Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Storage Device Issues, virus related?

01 May 2012   #1

Microsoft Windows 7 Ultimate 64-bit
Storage Device Issues, virus related?

Alright, I have started a thread in the Crashes and Debugging section, and it seems this issue has been pointed towards a virus that has not yet been properly gotten rid of.

A lot of the problems that it's caused are mentioned in this thread, so it would be a bit useful to read up on what has been attempted to fix this issue and what problems persist.

I've done some troubleshooting and attempts to determine the problem, being searching for drivers/services not starting properly within the registry and such.

If you have not checked out the thread linked above, some things I have taken note is:
- Removable Disk Drives are completely gone, missing from Disk Management and explorer, not to mention external storage devices do not appear in device manager. This will put USB drives in a non-responsive state to newly plugged in devices.

- Once USB drives are put in this "non-responsive" state, they will cause a BSOD upon shutting down. (BUGCODE_USB_DRIVER, 0xFE)

- It seems that cscript.exe (Which I have noticed is connected to several worms) seems to be running at all times, hiding from task manager. (Thanks for DDS for find that out.) I don't know if this is normal or not, however.

- Typical common Anti-viruses fail to install. (Ex: Spyware Doctor and Kaspersky)

- Upon ending a random number of processes, Task Manager goes into a non-responding state, making the computer useless when it comes to opening/closing programs. This requires a hard shut off.

- A generic looking windows popup with a title of "You're about to be logged off." and saying "Windows will now shut down in less than a minute." appears whenever I ran a certain removal tool. It used to appear everyday at one random point, however a few virus scans in safe mode changed that.

I've got a few thing determined:
- My USB devices are working fine, the missing removable disk drives in Disk Management causes an issue when a device with any bit of storage is plugged in.

- This is not a "hardware issue." (as Microsoft's support tried suggesting...) External Drives show up in my BIOS.

- This problem has also appeared on my other hard drives. (Their Windows installations also have no removable disk drives.)

If anymore information is needed, let me know and I will obtain it for you. Any suggestions?

My System SpecsSystem Spec
02 May 2012   #2

MS Windows 7 Ultimate SP1 64-bit

Run Windows Defender Offline, WDO. Link in my signature.
My System SpecsSystem Spec
02 May 2012   #3

Microsoft Windows 7 Ultimate 64-bit

I have done that previously, however should I do it again just to be safe?
My System SpecsSystem Spec

02 May 2012   #4

MS Windows 7 Ultimate SP1 64-bit

Be sure to click on WDO in my signature.

This is NOT the same thing as turning on Windows Defender.

Once again, MS has done a very poor job of naming programs.
My System SpecsSystem Spec
03 May 2012   #5

Microsoft Windows 7 Ultimate 64-bit

I know, I have used Windows Defender Offline before.

Anyway, no infections were found with the scan.
My System SpecsSystem Spec
03 May 2012   #6

MS Windows 7 Ultimate SP1 64-bit

and is your mysterious cscript still showing up?
My System SpecsSystem Spec
04 May 2012   #7

Windows 7 Home Premium 64 bit at home and Windows 7 professional at school.

Do the removable drives show up in the systems BIOS?
My System SpecsSystem Spec
05 May 2012   #8

Microsoft Windows 7 Ultimate 64-bit

Quote   Quote: Originally Posted by karlsnooks View Post
and is your mysterious cscript still showing up?
Yep, DDS still picks it up.

============== Running Processes ===============
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files\Java\jre7\bin\javaw.exe
C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 7\firefox.exe
C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 7\plugin-container.exe
The javaw.exe running was just Minecraft, not any other application.

Quote   Quote: Originally Posted by luke127 View Post
Do the removable drives show up in the systems BIOS?
Removable drives showing up in the BIOS? Things like external drives are shown as storage in my BIOS. If that is what you mean, then yes.
My System SpecsSystem Spec
28 May 2012   #9

Microsoft Windows 7 Ultimate 64-bit

I'm just gonna build a new and improved computer, there seems to be absolutely no solution to this.
My System SpecsSystem Spec

 Storage Device Issues, virus related?

Thread Tools

Similar help and support threads
Thread Forum
Virus' in AutoRun on USB data storage devices
I don't have a problem, but my curiosity is piquied, because I use several external USB HDDs including one thumb-drive I share between Linux and Windows machines. How would I know a USB storage device has a "Shortcut Virus" before it causes problems ? - by jumanji at...
System Security
Unknown device In device manager, by a virus ?
Hello everyone, I hope you could give me some clue that may have caused the appearance of an unknown device. All information here : First, That was solved by uninstalling and rebooting, did not appear anymore. But as...
System Security
BSOD related to Device Install Manager - USB Issues
Hi folks, After some irritating BSODs and a long process of trial and error that followed, I managed to track down the cause: the Device Install Service (C:\Windows\system32\svchost.exe -k DcomLaunch) in Windows or something related to it. As I understand it, this service manages PnP for the...
BSOD Help and Support
Are Gmail Storage related questions addressed on this forum?
I noticed on my backup-email account that I have 1tb of storage. I wasn't aware of this till today. Does anyone know something that I missed? Did Google give away 1TB?
Browsers & Mail
USB Mass Storage Device/Unknown Device
In Device Manager, there is a USB Mass Storage Device or an Unknown Device, even when there isn't anything plugged in. This is occurring on a Dell Dimension 5100. This is not the pc in my system specs. How do I fix this? Here are some Device Manager screenshots:
Hardware & Devices

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 13:08.
Twitter Facebook Google+