in there and somebody smarter than me will come along... :thumbsup:
"The nine most feared words in the english language, 'I'm from the government, and I'm here to help'..."
Ronald Reagan

#3 garmanma

garmanma

    Computer Masochist


  • Members
  • 27,809 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cleveland, Ohio
  • Local time:10:20 PM

Posted 15 March 2008 - 09:17 AM

I cannot find any reference to a KDB folder, file .exe, download, or anything. What does show up is in a foreign language. Almost always, not a good sign. Maybe try posting HERE and see if our malware experts have ever heard of this
There is a kdbgctrl.exe but I don't think it's the same thing
http://www.bleepingcomputer.com/filedb

Edited by garmanma, 15 March 2008 - 09:24 AM.

Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#4 siewpao

siewpao
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:09:20 PM

Posted 18 March 2008 - 06:00 AM

Thanks guys........I think the only way i can save my pc is to format....Which is something i am not fond of doing........
Anyways thanks for the advise....

#5 nigglesnush85

nigglesnush85

  • Members
  • 4,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:02:20 AM

Posted 18 March 2008 - 07:53 AM

Hello,

Have you looked at the size of the drive? when you right click and select properties, does the pie chart say the drive is full or empty?

The KDB folder has something to do with a soccer game so may not be a virus. have you looked under the disk management section to analyze the partitions of the drive. (Start>run>compmgmt.msc)
Regards,

Alan.

#6 siewpao

siewpao
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:09:20 PM

Posted 18 March 2008 - 09:19 PM

I have already checked on the size of the drive. It shows that my files are still in there. But when i click on D drive icon from My computer, nothing shows except for a KDB folder containing a lot of .bix and .box file extensions.

I am really puzzled by this. You say this KDB folder might be a soccer game???Funny thing is I have never installed any soccer game on my computer.....

Edited by siewpao, 18 March 2008 - 09:20 PM.


#7 Billy O'Neal

Billy O'Neal

    Visual C++ STL Maintainer


  • Malware Response Team
  • 12,304 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Redmond, Washington
  • Local time:07:20 PM

Posted 18 March 2008 - 09:22 PM

Please set your system to show hidden files.
  • Click Start, open My Computer, select the Tools menu and click Folder Options.
  • Select the View Tab.
  • Under the Hidden files and folders heading, select the "Show hidden files and folders" radio button.
  • Uncheck the "Hide file extensions for known file types" checkbox.
  • Uncheck the "Hide protected operating system files (Recommended)" checkbox.
  • Click OK to confirm.
  • Close/exit My Computer.
Do they show up now?

Billy3
Twitter - My statements do not establish the official position of Microsoft Corporation, and are my own personal opinion. (But you already knew that, right?)
Posted Image

#8 siewpao

siewpao
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:09:20 PM

Posted 19 March 2008 - 08:48 PM

Hi Billy, I just used your method on my pc and the files are still not showing. There are 2 more folders in D drive that is visible now, a Recycling Bin folder and a system volume information folder. Any other good ideas???

#9 Billy O'Neal

Billy O'Neal

    Visual C++ STL Maintainer


  • Malware Response Team
  • 12,304 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Redmond, Washington
  • Local time:07:20 PM

Posted 19 March 2008 - 09:51 PM

How big is the recyclebin folder?

Billy3
Twitter - My statements do not establish the official position of Microsoft Corporation, and are my own personal opinion. (But you already knew that, right?)
Posted Image

#10 Billy O'Neal

Billy O'Neal

    Visual C++ STL Maintainer


  • Malware Response Team
  • 12,304 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Redmond, Washington
  • Local time:07:20 PM

Posted 19 March 2008 - 10:11 PM

@siewpao, you can ignore the next line:
Note to Mods:
I am going to use Deckard not for malware removal as I know I'm not supposed to be doing that, rather, I'm using it as an easy to get a look at the event logs and partition layout. Please let me know if this is a problem. I dont think the issues he is describing are malware related, sounds like a bad disk or an NTFS problem to me... we'll see.

@siewpao, you can start paying attention now :thumbsup:

Please open a run prompt and run the following command:

chkdsk D: /f
  • Please download Deckard's System Scanner by Deckard and save it to your desktop.
  • Double click the downloaded file.
  • DSS will look at your system and produce two logs, a Main.txt (which will be maximized upon completion) and an Extra.txt (Which will be minimized).
  • Please include both in your next post.
Billy3
Twitter - My statements do not establish the official position of Microsoft Corporation, and are my own personal opinion. (But you already knew that, right?)
Posted Image

#11 siewpao

siewpao
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:09:20 PM

Posted 20 March 2008 - 04:23 AM

Hey Billy O'Neal, thanks for all the help.Currently, my D drive has 3 folders after I set my system to show hidden files.

KDB folder 39.3 GB.
Recycler folder 8kB.
System Volume information 0 kB.

I tried running the command line but it says CHKDSK cannot run because the volume is being used by another process.
Anyways, I have uploaded the 2 log file from DSS that you required. Thanks again for your help....

Attached Files


Edited by siewpao, 20 March 2008 - 04:28 AM.


#12 Billy O'Neal

Billy O'Neal

    Visual C++ STL Maintainer


  • Malware Response Team
  • 12,304 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Redmond, Washington
  • Local time:07:20 PM

Posted 20 March 2008 - 05:07 PM

Sorry for the delay.

Run this from the run prompt
chkdsk d: /f /x

If it says the disk is inuse, tell it Yes, force unmount of the disk.
If it asks to run on reboot, tell it to do so, and reboot.

See if that works.

Billy3
Twitter - My statements do not establish the official position of Microsoft Corporation, and are my own personal opinion. (But you already knew that, right?)
Posted Image

#13 siewpao

siewpao
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:09:20 PM

Posted 20 March 2008 - 07:22 PM

When i tried running the command line this time, there was no problem.
3 stages of the CHKDSK complete but still no music files....

Do you want me to print screen a picture of the KDB folder and its content??

There is something I forgot to mention.....
Whenever I scan my pc for viruses using AVG free anti virus, the results show that 2 files has changed.
shell (C:windows\system32\shell32.dll)
hosts (C:windows\systrem32\drivers\etc hosts)

Hopefully these results provide more clue to solving my problem.....

Thanks again Billy.......

Edited by siewpao, 20 March 2008 - 07:28 PM.


#14 Billy O'Neal

Billy O'Neal

    Visual C++ STL Maintainer


  • Malware Response Team
  • 12,304 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Redmond, Washington
  • Local time:07:20 PM

Posted 21 March 2008 - 12:28 AM

There is something I forgot to mention.....
Whenever I scan my pc for viruses using AVG free anti virus, the results show that 2 files has changed.
shell (C:windows\system32\shell32.dll)
hosts (C:windows\systrem32\drivers\etc hosts)

Hopefully these results provide more clue to solving my problem.....

How long have you known this?

I think you have a malware problem now. Please give me a moment, I have to get a mod. :thumbsup:

Billy3
Twitter - My statements do not establish the official position of Microsoft Corporation, and are my own personal opinion. (But you already knew that, right?)
Posted Image

#15 Billy O'Neal

Billy O'Neal

    Visual C++ STL Maintainer


  • Malware Response Team
  • 12,304 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Redmond, Washington
  • Local time:07:20 PM

Posted 21 March 2008 - 12:30 AM

This file )C:windows\system32\shell32.dll) does a lot of the work inside of explorer.exe to list files. Im going to get a mod to make the final say, but I think you should post a HJT Log. Please wait for the mod's opinion on that first.

Billy3
Twitter - My statements do not establish the official position of Microsoft Corporation, and are my own personal opinion. (But you already knew that, right?)
Posted Image




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users