Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

I believe my USB ports are infected


  • Please log in to reply
2 replies to this topic

#1 XML2005

XML2005

  • Members
  • 129 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:07:18 PM

Posted 20 March 2017 - 11:58 PM

I am working on an HP laptop with Win 10 64bit. I regularly use USB flash drives. I have two USB 2.0 ports and one USB 3.0 port. Today, ALL ports stopped working on ALL flash drives. The drives are from two different manufacturers.

 

When I plug in a flash drive, the drive letter I had assigned to it appears under This PC as a removable device, but if I click on the drive letter, I get a message, "Please insert a disk into [driveLetter]:." Also, there is no option to safely remove the drive; it's as if the drive isn't there at all! Disk management doesn't see it either.

 

I went into device manager. In both Root USB Hubs and in the Generic USB Hub, I unclicked the checkboxes to have the computer turn off the device to save power. I restarted the PC, but that did not help. So I uninstalled all USB controllers and restarted, and updated my BIOS.

 

Then I went into safe mode and ran full scans from Norton, Malwarebytes, SuperAntiSpyware, and ADWCleaner on my hard drive. All ran fine; just found some adware. I also tried scanning my flash drives. Supserantispyware couldn't find them, and Malwarebytes found ony one of them: It scanned it and found nothing.

 

So why do I think it's malware? Because I had one other flash drive and I (maybe stupidly!) inserted it in my laptop while I was in safe mode in a local administrator account, and then switched out of safe mode to a standard Microsoft account. The standard account was able to read the flash data just fine. Then I safely removed the flash drive and plugged it into another port. Immediately, The flash drive's light went on for a while as if it was being written to, and then my PC did not recognize it anymore. I tried plugging it into an old PC, which does read flash drives, and it told me the drive needs to be formatted because it is unreadable. Is there some kind of virus that gets activated only when I remove or insert a flash drive?

 

Addendum March 21:

Another clue today: This morning, my drive letter wasn't even showing up under My PC. I went into power options, turned off Fast Startup, and restarted. Now, it's the way it was yesterday, where the drive letter shows up, but the flash drive still is inaccessible.

 

I then ran HP's hardware diagnostics on my power and all on all USB ports. All found no problems.

 

I tried to update my BIOS via HP's utility, but got the message: "The Selected BIOS image was not available. You may select an alternate image file, or cancel the update." I didn't know what to do, so I exited.

 

sfc /scannow found nothing either.

------------------------------

 

Hardware failure or infection? What do you tech geniuses think?

 

Thank you for your help.


Edited by XML2005, 21 March 2017 - 02:14 PM.


BC AdBot (Login to Remove)

 


#2 XML2005

XML2005
  • Topic Starter

  • Members
  • 129 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:07:18 PM

Posted 23 March 2017 - 01:48 AM

Update 3/22:

 

I found some messed up entries in services.msc (Unfortunately, as I went through them one by one, I don't recall what they were.) After modifying services.msc, my Sandisk Cruzer "revived" in two of the three USB ports (one 2.0, one 3.0), but the 3rd port still doesn't work, and my Kingston Data Travelers all still are not recognized by the laptop in any port.

 

Also, I'm now having other fluky problems. For example, in an old Excel 2010 file in which I use no conditional formatting, when I select a blank cell, I sometimes get "Cell Not Found" error. That never happened before, and this is a regularly used file.

 

Updated 3/23:

Ran Kaspersky Free and then TrendMicro Housecall (20 hours!) They both found nothing. Still have same USB problems, but haven't noticed any other problems as of yet. Excel file seems back to normal.


Edited by XML2005, 23 March 2017 - 10:18 PM.


#3 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,176 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:07:18 PM

Posted 24 April 2017 - 09:56 AM

Sorry, If you still need help......

3Al62Pm.pngMiniToolBox
  • Please download MiniToolBox, save it to your desktop and run it.
  • Checkmark the following checkboxes:
    • Flush DNS
    • Report IE Proxy Settings
    • Reset IE Proxy Settings
    • Report FF Proxy Settings
    • Reset FF Proxy Settings
    • List content of Hosts
    • List IP configuration
    • List Winsock Entries
    • List last 10 Event Viewer log
    • List Installed Programs
    • List Users, Partitions and Memory size.
  • Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run. Note: When using "Reset FF Proxy Settings" option Firefox should be closed.
SXvL3ZF.pngTDSSKiller
  • Download TDSSKiller and save it to your desktop.
  • Extract (unzip) its contents to your desktop.
  • Open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.
  • If an infected file is detected, the default action will be Cure, click on Continue.
  • If a suspicious file is detected, the default action will be Skip, click on Continue.
  • It may ask you to reboot the computer to complete the process. Click on Reboot Now.
  • If no reboot is required, click on Report. A log file should appear. Please copy and paste the contents of that file here.
  • If a reboot is required, the report can also be found in your root directory (usually C:\ folder) in the form of TDSSKiller_xxxx_log.txt. Please copy and paste the contents of that file here.
zcMPezJ.pngAdwCleaner
  • Please download AdwCleaner by Xplode and save to your Desktop.
  • Double click on AdwCleaner.exe to run the tool. Vista/Windows 7/8 users right-click and select Run As Administrator
  • Click on the Scan button.
  • AdwCleaner will begin...be patient as the scan may take some time to complete.
  • After the scan has finished, click on the Report button...a logfile (AdwCleaner[R0].txt) will open in Notepad for review.
  • The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.
  • Copy and paste the contents of that logfile in your next reply.
  • A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.
lv0mVRW.pngJunkware Removal Tool
  • Please download Junkware Removal Tool to your desktop.
  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.
cvMlKv6.pngESET Online Scanner
  • Click here to download the installer for ESET Online Scanner and save it to your Desktop.
  • Disable all your antivirus and antimalware software - see how to do that here.
  • Right click on esetsmartinstaller_enu.exe and select Run as Administrator.
  • Place a checkmark in YES, I accept the Terms of Use, then click Start. Wait for ESET Online Scanner to load its components.
  • Select Enable detection of potentially unwanted applications.
  • Click Advanced Settings, then place a checkmark in the following:
    • Remove found threats
    • Scan archives
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth technology
  • Click Start to begin scanning.
  • ESET Online Scanner will start downloading signatures and scan. Please be patient, as this scan can take quite some time.
  • When the scan is done, click List threats (only available if ESET Online Scanner found something).
  • Click Export, then save the file to your desktop.
  • Click Back, then Finish to exit ESET Online Scanner.
>>>
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users