SteveStrummerUK
Max Output Level: 0 dBFS
- Total Posts : 31112
- Joined: 2006/10/28 10:53:48
- Location: Worcester, England.
- Status: offline
##Solved & Thanks!## Help Please... Is my PC (hard drive/s) failing or have I got a virus?
I'd really appreciate any advice on this guys, thanks in advance. Does this look like a genuine problem, or have I contracted a virus, or similar? Basically what happened was I perusing the Coffee House earlier on when all of a sudden, with no warning, Internet Explorer just closed. I opened it again and about five minutes later it happened again. Then a series of 'Warning' windows opened and most of the stuff on my Desktop just disappeared. Here's one of the warnings (they're all identical): And here's what my desktop looked like ( the System Restore window, I've got that ready just in case I need to try and use it): I rebooted my PC to see if that would 'clear' the problem and was presented with this "S.M.A.R.T." screen which appeared to be checking through various aspects of my computer: These are the rest of the 'diagnostic' results: Here are the more detailed reports from the S.M.A.R.T. 'Repair' tab: The weird thing is that I can open any program from my Start menu or Taskbar that isn't displayed in a folder – that’s how I managed to open Photoshop to do these images with and Internet Explorer. All the folders in the Start menu are 'Empty' though. I can't access the Task Manager also. If I try to save any of these screenshots in my Pictures' folder I can do so, but the folder looks empty (where there should be many sub-folders and hundreds of images). I've got all my files backed up on an external drive with Acronis should I need to do anything drastic, although I can't 'see' anything on that drive either, other than these screenshots which I've saved there. Back to S.M.A.R.T. this is the 'Main' page: And this is the 'Advanced' page: If I click on the 'Repair' or 'Activate' links I'm taken to these web pages:
post edited by SteveStrummerUK - 2012/05/08 10:50:56
|
ProjectM
Max Output Level: -36 dBFS
- Total Posts : 3941
- Joined: 2004/02/10 09:32:12
- Location: Norway
- Status: offline
Re:Help Please... Is my PC (hard drive/s) failing or have I got a virus?
2012/05/07 09:12:07
(permalink)
(Sonar Platinum - Win10 x64) - iMac and 13" MacBook - Logic Pro X ++ - UA Apollo Twin DUO - NI Maschine MKII - NI Komplete Kontrol S61 - Novation Nocturne - KRK Rokit 6 SoundcloudNegative Vibe Records
|
ProjectM
Max Output Level: -36 dBFS
- Total Posts : 3941
- Joined: 2004/02/10 09:32:12
- Location: Norway
- Status: offline
Re:Help Please... Is my PC (hard drive/s) failing or have I got a virus?
2012/05/07 09:14:12
(permalink)
(Sonar Platinum - Win10 x64) - iMac and 13" MacBook - Logic Pro X ++ - UA Apollo Twin DUO - NI Maschine MKII - NI Komplete Kontrol S61 - Novation Nocturne - KRK Rokit 6 SoundcloudNegative Vibe Records
|
The Maillard Reaction
Max Output Level: 0 dBFS
- Total Posts : 31918
- Joined: 2004/07/09 20:02:20
- Status: offline
Re:Help Please... Is my PC (hard drive/s) failing or have I got a virus?
2012/05/07 09:14:34
(permalink)
Good luck Steve. That's a lot of info to be confronted with. I've had "boot sector" warnings that seemed to be related to bios settings that cleared up with a simple reset of bios. Can you get CCleaner to run and check for registry entry problems? Has MSE reported any insidious activity on the computer? I just retired and disassembled a few win98 computers that I built in 1996... every system still booted up after I reset the date in Bios. All the hard drives worked ok and worked in an external case that I used to make final drag and drop archives on a newer larger hard disk. Is it possible that this S.M.A.R.T. software is making reports about very minor issues or did you start using SMART after observing that you had a major issue? best regards, mike
|
The Maillard Reaction
Max Output Level: 0 dBFS
- Total Posts : 31918
- Joined: 2004/07/09 20:02:20
- Status: offline
Re:Help Please... Is my PC (hard drive/s) failing or have I got a virus?
2012/05/07 09:16:21
(permalink)
Please defer to Project M's posts... the virus possibility seems most likely after reading his links. best regards, mike
|
ProjectM
Max Output Level: -36 dBFS
- Total Posts : 3941
- Joined: 2004/02/10 09:32:12
- Location: Norway
- Status: offline
Re:Help Please... Is my PC (hard drive/s) failing or have I got a virus?
2012/05/07 09:18:08
(permalink)
(Sonar Platinum - Win10 x64) - iMac and 13" MacBook - Logic Pro X ++ - UA Apollo Twin DUO - NI Maschine MKII - NI Komplete Kontrol S61 - Novation Nocturne - KRK Rokit 6 SoundcloudNegative Vibe Records
|
ProjectM
Max Output Level: -36 dBFS
- Total Posts : 3941
- Joined: 2004/02/10 09:32:12
- Location: Norway
- Status: offline
Re:Help Please... Is my PC (hard drive/s) failing or have I got a virus?
2012/05/07 09:20:29
(permalink)
Yeah, S.M.A.R.T. looks like a friendly software. I remember reading about it somewhere. But looks like it's geting nastier and nastier. I saw it a few years ago but was in the process of formatting my HDD so I never bothered with it and have pretty much forgotten about it.
(Sonar Platinum - Win10 x64) - iMac and 13" MacBook - Logic Pro X ++ - UA Apollo Twin DUO - NI Maschine MKII - NI Komplete Kontrol S61 - Novation Nocturne - KRK Rokit 6 SoundcloudNegative Vibe Records
|
Jonbouy
Max Output Level: 0 dBFS
- Total Posts : 22562
- Joined: 2008/04/14 13:47:39
- Location: England's Sunshine South Coast
- Status: offline
Re:Help Please... Is my PC (hard drive/s) failing or have I got a virus?
2012/05/07 09:20:40
(permalink)
It's hard to tell from this, as it could be a memory issue that's causing an attempt to write already corrupted data to an otherwise good disk which has resulted in the disk structure becoming corrupt. Reece recently had a similar thing which was memory related rather than disk related. My fix would involve removing the drives to prevent further corruption of your data and try with a spare drive to get an OS installed afresh and do the diagnostics again from there. Ignore the site the HD software is taking you to it is just trying to sell you some online storage space and it sounds like you already have a backed-up image available. So to sum up use a spare drive (or buy one you can put to good use) format and install the OS afresh and test further from there once you have everything working and tested out from there then you can start to restore from you images. If that drive acts up you'll know to look for memory voltage/timing issues or a duff memory stick. If the drive works well you can suspect a fault on the original hard drive and given that the drives is failing at the SMART level it is likely a hardware issue rather than infection. That's the approach I'd be taking here.
post edited by Jonbouy - 2012/05/07 09:26:52
"We can't do anything to change the world until capitalism crumbles. In the meantime we should all go shopping to console ourselves" - Banksy
|
jbow
Max Output Level: -0.2 dBFS
- Total Posts : 7601
- Joined: 2003/11/26 19:14:18
- Status: offline
Re:Help Please... Is my PC (hard drive/s) failing or have I got a virus?
2012/05/07 09:27:30
(permalink)
You are going to have some quality time with your computer. I've had to get malware off several computers and it usually takes me anywhere from 8 to 12 hours to figure it all out and work through it all but you can do it. Another place is http://forums.whatthetech.com/index.php? Have fun! Julien
Sonar Platinum Studiocat Pro 16G RAM (some bells and whistles) HP Pavilion dm4 1165-dx (i5)-8G RAM Octa-Capture KRK Rokit-8s MIDI keyboards... Control Pad mics. I HATE THIS CMPUTER KEYBARD!
|
SteveStrummerUK
Max Output Level: 0 dBFS
- Total Posts : 31112
- Joined: 2006/10/28 10:53:48
- Location: Worcester, England.
- Status: offline
Re:Help Please... Is my PC (hard drive/s) failing or have I got a virus?
2012/05/07 09:30:05
(permalink)
Wow, thanks for getting on this so quickly guys - you rock. Marius, thanks for the links. Mike, cheers mate. JB, that's great advice as always but way out of my comfort zone at the moment. I downloaded some free PDF to Word software the other day so in the first instance I'm going to perform a System Restore to before I did that. It seemed to be a genuine site but it was one of those places with loads of unrelated links and other crap and it took ages to actually find the right d/l. I should know feckin' better after having to do a factory reset on my older Dell Wish me luck Edit - thanks Julien.
post edited by SteveStrummerUK - 2012/05/07 09:31:24
|
Jonbouy
Max Output Level: 0 dBFS
- Total Posts : 22562
- Joined: 2008/04/14 13:47:39
- Location: England's Sunshine South Coast
- Status: offline
Re:Help Please... Is my PC (hard drive/s) failing or have I got a virus?
2012/05/07 09:32:31
(permalink)
Good luck Steve. These things are always maximum suckage whatever the cause.
"We can't do anything to change the world until capitalism crumbles. In the meantime we should all go shopping to console ourselves" - Banksy
|
Guitarhacker
Max Output Level: 0 dBFS
- Total Posts : 24398
- Joined: 2007/12/07 12:51:18
- Location: NC
- Status: offline
Re:Help Please... Is my PC (hard drive/s) failing or have I got a virus?
2012/05/07 09:36:01
(permalink)
YUP.... that is malware. Perhaps not exactly a virus in the sense of what a virus does, but bothersome none the less. Easy to pick something like that up if one is not careful. Probably the best thing to do when you click onto one of those things by accident is to NOT press any keys on the keyboard and not try to click out of it. In cases like that PULL THE PLUG OUT OF THE WALL AND CRASH THE MACHINE. I have done this very thing. The time required to recover from a hard crash is much less than trying to remove this malicious software. A reboot will likely run disk checker and that is OK. Then run a total virus/malware scan after updating the signatures. In 5 to 10 minutes you are back up and running. In your case..... you are already infected. Some how, you, or someone else clicked on something that invited this intruder in. Now comes the joyful task of removing this thing. Get Anti-malware bytes and run it. Use another computer if you need to in order to get it. These programs will sometimes not allow you to go to anti-malware bytes site. Some will hide the site. Basically this is a program that takes control and puts the computer into a loop and pops up constantly. If you buy the "cure" you are loading another similar program. One shuts off, and another starts to run..... you buy the "cure" for that and the process continues. You gotta remove it. My wife clicked on one similar to that about a year ago. I had to use Anti-malware bytes and a registry cleaner to remove it. It took me several hours and eventually I got it out. I found parts of that program in 6 different places in the machine. It's not an easy task by any means but it is possible. Another option is to take it to a place like Staples which offers PC tuneup, virus removal and optimization for a small cost. Probably worth it if you are not the patient persistent kind.
post edited by Guitarhacker - 2012/05/07 09:38:07
My website & music: www.herbhartley.com MC4/5/6/X1e.c, on a Custom DAW Focusrite Firewire Saffire Interface BMI/NSAI "Just as the blade chooses the warrior, so too, the song chooses the writer "
|
spacey
Max Output Level: 0 dBFS
- Total Posts : 8769
- Joined: 2004/05/03 18:53:44
- Status: offline
Re:Help Please... Is my PC (hard drive/s) failing or have I got a virus?
2012/05/07 09:36:39
(permalink)
I found this Steve. Sure don't know if will help but...I tried.
|
ProjectM
Max Output Level: -36 dBFS
- Total Posts : 3941
- Joined: 2004/02/10 09:32:12
- Location: Norway
- Status: offline
Re:Help Please... Is my PC (hard drive/s) failing or have I got a virus?
2012/05/07 09:41:01
(permalink)
Good luck Steve! I hope a restore will do the trick
(Sonar Platinum - Win10 x64) - iMac and 13" MacBook - Logic Pro X ++ - UA Apollo Twin DUO - NI Maschine MKII - NI Komplete Kontrol S61 - Novation Nocturne - KRK Rokit 6 SoundcloudNegative Vibe Records
|
jbow
Max Output Level: -0.2 dBFS
- Total Posts : 7601
- Joined: 2003/11/26 19:14:18
- Status: offline
Re:Help Please... Is my PC (hard drive/s) failing or have I got a virus?
2012/05/07 09:42:20
(permalink)
Calm down a bit Steve. It is just malware, your hard drive isn't bad. It just takes a bit of time and work but you will get it cleaned up. The forums at Major Geeks and whatthetech have people who will walk you through it step by step if you run into a wall. Sometimes they are a little slow getting to you because they are all volunteers but I promise you'll get through it and everything will be back to normal... it is just a PITA. I am afraid to click on any links in the coffee house now. I hope you got it somewhere else. I am going to watch and wait for a while. I don't like dealing with malware. You wont either..    but really it will seem really bad but you'll get it fixed. They make it look a lot worse than it is to scare you into buying something from them. Julien
Sonar Platinum Studiocat Pro 16G RAM (some bells and whistles) HP Pavilion dm4 1165-dx (i5)-8G RAM Octa-Capture KRK Rokit-8s MIDI keyboards... Control Pad mics. I HATE THIS CMPUTER KEYBARD!
|
Guitarhacker
Max Output Level: 0 dBFS
- Total Posts : 24398
- Joined: 2007/12/07 12:51:18
- Location: NC
- Status: offline
Re:Help Please... Is my PC (hard drive/s) failing or have I got a virus?
2012/05/07 09:42:22
(permalink)
Be very careful about the programs that are advertised to SPECIFICALLY remove this program. Use the normal tools like Anti malware bytes and your normal AV stuff. The normal AV stuff might not get it out because you invited it in by clicking so the normal stuff thinks it's safe now. THIS IS THE REAL DEAL>>>>> http://shop.malwarebytes....yuam7q8CFYje4Aodhm6kzQ I simply downloaded and used the free version to remove the threat on my wife's machine. I have the free version on all my machines and run it from time to time.
post edited by Guitarhacker - 2012/05/07 09:43:39
My website & music: www.herbhartley.com MC4/5/6/X1e.c, on a Custom DAW Focusrite Firewire Saffire Interface BMI/NSAI "Just as the blade chooses the warrior, so too, the song chooses the writer "
|
trimph1
Max Output Level: -12 dBFS
- Total Posts : 6348
- Joined: 2010/09/07 19:20:06
- Location: London ON
- Status: offline
Re:Help Please... Is my PC (hard drive/s) failing or have I got a virus?
2012/05/07 09:43:41
(permalink)
Yeah...I got hammered with one of them dang things off a google images search of all things...just pulled the plug..had it run on reboot the check and was up and running shortly after that....
The space you have will always be exceeded in direct proportion to the amount of stuff you have...Thornton's Postulate. Bushpianos
|
Guitarhacker
Max Output Level: 0 dBFS
- Total Posts : 24398
- Joined: 2007/12/07 12:51:18
- Location: NC
- Status: offline
Re:Help Please... Is my PC (hard drive/s) failing or have I got a virus?
2012/05/07 09:45:19
(permalink)
Once you click into one of them things, the only way out is to click to DL it..... and that is what most people do. You MUST...... Pull the plug or remove the battery and let the computer crash to avoid getting infected. Trust me... it's less painful.
My website & music: www.herbhartley.com MC4/5/6/X1e.c, on a Custom DAW Focusrite Firewire Saffire Interface BMI/NSAI "Just as the blade chooses the warrior, so too, the song chooses the writer "
|
Starise
Max Output Level: -0.3 dBFS
- Total Posts : 7563
- Joined: 2007/04/07 17:23:02
- Status: offline
Re:Help Please... Is my PC (hard drive/s) failing or have I got a virus?
2012/05/07 09:55:49
(permalink)
What Guitarhacker said...I had a similar thing not long ago get into one of our work computers. Someone unauthorized had gotten on one of our computers and picked this up,since there were black porn pop ups I guessed that this is where they got it from, but you could get it from most anywhere. The site led you to pay for a service that was bogus and channeled your money to someone in Russia. Clicking any of the so called help links just caused further infections. The total infection count numbered in the hundreds.
Intel 5820K O.C. 4.4ghz, ASRock Extreme 4 LGA 2011-v3, 16 gig DDR4, , 3 x Samsung SATA III 500gb SSD, 2X 1 Samsung 1tb 7200rpm outboard, Win 10 64bit, Laptop HP Omen i7 16gb 2/sdd with Focusrite interface. CbB, Studio One 4 Pro, Mixcraft 8, Ableton Live 10 www.soundcloud.com/starise Twitter @Rodein
|
craigb
Max Output Level: 0 dBFS
- Total Posts : 41704
- Joined: 2009/01/28 23:13:04
- Location: The Pacific Northwestshire
- Status: offline
Re:Help Please... Is my PC (hard drive/s) failing or have I got a virus?
2012/05/07 10:16:43
(permalink)
Yep. I've had that one before as well. I followed the directions listed on one website and used a couple of tools to get rid of it. At one point it made it look like I had NO files left on my hard drives and it wouldn't let me use normal stuff like Task Manager. I picked mine up after registering for Bapu's secret forum - not sure if there's a connection there...
Time for all of you to head over to Beyond My DAW!
|
jbow
Max Output Level: -0.2 dBFS
- Total Posts : 7601
- Joined: 2003/11/26 19:14:18
- Status: offline
Re:Help Please... Is my PC (hard drive/s) failing or have I got a virus?
2012/05/07 10:52:46
(permalink)
You MUST...... Pull the plug or remove the battery and let the computer crash to avoid getting infected. Trust me... it's less painful. Thanks for this Herb! I knew to unplug my laptop and flip it quick and pop the battery if I spill something on it but I never knew about killing the power if malware pops up... you can bet I will try that the next time I get anything. THANKS!! J
Sonar Platinum Studiocat Pro 16G RAM (some bells and whistles) HP Pavilion dm4 1165-dx (i5)-8G RAM Octa-Capture KRK Rokit-8s MIDI keyboards... Control Pad mics. I HATE THIS CMPUTER KEYBARD!
|
SteveStrummerUK
Max Output Level: 0 dBFS
- Total Posts : 31112
- Joined: 2006/10/28 10:53:48
- Location: Worcester, England.
- Status: offline
Re:Help Please... Is my PC (hard drive/s) failing or have I got a virus?
2012/05/07 11:02:24
(permalink)
OK, thanks again to all. I've done a System Restore and at first, everything seemed fine. The S.M.A.R.T. screen hasn't appeared so far, and IE8 hasn't closed itself abruptly. My files have all reappeared but some of them have been set to 'Hidden' and/or 'Read Only'. If I open up each folders Properties and uncheck those options, I can use them again. I've tried opening my programs and most of them seem to be running fine, with the exception of the Dell Support Centre (hardware diagnostic tool) which crashes, and the ATI (Radeon) Catalyst Control Centre, which has the control options for my monitor: I'm going to run a full Malwarebytes (thanks Herb, I already use this though!) scan and see what happens after that. Again, thanks to all who have chipped in.
|
Beagle
Max Output Level: 0 dBFS
- Total Posts : 50621
- Joined: 2006/03/29 11:03:12
- Location: Fort Worth, TX
- Status: offline
Re:Help Please... Is my PC (hard drive/s) failing or have I got a virus?
2012/05/07 11:11:26
(permalink)
sounds like good news so far strums. I know the panic feeling you must have gotten! good luck!
|
Old55
Max Output Level: 0 dBFS
- Total Posts : 19791
- Joined: 2008/09/19 20:10:05
- Location: Californiashire
- Status: offline
Re:Help Please... Is my PC (hard drive/s) failing or have I got a virus?
2012/05/07 11:18:10
(permalink)
I'm glad to hear you got a handle on the problem fairly quickly, Steve. Good luck with the rest of it.
Should auld acquaintance be forgot--hey, who the hell are you guys? X2(X3 pending hardware upgrade), Emulator X2, E-mu 1212M, Virtual String Machine
|
SteveStrummerUK
Max Output Level: 0 dBFS
- Total Posts : 31112
- Joined: 2006/10/28 10:53:48
- Location: Worcester, England.
- Status: offline
Re:Help Please... Is my PC (hard drive/s) failing or have I got a virus?
2012/05/07 11:41:52
(permalink)
Thanks guys, I'm running the scan now, it'll probably take a couple of hours. I'm just wondering if I cannot access the ATI and the Dell screens because my 1 year warranty has just expired? I wouldn't have thought so, it must be down to this virus I'd have imagined.
|
craigb
Max Output Level: 0 dBFS
- Total Posts : 41704
- Joined: 2009/01/28 23:13:04
- Location: The Pacific Northwestshire
- Status: offline
Re:Help Please... Is my PC (hard drive/s) failing or have I got a virus?
2012/05/07 11:41:53
(permalink)
Yeah, mine required three programs: RKill (to stop rogue processes), Malwarebytes (to remove the virus) and Unhide (to reset the file privileges so I could see them).
Time for all of you to head over to Beyond My DAW!
|
julibee
Max Output Level: -47 dBFS
- Total Posts : 2826
- Joined: 2008/03/28 17:38:15
- Location: San Marcos, CA
- Status: offline
Re:Help Please... Is my PC (hard drive/s) failing or have I got a virus?
2012/05/07 11:42:19
(permalink)
Steve, I have run into rogue system security malware more times than I really want to admit to (on my PC and spent several hours on the phone helping out my mom on a few occasions). Google "rkill" It will temporarily stop rogues from running while you search for the proper removal tool and install it. If you are already infected, you will probably have to download rkill on a different machine and save it to a flash drive or memory stick to get on the infected PC... Most of these rogue security scans disable different browser capabilities- especially those pages of information that show you how to get rid of the rogue. I'm 99.9% certain your PC is FINE. Or.... WILL BE, once you get rid of this bastard.
|
julibee
Max Output Level: -47 dBFS
- Total Posts : 2826
- Joined: 2008/03/28 17:38:15
- Location: San Marcos, CA
- Status: offline
Re:Help Please... Is my PC (hard drive/s) failing or have I got a virus?
2012/05/07 11:43:19
(permalink)
Oh... And, JINX, Craig B. ;)
|
SteveStrummerUK
Max Output Level: 0 dBFS
- Total Posts : 31112
- Joined: 2006/10/28 10:53:48
- Location: Worcester, England.
- Status: offline
Re:Help Please... Is my PC (hard drive/s) failing or have I got a virus?
2012/05/07 11:43:28
(permalink)
Thanks Craig, I'm running Malwarebytes now and I've reset all the files. I'll check out RKill immediately. Do you remember any problems like the ATI one I'm having?
|
SteveStrummerUK
Max Output Level: 0 dBFS
- Total Posts : 31112
- Joined: 2006/10/28 10:53:48
- Location: Worcester, England.
- Status: offline
Re:Help Please... Is my PC (hard drive/s) failing or have I got a virus?
2012/05/07 15:35:56
(permalink)
Quick update... I've run RKill, and then performed a full Malwarebytes scan which found and removed a Trojan. So far, and after about 7 or 8 reboots, I've had no return of those S.M.A.R.T. screens. Also, since I unhid all those missing files and folders, they have remained visible. So, in conjunction with the System Restore I did earlier, I'm really hoping that I've finally got rid of whatever it was that gave me the problem in the first place. While Malwarebytes has been running, I've been doing a bit of research around the Catalyst Control Centre (CCC) error message and it seems I'm not alone in experiencing this, both in conjunction with the S.M.A.R.T. malware and in isolation. Following on one snippet I read where it was mentioned that it could be down to a User Account having become corrupt, I created a new User Account (I only have my Admin Account normally) and the CCC opens perfectly from that account So now I'm back to searching on how to fix this. Wish me luck (again), and another really massive thanks again to everyone who came rushing to my aid during my mid-morning panic
post edited by SteveStrummerUK - 2012/05/07 15:37:01
|