PDA

View Full Version : opinions on this message?


landissm
08-20-2004, 09:58 AM
As soon as I log on to my computer, a DOS window comes up like this:

FORMAT volume [/FS:file-system] [/V:label] [/Q] [/A:size] [/C] [/X]

G:/>

I change to:

G:>WINNT>

then type:

G:>WINNT>explorer.exe

and that gets me into my system.

is the message trying to tell me to allocate more space on my hard drive? I checked disk management, and it's not full. any ideas?

Thanks!
Sharon

nlawalker
08-20-2004, 04:48 PM
Is it a DOS window that comes up, or are you in full screen DOS?

It sounds like a boot file that has had a strange command or two added to it, or a startup file doing funky things.

Mesaeus
08-20-2004, 06:40 PM
Talk about strange commands, somehow it seems to be trying to start format.com, which can be used to format your hard disk (and lose all your data). This is really, really suspicious behavior. But what OS are you running ? It seems Windows 2000 according to your "WINNT" directory. Under XP, I can only get this output from format.com if I type "format /?" which prints all the options. It's really strange.

Edit : I think some sort of virus/trojan is on your machine, and trying to wipe your hard disk. Luckily it's failing, but I'd recommend getting another virus scanner. You DO already have an updated virus scanner, right ? You can use this link (http://housecall.trendmicro.com/) for a real easy to use online virus scanner, without having to install anything.

nlawalker
08-20-2004, 07:35 PM
I agree. Like I said, there's probably a boot file or something that has had that command added to it, and Mesaeus is absolutely right... the only reason that a format-type command would EVER be added to a boot config is for a malicious reason. I'd check it out soon.

landissm
08-20-2004, 10:01 PM
I only have one thing in my Start Up menu and it is for my internet connection. I use NetZero and it is a batch file that creates a "virtual" c: drive since my hard drive is set to G: . I use the free AVG antivirus. I hope it's not a virus!!

what do you think now?
Thanks for any help!
Sharon

landissm
08-20-2004, 10:02 PM
I am running 2000 Pro.