PDA

View Full Version : Strange disk drive in device manager




admin
16 Apr 2009, 02:41 PM
A strange thing has been happening lately. I occasionally get a "new device found" pop-up (this is in Windows XP) telling me a new disk drive has been found. It is then shown in Device Manager with a strange name (see attached screenshot).

Anybody know what could be causing this?

atifsh
16 Apr 2009, 09:07 PM
u should be happy usually we need to buy new harddrives :D

if ur system still can show hidden files, check for autorun files in root...

Chewy
16 Apr 2009, 09:12 PM
Please download Flash_Disinfector.exe (http://download.bleepingcomputer.com/sUBs/Flash_Disinfector.exe) by sUBs and save it to your desktop. Double-click Flash_Disinfector.exe to run it and follow any prompts that may appear.
The utility may ask you to insert your flash drive and/or other removable drives. Please do so and allow the utility to clean up those drives as well.
Hold down the Shift key when inserting the drive until Windows detects it to keep autorun.inf from executing if it is present.
Wait until it has finished scanning and then exit the program.
Reboot your computer when done.Note: As part of its routine, Flash_Disinfector will create a hidden folder named autorun.inf in each partition and every USB drive that was plugged in when you ran it. Do not delete this folder...it will help protect your drives from future infection by keeping the autorun file from being installed on the root drive and running other malicious files.

admin
16 Apr 2009, 11:37 PM
I didn't have any flash drives attached when this new drive was detected, although my brother's flash drive was recently used on this machine and I suspect it may have been infected.

dr_ml422
3 May 2009, 11:55 AM
I think some detections of autorun.inf are false positives though. Mambam kept bringing up WD Data Life Guard Diagnostics as a hit. I seriously doubted it was a virus or malware. Maybe though.

doctorhardware
3 May 2009, 03:44 PM
Norton's indicates that the flash disinfector is a trojan infection.

atifsh
3 May 2009, 08:10 PM
salute to norton.

Chewy
4 May 2009, 02:22 AM
Google "sUBS combofix"

He's the foremost antimalware coder, hands down

Better yet download combofix and open it with winrar and explore a little

doctorhardware
4 May 2009, 01:35 PM
Well I know that it is a false positive. I am not worried in the least little bit.

dr_ml422
4 May 2009, 02:13 PM
Main thing is that admin had malware because that there icon was no way anything close to legit. so some come up false and are and some are positive and are. Getting rid of it main thing.

admin
4 May 2009, 02:29 PM
That "new device" hasn't shown up since the last time. And it doesn't show up with any pattern, seems random.

dr_ml422
4 May 2009, 04:53 PM
Oh so you been watching for a while huh. Well I bet that's not the computer you keep all the important stuff. That Icon was one weird looking one. XP also. That's odd. I would have thought maybe Vista, but malware doesn't discriminate.

@ Chewy Did they finally take care of that Virut Virus that was wreaking havoc all over? NYPD has been getting hits on their servers and computers in the thousands. They've been trying to break their firewall. Guess who they use?

admin
4 May 2009, 10:12 PM
I did run a Malwarebytes full scan afterwards and nothing came up. Incidentally, around that time, there was a prompt that my wireless mouse's signal was low (low battery). I wonder if these two prompts could be related, since I replaced the batteries and neither prompts have come up since.

dr_ml422
4 May 2009, 11:58 PM
That's funny we just finish posting about how each likes wired or wireless mouse/keyboards etc... Could be a sign? Lol...