Page 1 of 1

Friday the 13th computor from hell (part 2)

Posted: Sat Feb 14, 2004 7:54 pm
by woodchip
This is a tale of glitches, shorts and possible virii that ate my hard drive. It all started a couple of days ago when I tried playing D3 and got booted out to windows. Since I had Omega drivers for the ATI 9700, I followed omega's advice and turned off VPU recovery. Worked for a bit but then the same problem re-occured so I then turned off DDC in display. Still no good. So then I loaded up Rise of Nations...played for awhile and blingy...whole computor re-boots. Since this is on my new HD with winxp I say "screw Mobi and his exalted O.S." and boot up the 2nd HD with win 98 and load D# on that and about the time I get to loading the software for my Nostromos game pad, the whole computor shuts off. WTF!!!

Now this happened when I installed my 2nd 160g WD hd a few weeks back and I thought my ps was going bad so I went out and bought a new Antec variable 400 ps and the shut down problem went away...untill yesterday (fri. the 13th). I wait to let the shutdown circuit time to recylce and then hit the start button and the black fong fires right up. Uh oh! Boot up screen shows no hard drives! So I poke around in bios, when I happened to remember some fine fellow here in the tech forum say something about ribbon connectors. I go to the spare parts drawer (you know...the one where you toss all those leftover comp. parts that may someday come in handy) and get a unused new ribbon and hook it up, reboot and the two hd's are there! Problem now is once I get past the primary boot I get a "Can't find NTLDR, ctrl/alt/del to restart comp.

Now here's where a cold draft blows thru my room, lights flicker and things go bump in the dark. I have the side panel leaning against the case and pull it away when the comp. dies again. This happened a few times before but I thought it was something with the old ps. I turn the comp. on, go back to the same reboot message and this time I just touch the side panel to the case and off goes the comp. So now I'm thinking there's a short somewhere. So I dis-connect everything, right down to taking out the mb. Can't see anything obvious so I brush all the dust off everything and put it back togeather. So far no shut downs due to shorts.

I now disconnect the winxp drive and see if I can boot into the win98 hd. No go. Nothing wants to work so I finally decide to format it. Useing a boot up disk I go to format the C partition. I get a "invalid media type" message. Hmmm? so I try to format the D partition. Same message. Now I go to the 3rd and last partition but I first do a dir/ command (I did the same the C & D but got the abort/retry message)and here's where the possible virii is indicated. In the first line of code was a valantines heart symbol next to the word "YA" as thought to say "Love Ya". In the next line was a little rectangular box with what appeared to be "eyes" in it and coming out the side of it was what looked like a upraised arm. Maybe you coders know what these symbols mean.
So I "format E:" and the process begins. What happens though isafter about a 6% completion it goes into "Attempting to repair cluster 75,000". Long and short I let it run all night and finally kill it when it reaches cluster 165,000. So I dunno, can a malicious proggy/virus kill a HD?

So here I am today running just on the new HD and have yet to see how my games will play now that I replaced the ribbon connect and cleaned out the cobwebs inside. Wish me luck and mail me a rabbits foot. Image

Posted: Sat Feb 14, 2004 10:07 pm
by DCrazy
<font face="Arial" size="3"> Wish me lick </font>
Whatever man Image

-----

Well, that series of characters seems to be much more than a coincidence. Was E: a FAT32 drive? If so, then I would say it was a virus. NTLDR must be at the beginning of the hard drive for Windows XP to load, and a virus that only understands FAT drives and tries to write that "Love ya" message could simply write over the MFT.

Posted: Sat Feb 14, 2004 10:16 pm
by woodchip
There, corrected the spelling Image
Yah, the corrupted drive was fat 32. Didn't know a proggy could kill the whole drive or can it be salvalged with a bigger, better proggy?

Posted: Sat Feb 14, 2004 10:51 pm
by DCrazy
Well treating an NTFS drive as if it were FAT32 will almost definitely destroy the disk. However, NTFS disks store at least one backup copy of the MFT (master file table). Assuming the virus was a simple "write these bytes to this location" program, you might be able to restore the disk from a backup copy of the MFT using a recovery program. Which one, I do not know.

Posted: Sun Feb 15, 2004 7:19 am
by Flatlander
<BLOCKQUOTE><font size="1" face="Arial">quote:</font><HR><font face="Arial" size="3">Originally posted by woodchip:
So I "format E:" and the process begins. What happens though isafter about a 6% completion it goes into "Attempting to repair cluster 75,000".</font><HR></BLOCKQUOTE>

Friday the 13th indeed. Sounds like you had three problems: a short somewhere, a bad hard drive (maybe cable too) and a virus.

Posted: Sun Feb 15, 2004 5:19 pm
by MD-2389
You've definitely got a virus dude. If its screwing things up that bad, I'd just make myself a bootable floppy, flip the switch to make it write-protected, and low-level format every drive in that system and start over from scratch. Then install just XP and install your AV client and firewall of choice immediatley afterwards. BEFORE YOU CONNECT TO THE INTERNET, please block ports 135 - 139. That will prevent MSBLAST and its clones from sneaking in behind the scenes while you're downloading updates. Don't worry about updating Windows at this point. Just update the AV client and your firewall if there are any. Then scan your machine from top to bottom to make sure that any infection didn't get somehow survive. Once you've sure you're clean of any infection, nab the updates from MS and re-install your software.

Posted: Sun Feb 15, 2004 5:33 pm
by Capm
MD has it pegged. Image

Posted: Sun Feb 15, 2004 6:08 pm
by fliptw
This will probably be useful

Posted: Sun Feb 15, 2004 7:40 pm
by Flatlander
<BLOCKQUOTE><font size="1" face="Arial">quote:</font><HR><font face="Arial" size="3">Originally posted by fliptw:
This will probably be useful </font><HR></BLOCKQUOTE>

OMG (orgasms)

Posted: Sun Feb 15, 2004 9:27 pm
by MD-2389
<BLOCKQUOTE><font size="1" face="Arial">quote:</font><HR><font face="Arial" size="3">Originally posted by fliptw:
This will probably be useful </font><HR></BLOCKQUOTE>

Hell, I just might find that useful as well. Thanks flip. Image

Posted: Mon Feb 16, 2004 6:41 am
by woodchip
O.K., here's where I am at. Games are still crashing:
UT Tournament (original) locks when I fall off a building. Otherwise it plays fine. (lock means I have to reboot to get out of the locked state)
Rise of Nations plays fine and then just quits and goes back to winxp's main screen.
Homeworld 2 plays fine and then comp. just reboots.

Yesterday I just touched the comp. and it turned on.

The Thermaltake volcano cpu cooler's fan speed adjust knob doesn't turn the revs up like it used to (like next to no speed)

This is the same comp. case that if you remember a few years back in my "Spy vs Spy" thread, I would come in and the comp. was booted up after being shut off the night before. I had since replaced the mother board.

I am wondering if I should:
Bring in a catholic priest to exorcise it.
Get a book on feng shue
Buy a new case

Oh and MD, had Sygate due a scan on the ports and they are all blocked except two that are closed.

Posted: Mon Feb 16, 2004 7:24 am
by BUBBALOU
Always load Lovsan and MBLaster hotfixes before anything else or connecting to the internet.

I have those 3 fixes burned to a mini disk and must have intstalled it on about 30-40 people computers that have reinstalled their O/S back to factory condition.

Either because of a virus or some other reason. most had the RPC error and the constant reboot.. blaster virus. but a few had the LuvYa Crap

find the following files at microsoft, save them and I would strongly suggest that you take these files (make a Virus folder) SP1(Unless you version of XP includes SP1) all you extra hardware driver Mouse/Video/Network... blah blah and Burn them to a CD Put that CD with your restore disk


WindowsXP-KB823980-x86-ENU.exe
WindowsXP-KB824146-x86-ENU.exe
DoomCln-KB836528-v3-ENU.exe

Posted: Mon Feb 16, 2004 11:07 am
by MD-2389
<BLOCKQUOTE><font size="1" face="Arial">quote:</font><HR><font face="Arial" size="3">Originally posted by woodchip:
Yesterday I just touched the comp. and it turned on.</font><HR></BLOCKQUOTE>

Sounds like you've got a badly grounded motherboard. Check the mounting stubs to make sure they're connected correctly.

Posted: Tue Feb 17, 2004 7:00 am
by woodchip
Went out and bought a new case. Installed all the parts and was able to play Rise of Nations one whole level without it crashing. So we'll see later if the other games crash or not.