Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Smart HDD malware???


  • This topic is locked This topic is locked
29 replies to this topic

#1 Doughboyreturns

Doughboyreturns

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:12:49 AM

Posted 02 November 2012 - 01:16 PM

Hi all... El Google has directed me to your fine website, and I hope someone may be able to help.

Was surfing the internet on my homebuilt Windows (x64) 7 computer last night, when several "System Message - Write Fault Error" windows appeared on my screen. The computer than rebooted itself, my desktop image reverted to a black screen, and several of my programs disappeared. My antivirus software (Windows Security Essentials) did alert and looked like it was working. I was then prompted to reboot, which I did. Now the computer will not boot past a hardware monitoring component of my motherboard's BIOS. I ran two antivirus scans (from different providers) from a bootable usb drive; however, neither alerted to any issues. (The scans did show that my files were still on the drives, though.)

I found the Smart HDD removal guide posted on this site, and seems straight forward; however, as I mentioned, I cannot boot into Windows, let alone safe mode. FWIW, the computer serves as a HTPC, so it's not the end of the world if I have to wipe the drives, as the files that I cared about were backed up.

Any suggestions?

BC AdBot (Login to Remove)

 


#2 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:03:49 AM

Posted 02 November 2012 - 01:20 PM

Let me ask a malware response team member to help you

good luck

#3 thisisu

thisisu

  • Malware Response Team
  • 2,525 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:02:49 AM

Posted 02 November 2012 - 01:37 PM

Hi Doughboyreturns :)

What is the last screen you are able to get to during the boot up process? Describe the screen for me.

#4 bloopie

bloopie

    Bleepin' Sith Turner


  • Malware Response Team
  • 7,927 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New York
  • Local time:04:49 AM

Posted 02 November 2012 - 06:19 PM

Hi,

Just a note, I have moved this topic to the Virus, Trojan, Spyware, and Malware Removal Logs forum where it will stay. Good luck!

bloopie

#5 Doughboyreturns

Doughboyreturns
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:12:49 AM

Posted 02 November 2012 - 06:43 PM

Thanks for the reply.... Instead of describing, how about a picture?

Attached Files



#6 thisisu

thisisu

  • Malware Response Team
  • 2,525 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:02:49 AM

Posted 02 November 2012 - 06:56 PM

Can you go into BIOS and make sure that your hard drive is detected and is listed in the Boot Sequence?
If you can, read off the Boot Sequence to me in the order they appear,

Example:

1) CD/DVD ROM Internal
2) Hard disk drive Internal
3) CD/DVD ROM USB
4) Network Controller Intel

Did you go into the BIOS at all when you were troubleshooting?

#7 Doughboyreturns

Doughboyreturns
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:12:49 AM

Posted 02 November 2012 - 07:14 PM

I did go into the BIOS for two reasons: Wasn't sure what was going on; and I had to change the boot sequence to boot from the USB drive. The boot sequence currently reads: 1st Drive [SATA: 3M-WDC WD6400; 2nd Drive [SATA: 4M-WDC WD6400].

#8 thisisu

thisisu

  • Malware Response Team
  • 2,525 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:02:49 AM

Posted 02 November 2012 - 07:24 PM

I have a few more questions:

  • Do you know if you have these hard drives set up with a RAID configuration?
  • Or does only one of the drives contain the operating system?
  • Do you have an internal CD/DVD Rom drive?

Edited by thisisu, 02 November 2012 - 07:27 PM.


#9 Doughboyreturns

Doughboyreturns
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:12:49 AM

Posted 02 November 2012 - 08:36 PM

Hard drives are not in RAID configuration. Unfortunately, I do not have CD rom, sorry to make it more difficult.

#10 Doughboyreturns

Doughboyreturns
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:12:49 AM

Posted 02 November 2012 - 08:40 PM

And only one of the drives has the OS. In the configuration I mentioned above, it would be the drive labeled 3M.

#11 Doughboyreturns

Doughboyreturns
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:12:49 AM

Posted 02 November 2012 - 08:48 PM

And only one of the drives has the OS. In the configuration I mentioned above, it would be the drive labeled 3M.

#12 thisisu

thisisu

  • Malware Response Team
  • 2,525 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:02:49 AM

Posted 02 November 2012 - 09:07 PM

Please remove any USB devices that may be plugged into the computer at this time, except for the mouse and keyboard (if applicable).
And then reboot the computer.

Edited by thisisu, 02 November 2012 - 09:10 PM.


#13 Doughboyreturns

Doughboyreturns
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:12:49 AM

Posted 02 November 2012 - 09:25 PM

Sorry for the double posts. Done. Same screen after it boots.

#14 thisisu

thisisu

  • Malware Response Team
  • 2,525 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:02:49 AM

Posted 02 November 2012 - 09:29 PM

Ok, try this:

Go into BIOS, and choose to "Load Fail-Safe Defaults". Save and Exit

#15 Doughboyreturns

Doughboyreturns
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:12:49 AM

Posted 03 November 2012 - 12:04 AM

Sorry for the delay. My child doesn't really care about any of this. As long as the "load optimal defaults" option in my BIOS is the same as LFSD, then I tried it. Same screen after initial boot. (The manual for my motherboard describes load optimal defaults as being similar to LFSD. Motherboard = Biostar A880G+ if it matters.)




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users