I am writing to let you know, perhaps as far back as 2011.. I got three hard
drives with this 'odd' ( ------- ) partition that shows up when I was using
Copy Wipe 1.14. It appears on ALL of the IDE hard drives I have used this
program from a BOOT CD and I am unable to remove, delete (F6) the
mysterious impervious to DEBUG command partition killer. I have
tried the DEBUG subroutine with no effect, and even this computer I am
reporting this also has the similar virus/worm infection. I don't know
if this is the w32.lecna.h or mutant variant. It does show the RECYCLER
and the System Volume Information on both drives. I also notice the
CMDCons on my back up drive D: with my storage stuff.
I used Copywipe 1.14 and found this mysterious partition that
can not and will not be removed, and used the program to find
similar instances on my other hard drives. I press F4 to remove and
it won't remove. Oh well.. has anyone found the same instance on
SATA drives and using Windows 7?
I hope there is a cure for this.. I don't want to lose my data and pics.
I wish there is a BOOT CD to purge this w/out losing data.
Aliases: W32/Lecna.A Worm
Variants: W32.Lecna.H, W32.Lecna.C
Category: Computer Worm
Status: Active & Spreading
Geographical info: North America
Discovered: 31 May 2006
Characteristics: W32.Lecna.A is a worm. It spreads by exploiting the Microsoft Windows Local Security Authority Service Remote Buffer Overflow described in Microsoft Security Bulletin MS04-011). The worm opens a backdoor and downloads remote files. It also uses a rootkit to hide its presence on the infected computer.