What the Tech logo
Welcome! Register for a free account (or login) > How does it work?
  1. Quickly register. It will only take 60 seconds.
  2. Start a new topic. Ask your question. Wait for an email reply.
  3. Is your system infected? Begin reading the malware removal guide.
register button
Reply to this topicStart new topic
> Disabled USBs and CD player(both are OK), Windows says no format., Posible Combofix disabled both.
Zet
post Aug 26 2009, 11:15 AM
Post #1


Authentic Member
**

Group: Authentic Member
Posts: 26
Joined: 20-August 09
Member No.: 87,421
Operating System: XP



Well, I had the following problem, and I've got help by this teacher user (topic on the virus I had: http://www.geekstogo.com/forum/Win32-Rootk...mp;pid=1622193), so, it seems that meanwhile i was fixing it, I used this tool they told me, Combofix, that it seems has disabled some option of Windows XP Ive got, so now, when I plug in a USB pendrive, or put a CD on the CD player drive, it asks me to format it.
Ive checked both on other computer and both are working, so its not a hardware problem, and the USB when plug in, recognizes the device with its name and brand, etc, but dosent let me open it, saying it dosent have a format.

Does anyone can help me enableing this posible option that it seems Combofix has disabled?
Or theres a way to check if its a virus or another kind of problem?

Thanks in advance,
Steve
Go to the top of the page
 
+Quote Post
3 Pages V   1 2 3 >  
Start new topic
Replies (1 - 14)
Ben T
post Aug 26 2009, 12:09 PM
Post #2


Authentic Member
**

Group: Authentic Member
Posts: 77
Joined: 18-January 08
From: USA
Member No.: 76,081
Operating System: Windows Vista and XP.



Well I think that you need to contact your helper over there and tell him/her that after using combofix that your now have a problem with your computer after all they know what they wold you to do so they know the situation better than us.
Go to the top of the page
 
+Quote Post
Zet
post Aug 26 2009, 12:16 PM
Post #3


Authentic Member
**

Group: Authentic Member
Posts: 26
Joined: 20-August 09
Member No.: 87,421
Operating System: XP



Did so, he abandon me, and said post on other place.
Really shameful.

Still, the log of everything Ive done is there. Perhaps someone here may know Combofix too.
Go to the top of the page
 
+Quote Post
LDTate
post Aug 26 2009, 03:05 PM
Post #4


Forum God
Group Icon

Group: Root Admin
Posts: 48,377
Joined: 23-September 04
From: Missouri, USA
Member No.: 15,276
MVP


Combofix only removes the Autorun Feature.
It is possible your pendrive / cd is infected.
Does it do this with Original CD's?

QUOTE
Ive checked both on other computer and both are working, so its not a hardware problem, and the USB when plug in, recognizes the device with its name and brand, etc, but dosent let me open it, saying it dosent have a format.
That doesn't mean the device drivers aren't missing.

You can try this:

Autoplay Repair Wizard
http://www.microsoft.com/downloads/details...;DisplayLang=en





Go to the top of the page
 
+Quote Post
Zet
post Aug 26 2009, 03:13 PM
Post #5


Authentic Member
**

Group: Authentic Member
Posts: 26
Joined: 20-August 09
Member No.: 87,421
Operating System: XP



QUOTE (LDTate @ Aug 26 2009, 05:05 PM) *
Combofix only removes the Autorun Feature.
It is possible your pendrive / cd is infected.
Does it do this with Original CD's?

QUOTE
Ive checked both on other computer and both are working, so its not a hardware problem, and the USB when plug in, recognizes the device with its name and brand, etc, but dosent let me open it, saying it dosent have a format.
That doesn't mean the device drivers aren't missing.

You can try this:

Autoplay Repair Wizard
http://www.microsoft.com/downloads/details...;DisplayLang=en



Ive tryied them on other computers and they seem to be ok. And yes with any cds.
Drivers were isntalled on the past and were working ok.
I have this program named: USB Disk Security that disables the autorun of usb/cd drives to avoid getting infected on virus that edit autorun.
Ill try the windows site you recomended and come back with news. Thanks a lot for the help!
Go to the top of the page
 
+Quote Post
LDTate
post Aug 26 2009, 03:20 PM
Post #6


Forum God
Group Icon

Group: Root Admin
Posts: 48,377
Joined: 23-September 04
From: Missouri, USA
Member No.: 15,276
MVP


Have you checked drivers in Hardware Devices?

Right Click My Computer > Hardware > Device Manager.

Are there any listed with a Red or Yellow tag?
Go to the top of the page
 
+Quote Post
Zet
post Aug 26 2009, 03:53 PM
Post #7


Authentic Member
**

Group: Authentic Member
Posts: 26
Joined: 20-August 09
Member No.: 87,421
Operating System: XP



QUOTE (LDTate @ Aug 26 2009, 05:20 PM) *
Have you checked drivers in Hardware Devices?

Right Click My Computer > Hardware > Device Manager.

Are there any listed with a Red or Yellow tag?


I used the tool from windows, it said it was mainly ok, when i made a test on the autoplay it tryied to fix anything but it said must be hardware malfunctioning.
And the following logs came off.

===

AutoFix [V5.2.3790.67]
Time [2009-08-26 17:53:01]
Microsoft Windows Version [5.1 (Service Pack 3) <2600>]

Test [The Shell Hardware Detection service is running.] - Instance [N/A]:
Result [AutoStart Setting]: OK
Result [The Shell Hardware Detection service is running.]: OK

Test [Policies] - Instance [, Drive Type: 0]:
Result [HKCU\...\Policies!NoDrives]: OK {Absent}
Result [HKCU\...\Policies!NoDriveAutorun]: Problems {Present}
Result [HKCU\...\Policies!NoDriveTypeAutorun]: Problems {Present}
>> Repair << [HKCU\...\Policies!NoDriveAutorun]
Step: Resetting policy HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDriveAutorun to 0x03FFFD3E.
Result: This AutoPlay setting was successfully fixed.
>> Repair << [HKCU\...\Policies!NoDriveTypeAutorun]
Step: Resetting policy HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDriveTypeAutorun to 0x00000090.
Result: This AutoPlay setting was successfully fixed.

>> Required action: The user must log off and log on again

===


AutoFix [V5.2.3790.67]
Time [2009-08-26 17:51:14]
Microsoft Windows Version [5.1 (Service Pack 3) <2600>]

Test [The Shell Hardware Detection service is running.] - Instance [N/A]:
Result [AutoStart Setting]: OK
Result [The Shell Hardware Detection service is running.]: OK

Test [Policies] - Instance [H:\, Drive Type: 2]:
Result [HKCU\...\Policies!NoDrives]: OK {Absent}
Result [HKCU\...\Policies!NoDriveAutorun]: OK {Present}
Result [HKCU\...\Policies!NoDriveTypeAutorun]: OK {Present}
Result [HKLM\...\Policies!NoDrives]: OK {Present}
Result [HKLM\...\Policies!NoDriveAutorun]: OK {Present}
Result [HKLM\...\Policies!NoDriveTypeAutorun]: OK {Present}
Result [Driver level policies]: OK {
HKLM\...\Services\!Autorun (Absent) <Allows>
HKLM\...\Services\\Parameters!Autorun (Absent) <Allows>
HKLM\System\CCS\Enum\...!AlwaysEnable (Absent) <Not set>
HKLM\System\CCS\Enum\...!AlwaysDisable (Absent) <Not set> }

Test [Drive Notification] - Instance [H:\, Drive Type: 2]:
Result [Legacy Notification]: OK
Result [AutoPlay V2 Notification]: Problems {
Service (Silent)
Shell (Deaf) }
>> Repair << [Autoplay V2 Event]
Step: No steps to take.
Result: This AutoPlay setting cannot be fixed. Either the device is malfunctioning, or the wizard cannot determine the problem.

>> Required action: The wizard found problems but cannot fix them -> None

=====



AutoFix [V5.2.3790.67]
Time [2009-08-26 17:49:32]
Microsoft Windows Version [5.1 (Service Pack 3) <2600>]

Test [The Shell Hardware Detection service is running.] - Instance [N/A]:
Result [AutoStart Setting]: OK
Result [The Shell Hardware Detection service is running.]: OK

Test [Policies] - Instance [H:\, Drive Type: 2]:
Result [HKCU\...\Policies!NoDrives]: OK {Absent}
Result [HKCU\...\Policies!NoDriveAutorun]: OK {Present}
Result [HKCU\...\Policies!NoDriveTypeAutorun]: OK {Present}
Result [HKLM\...\Policies!NoDrives]: OK {Present}
Result [HKLM\...\Policies!NoDriveAutorun]: OK {Present}
Result [HKLM\...\Policies!NoDriveTypeAutorun]: OK {Present}
Result [Driver level policies]: OK {
HKLM\...\Services\!Autorun (Absent) <Allows>
HKLM\...\Services\\Parameters!Autorun (Absent) <Allows>
HKLM\System\CCS\Enum\...!AlwaysEnable (Absent) <Not set>
HKLM\System\CCS\Enum\...!AlwaysDisable (Absent) <Not set> }

Test [Drive Notification] - Instance [H:\, Drive Type: 2]:
Result [Legacy Notification]: OK
Result [AutoPlay V2 Notification]: Problems {
Service (Silent)
Shell (Deaf) }
>> Repair << [Autoplay V2 Event]
Step: No steps to take.
Result: This AutoPlay setting cannot be fixed. Either the device is malfunctioning, or the wizard cannot determine the problem.

>> Required action: The wizard found problems but cannot fix them -> None
Go to the top of the page
 
+Quote Post
LDTate
post Aug 26 2009, 04:04 PM
Post #8


Forum God
Group Icon

Group: Root Admin
Posts: 48,377
Joined: 23-September 04
From: Missouri, USA
Member No.: 15,276
MVP


Did you do this?
Have you checked drivers in Hardware Devices?

Right Click My Computer > Hardware > Device Manager.

Are there any listed with a Red or Yellow tag?
Go to the top of the page
 
+Quote Post
Zet
post Aug 26 2009, 04:07 PM
Post #9


Authentic Member
**

Group: Authentic Member
Posts: 26
Joined: 20-August 09
Member No.: 87,421
Operating System: XP



QUOTE (LDTate @ Aug 26 2009, 05:20 PM) *
Have you checked drivers in Hardware Devices?

Right Click My Computer > Hardware > Device Manager.

Are there any listed with a Red or Yellow tag?

Just checked, and none.
All seems to be OK.
When i plug de usb memorys and the cd, i can actually right click the usb memory and check for their propiertys and the brand and model is displayed correctly, its just says it dosent have a format, again, Ive tested both on other computer and are working fine.

To know if its about a virus I may have, I did the things on the other forums/topic i posted on the first post, and the results were clean. Last night I scanned the computer again with a few tools and still clean.

Thanks for your effords of helping me, I really apreciate it!

Steve
Go to the top of the page
 
+Quote Post
LDTate
post Aug 26 2009, 04:10 PM
Post #10


Forum God
Group Icon

Group: Root Admin
Posts: 48,377
Joined: 23-September 04
From: Missouri, USA
Member No.: 15,276
MVP


I'm out of ideas but I'm not one of the Tech Team either.

Lets see if anyone from the Tech Team has any ideas.
Go to the top of the page
 
+Quote Post
Zet
post Aug 26 2009, 04:16 PM
Post #11


Authentic Member
**

Group: Authentic Member
Posts: 26
Joined: 20-August 09
Member No.: 87,421
Operating System: XP



QUOTE (LDTate @ Aug 26 2009, 06:10 PM) *
I'm out of ideas but I'm not one of the Tech Team either.

Lets see if anyone from the Tech Team has any ideas.


Thanks for your time trying LDTate smile.gif
Go to the top of the page
 
+Quote Post
Tomk
post Aug 27 2009, 04:31 PM
Post #12


Forum God / Classroom Admin Assistant
Group Icon

Group: Classroom Teacher
Posts: 12,327
Joined: 27-December 07
From: Sisters, OR
Member No.: 75,503
Operating System: xp



Zet,

I'd like to see some info.
Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2

  • Double-click SystemLook.exe to run it.
  • Copy the content of the following codebox into the main textfield:
    CODE
    :reg
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CD Burning\Drives /s

  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
Note: The log can also be found on your Desktop entitled SystemLook.txt
Go to the top of the page
 
+Quote Post
Zet
post Aug 27 2009, 05:41 PM
Post #13


Authentic Member
**

Group: Authentic Member
Posts: 26
Joined: 20-August 09
Member No.: 87,421
Operating System: XP



QUOTE (Tomk @ Aug 27 2009, 06:31 PM) *
Zet,

I'd like to see some info.
Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2

  • Double-click SystemLook.exe to run it.
  • Copy the content of the following codebox into the main textfield:
    CODE
    :reg
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CD Burning\Drives /s

  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
Note: The log can also be found on your Desktop entitled SystemLook.txt

Tomk,
I downloaded from both links, when i open the program, a blank window opens and just says "File", if i click it, it gives me just to options, load script, and exit; I click load script, and it dosent do anything else.
It dosent let me paste the code into the main textfield, and I cannot find any "Look" button.
Go to the top of the page
 
+Quote Post
Tomk
post Aug 27 2009, 05:52 PM
Post #14


Forum God / Classroom Admin Assistant
Group Icon

Group: Classroom Teacher
Posts: 12,327
Joined: 27-December 07
From: Sisters, OR
Member No.: 75,503
Operating System: xp



Zet,

It's not you. It's something with the tool. I'll get ahold of the developer and find out what happened. Meanwhile, maybe a member of the Tech Team will come by and have an idea.
Go to the top of the page
 
+Quote Post
Zet
post Aug 27 2009, 05:58 PM
Post #15


Authentic Member
**

Group: Authentic Member
Posts: 26
Joined: 20-August 09
Member No.: 87,421
Operating System: XP



ok, thanks for your time ^^
Go to the top of the page
 
+Quote Post

3 Pages V   1 2 3 >
Reply to this topicStart new topic

 


RSS Time is now: 20th March 2010 - 12:16 PM
Advertisements do not imply our endorsement of that product or service. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk.
Member site: Alliance of Security Analysis Professionals | UNITE Against Malware
Memory Forums | Auto Repair Forum
© Geeks to Go, Inc. | All Rights Reserved | Privacy Policy