Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Two "c" Drives?


  • Please log in to reply
5 replies to this topic

#1 g. doe

g. doe

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:07:03 PM

Posted 11 February 2006 - 10:37 PM

I had a friend who was very smart with the computer and who I believe installed keylogging programs on my computers. I have been having many problems with my computers since and I want to know how to fix what he has done but I don't know how. I have tried wiping the drive with a drive wipe, buying a new hard drive but I still notice that when I search for files and folders, I can look in "local hard drives (C:)" or "local disks (C:)". I remember his saying something about using linux OS and wonder if he has somehow hidden a partition with Linux. I am at a loss and don't want anymore of my personal information getting out there than probably already is. Does anybody have any suggestions? :thumbsup:

BC AdBot (Login to Remove)

 


m

#2 Enthusiast

Enthusiast

  • Members
  • 5,898 posts
  • OFFLINE
  •  
  • Location:Florida, USA
  • Local time:06:03 PM

Posted 11 February 2006 - 11:14 PM

What operating system are you running? XP Home or Pro?

What problems are you experiencing? Try to be precise.

What size are the two partitions on C? What size is the hard drive supposed to be?

Using Windows Explorer (not Internet Explorer) look at the files on both partitions. What files do you see on each?

Edited by Enthusiast, 11 February 2006 - 11:18 PM.


#3 Cyclica

Cyclica

  • Members
  • 87 posts
  • OFFLINE
  •  
  • Local time:05:03 PM

Posted 11 February 2006 - 11:23 PM

I think it's a normal message, at least, it's what I see having only one partition. Unless you actually see two partitions, there is no problem.

#4 g. doe

g. doe
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:07:03 PM

Posted 12 February 2006 - 09:28 PM

It doesn't show up in windows explorer just shows up when I go to search for files or folders. I was reading some articles on the internet and I believe that he may have hacked the kernel. I have no Idea why or what to do. I have this module information that came up in error. I am not sure what this means or even what I am looking at but if anyone can help me with this...It would be helpful. I am running XP professional and have a 140 gb hard drive. If you need any other info please let me know.



Module instance: 0x00400000

Exception information:
Exception code: 0xC0000005
Exception flags: 0x00000000
Exception address: 0x00000000
Exception information:
00000002 00000000 00000000 0001003F
00000040 00000000 00000000 000003A0
00000000 00000000 FFFF027F FFFF4000
FFFFFFFF 5AD722FD 0075001B
Establisher frame: 0x5AD84400

Thread context information:
Dispatcher context: 0x0012DD64
Context flags: 0x0001003F
Floating save area:
Control word: 0xFFFF027F
Status word: 0xFFFF4000
Tag word: 0xFFFFFFFF
Error offset: 0x5AD722FD
Error selector: 0x0075001B
Data offset: 0x5AD84400
Data selector: 0xFFFF0023
Cr0Npx state: 0x00000000
Register area:
08 08 08 78 88 88 88 88 FF FF
B8 A7 B1 F2 E0 5A 87 BF C8 1E
64 AD B1 F2 F0 F0 00 00 00 00
00 AA B1 F2 3B 00 F5 77 20 00
00 00 00 00 E8 DE 12 00 3B 00
1B 00 00 00 02 02 00 00 E0 DE
F4 A7 B1 F2 0C A8 B1 F2 53 63
00 00 00 00 00 00 00 80 FF 3F
Registers states:
SegGs = 0x00000000
SegFs = 0x0000003B
SegEs = 0x00000023
SegDs = 0x00000023
Edi = 0x00000000
Esi = 0x01F0F7B0
Ebx = 0x00000000
Edx = 0x012C8E94
Ecx = 0x77147898
Eax = 0x0012E0A4
Ebp = 0x0012E0C4
Eip = 0x00000000
SegCs = 0x0000001B
EFlags = 0x00010246
Esp = 0x0012E074
SegSs = 0x00000023
Extended registers:
7F 02 00 40 00 00 75 00 FD 22 D7 5A 1B 00 00 00
00 44 D8 5A 23 00 00 00 80 1F 00 00 FF FF 00 00
08 08 08 78 88 88 88 88 FF FF 00 00 00 00 00 00
B8 A7 B1 F2 E0 5A 87 BF C8 1E 00 00 00 00 00 00
64 AD B1 F2 F0 F0 00 00 00 00 00 00 00 00 00 00
00 AA B1 F2 3B 00 F5 77 20 00 00 00 00 00 00 00
00 00 00 00 E8 DE 12 00 3B 00 00 00 00 00 00 00
1B 00 00 00 02 02 00 00 E0 DE 00 00 00 00 00 00
F4 A7 B1 F2 0C A8 B1 F2 53 63 00 00 00 00 00 00
00 00 00 00 00 00 00 80 FF 3F 00 00 00 00 00 00
50 BF 4E 80 00 00 00 00 80 1F 00 00 40 A8 B1 F2
01 00 00 00 40 A8 B1 F2 58 8B 24 FD B0 2E AC FE
75 5D 46 F6 B0 2E AC FE B0 2E AC FE 50 BF 4E 80
00 00 00 00 58 8B 24 FD 01 00 00 00 07 60 46 F6
B4 E6 49 F6 65 C7 0B FA C3 C7 0B FA 86 28 5B FA
00 00 00 00 00 A0 AD FF 40 C3 4E 80 D4 A0 AD FF
B0 A0 AD FF C0 F9 DF FF 81 28 5B 06 1C A8 B1 F2
46 CD D2 F9 00 00 00 00 00 00 00 00 00 00 00 00
0A 00 00 00 50 E5 88 01 52 3E F5 77 1B 00 00 00
D8 00 00 00 0A 00 00 00 18 00 00 00 A4 E5 88 01
34 00 01 00 00 00 08 00 B0 E4 88 01 A4 E5 88 01
DC FF 88 01 05 90 F7 77 C8 D5 F6 77 FF FF FF FF
6A 16 F5 77 7E 39 DD 77 00 00 08 00 00 00 00 00
00 40 13 00 50 E8 88 01 2E 04 00 00 66 52 F5 77
70 E6 88 01 54 E8 88 01 04 00 00 C0 40 00 00 00
00 00 00 00 00 00 00 00 90 00 CE 00 66 52 F5 77
66 52 F5 77 94 E6 88 01 78 E8 88 01 04 00 00 C0
6C E7 88 01 2E 04 00 00 F8 E5 88 01 31 00 37 00
32 00 35 00 33 00 34 00 31 00 30 00 30 00 34 00
00 00 0C 00 D0 E5 88 01 8C E5 88 01 99 3D F5 77
DC FF 88 01 05 90 F7 77 D8 DC F6 77 5A 00 00 00
54 E8 88 01 05 00 00 C0 30 E8 88 01 40 E8 88 01


System information:
OS version: 5.1.2600
Platform id: 2
CSD version: Service Pack 1
Service pack: 1.0
Suite mask: 0x00000100
OS type: 1
IE version: 6.0.2800.1106

Processor information:
Architecture: 0
Level: 15
Revision: 1025
Feature bits: 00073FFFo

#5 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,074 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:06:03 PM

Posted 13 February 2006 - 03:14 PM

The module information is helpful.

But, you said you wiped your drive and installed a new hard drive. If all of your hard drive is visible - then he doesn't have Linux stashed on it.

When you reinstalled Windows (after the new hard drive) did you do it from a disk that he gave you - or an official disk from Microsoft or a computer manufacturer? If it was an official disk - then you're safe.

The error that you pointed out is an access violation error - and it says that some program tried to access the system and made an error in doing it. Usually this is the result of a misbehaving program (but can be for many other reasons, like bad RAM). I'd try and isolate when this problem occurs (what exactly you're doing when it comes up) - and then we can move on from there. FWIW - this can also be a problem with DEP - but if the program that you're using isn't DEP compliant, you'll need to update it anyway.
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#6 Albert Frankenstein

Albert Frankenstein

  • Members
  • 2,707 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Michigan, USA
  • Local time:07:03 PM

Posted 13 February 2006 - 03:44 PM

For what it's worth, I have three XP machines in my office, and all three of them say the same thing, and they do not have Linux installed anywhere.

The reason for having two choices for searching the C: drive may not be apparent to a user who only has the one drive (C:). The reason the choices are in there becomes apparent when you look at a computer that has several drives. If you have several drives and you want to conduct a search, then you have the choice of "Local Hard Drives C:, F:, X:" (or whatever the drive letters are)-meaning windows will search ALL of the drives, and then a little lower on the list you have the choice of searching each drive individually: "Local Disk C:", "Local Disk F:", "Local Disk X:"

In your case if you only have the one drive you now have two choices "Local Hard Drive C:", and a little lower on the list you also have "Local Disk C:". That is normal.

Edited by Albert Frankenstein, 13 February 2006 - 03:48 PM.

ALBERT FRANKENSTEIN
I'M SO SMART IT'S SCARY!


Currently home chillin' with the fam and my two dogs!





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users