View previous topic :: View next topic |
Author |
Message |
ROOFCUTTER Server Admin
Joined: 12 Aug 2001 Location: =USV= Posts: 9271
|
Posted: Sun May 09, 2004 2:00 pm Post subject: Computer savvy help needed |
|
|
HELP!
I have some kind of Virus that wont go away on one of the computers.
I have Fdisked, flashed the bios did low level formats, etc.
It won't go away.
If you use a new harddrive it installs itself onto it wrecking it for further use. The computer still works but at a snails pace.
If you delete it...it sends itself to the recyle bin but another one pops up with the name upped to the next number.
as I am up to 4 hardrives and a computer now, this has gotten quite expensive!
It is called Dd1...then Dd2...etc...
It is about 92 kb's in size.
Anyone got any ideas... _________________ Only in America......do they have drive-up ATM machines with Braille lettering. |
|
Back to top |
|
|
Stevo Ville Supporter
Joined: 08 Dec 2002 Location: Orange County Guild: TVR Posts: 9514
|
|
Back to top |
|
|
ROOFCUTTER Server Admin
Joined: 12 Aug 2001 Location: =USV= Posts: 9271
|
Posted: Sun May 09, 2004 2:54 pm Post subject: |
|
|
Yes multiple brands. Back when it first popped up Trends said it was deleted. and now does not see it. nor the others. _________________ Only in America......do they have drive-up ATM machines with Braille lettering. |
|
Back to top |
|
|
Stevo Ville Supporter
Joined: 08 Dec 2002 Location: Orange County Guild: TVR Posts: 9514
|
|
Back to top |
|
|
sgt stutter Server Admin
Joined: 12 Apr 2002 Location: Southern CA Guild: <eVa> & V$ Posts: 2866
|
Posted: Sun May 09, 2004 3:07 pm Post subject: |
|
|
ROOF do you have any other info or names for this virus besides Dd1 or Dd2. I can not find anything on those names. I will check with our IT guy monday. If you have any more info please post. _________________
click--><eVa>SuperGreg
R.I.P Trigger Happy |
|
Back to top |
|
|
ROOFCUTTER Server Admin
Joined: 12 Aug 2001 Location: =USV= Posts: 9271
|
Posted: Sun May 09, 2004 3:13 pm Post subject: |
|
|
well in the beginning it was named different...but when it first appeared deleted we thought it was over. I dont have that info anymore Also we assume it is the same item?? could be something different.
So all I have is what is present on the system. YOu cant look into it either. It says, more convetional memory is needed?? whats up with that?
Trends is an online sight. Trends Micro. _________________ Only in America......do they have drive-up ATM machines with Braille lettering. |
|
Back to top |
|
|
Simpleman Server Admin
Joined: 30 Dec 2001 Location: Ceres,CA GUILD:<eVa> Posts: 3138
|
Posted: Sun May 09, 2004 3:19 pm Post subject: |
|
|
Might try Mcafee free scan
http://us.mcafee.com/ _________________ <eVa>Simpleman-V$=<RIP> |
|
Back to top |
|
|
Albino Gibbon Registered User
Joined: 21 Aug 2001 Location: North Las Vegas, Nevada Posts: 830
|
Posted: Sun May 09, 2004 3:38 pm Post subject: |
|
|
When you fdisk it, make sure you use the command FDISK /MBR to get rid of any boot sector viruses. Make sure none of your backups or other saved progs have the virus, so they don't get reinstalled. The D1 D2 thing sounds like a memory table or something. Also, stay disconnected from the net and see if it takes hold again. Your bios may be infected. _________________ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - |
|
Back to top |
|
|
My Personal Insanity Registered User
Joined: 03 Mar 2002 Location: Salt Lake City GUILD: US-V Posts: 2627
|
Posted: Sun May 09, 2004 6:27 pm Post subject: |
|
|
Albino Gibbon wrote: | When you fdisk it, make sure you use the command FDISK /MBR to get rid of any boot sector viruses. Make sure none of your backups or other saved progs have the virus, so they don't get reinstalled. The D1 D2 thing sounds like a memory table or something. Also, stay disconnected from the net and see if it takes hold again. Your bios may be infected. |
Also, if it's a boot sector or MBR virus, the media you're booting from
when you reinstall could be infected... _________________ [url=http://www.surfacezero.net/BottleFairy-Sensei-san(J).mp3][/url]
aaa, oshiete sensei-san... |
|
Back to top |
|
|
ROOFCUTTER Server Admin
Joined: 12 Aug 2001 Location: =USV= Posts: 9271
|
Posted: Sun May 09, 2004 6:59 pm Post subject: |
|
|
My Personal Insanity wrote: | Albino Gibbon wrote: | When you fdisk it, make sure you use the command FDISK /MBR to get rid of any boot sector viruses. Make sure none of your backups or other saved progs have the virus, so they don't get reinstalled. The D1 D2 thing sounds like a memory table or something. Also, stay disconnected from the net and see if it takes hold again. Your bios may be infected. |
Also, if it's a boot sector or MBR virus, the media you're booting from
when you reinstall could be infected... |
akkk I dont have new start up disks...
427 cylinders to go till we can try again. _________________ Only in America......do they have drive-up ATM machines with Braille lettering. |
|
Back to top |
|
|
Little Miss Hurt Registered User
Joined: 22 May 2003 Location: Arizona Posts: 89
|
Posted: Sun May 09, 2004 10:53 pm Post subject: Re: Computer savvy help needed |
|
|
ROOFCUTTER wrote: | HELP!
If you delete it...it sends itself to the recyle bin but another one pops up with the name upped to the next number.
as I am up to 4 hardrives and a computer now, this has gotten quite expensive!
It is called Dd1...then Dd2...etc...
It is about 92 kb's in size.
Anyone got any ideas... |
to give you more time to get it... Creat a file in Notepad that is blank name it with the next number and call it exactally what it would be including the extension! In the place it recreates the file
Then Delete the file. Reboot - it will see it there and not create another one. It cannot do anything because it is a blank file.
When you reboot hit the F8 key and go to the Command Prompt only. Look for the original files and delete them ( not the one you created).
When you check for files look at the creation date to see what has to be removed.
Some good programs to run in windows would be the virus scanner, Spy Bot, Ad Aware.
GOOD LUCK - I know what a hassle these can be.
Little _________________
|
|
Back to top |
|
|
FingerDemon Registered User
Joined: 24 Aug 2001 Location: Virginia Posts: 551
|
Posted: Mon May 10, 2004 5:07 am Post subject: |
|
|
Roof,
If you aren't getting anywhere, I would try posting info about this on dslreports security forum. Some of those guys really know they're stuff. I have seen special scripts posted there for getting rid of particular viruses and fixing other problems.
Good luck,
FingerDemon |
|
Back to top |
|
|
|