Blue Smiley Virus?

Discussion in 'malware problems & news' started by JHaWz, Apr 2, 2003.

Thread Status:
Not open for further replies.
  1. Jooske

    Jooske Registered Member

    Joined:
    Feb 12, 2002
    Posts:
    9,713
    Location:
    Netherlands, EU near the sea
    Wondered if your HDD is compressed or not and if you have a HP, Dell, Compaq or such a brand of computer?
    As those have their own custom bootflop and either compressed hdd or one of these brands you can't boot up properly with a "common" bootflop, and if compressed you can forget the format c:\ or low format too (i've been told)

    You say you had another HDD in the same computer and that is all ok and not any problems?
    i wondered if you dare to take tto have the infected HDD as a slave beside it and see if you can scan/clean it from the one which is running ok now.
    I wondered if you have any ways of access to the registry to see if there are strange entries.
     
  2. JHaWz

    JHaWz Registered Member

    Joined:
    Apr 2, 2003
    Posts:
    11
    My HDD is not compressed. It's an IBM HD and the comp have I built my self.
    I have the infected (if not broken) HDD mounted as slave. Had it as a slave for a couple of days. No problems, I have ran several AV's on it but none of them reports anything, and formated it several times in different ways, and replaicing the MBR with a new one. But nothing helps.
    What should I look for in the registry? Haven't found anything suspicious.
     
  3. Jooske

    Jooske Registered Member

    Joined:
    Feb 12, 2002
    Posts:
    9,713
    Location:
    Netherlands, EU near the sea
    Now help a moment:
    is the registry stored on the you're booting from, say in your case the master?
    In that there were no errors, and thus nothing strange to expect in the registry either.
    If you scan from that master the infected hd, you tried already and found nothing.
    I meant if your infectedHD was the one you tried to boot from as only or master suspicious registry items or autostart things could show up.
    You talk about a virus, and for that you tried severners, including NOD32 as av specialist.
    But are you sure it is not a worm or trojan?
    In that case, did you try a free evaluation version of TDS (trojan and worms specialist) which you can install, update the database and do the deepest scan you're able to do with it and on highest sensitivity?
    It runs from windows, no dos version, so in your case you'll have to install it on the current working master and scan from there all logical drives etc.
    Get your free evaluation copy at www.diamondcs.com.au
    and in the DCS forums here if you need help with setting it up or anything please post there.
    The thing is, i do hope it get's to the MBR on a second HDD you'er not booting from, but trying it will learn.

    You did try several online scanners too, like www.bitdefender.com and www.pandasoftware.com maybe more, didn't you?

    IBM did not tell you a blue smiley is one of theirs to indicate some error or anything like that? Can't imagine, and it would be really ridicule if it was, but you might like to ask them if you can find their support for HDDs.
     
  4. meneer

    meneer Registered Member

    Joined:
    Nov 27, 2002
    Posts:
    1,132
    Location:
    The Netherlands
  5. JHaWz

    JHaWz Registered Member

    Joined:
    Apr 2, 2003
    Posts:
    11
    Thanks for all the replays!
    Haven't solved the prboblem :'(
    I found out that as long as I use the HDD to store files and data on and not boot from it, it works fine. So I will survive ;).....
    But I sure want's to find out what caused the smiley and the boot failure.

    If i (ever) finds out what's wrong, Il post it here. But I don't think I ever will find the reason, none of the AV or HDD companies had anything information or help to ofer.
    Is there anyone else I could ask??
     
  6. JimIT

    JimIT Registered Member

    Joined:
    Jan 22, 2003
    Posts:
    1,035
    Location:
    Denton, Texas
    Sure am interested to find out, too. :)

    Might try running something like N****n Utili***s (or similar) to check the disk for surface/sector problems. Might show you some "bad" clusters, etc.

    Nice to hear your getting *some* use out of it! :D
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.