Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: Some advice?  (Read 6752 times)

0 Members and 2 Guests are viewing this topic.

Forward

    Topic Starter


    Newbie

    • Experience: Beginner
    • OS: Unknown
    Some advice?
    « on: July 01, 2012, 06:32:15 PM »
    I have some pretty strong suspicions of others messing around with my machine.  Im not going to get into detail of who is doing it or for whatever reasons because in truth I dont know and because it will take a long long time.
    Below is a picture of a supposedly freshly formatted Solid state drive. Whenever I format the drive it tells me that it has space used as you can see. The amount of space varies by filesystem it is the same drive under different filesystems. This does not only happen with this hard drive but with all of the drives I own.
    So what I did today was to install windows XP and look for rootkits via a utility called TDSSKiller. To my surprise It found over 174 rootkits but I knew something was up from the start.. I  really don't want to touch any Microsoft operating system anymore. The hole gets deeper tough when I attempt to run the program DBAN I cant use it. It tells me that the Hard disks might contain bad sectors yet in on other computer I can use the software. One possibility that I am getting that error might be hardware related issues but by any chance can a motherboard become infected?

    What I will attempt is to run DBAN once again but am expecting the same result since Ive done it before I installed windows XP and found the rootkits.



    [year+ old attachment deleted by admin]

    BC_Programmer


      Mastermind
    • Typing is no substitute for thinking.
    • Thanked: 1140
      • Yes
      • Yes
      • BC-Programming.com
    • Certifications: List
    • Computer: Specs
    • Experience: Beginner
    • OS: Windows 11
    Re: Some advice?
    « Reply #1 on: July 01, 2012, 07:31:21 PM »
    Whenever I format the drive it tells me that it has space used as you can see. The amount of space varies by filesystem it is the same drive under different filesystems. This does not only happen with this hard drive but with all of the drives I own.
    Data used and reserved for file structures with various File Systems use disk space.

    Quote
    So what I did today was to install windows XP and look for rootkits via a utility called TDSSKiller. To my surprise It found over 174 rootkits but I knew something was up from the start..
    Only way I can see that happening is with a pirated install of XP. (Or, if the install was actually a repair install or upgrade install of an existing infected XP installation)

     
    Quote
    The hole gets deeper tough when I attempt to run the program DBAN I cant use it. It tells me that the Hard disks might contain bad sectors yet in on other computer I can use the software. One possibility that I am getting that error might be hardware related issues but by any chance can a motherboard become infected?
    bad sectors can be responsible for false flaggings of rootkits, based on how a lot of them work (which is typically to inspect the disk at a lower level than the API functions that a rootkit would circumvent). Errors are sometimes flagged as rootkits. This is a sensible approach because the assumption on the software side is that hardware is working properly, so if something goes wrong, it assumes there is some other piece of software getting in the way. DBAN isn't designed to wipe disks with bad sectors. You could try an alternative tool like MHDD or HDDErase. Another common tool is Active@Kill disk, which comes in a free version that can be used.

    Quote
    What I will attempt is to run DBAN once again but am expecting the same result since Ive done it before I installed windows XP and found the rootkits.
    Rootkits are low level drivers installed into the operating System, usually used to facilitate the infection of the machine by hiding those new files from your standard OS tools. It quite literally cannot exist separate from the OS. A fresh install of Windows- or any OS, for that matter, quite literally cannot be infected in this way- unless the install is done using a pirated Disc, which can often come with loads of "goodies" in the form of malware and rootkits.


    Some could argue that as part of a MBR or other low level code it could, but the XP install rewrites the MBR (as does GRUB install, to my recollection) so that isn't a place it would survive.

    Theoretically it is possible for a virus to infect a BIOS, however, the problem here is that a Jumper would almost always have to be moved on the motherboard, and it would have to be built to specifically target that exact Motherboard model. Since malware authors aim to infect as many machines as possible, this simply isn't economical from that perspective.
    I was trying to dereference Null Pointers before it was cool.

    F0rward



      Greenhorn
      • Experience: Familiar
      • OS: Linux variant
      Re: Some advice?
      « Reply #2 on: July 02, 2012, 04:01:23 AM »
      Tried anything I can think of including deleting the master boot records and activekilldisk. Some pretty sticky malware i now dont think this drive is of any use to me now.
      Thank you.

      F0rward



        Greenhorn
        • Experience: Familiar
        • OS: Linux variant
        Re: Some advice?
        « Reply #3 on: July 03, 2012, 03:49:22 AM »
        Please excuse the double post but I really need some guidance.
        I was able to run Dariks boot and nuke (switched AHCI to IDE) but now have a bigger issue. The issue now is the read/write rate. I suspect that the hard drives are somehow "frozen" the reasons for this are that as soon as I run the program the read/write rates are pretty fast (in KB/s) Expecting a successful wipe in about 8-10 hours after 20 minutes or so the read/write rates drop to bytes per second and the expected wipe should complete in 350+ hours.. Will try to use parted magic as my next resort.

        Dr Jay

        • Malware Removal Specialist


        • Specialist
        • Moderator emeritus
        • Thanked: 119
        • Experience: Guru
        • OS: Windows 10
        Re: Some advice?
        « Reply #4 on: July 04, 2012, 05:23:49 AM »
        Are you needing malware removal or hard drive assistance?
        ~Dr Jay

        F0rward



          Greenhorn
          • Experience: Familiar
          • OS: Linux variant
          Re: Some advice?
          « Reply #5 on: July 26, 2012, 08:00:38 AM »
          I apologize for not posting earlier. The reason is that I have been using other operating systems. I dont even know what is happening to my machine. I think I found some rootkits Im not sure though. Ran a scan with Kapersky  TDSSKiller and found a lot of nasty stuff I would post logs but I didnt save them. The system would act up like nothing that Ive seen before. For example when I would try to install a piece of software like an antivirus the installer would hang unless I went to the task manager and ended a process called svchost that would take up %25 cpu usage the installer would then continue. Many things that are unexplained have caused me to believe that there is someone messing with my computer I dont want to get into detail since there is always that possibility that I am wrong.