Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Possible S.M.A.R.T. HDD virus


  • Please log in to reply
7 replies to this topic

#1 cstap386

cstap386

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:12 AM

Posted 26 April 2013 - 03:27 PM

Hello,

 

     I'm new to the forum. I've been searching around the internet for advice and looking for troubleshooting guides. Also, I have come across this site rather much. I applaud all of the members as well as the administrators for how much assistance goes on in here. I have a few questions of my own and would appreciate any help that I can get.

 

     I work in the I.T. Dept at my job but still learning some ins and outs of the field.  I work on friends computers here and there as well as my own. I have also built a few that are actually still running virus/malware/spyware free. Although I have SOME experience in dealing with virus removal I am just caught off guard with this one in particular.

    A friend of mine stated that she thinks she has a boot virus and was able to boot it in safe mode. I received the system and started it up no problem. It WAS in safe mode. So I put some antivirus progs on it and did some scans. I installed Micro$oft $ecurity Essentials, Malwarebytes and Avira. Ran all three and seen there were a few viruses. I know some of them were the same because I am aware that each antivirus vendor labels virus' under different names. The apparent, one was a "BOO/TDss.m" .  I was able to "remove" it, or so I thought. After a few scans and reboots in safe mode. I was confident that I had removed everything and was ready for a "Normal Boot".  But first, I went ahead and installed CCleaner and cleaned ELEVEN GB'S OF CRAP off the system... I mean really.... this must have NEVER been done.  Any way, I "Run" 'msconfig' and boot in a "Normal Startup".  

    Upon restart, POST goes flawlessly and Windows boots AGAIN in "Safe Mode".  I was boggled by this so, once more, opened "msconfig" and made sure the "General" tab was on  "Normal Startup" and the under the "Boot" tab the O.S.'s "Boot Options - Safe Boot" box was UNCHECKED.   I hit "Apply" and then "Okay" and, again, am prompted to reboot. So I do, to make sure all changes are implemented. Upon the VERY NEXT boot up. POST runs fine and then this appears:

"NOTICE - Hard Drive SELF MONITORING SYSTEM has reported that a parameter has exceeded its normal operating range. Dell recommends that you back up your data regularly. A parameter out of range may or may not indicate a potential hard.

Press   F1   to continue,  F2  to enter SETUP"


     I have called DELL and they say the HDD is crap and all is lost.. I don't, WILL NOT believe this.   I remove HDD and use a SATA/IDE to USB bridge and am able to connect to my HP ENVY m6 laptop with 64 bit Windows 8  ONE TIME. I states that it needs to "Scan for errors and Fix" So I do and it freezes half way through.. Now I am unable to access at all. Either it prompts an "I/O error" or "Can't access disk".

 

     I use the Vista Home Premium disc to try and repair the HDD but it will recognize it sometimes and sometimes it wont. Just wondering if it is a boot sector malfunction or a virus.. Not sure what to do at this point. I sure hope the HDD is not a goner, If I can recover ANY of this girls data or what to do.. She states she wouldn't mind if I did just a fresh install of Vista Home Premium and loose everything but I am trying every conceivable action to save this data. But im not even sure if the disc will recognize the HDD or even be able to do a fresh Install..

     I'm sorry if this is confusing, any help at all would be greatly appreciated. Thanks for your time in reading this post and I hope to hear from some of you soon. I have faith that there is someone that would be able to assist me in this unfortunate situation.  Again, Thank you in advance and have a great day!

 

 

 

- Corey



BC AdBot (Login to Remove)

 


#2 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,696 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:07:12 AM

Posted 26 April 2013 - 04:58 PM

Welcome aboard p22002758.gif

 

I'd start with testing the drive so you don't waste any more time if the drive is indeed bad.

 

Run hard drive diagnostics: http://www.bleepingcomputer.com/forums/topic28744.html/page__view__findpost__p__160520
Make sure, you select tool, which is appropriate for the brand of your hard drive.
Depending on the program, it'll create bootable floppy, or bootable CD.
If downloaded file is of .iso type, use ImgBurn: http://www.imgburn.com/ to burn .iso file to a CD (select "Write image file to disc" option), and make the CD bootable.
For Toshiba hard drives, see here: http://storage.toshiba.com/storage-services-support/warranty-support/software-utilities#diagnostic

Note : If you do not know how to set your computer to boot from CD follow the steps here


My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#3 cstap386

cstap386
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:12 AM

Posted 26 April 2013 - 06:57 PM

Thanks for the prompt response. I used the SeaTools for DOS and booted from cd. Not sure how to do a "print screen" so I'll just type what it says.
This was done with the Basic Test.
 
Drive List:
 
Model ID                                   Serial Number                    Revision          Test Progress                    Test Results
ST3500620AS                          9QMAYEN4                        DE13               Idle
 
Selected Drive Information:

Deice 0 is Seagate Device ST3500620AS 9QMAYEN4            On Generic PCT  ATA
Max Native Address 976773167
Device is 48 Bit Addressed - Number of LBAs 976773167 ( 500.108 GB )
This drive supports Security Features
SMART Is Supported and ENABLED
SMART TRIPPED Warranty Validation Code: 6DDFD26E
SMART Has Been Tripped !!!
DST Is Supported
Logging Feature Set Is Supported
POH 20187  Current Temp 32
 
Test Information and Results:
 
Scanning for devices...
Scanning for devices on Generic PCI ATA...
Scanning for devices on Generic PCI ATA...
Detected 1 devices
Device scan complete
 
 
 
Thanks again for the prompt response. I take this that the HDD was detected and seems that the SMART Security Feature was ENABLED so no further writes/errors could occur.  Am I correct in this assumption?  And if so, what are the next steps to remedy this situation?
 
-Corey

Edited by cstap386, 26 April 2013 - 06:57 PM.


#4 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,696 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:07:12 AM

Posted 26 April 2013 - 07:02 PM

You should have short and long tests there and both should tell you if the test passed or not.

That's all we need to know but I don't see that info in your post.


My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#5 cstap386

cstap386
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:12 AM

Posted 26 April 2013 - 07:58 PM

WOOPS! Sorry about that.
 

Short Test:

*Pretest Failure WARNING*

A SMART trip was detected prior to the test starting. Do you want to continue to the test?

I chose CONTINUE.

 

SHORT TEST FAILURE.

 

 

 

Long Test:
Same *WARNING* came up.
Said there were some errors and gave the options:
Skip this once
Skip this and all others

Repair this once

OR

Repair this and all others

 

I chose to repair them all.

Sector Repair FAILURE

I'm assuming this is bad.



#6 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,696 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:07:12 AM

Posted 26 April 2013 - 08:04 PM

Unfortunately it looks like that's the case.


My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#7 cstap386

cstap386
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:12 AM

Posted 26 April 2013 - 08:08 PM

So there is no way to recover the information? Would it support a fresh install of the same O.S. or do I need to get a new HDD?

Again, thanks for everything!



#8 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,696 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:07:12 AM

Posted 26 April 2013 - 08:20 PM

You definitely need new HDD.

As for your data you can try to get USB hard drive enclosure put the drive in there, connect it to another computer and see if you can get anything out of it.


My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users