Storage Device Issues, virus related?


  1. Posts : 30
    Microsoft Windows 7 Ultimate 64-bit
       #1

    Storage Device Issues, virus related?


    Alright, I have started a thread in the Crashes and Debugging section, and it seems this issue has been pointed towards a virus that has not yet been properly gotten rid of.

    A lot of the problems that it's caused are mentioned in this thread, so it would be a bit useful to read up on what has been attempted to fix this issue and what problems persist.

    I've done some troubleshooting and attempts to determine the problem, being searching for drivers/services not starting properly within the registry and such.

    If you have not checked out the thread linked above, some things I have taken note is:
    - Removable Disk Drives are completely gone, missing from Disk Management and explorer, not to mention external storage devices do not appear in device manager. This will put USB drives in a non-responsive state to newly plugged in devices.

    - Once USB drives are put in this "non-responsive" state, they will cause a BSOD upon shutting down. (BUGCODE_USB_DRIVER, 0xFE)

    - It seems that cscript.exe (Which I have noticed is connected to several worms) seems to be running at all times, hiding from task manager. (Thanks for DDS for find that out.) I don't know if this is normal or not, however.

    - Typical common Anti-viruses fail to install. (Ex: Spyware Doctor and Kaspersky)

    - Upon ending a random number of processes, Task Manager goes into a non-responding state, making the computer useless when it comes to opening/closing programs. This requires a hard shut off.

    - A generic looking windows popup with a title of "You're about to be logged off." and saying "Windows will now shut down in less than a minute." appears whenever I ran a certain removal tool. It used to appear everyday at one random point, however a few virus scans in safe mode changed that.

    I've got a few thing determined:
    - My USB devices are working fine, the missing removable disk drives in Disk Management causes an issue when a device with any bit of storage is plugged in.

    - This is not a "hardware issue." (as Microsoft's support tried suggesting...) External Drives show up in my BIOS.

    - This problem has also appeared on my other hard drives. (Their Windows installations also have no removable disk drives.)

    If anymore information is needed, let me know and I will obtain it for you. Any suggestions?
      My Computer


  2. Posts : 10,200
    MS Windows 7 Ultimate SP1 64-bit
       #2

    Sayix,
    Run Windows Defender Offline, WDO. Link in my signature.
      My Computer


  3. Posts : 30
    Microsoft Windows 7 Ultimate 64-bit
    Thread Starter
       #3

    I have done that previously, however should I do it again just to be safe?
      My Computer


  4. Posts : 10,200
    MS Windows 7 Ultimate SP1 64-bit
       #4

    yes
    Be sure to click on WDO in my signature.

    This is NOT the same thing as turning on Windows Defender.

    Once again, MS has done a very poor job of naming programs.
      My Computer


  5. Posts : 30
    Microsoft Windows 7 Ultimate 64-bit
    Thread Starter
       #5

    I know, I have used Windows Defender Offline before.

    Anyway, no infections were found with the scan.
      My Computer


  6. Posts : 10,200
    MS Windows 7 Ultimate SP1 64-bit
       #6

    and is your mysterious cscript still showing up?
      My Computer


  7. Posts : 41
    Windows 7 Home Premium 64 bit at home and Windows 7 professional at school.
       #7

    Do the removable drives show up in the systems BIOS?
      My Computer


  8. Posts : 30
    Microsoft Windows 7 Ultimate 64-bit
    Thread Starter
       #8

    karlsnooks said:
    and is your mysterious cscript still showing up?
    Yep, DDS still picks it up.

    Code:
    ============== Running Processes ===============
    .
    C:\Windows\system32\wininit.exe
    C:\Windows\system32\lsm.exe
    C:\Windows\system32\svchost.exe -k DcomLaunch
    C:\Windows\system32\svchost.exe -k RPCSS
    C:\Windows\system32\Ati2evxx.exe
    C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
    C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
    C:\Windows\system32\svchost.exe -k netsvcs
    C:\Windows\system32\svchost.exe -k LocalService
    C:\Windows\system32\svchost.exe -k NetworkService
    C:\Windows\system32\Ati2evxx.exe
    C:\Windows\System32\spoolsv.exe
    C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
    C:\Windows\system32\taskhost.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
    C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
    C:\Windows\System32\svchost.exe -k secsvcs
    C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
    C:\Program Files\Windows Media Player\wmpnetwk.exe
    C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
    C:\Users\Auku\AppData\Local\Google\Update\1.3.21.111\GoogleCrashHandler.exe
    C:\Users\Auku\AppData\Local\Google\Update\1.3.21.111\GoogleCrashHandler64.exe
    C:\Windows\system32\taskhost.exe
    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
    C:\Program Files (x86)\Skype\Phone\Skype.exe
    C:\Program Files\Java\jre7\bin\javaw.exe
    C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 7\firefox.exe
    C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 7\plugin-container.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\conhost.exe
    C:\Windows\SysWOW64\cscript.exe
    C:\Windows\system32\wbem\wmiprvse.exe
    The javaw.exe running was just Minecraft, not any other application.

    luke127 said:
    Do the removable drives show up in the systems BIOS?
    Removable drives showing up in the BIOS? Things like external drives are shown as storage in my BIOS. If that is what you mean, then yes.
      My Computer


  9. Posts : 30
    Microsoft Windows 7 Ultimate 64-bit
    Thread Starter
       #9

    I'm just gonna build a new and improved computer, there seems to be absolutely no solution to this.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 18:49.
Find Us