S.M.A.R.T. Check, Drive Sector Not Found Error, Other Issues

View previous topic View next topic Go down

Re: S.M.A.R.T. Check, Drive Sector Not Found Error, Other Issues

Post by shetrim on Fri May 11, 2012 2:41 am

I'm still having the same problem. I've been trying to follow your last direction, but I get the same result i posted last night. Is this a lost cause?

shetrim
Novice
Novice

Posts Posts : 18
Joined Joined : 2012-04-25
OS OS : XP
Points Points : 17098
# Likes # Likes : 0

View user profile

Back to top Go down

Re: S.M.A.R.T. Check, Drive Sector Not Found Error, Other Issues

Post by Superdave on Fri May 11, 2012 6:40 pm

Let's give this a try.

Fix using MBRCheck.exe

Run MBRCheck.exe again by double-clicking on it.

  • Wait until you see the following line: Enter 'Y' and hit ENTER for more options, or 'N' to exit:
  • Enter 'Y' and then press Enter.
  • When asked: 'Enter your choice:', select option 2 (Restore the MBR of a physical disk with a standard boot code) and press the Enter key.
  • Now the program will ask: 'Enter the physical disk number to fix (0-99, -1 to cancel)'
  • Enter 0 and press the Enter key.
  • The program will show Available MBR codes followed by a list of operating systems as shown below:

Code:
Available MBR codes:
[ 0] Default (Windows XP)
[ 1] Windows XP
[ 2] Windows Server 2003
[ 3] Windows Vista
[ 4] Windows 2008
[ 5] Windows 7
[-1] Cancel
Please select the MBR code to write to this drive:

  • Please select your version of Windows from the list and enter the corresponding number and then press Enter.
  • When prompted for confirmation: "Do you want to fix the MBR code?". Type the full word Yes (not Y or the fix will not work) and press Enter.
  • Left-click on the title bar (where program name and path is written).
  • From the menu chose Edit -> Select All.
  • Press the Enter key to copy selected text.
  • Open Notepad, paste that text into it and save to your desktop as MBRCheck.txt.
  • When complete, you should see Done! Press ENTER to exit.... Press Enter on the keyboard.
  • Reboot your computer to complete the fix and copy/paste MBRCheck.txt in your next reply.
  • If your computer does not restart on its own, please restart it manually.

Superdave
Captain
Captain

Posts Posts : 4202
Joined Joined : 2010-02-01
Gender Gender : Male
OS OS : Windows 8.1 and a dual-boot with XP Home SP3
Protection Protection : MSE, Windows Defender, Windows firewall
Points Points : 83161
# Likes # Likes : 0

View user profile

Back to top Go down

Re: S.M.A.R.T. Check, Drive Sector Not Found Error, Other Issues

Post by shetrim on Mon May 14, 2012 3:16 am

The link to the MBRcheck does not work for me. It does not appear active for me. Can you assist? Thanks.

shetrim
Novice
Novice

Posts Posts : 18
Joined Joined : 2012-04-25
OS OS : XP
Points Points : 17098
# Likes # Likes : 0

View user profile

Back to top Go down

Re: S.M.A.R.T. Check, Drive Sector Not Found Error, Other Issues

Post by Superdave on Mon May 14, 2012 7:24 pm

The link to the MBRcheck does not work for me. It does not appear active for me. Can you assist? Thanks.
You should already have MBRCheck on your computer. Just double-click on it to run.
BTW, do you have your OS disk?


[You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]

Superdave
Captain
Captain

Posts Posts : 4202
Joined Joined : 2010-02-01
Gender Gender : Male
OS OS : Windows 8.1 and a dual-boot with XP Home SP3
Protection Protection : MSE, Windows Defender, Windows firewall
Points Points : 83161
# Likes # Likes : 0

View user profile

Back to top Go down

Re: S.M.A.R.T. Check, Drive Sector Not Found Error, Other Issues

Post by shetrim on Mon May 14, 2012 9:12 pm

Sorry about that! I ran it and here is the log:

MBRCheck, version 1.2.3
(c) 2010, AD

Command-line:
Windows Version: Windows XP Home Edition
Windows Information: Service Pack 3 (build 2600)
Logical Drives Mask: 0x0000000c

\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`00007e00 (NTFS)

Size Device Name MBR Status
--------------------------------------------
74 GB \\.\PhysicalDrive0 MBR Code Faked!
SHA1: DA38B874B7713D1B51CBC449F4EF809B0DEC644A


Found non-standard or infected MBR.
Enter 'Y' and hit ENTER for more options, or 'N' to exit: y

Options:
[1] Dump the MBR of a physical disk to file.
[2] Restore the MBR of a physical disk with a standard boot code.
[3] Exit.

Enter your choice: 2

Enter the physical disk number to fix (0-99, -1 to cancel): 0
Available MBR codes:
[ 0] Default (Windows XP)
[ 1] Windows XP
[ 2] Windows Server 2003
[ 3] Windows Vista
[ 4] Windows 2008
[ 5] Windows 7
[-1] Cancel

Please select the MBR code to write to this drive: 0
Do you want to fix the MBR code? Type 'YES' and hit ENTER to continue: YES
Successfully wrote new MBR code!
Please reboot your computer to complete the fix.


Done!
Press ENTER to exit...


I do not know where my OS disks are...wish I did. Sorry!!

I'm still having the search engine misdirection issues.

shetrim
Novice
Novice

Posts Posts : 18
Joined Joined : 2012-04-25
OS OS : XP
Points Points : 17098
# Likes # Likes : 0

View user profile

Back to top Go down

Re: S.M.A.R.T. Check, Drive Sector Not Found Error, Other Issues

Post by Superdave on Mon May 14, 2012 10:10 pm

It looks like the MBR has been fixed. Let's try to fix the other problems.

Re-run MBAM:

Code:
Please re-open Malwarebytes, click the Update tab, and click Check for Updates. Then, click the Scanner tab, select Perform Quick Scan, and press Scan. Remove selected, and post the log in your next reply..
*************************************************
Please try running TDSSKiller and ComboFix again.You should still have those on your computer.

Superdave
Captain
Captain

Posts Posts : 4202
Joined Joined : 2010-02-01
Gender Gender : Male
OS OS : Windows 8.1 and a dual-boot with XP Home SP3
Protection Protection : MSE, Windows Defender, Windows firewall
Points Points : 83161
# Likes # Likes : 0

View user profile

Back to top Go down

Re: S.M.A.R.T. Check, Drive Sector Not Found Error, Other Issues

Post by shetrim on Wed May 16, 2012 4:17 pm

FINALLY was able to run TDSSKiller and ComboFix!!! :smile2:

Here is the log from Malwarebytes QuickScan. It did not appear to find anything:
Malwarebytes Anti-Malware 1.61.0.1400
[You must be registered and logged in to see this link.]

Database version: v2012.05.16.01

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
David :: TRIMBLE-0E30FCB [administrator]

5/15/2012 6:38:50 PM
mbam-log-2012-05-15 (18-38-50).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 240766
Time elapsed: 17 minute(s), 40 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)


Here is the log for TDSSKiller. It found a rootkit!!! Hooray! Well, not hooray for rootkits, but glad the darn thing finally ran and found something!

08:56:46.0433 3204 TDSS rootkit removing tool 2.7.34.0 May 2 2012 09:59:18
08:56:49.0677 3204 ============================================================
08:56:49.0677 3204 Current date / time: 2012/05/16 08:56:49.0677
08:56:49.0677 3204 SystemInfo:
08:56:49.0677 3204
08:56:49.0677 3204 OS Version: 5.1.2600 ServicePack: 3.0
08:56:49.0677 3204 Product type: Workstation
08:56:49.0677 3204 ComputerName: TRIMBLE-0E30FCB
08:56:49.0677 3204 UserName: David
08:56:49.0677 3204 Windows directory: C:\WINDOWS
08:56:49.0677 3204 System windows directory: C:\WINDOWS
08:56:49.0677 3204 Processor architecture: Intel x86
08:56:49.0677 3204 Number of processors: 1
08:56:49.0677 3204 Page size: 0x1000
08:56:49.0677 3204 Boot type: Normal boot
08:56:49.0677 3204 ============================================================
08:56:52.0471 3204 Drive \Device\Harddisk0\DR0 - Size: 0x12A1F16000 (74.53 Gb), SectorSize: 0x200, Cylinders: 0x2601, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
08:56:52.0521 3204 ============================================================
08:56:52.0521 3204 \Device\Harddisk0\DR0:
08:56:52.0521 3204 MBR partitions:
08:56:52.0521 3204 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x950E482
08:56:52.0521 3204 ============================================================
08:56:52.0581 3204 C: <-> \Device\Harddisk0\DR0\Partition0
08:56:52.0581 3204 ============================================================
08:56:52.0581 3204 Initialize success
08:56:52.0581 3204 ============================================================

Here is the ComboFix log:

ComboFix 12-05-15.04 - David 05/15/2012 19:32:09.1.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.511.160 [GMT -7:00]
Running from: c:\documents and settings\David\Desktop\PCHelpForum1.exe
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\All Users\Application Data\84VcLM1fyykdGj
c:\documents and settings\All Users\Application Data\Fvc04tqgQ4JfGY
c:\documents and settings\All Users\Application Data\TEMP
c:\documents and settings\All Users\Application Data\TEMP\DFC5A2B2.TMP
.
.
((((((((((((((((((((((((( Files Created from 2012-04-16 to 2012-05-16 )))))))))))))))))))))))))))))))
.
.
2012-05-16 02:18 . 2012-05-16 02:18 -------- d-----w- C:\TDSSKiller_Quarantine
2012-05-16 01:01 . 2012-05-16 01:01 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2012-05-16 01:01 . 2012-04-04 22:56 22344 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-05-13 07:32 . 2012-05-13 07:32 -------- d-----w- c:\documents and settings\David\Local Settings\Application Data\Apple Computer
2012-05-13 07:31 . 2009-05-18 20:17 26600 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
2012-05-13 07:31 . 2008-04-17 19:12 107368 ----a-w- c:\windows\system32\GEARAspi.dll
2012-05-13 07:30 . 2012-05-13 07:30 -------- d-----w- c:\program files\iPod
2012-05-13 07:29 . 2012-05-13 07:31 -------- d-----w- c:\program files\iTunes
2012-05-13 07:29 . 2012-05-13 07:31 -------- d-----w- c:\documents and settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2012-05-13 07:29 . 2012-05-13 07:29 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple Computer
2012-05-13 07:29 . 2012-05-13 07:29 -------- d-----w- c:\documents and settings\David\Local Settings\Application Data\Apple
2012-05-13 07:28 . 2012-05-13 07:28 -------- d-----w- c:\program files\Apple Software Update
2012-05-13 07:28 . 2012-05-13 07:28 -------- d-----w- c:\documents and settings\LocalService\Application Data\Apple Computer
2012-05-13 07:28 . 2012-05-13 07:31 -------- dc----w- c:\windows\system32\DRVSTORE
2012-05-13 07:27 . 2012-05-13 07:27 -------- d-----w- c:\program files\Bonjour
2012-05-13 07:27 . 2012-05-13 07:27 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple
2012-05-13 07:27 . 2012-05-13 07:30 -------- d-----w- c:\program files\Common Files\Apple
2012-05-05 17:19 . 2012-05-05 17:19 -------- d-----w- C:\PCHelpForum
2012-05-05 15:58 . 2012-05-05 16:58 4140192 ----a-w- c:\windows\system32\FlashPlayerInstaller.exe
2012-05-02 21:23 . 2012-05-02 21:23 -------- d--h--w- c:\windows\PIF
2012-04-25 18:45 . 2012-04-25 18:45 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2012-04-25 17:36 . 2012-04-25 17:36 -------- d-----w- c:\program files\PC Tools
2012-04-25 17:33 . 2012-03-20 20:50 203088 ----a-w- c:\windows\system32\drivers\PCTSD.sys
2012-04-24 17:03 . 2012-04-24 17:06 -------- d-----w- c:\documents and settings\Administrator
2012-04-24 16:43 . 2012-04-24 16:43 -------- d-----w- c:\documents and settings\Sheila\Local Settings\Application Data\AskToolbar
2012-04-24 16:39 . 2012-04-24 16:39 -------- d-----w- c:\documents and settings\All Users\Application Data\Ask
2012-04-19 05:19 . 2012-04-19 05:21 -------- d-----w- c:\windows\SxsCaPendDel
2012-04-18 00:31 . 2012-04-18 00:31 19416 ----a-w- c:\program files\Mozilla Firefox\AccessibleMarshal.dll
2012-04-18 00:29 . 2012-04-18 00:29 834840 ----a-w- c:\program files\Mozilla Firefox\uninstall\helper.exe
2012-04-18 00:29 . 2012-04-18 00:29 269272 ----a-w- c:\program files\Mozilla Firefox\updater.exe
2012-04-18 00:29 . 2012-04-18 00:29 19928 ----a-w- c:\program files\Mozilla Firefox\xpcom.dll
2012-04-18 00:29 . 2012-04-18 00:29 16116696 ----a-w- c:\program files\Mozilla Firefox\xul.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-05-05 16:58 . 2012-04-13 07:40 419488 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-05-05 16:58 . 2011-06-07 21:32 70304 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-04-24 16:38 . 2011-04-03 18:31 73728 ----a-w- c:\windows\system32\javacpl.cpl
2012-04-24 16:38 . 2011-04-03 18:31 472808 ----a-w- c:\windows\system32\deployJava1.dll
2012-03-01 11:01 . 2006-02-28 12:00 916992 ----a-w- c:\windows\system32\wininet.dll
2012-03-01 11:01 . 2006-02-28 12:00 43520 ------w- c:\windows\system32\licmgr10.dll
2012-03-01 11:01 . 2006-02-28 12:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
2012-02-29 14:10 . 2006-02-28 12:00 177664 ----a-w- c:\windows\system32\wintrust.dll
2012-02-29 14:10 . 2006-02-28 12:00 148480 ------w- c:\windows\system32\imagehlp.dll
2012-02-29 12:17 . 2006-02-28 12:00 385024 ------w- c:\windows\system32\html.iec
2012-04-18 00:30 . 2012-04-18 00:30 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-11-11 344064]
"Broadcom Wireless Manager UI"="c:\windows\system32\WLTRAY.exe" [2005-12-19 1347584]
"Dell QuickSet"="c:\program files\Dell\QuickSet\quickset.exe" [2005-03-04 606208]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-03-27 37296]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-02 843712]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-02-21 59240]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2012-03-27 421736]
"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-04-04 462408]
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
.
R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [5/15/2012 6:01 PM 654408]
R3 DLKRCB;D-Link DFE-690TXD CardBus PC Card;c:\windows\system32\drivers\DLKRCB.SYS [12/14/2011 8:49 PM 25434]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [5/15/2012 6:01 PM 22344]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [4/13/2012 12:40 AM 257696]
S3 OZSCR;O2Micro SmartCardBus Smartcard Reader;c:\windows\system32\drivers\ozscr.sys [10/24/2010 1:31 PM 92550]
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - 75434451
*NewlyCreated* - MBAMPROTECTOR
*NewlyCreated* - MBAMSERVICE
*Deregistered* - 75434451
.
Contents of the 'Scheduled Tasks' folder
.
2012-05-16 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-13 16:58]
.
2012-05-13 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2011-06-02 00:57]
.
.
------- Supplementary Scan -------
.
uInternet Settings,ProxyOverride = *.local
TCP: DhcpNameServer = 192.168.1.1
DPF: {CAFECAFE-0013-0001-0022-ABCDEFABCDEF}
FF - ProfilePath - c:\documents and settings\David\Application Data\Mozilla\Firefox\Profiles\14f4jilx.default\
FF - prefs.js: browser.search.selectedEngine - Ask.com
FF - prefs.js: network.proxy.type - 1
.
- - - - ORPHANS REMOVED - - - -
.
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, [You must be registered and logged in to see this link.]
Rootkit scan 2012-05-15 19:43
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'winlogon.exe'(500)
c:\windows\system32\Ati2evxx.dll
c:\windows\System32\BCMLogon.dll
.
Completion time: 2012-05-15 19:46:29
ComboFix-quarantined-files.txt 2012-05-16 02:46
.
Pre-Run: 52,507,475,968 bytes free
Post-Run: 53,036,265,472 bytes free
.
- - End Of File - - A5769EC38595741A4EB02644C81F0BDF


It appears that I can actually search without getting misdirected anymore!!! Am I cured? If so, you are a saint for putting up with me and a genius for getting this computer up and running again. :smile2:

shetrim
Novice
Novice

Posts Posts : 18
Joined Joined : 2012-04-25
OS OS : XP
Points Points : 17098
# Likes # Likes : 0

View user profile

Back to top Go down

Re: S.M.A.R.T. Check, Drive Sector Not Found Error, Other Issues

Post by Superdave on Wed May 16, 2012 7:11 pm

Am I cured? If so, you are a saint for putting up with me and a genius for getting this computer up and running again.
Well, things are looking much better. I couple more scans just to make sure we got everything.

Download Security Check by screen317 from one of the following links and save it to your desktop.

[You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]

* Double-click Security Check.bat
* Follow the on-screen instructions inside of the black box.
* A Notepad document should open automatically called checkup.txt
* Post the contents of that document in your next reply.

Note: If a security program requests permission from dig.exe to access the Internet, allow it to do so.
***********************************************************
SysProt Antirootkit

Download
SysProt Antirootkit from the link below (you will find it at the bottom
of the page under attachments, or you can get it from one of the
mirrors).

[You must be registered and logged in to see this link.]

Unzip it into a folder on your desktop.

  • Double click Sysprot.exe to start the program.
  • Click on the Log tab.
  • In the Write to log box select the following items.

    • Process << Selected
    • Kernel Modules << Selected
    • SSDT << Selected
    • Kernel Hooks << Selected
    • IRP Hooks << NOT Selected
    • Ports << NOT Selected
    • Hidden Files << Selected

  • At the bottom of the page

    • Hidden Objects Only << Selected

  • Click on the Create Log button on the bottom right.
  • After a few seconds a new window should appear.
  • Select Scan Root Drive. Click on the Start button.
  • When it is complete a new window will appear to indicate that the scan is finished.
  • The log will be saved automatically in the same folder Sysprot.exe was extracted to. Open the text file and copy/paste the log here.

Superdave
Captain
Captain

Posts Posts : 4202
Joined Joined : 2010-02-01
Gender Gender : Male
OS OS : Windows 8.1 and a dual-boot with XP Home SP3
Protection Protection : MSE, Windows Defender, Windows firewall
Points Points : 83161
# Likes # Likes : 0

View user profile

Back to top Go down

Re: S.M.A.R.T. Check, Drive Sector Not Found Error, Other Issues

Post by shetrim on Wed May 16, 2012 8:37 pm

Security Check Log:
Results of screen317's Security Check version 0.99.32
Windows XP Service Pack 3 x86
Internet Explorer 8
``````````````````````````````
Antivirus/Firewall Check:

Windows Firewall Enabled!
```````````````````````````````
Anti-malware/Other Utilities Check:

HijackThis 2.0.2
Java(TM) 6 Update 22
Java(TM) 6 Update 31
Java version out of date!
Adobe Flash Player 11.2.202.235
Adobe Reader 9 Adobe Reader out of date!
Mozilla Firefox 10.0.2 Firefox out of Date!
````````````````````````````````
Process Check:
objlist.exe by Laurent

Malwarebytes' Anti-Malware mbamservice.exe
Malwarebytes' Anti-Malware mbamgui.exe
``````````End of Log````````````


Sysprot Log:

SysProt AntiRootkit v1.0.1.0
by swatkat

******************************************************************************************
******************************************************************************************

No Hidden Processes found

******************************************************************************************
******************************************************************************************
Kernel Modules:
Module Name: \SystemRoot\System32\Drivers\dump_atapi.sys
Service Name: ---
Module Base: F2426000
Module End: F243E000
Hidden: Yes

Module Name: \SystemRoot\System32\Drivers\dump_WMILIB.SYS
Service Name: ---
Module Base: F8CC8000
Module End: F8CCA000
Hidden: Yes

******************************************************************************************
******************************************************************************************
No SSDT Hooks found

******************************************************************************************
******************************************************************************************
Kernel Hooks:
Hooked Function: PsGetProcessInheritedFromUniqueProcessId
At Address: 804FD889
Jump To: EAAC805A
Module Name: _unknown_

Hooked Function: PsChargePoolQuota
At Address: 80501FBC
Jump To: 72D07DFB
Module Name: _unknown_

Hooked Function: KeInitializeMutant
At Address: 804F7A18
Jump To: 73CFDAAD
Module Name: _unknown_

******************************************************************************************
******************************************************************************************
Hidden files/folders:
Object: C:\Qoobox\BackEnv\AppData.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\Cache.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\Cookies.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\Desktop.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\Favorites.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\History.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\LocalAppData.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\LocalSettings.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\Music.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\NetHood.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\Personal.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\Pictures.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\PrintHood.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\Profiles.Folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\Profiles.Folder.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\Programs.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\Recent.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\SendTo.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\SetPath.bat
Status: Access denied

Object: C:\Qoobox\BackEnv\StartMenu.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\StartUp.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\SysPath.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\Templates.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\VikPev00
Status: Access denied


shetrim
Novice
Novice

Posts Posts : 18
Joined Joined : 2012-04-25
OS OS : XP
Points Points : 17098
# Likes # Likes : 0

View user profile

Back to top Go down

Re: S.M.A.R.T. Check, Drive Sector Not Found Error, Other Issues

Post by Superdave on Wed May 16, 2012 10:31 pm

Update Your Java (JRE)

Old versions of Java have vulnerabilities that malware can use to infect your system.


First [You must be registered and logged in to see this link.]

If there are any other version(s) installed then update now.

Get the new version (if needed)

If your version is out of date install the newest version of the [You must be registered and logged in to see this link.].

Note: UNCHECK any pre-checked toolbar and/or software offered with the Java update. The pre-checked toolbars/software are not part of the Java update.

Be sure to close ALL open web browsers before starting the installation.

Remove any old versions

1. Download [You must be registered and logged in to see this link.] and unzip the file to your Desktop.
2. Open JavaRA.exe and choose Remove Older Versions
3. Once complete exit JavaRA.

Additional Note: [You must be registered and logged in to see this link.] adds a service to improve the initial startup time of Java applets and applications. To disable the JQS service if you don't want to use it, go to Start > Control Panel > Java > Advanced > Miscellaneous and uncheck the box for Java Quick Starter. Click OK and reboot your computer.
**********************************************************
Looking over your log it seems you don't have any antivirus software.

Before we continue download and install a free antivirus.

Remember to only install one antivirus!

1) [You must be registered and logged in to see this link.]
2) [You must be registered and logged in to see this link.]
3) [You must be registered and logged in to see this link.]
4) [You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.]
4-a) [You must be registered and logged in to see this link.]
5) [You must be registered and logged in to see this link.] (Uncheck during installation "Install Comodo SafeSurf..", Make Comodo my default search provider" and "Make Comodo Search my homepage" if you choose this one)
6) [You must be registered and logged in to see this link.]
7) [You must be registered and logged in to see this link.]

It is strongly recommended that you run only one antivirus program at a time. Having more than one antivirus program active in memory uses additional resources and can result in program conflicts and false virus alerts. If you choose to install more than one antivirus program on your computer, then only one of them should be active in memory at a time.
**********************************************
I'd like to scan your machine with ESET OnlineScan

•Hold down Control and click on the following link to open ESET OnlineScan in a new window.
[You must be registered and logged in to see this link.]
•Click the button.
•For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)

  • Click on to download the ESET Smart Installer. Save it to your desktop.
  • Double click on the icon on your desktop.

•Check
•Click the button.
•Accept any security warnings from your browser.
•Check
•Push the Start button.
•ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
•When the scan completes, push
•Push , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
•Push the button.
•Push
A log file will be saved here: C:\Program Files\ESET\ESET Online Scanner\log.txt

Superdave
Captain
Captain

Posts Posts : 4202
Joined Joined : 2010-02-01
Gender Gender : Male
OS OS : Windows 8.1 and a dual-boot with XP Home SP3
Protection Protection : MSE, Windows Defender, Windows firewall
Points Points : 83161
# Likes # Likes : 0

View user profile

Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum