Forum Home
Press F1
 
Thread ID: 104811 2009-11-09 04:50:00 Hard Drives not displaying content when try to open them gza (13233) Press F1
Post ID Timestamp Content User
828744 2009-12-10 11:00:00 That trojan may have installed, after you or someone downloaded / then ran something with utorrent. You dont have to have any games, for it to be on your system. But that trojan has something to do with stealing passwords, for certain games that you can play online. Sweet, at least we got the hdd to open ! Speedy Gonzales (78)
828745 2009-12-10 11:20:00 Cheers Speedy. Yeah, nice to get the HDD opening properly and a bug free environment on the computer again.
That info about the virus being used to steal passwords for online gaming is interesting. As I said I don't play games online, but this could be where it came from.........when I gave away the 30GB HDD i had in my computer as a Primary Slave drive, and I remembered that this box of tricks I have, for some unknown reason, will not open the Primary Master drive unless there is something connected to the Primary IDE Slave connecter, I asked the chap that I gave 30GB drive to if I could have the 4GB Maxtor 90432D2 that he had. This all happened about the time that the crappe-game started.
When I posted a reply here a while back now, I did mention in it that the net-cafe I was using had NOD 32 AV and that it had found a virus on my USB stick and that it was something to do with an on-line gaming 'thing', and that I didn't have time to catch what its name was. Well it was/is this one we talk about here,
I mentioned it to the chap I had got the 4GB hdd from and he said he'd never played games online either. Perhaps it came with his com when he bought it. It wasn't installed in it though.
Anyway, thats all guesswork. Nevermind, probs gone now and here's to them staying that way.:lol:
gza (13233)
828746 2009-12-10 11:34:00 You dont have to have any games, or install any games to get that trojan. BUT if you get that trojan, and you DO have any games (that it steals passwords from), you would probably find out somehow, that the password doesnt work (it'll probably steal the CD key, while its at it (some trojans do)

Or whatever server you go thru (so you can play the game online), would probably ban you from the server. One thing with USB flash drives, ALWAYS scan it in a desktop, if you use it in a net cafe (programs like Avast, or most should pick it up as soon as you plug it into a USB port).

The bloody flatmates nephew (who used to live here), used to use a USB flash drive, and go to net cafes, to get MP3's. EVERY single time, I plugged it into this, Avast picked up worms / whatever on it. This was 3 times in a row. Thats probably how you picked this trojan up (at a net cafe, plugged it in, nothing picked it up, and the system got infected)
Speedy Gonzales (78)
828747 2009-12-10 11:56:00 Yeah, something like that. I had a few games installed but they were/are bona-fide legal games. Mate in Nth Shore Auckland over the Haven way sent me some of his games to play, Diablo 2 LOD, Abes Exoduss, Odyssey,Stronghold Legends and Deluxe, a couple Delta Force, and I never applied that GameSpy or whatever it is to play online.And a few that I hired for a week to play: Sacred, Doom 3 ( TOO blimmin dark for me to see my way round!!) and a couple others...
Anyway, I see what you mean about the thing getting on my com. I did download WXP drivers for an HP Scanjet 3400C from the cafe and a couple other drivers for anCanon Pixma 1000 and thats about it, but, as you say they ( greeblies) can, will and do get through.
The out of date AV and other security measures I had on my com couldn't really uncover new strains of nasty. In fact, I don't think I had run an independent scan of anything for months.
Oh well, I'll be back and hopefully the news is still good. Or not so involved as this one became.
Hell, I forgot what the thread was about.......HDD's not opening wasn't it???
ciao for now
gza
gza (13233)
828748 2009-12-10 16:22:00 Seems that you were on the ball with the whole problem from the start of my thread, re:the autorun.inf problem. I googled - autorun.inf.vir Win32/PSW.OnLineGames.NNU trojan - and discovered a lot about the nasty bit of work. Seems that its hard to get rid of. I went to these two sites on the net although just the first of them would have been enough:-

www.securitystronghold.com

www.cybertechhelp.com

The autorun.inf that was hidden until exposed was at the root of the matter, and its full name ( Win32/PSW.OnLineGames.NNU trojan ) didn't show until I had the updated security measures back on the computer. Well, it did when I was in the net-cafe trying to send the screenshots and pre-typed information of the problem/s that I had on my USB flash drive. That name of the infection is the one that I saw come up on the monitor in the netcafe when I connected the USB stick to the computer there.
Hopefully it is gone now.
What I have to do next is scan and clean out the 1TB External Drive. I think I am now equipped to get the problem sorted out.
:thumb:
gza (13233)
828749 2009-12-10 21:48:00 If you download whatever from legit sources, it shouldnt be a prob. The PC / terminal at the net cafe is probably infected (it can happen, some net cafes can be slack with security / lack of AV programs). So, anyone who uses that PC will get infected as well. With the same trojan. if they've plugged a USB flash drive into it. Oh well, at least you got it sussed Speedy Gonzales (78)
828750 2009-12-10 23:32:00 Cheers Speedy. I won't be using the netcafe again now I'm online again.
I also had downloaded the Easus Partition Master 4 Home Edition and both of the GParted v3 and v4 live cd .iso's from the cafe and if memory serves me right it was not to long after I used GParted 4 to partition the Seagate External Drive that the probs started: those hidden autorun.inf files that were causing the computer to do those scrolling and "what program do you want to use to open this drive" actions. And the nds0q.exe arrival on the scene. Wherever it came from I hope I seen the last of it.
Having been a good Girl Guide I remember the motto, " Be Prepared".
Have a nice day, I'll probably hit the sack having been up all night.
ciao
gza

ps: I'm looking about for a new/replacement hard drive from 120GB up to say 320. Considering Trademe lookabout, but.....say no more apart from I'm thinking of building a com with a Gigabyte Mobo that was a step down from the one that PC World Magazine used to build a computer in the mag about a year to 15month ago.Don't have the component parts to hand at mo but the Mobo i planned to use would accept the new AMD Phenom. I was planning on either the AMD 2.6GHz Dual core or a 2.8GHZ. 2GB DDR3 RAM min to start and of course go SATA in the HDD dept........but.....its christmas and I want a new computer so there's no excuses.
gza (13233)
1 2 3