Friday the 13th computor from hell (part 2)
Friday the 13th computor from hell (part 2)
This is a tale of glitches, shorts and possible virii that ate my hard drive. It all started a couple of days ago when I tried playing D3 and got booted out to windows. Since I had Omega drivers for the ATI 9700, I followed omega's advice and turned off VPU recovery. Worked for a bit but then the same problem re-occured so I then turned off DDC in display. Still no good. So then I loaded up Rise of Nations...played for awhile and blingy...whole computor re-boots. Since this is on my new HD with winxp I say "screw Mobi and his exalted O.S." and boot up the 2nd HD with win 98 and load D# on that and about the time I get to loading the software for my Nostromos game pad, the whole computor shuts off. WTF!!!
Now this happened when I installed my 2nd 160g WD hd a few weeks back and I thought my ps was going bad so I went out and bought a new Antec variable 400 ps and the shut down problem went away...untill yesterday (fri. the 13th). I wait to let the shutdown circuit time to recylce and then hit the start button and the black fong fires right up. Uh oh! Boot up screen shows no hard drives! So I poke around in bios, when I happened to remember some fine fellow here in the tech forum say something about ribbon connectors. I go to the spare parts drawer (you know...the one where you toss all those leftover comp. parts that may someday come in handy) and get a unused new ribbon and hook it up, reboot and the two hd's are there! Problem now is once I get past the primary boot I get a "Can't find NTLDR, ctrl/alt/del to restart comp.
Now here's where a cold draft blows thru my room, lights flicker and things go bump in the dark. I have the side panel leaning against the case and pull it away when the comp. dies again. This happened a few times before but I thought it was something with the old ps. I turn the comp. on, go back to the same reboot message and this time I just touch the side panel to the case and off goes the comp. So now I'm thinking there's a short somewhere. So I dis-connect everything, right down to taking out the mb. Can't see anything obvious so I brush all the dust off everything and put it back togeather. So far no shut downs due to shorts.
I now disconnect the winxp drive and see if I can boot into the win98 hd. No go. Nothing wants to work so I finally decide to format it. Useing a boot up disk I go to format the C partition. I get a "invalid media type" message. Hmmm? so I try to format the D partition. Same message. Now I go to the 3rd and last partition but I first do a dir/ command (I did the same the C & D but got the abort/retry message)and here's where the possible virii is indicated. In the first line of code was a valantines heart symbol next to the word "YA" as thought to say "Love Ya". In the next line was a little rectangular box with what appeared to be "eyes" in it and coming out the side of it was what looked like a upraised arm. Maybe you coders know what these symbols mean.
So I "format E:" and the process begins. What happens though isafter about a 6% completion it goes into "Attempting to repair cluster 75,000". Long and short I let it run all night and finally kill it when it reaches cluster 165,000. So I dunno, can a malicious proggy/virus kill a HD?
So here I am today running just on the new HD and have yet to see how my games will play now that I replaced the ribbon connect and cleaned out the cobwebs inside. Wish me luck and mail me a rabbits foot.
Now this happened when I installed my 2nd 160g WD hd a few weeks back and I thought my ps was going bad so I went out and bought a new Antec variable 400 ps and the shut down problem went away...untill yesterday (fri. the 13th). I wait to let the shutdown circuit time to recylce and then hit the start button and the black fong fires right up. Uh oh! Boot up screen shows no hard drives! So I poke around in bios, when I happened to remember some fine fellow here in the tech forum say something about ribbon connectors. I go to the spare parts drawer (you know...the one where you toss all those leftover comp. parts that may someday come in handy) and get a unused new ribbon and hook it up, reboot and the two hd's are there! Problem now is once I get past the primary boot I get a "Can't find NTLDR, ctrl/alt/del to restart comp.
Now here's where a cold draft blows thru my room, lights flicker and things go bump in the dark. I have the side panel leaning against the case and pull it away when the comp. dies again. This happened a few times before but I thought it was something with the old ps. I turn the comp. on, go back to the same reboot message and this time I just touch the side panel to the case and off goes the comp. So now I'm thinking there's a short somewhere. So I dis-connect everything, right down to taking out the mb. Can't see anything obvious so I brush all the dust off everything and put it back togeather. So far no shut downs due to shorts.
I now disconnect the winxp drive and see if I can boot into the win98 hd. No go. Nothing wants to work so I finally decide to format it. Useing a boot up disk I go to format the C partition. I get a "invalid media type" message. Hmmm? so I try to format the D partition. Same message. Now I go to the 3rd and last partition but I first do a dir/ command (I did the same the C & D but got the abort/retry message)and here's where the possible virii is indicated. In the first line of code was a valantines heart symbol next to the word "YA" as thought to say "Love Ya". In the next line was a little rectangular box with what appeared to be "eyes" in it and coming out the side of it was what looked like a upraised arm. Maybe you coders know what these symbols mean.
So I "format E:" and the process begins. What happens though isafter about a 6% completion it goes into "Attempting to repair cluster 75,000". Long and short I let it run all night and finally kill it when it reaches cluster 165,000. So I dunno, can a malicious proggy/virus kill a HD?
So here I am today running just on the new HD and have yet to see how my games will play now that I replaced the ribbon connect and cleaned out the cobwebs inside. Wish me luck and mail me a rabbits foot.
Whatever man<font face="Arial" size="3"> Wish me lick </font>
-----
Well, that series of characters seems to be much more than a coincidence. Was E: a FAT32 drive? If so, then I would say it was a virus. NTLDR must be at the beginning of the hard drive for Windows XP to load, and a virus that only understands FAT drives and tries to write that "Love ya" message could simply write over the MFT.
Well treating an NTFS drive as if it were FAT32 will almost definitely destroy the disk. However, NTFS disks store at least one backup copy of the MFT (master file table). Assuming the virus was a simple "write these bytes to this location" program, you might be able to restore the disk from a backup copy of the MFT using a recovery program. Which one, I do not know.
- Flatlander
- DBB Fleet Admiral
- Posts: 2419
- Joined: Thu Apr 15, 1999 2:01 am
- Location: Pennsylvania
- Contact:
<BLOCKQUOTE><font size="1" face="Arial">quote:</font><HR><font face="Arial" size="3">Originally posted by woodchip:
So I "format E:" and the process begins. What happens though isafter about a 6% completion it goes into "Attempting to repair cluster 75,000".</font><HR></BLOCKQUOTE>
Friday the 13th indeed. Sounds like you had three problems: a short somewhere, a bad hard drive (maybe cable too) and a virus.
So I "format E:" and the process begins. What happens though isafter about a 6% completion it goes into "Attempting to repair cluster 75,000".</font><HR></BLOCKQUOTE>
Friday the 13th indeed. Sounds like you had three problems: a short somewhere, a bad hard drive (maybe cable too) and a virus.
-
- Defender of the Night
- Posts: 13477
- Joined: Thu Nov 05, 1998 12:01 pm
- Location: Olathe, KS
- Contact:
You've definitely got a virus dude. If its screwing things up that bad, I'd just make myself a bootable floppy, flip the switch to make it write-protected, and low-level format every drive in that system and start over from scratch. Then install just XP and install your AV client and firewall of choice immediatley afterwards. BEFORE YOU CONNECT TO THE INTERNET, please block ports 135 - 139. That will prevent MSBLAST and its clones from sneaking in behind the scenes while you're downloading updates. Don't worry about updating Windows at this point. Just update the AV client and your firewall if there are any. Then scan your machine from top to bottom to make sure that any infection didn't get somehow survive. Once you've sure you're clean of any infection, nab the updates from MS and re-install your software.
This will probably be useful
- Flatlander
- DBB Fleet Admiral
- Posts: 2419
- Joined: Thu Apr 15, 1999 2:01 am
- Location: Pennsylvania
- Contact:
<BLOCKQUOTE><font size="1" face="Arial">quote:</font><HR><font face="Arial" size="3">Originally posted by fliptw:
This will probably be useful </font><HR></BLOCKQUOTE>
OMG (orgasms)
This will probably be useful </font><HR></BLOCKQUOTE>
OMG (orgasms)
-
- Defender of the Night
- Posts: 13477
- Joined: Thu Nov 05, 1998 12:01 pm
- Location: Olathe, KS
- Contact:
<BLOCKQUOTE><font size="1" face="Arial">quote:</font><HR><font face="Arial" size="3">Originally posted by fliptw:
This will probably be useful </font><HR></BLOCKQUOTE>
Hell, I just might find that useful as well. Thanks flip.
This will probably be useful </font><HR></BLOCKQUOTE>
Hell, I just might find that useful as well. Thanks flip.
O.K., here's where I am at. Games are still crashing:
UT Tournament (original) locks when I fall off a building. Otherwise it plays fine. (lock means I have to reboot to get out of the locked state)
Rise of Nations plays fine and then just quits and goes back to winxp's main screen.
Homeworld 2 plays fine and then comp. just reboots.
Yesterday I just touched the comp. and it turned on.
The Thermaltake volcano cpu cooler's fan speed adjust knob doesn't turn the revs up like it used to (like next to no speed)
This is the same comp. case that if you remember a few years back in my "Spy vs Spy" thread, I would come in and the comp. was booted up after being shut off the night before. I had since replaced the mother board.
I am wondering if I should:
Bring in a catholic priest to exorcise it.
Get a book on feng shue
Buy a new case
Oh and MD, had Sygate due a scan on the ports and they are all blocked except two that are closed.
UT Tournament (original) locks when I fall off a building. Otherwise it plays fine. (lock means I have to reboot to get out of the locked state)
Rise of Nations plays fine and then just quits and goes back to winxp's main screen.
Homeworld 2 plays fine and then comp. just reboots.
Yesterday I just touched the comp. and it turned on.
The Thermaltake volcano cpu cooler's fan speed adjust knob doesn't turn the revs up like it used to (like next to no speed)
This is the same comp. case that if you remember a few years back in my "Spy vs Spy" thread, I would come in and the comp. was booted up after being shut off the night before. I had since replaced the mother board.
I am wondering if I should:
Bring in a catholic priest to exorcise it.
Get a book on feng shue
Buy a new case
Oh and MD, had Sygate due a scan on the ports and they are all blocked except two that are closed.
- BUBBALOU
- DBB Benefactor
- Posts: 4198
- Joined: Tue Aug 24, 1999 2:01 am
- Location: Dallas Texas USA
- Contact:
Always load Lovsan and MBLaster hotfixes before anything else or connecting to the internet.
I have those 3 fixes burned to a mini disk and must have intstalled it on about 30-40 people computers that have reinstalled their O/S back to factory condition.
Either because of a virus or some other reason. most had the RPC error and the constant reboot.. blaster virus. but a few had the LuvYa Crap
find the following files at microsoft, save them and I would strongly suggest that you take these files (make a Virus folder) SP1(Unless you version of XP includes SP1) all you extra hardware driver Mouse/Video/Network... blah blah and Burn them to a CD Put that CD with your restore disk
WindowsXP-KB823980-x86-ENU.exe
WindowsXP-KB824146-x86-ENU.exe
DoomCln-KB836528-v3-ENU.exe
I have those 3 fixes burned to a mini disk and must have intstalled it on about 30-40 people computers that have reinstalled their O/S back to factory condition.
Either because of a virus or some other reason. most had the RPC error and the constant reboot.. blaster virus. but a few had the LuvYa Crap
find the following files at microsoft, save them and I would strongly suggest that you take these files (make a Virus folder) SP1(Unless you version of XP includes SP1) all you extra hardware driver Mouse/Video/Network... blah blah and Burn them to a CD Put that CD with your restore disk
WindowsXP-KB823980-x86-ENU.exe
WindowsXP-KB824146-x86-ENU.exe
DoomCln-KB836528-v3-ENU.exe
-
- Defender of the Night
- Posts: 13477
- Joined: Thu Nov 05, 1998 12:01 pm
- Location: Olathe, KS
- Contact:
<BLOCKQUOTE><font size="1" face="Arial">quote:</font><HR><font face="Arial" size="3">Originally posted by woodchip:
Yesterday I just touched the comp. and it turned on.</font><HR></BLOCKQUOTE>
Sounds like you've got a badly grounded motherboard. Check the mounting stubs to make sure they're connected correctly.
Yesterday I just touched the comp. and it turned on.</font><HR></BLOCKQUOTE>
Sounds like you've got a badly grounded motherboard. Check the mounting stubs to make sure they're connected correctly.