Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Something is running on every partitions ... Virus infected ?


  • Please log in to reply
9 replies to this topic

#1 oem7110

oem7110

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:44 AM

Posted 24 May 2014 - 11:02 AM

When I remove an unused partition, it shows following error message, and I get no idea what is using it, which is simply 64mb empty space.

 

Not able to finish, because partition is opened or being used, it could be set as system, bootup, virtual memory or keep a damage printed file.

Partition (T:) is being used at this moment, if you force to remove this partition, please press Yes
Warning: force to remove may cause the application using this partition error accidently, do you want to continue?

 

After I force to remove it, and create a partition (T:), I remove it again for testing, there is no error message, it seems strange on this partition, does it have any hidden activity on it?

 

I install a clean XP, and recreate each partition, and test each partition by removing and recreating them, there is no warning message, but after I connect to my old HDD, which keep the backup, then I try to repeat above test procedures by removing and recreating any partition, it shows above warning message again.

 

Does anyone have any suggestions on what is going on? Does anyone know any virus performing this behaviours?

Thanks in advance for any suggestions :>


Edited by hamluis, 24 May 2014 - 12:00 PM.
Moved from XP to Am I Infected - Hamluis.


BC AdBot (Login to Remove)

 


m

#2 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:06:44 AM

Posted 25 May 2014 - 06:35 PM

Hello -

There is no "infection" that usually causes this, it just seems like an install problem -

 

Just to have a quick look -

 

Download MiniToolBox, Save it to your desktop and run it.
Close any Firefox browsers you may have open
Checkmark the following boxes:
• Flush DNS
• Report IE Proxy Settings
• Reset IE Proxy Settings
• Report FF Proxy Settings
• Reset FF Proxy Settings
• List content of Hosts
• List IP configuration
• List last 10 Event Viewer log
• List Installed Programs
• List Users, Partitions and Memory size.
• List Minidump Files
 Click Go and copy / paste the result (Result.txt).

 

 

Run a Disk Check on your C: or main drive in Windows XP:
• Click the Start button and open My Computer
• Right-click on Your Main HDD letter and select Properties
• Click on the Tools tab
• Under Error-checking click the Check Now... button and click Continue if any User Account Control prompt
• Mark the 2 boxes next to Automatically fix file system errors and Scan for and attempt recovery of bad sectors
• Click on the Start button
• When the message box pops up, click the Schedule disk check button and Restart your computer
• Once your computer restarts it will check the drive, don't press any keys so that it is allowed to do so
This may take (on average) 1 to 2 hours depending on your system, so please let it finish.
DO NOT force a reboot once started as you will lose data and may damage the computer
NOTE - If this is a Laptop please plug it into a reliable power source, as batteries may fail.
The computer will reboot to normal mode once it has completed all 5 stages -

 

 

When finished  -

Please post a snapshot with Speccy for more system details -
How to Publish a snapshot with Speccy <<-- Full Directions Here (only post the link)

 

 

Finally -

Please download Temp File Cleaner by Old Timer
Usage Instructions:

  • Download TFC from the download link above and save the file on your desktop.
  • Close ALL running applications as TFC will terminate them before attempting to clean up the temporary files.
  • Double-click on the TFC icon.
  • When the program opens, click on the Start button.  TFC will terminate the Explorer process and all running applications and then begin the process of cleaning out all of your temp folders.
  • When done, press OK and reboot your computer and finish the cleanup.

 

No log is produced (or expected)



#3 oem7110

oem7110
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:44 AM

Posted 25 May 2014 - 11:02 PM

After going through your suggested approach, I test to remove x: partition, it still shows the same error.

Do you have any suggestions on any tools to monitor what is running on those partition?
Thank you very much for any suggestions :>

 

Not able to finish, because partition is opened or being used, it could be set as system, bootup, virtual memory or keep a damage printed file.

Partition (X:) is being used at this moment, if you force to remove this partition, please press Yes
Warning: force to remove may cause the application using this partition error accidently, do you want to continue?


Edited by oem7110, 26 May 2014 - 05:50 AM.


#4 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:06:44 AM

Posted 26 May 2014 - 04:33 AM

Please complete as many steps as you can and tell me what you can not do. and Why -



#5 oem7110

oem7110
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:44 AM

Posted 26 May 2014 - 04:44 AM

Please complete as many steps as you can and tell me what you can not do. and Why -

 

Do I already complete all the steps? I hope you know what you are doing.

If system can detect something is running when I remove the partition, do you know any tools to track what is running on specific partition? so I can track what program is running, which is directly to this issue.

 

Do you have any suggestions?
Thank you very much for any suggestions :>



#6 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:06:44 AM

Posted 26 May 2014 - 05:10 AM

Sorry. but I do not understand why you want to Remove anything.

 

I am asking to only perform the tests on a simple computer.

Why is this showing 13 partitions. Some are CDs and some are ?? installed ??

 

How many HDDs are installed ??

 

My XP has 1 partition and 1 CD that was playing -

 

========================= Partitions: =====================================

2 Drive c: () (Fixed) (Total:149.05 GB) (Free:122.91 GB) NTFS
3 Drive d: (1423_01102011) (CDROM) (Total:0.59 GB) (Free:0 GB) UDF

========================= Users: ========================================



#7 oem7110

oem7110
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:44 AM

Posted 26 May 2014 - 05:21 AM

Sorry. but I do not understand why you want to Remove anything.

 

I am asking to only perform the tests on a simple computer.

Why is this showing 13 partitions. Some are CDs and some are ?? installed ??

 

How many HDDs are installed ??

 

My XP has 1 partition and 1 CD that was playing -

 

========================= Partitions: =====================================

2 Drive c: () (Fixed) (Total:149.05 GB) (Free:122.91 GB) NTFS
3 Drive d: (1423_01102011) (CDROM) (Total:0.59 GB) (Free:0 GB) UDF

========================= Users: ========================================

 

First, do you know what you are doing? why do you want to know why I want to remove partition?

If you know any tools on tracking what is running on specific partition / HDD,  so I can track what program is running, which is directly to this issue, isn't it?

 

You need to accept what I give, in your mind, a simple computer has 1 to 2 partitions, but to me, I get 13 partitions, and it is a simple computer to me

 

Do you have any suggestions?
Thank you very much for any suggestions :>



#8 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:06:44 AM

Posted 26 May 2014 - 05:24 AM

Yes -

I will have this topic moved as it was put in the wrong forum section -



#9 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:06:44 AM

Posted 26 May 2014 - 05:30 AM

A Moderator or someone else will move it to operating forum area, where it should have been put first -

 

Good Luck with your ?? Problem -



#10 hamluis

hamluis

    Moderator


  • Moderator
  • 54,827 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:02:44 PM

Posted 26 May 2014 - 07:26 AM

 

Does anyone have any suggestions on what is going on? Does anyone know any virus performing this behaviours?

 

 

FWIW:  Topic was moved to AII in response to above query...and query reflected in topic title.

 

Now that we have an astute response within the AII forum regarding the possibility of malware...topic moved to XP.

 

Louis


Edited by hamluis, 26 May 2014 - 08:06 AM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users