New virus - HD for windows is aparently without any data

system · 2007-11-12T12:28:36.000Z

Helo,

First sory for my english, on my pc and acording to informations that i have colected i have been attacked for a new virus.
This virus mark or change the formatof the files in HD and windows see this drive of Hd that have been attacked has clean, without any data but in the realy the data his there in HD. Aparently the data has been deleted but in realy the data has not been deleted because if i use a softewareto recover lost data the software don’t find anything.

Anyone knows about this new virus? Anyone already have a solution?

Lisandro · 2007-11-12T12:34:28.000Z

Just trying to understand. Your HDD was clean, you use avast, suddenly, you cannot even boot? Which files are being deleted (or hidden) from you computer?
Do you have any other security program installed?
Can you boot in Safe Mode (pressing F8 while booting)?

system · 2007-11-12T13:43:19.000Z

Tech post:2:

Just trying to understand. Your HDD was clean, you use avast, suddenly, you cannot even boot? Which files are being deleted (or hidden) from you computer?
Do you have any other security program installed?
Can you boot in Safe Mode (pressing F8 while booting)?

My HDD it’s of 160gb and I have this HDD in 3 parts, the first one it’s for instal windows and programs and the oder two it’s for data (movies, music, documents, pictures, etc). the two parts were i have the data it’s aparently clean but the first one have almost everithyng but i can’t boot the pc even in safe mode because some files of windows are damge or missing. I use only the avast. Now i have instaled oder HDD in pc with windows vista for i see what apens with my HDD and i can see what i have descrived here.

Lisandro · 2007-11-12T14:38:03.000Z

mysterious post:3:

Now i have instaled oder HDD in pc with windows vista for i see what apens with my HDD and i can see what i have descrived here.

With this new partition, maybe you can:

Disable System Restore (in all partitions) and reenable it after step 3.
Clean your temporary files.
Schedule a boot time scanning with avast with archive scanning turned on.
Use AVG Antispyware; SUPERantispyware and/or Spyware Terminator to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.
Test your machine with anti-rootkit applications. I suggest AVG or Trend Micro RootkitBuster.
Run a full computer on-line scanning:
Kaspersky (very good detection rates)
ESET NOD32
Trendmicro housecall
AVGas (does not necessary if you have AVG antispyware installed)
F-Secure
BitDefender (free removal of the malware)
HitmanPro (multiply scanners)

Dwarden · 2007-11-12T20:16:08.000Z

i already encoutered one such person too … his HDD was completely unreable (sadly i wasn’t the person who ‘resolved’ the issue)

according to tech who checked it it was like ‘something’ erased the drive in ‘secure’ mode (e.g. with some hash overwriting the data)

all gone

Avast! was on system in moment but unknown if up2date …

Lisandro · 2007-11-12T20:22:26.000Z

Dwarden post:5:

i already encoutered one such person too … his HDD was completely unreable (sadly i wasn’t the person who ‘resolved’ the issue)

I have this before, but I can’t associate the event to an infection, rather a hardware malfunction, or MFT problem.

system · 2007-11-16T11:33:30.000Z

Tech post:6:

Dwarden post:5:

i already encoutered one such person too … his HDD was completely unreable (sadly i wasn’t the person who ‘resolved’ the issue)

I have this before, but I can’t associate the event to an infection, rather a hardware malfunction, or MFT problem.

And if it is a hardware malfunction or a MFT problem can you hel me solving this problem?

Announcements