Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: 'New Device' Malware?

04 Sep 2014   #1
YoYo155

Windows 10
 
 
'New Device' Malware?

Hello security aficionados

In the past several months I've had people reporting to me that they can't use new devices
plugged into their PC whether it being USB, PCIe expansion or SATA interface on the account
that the no new drivers can be installed, in anyway meaning via Windows automatic search
and update (plug n' play) or manually using the Device Manager, the installation just fails
(I believe the code was 28, but don't quote me on that detail) rendering the devices useless.

Now I have found that using AdwCleaner and allowing it to remove whatever it finds
resolves the issue (although sometimes I still recommend a clean install).
With that in mind I can deduce that we are dealing with a type of malware / crapware.

What I would like to know is what causes it? and if possible how does it do it?
I have attached AdwCleaner result texts and a link to a completely structured quarantine
folder it has generated on a previously affected Windows 7.

Thank you for reading .

warning   Warning
! Quarantine Folder May Contain Threats !






My System SpecsSystem Spec
.
04 Sep 2014   #2
Jacee
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

I'm sorry, I won't download .rar files ...
My System SpecsSystem Spec
04 Sep 2014   #3
Jacee
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

The files shown in AdwCleaner all appear to be adware. You can go ahead and run the 'clean' option.
My System SpecsSystem Spec
.

05 Sep 2014   #4
YoYo155

Windows 10
 
 

Quote   Quote: Originally Posted by Jacee View Post
I'm sorry, I won't download .rar files ...
I should have thought about that .
Quote   Quote: Originally Posted by Jacee View Post
The files shown in AdwCleaner all appear to be adware. You can go ahead and run the 'clean' option.
I appreciate you taking the time and looking at the logs .

Perhaps I wasn't clear enough in the OP.
Those texts are from a PC (not mine) which had already been cleaned using AdwCleaner.
I want to know what causes that behaviour.
What component of the software is finds causes Windows to fail on installing
new device drivers.
My System SpecsSystem Spec
05 Sep 2014   #5
Jacee
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

I'm not sure ... possibly it needs to be run in 'compatibility' mode, or the computer needs to be clean of all malware, adware and the temporary files need to be cleaned as well. Sometimes, an Antivirus program will prevent installation of devices.


Also, see this Code 28: The drivers for this device are not installed
My System SpecsSystem Spec
07 Sep 2014   #6
ThrashZone

Win-7-Pro64bit 7-H-Prem-64bit
 
 

No doubt those are some pretty interesting lists of items
My System SpecsSystem Spec
07 Sep 2014   #7
YoYo155

Windows 10
 
 

Jacee, thank you for replying but I was hoping to pinpoint the culprits
as I had encountered this issue so many times it has picked my interest as
to how it is happening.

I know! I get those all the time, some people haven't got the slightest clue about
system security.
My System SpecsSystem Spec
07 Sep 2014   #8
andrew129260

Windows 10 Pro
 
 

I will take a look into it. I have seen Zero Access causing something like this before, and where this is adware, there is zero access (for me lately).

This Microsoft KB article lists multiple reasons as to why a hardware device can fail to install:

Error codes in Device Manager in Windows

Malware can corrupt the registry, use registry settings to block installation altogether, break windows update service so that when windows update goes to search for a driver (which it always does first when plugging in new hardware) the process fails which then causes windows to search its own driver folders, which malware can also mess up causing the installation to bork.

Malware knows that usb devices can have tons of tools to wipe them out. The best way to stop that is preventing them from installing. They also of course block the websites to the known tools that eradicate the infection.

Having said that, a few simple logs is going to be hard to find the culprit of the issue. If not impossible. We can start by looking at everything they found and doing a google search to see if other things come with the adware that would cause this, or if the adware itself has been known to do this. Malware comes out in thousands a day, I highly doubt it is just a single specific infection causing all this.

A rootkit is also very likely.

There is also a example of malware trying to install a "hardware device" and failing:

http://forums.majorgeeks.com/showthread.php?t=217331
My System SpecsSystem Spec
Reply

 'New Device' Malware?




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Changing File Decription for link to Malware Bytes Anti-Malware
Have been using Win 7 Ultimate x64 for quite a while but tonight ran into a small problem. I like to keep the titles for links very short and want to rename "Malwarebytes Anti-Malware" (I am a registered, paid user) to simply "Malwarebytes". I am listed as an Administrator and I used LockHunter to...
System Security
Bluetooth device not in device manager, no hardware switch, Acer netbk
Model is Acer Aspire One D270. Internal bluetooth doesn't work. Nothing in device manager. Fn+F3 is meant to control it, but doesn't. May be because I've messed with some programs. Trying to re-install to factory settings. Any suggestions at all? thanks D:
Network & Sharing
base system device, video controller and unknown device missing
hie i have just installed window 7 and this devices are missing, any help will be very much appreciated. base system device device id PCI\VEN_1217&DEV_7110&SUBSYS_117C10&PEV_00 PCI\VEN_1217&DEV_7110&SUBSYS_117C10CF PCI\VEN_1217&DEV_7110&CC_088000 PCI\VEN_1217&DEV_7110&CC_0880 UNKNOWN...
Drivers
Malware Removal Guide 2011: How to Get Rid of All The Latest Malware
Read more at: Maximum PC | Malware Removal Guide 2011: How to Get Rid of All The Latest Malware
Security Basics


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 18:52.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App