|
|||||||
![]() |
|
|
LinkBack | Thread Tools | Search this Thread | Rate Thread | Display Modes |
|
|
#1 |
|
Member (6 bit)
Join Date: May 2004
Posts: 39
|
My Files r HUGE!!!!!
I work up this morning and every file on my pc multiplied by 3 so like i had a movie clip at 3mb its now at 9mb and my hard drive is just a bout fulll and its driving me insane i tried gatewaygoback but that thing so stupid i cant revert the drive back far enough. HELP PLEASE THANKS
|
|
|
|
|
|
#2 |
|
Forum Administrator
Staff
Premium Member
Join Date: May 2000
Location: Joplin MO
Posts: 37,786
|
Scan for viruses.
|
|
|
|
|
|
#3 |
|
Got Privilege?
Join Date: Jun 2001
Location: IA go Hawks
Posts: 1,257
|
Are you using Linux?
__________________
P4 2.8E | 1.5GB ddr400 VR dual channel | Sony CD-R/RW | Windows XP | ATI X1950pro | Viewsonic P95F | Intel D865PERLX | WD 36g Raptor | MCHSI 3mb Cable "Computers are useless. They can only give you answers." Pablo Picasso (1881 - 1973) "Absence of proof is not proof of absence." William Cowper (1731 - 1800) Wisdom Speaks: Have in your mind that which would constitute a miracle for you. Get the vision. Suspend disbelief and skepticism. Allow yourself to take the journey toward real magic. |
|
|
|
|
|
#4 |
|
Member (6 bit)
Join Date: May 2004
Posts: 39
|
im using windows 98 on this one and i did scan for viruses
|
|
|
|
|
|
#5 |
|
Got Privilege?
Join Date: Jun 2001
Location: IA go Hawks
Posts: 1,257
|
Honestly if this was happening to me, as you describe, I would format the drive.
I have no sound advice for you other than that. Thoughts... Did you recently uncompress the drive? I do not recommend compressing drives so its current state would be preferred. The Gatewaygoback won't go before this morning? That is stupid. I would delete it. Have you done any archiving lately that could have gone bad? This would be a strange result however conceivable. |
|
|
|
|
|
#6 |
|
Member (6 bit)
Join Date: May 2004
Posts: 39
|
format?
uncompress? archiving? haha i hav no clue im a new guy i just know a lil on the hardware side |
|
|
|
|
|
#7 |
|
Member (6 bit)
Join Date: May 2004
Posts: 39
|
up
|
|
|
|
|
|
#8 |
|
Certified Audio Nut
|
Format = Back up important files, erase the drive, and start over with a fresh install of Windows.
Uncompressed = If the drive was compressed, which is not recommended in the first place, and it is somehow uncompressed everything will be much larger. Archiving = Backing up important files.
__________________
"I'm not lying. I'm writing fiction with my mouth." - Homer Simpson My Miscelaneous Gallery ASUS P7P55D PRO / Intel Core i7 860 / 8GB Mushkin DDR3 1600 RAM / OCZ Vertex 2 120GB SSD / Seagate 1TB 7200.12 / Asus Radeon 5870 1GB / LG Super-Multi 22x SATA DVD-RW / Windows 7 Home Premium 64bit / Cable Modem / HT Omega Striker 7.1 Sound Card / FSP 700W PSU / Logitech MX1000 Wireless Laser Mouse / Asus 24" 16:9 LCD w/Webcam / Axiom Audiobyte 2.1 Speakers |
|
|
|
|
|
#9 |
|
Member (12 bit)
Join Date: Nov 2001
Location: Woodland Hills, CA (suburb of Los Angeles)
Posts: 4,014
|
Never heard of every file doing this - except when some previous file compression is suddenly undone (like HiHo mentions). Did you do a double-check online antivirus scan as a site such as HouseCall? http://housecall.trendmicro.com
Hmmm . . . just looked in their virus encyclopedia. Surely enough, there's a trojan that does just what you're experiencing: "Trojan: KillFiles: This Trojan floods the current hard disk drive with large files until system resources run out. This payload can result in the hard disk crashing, the system halting, and can leave Windows unable to start. This Trojan affects systems running Windows 95, 98, ME, NT, 2000, and XP." http://www.trendmicro.com/vinfo/viru...OJ_KILLFILES.U |
|
|
|
|
|
#10 |
|
Member (6 bit)
Join Date: May 2004
Posts: 39
|
ok so i did a scan and got this...
WORM_KWBOT.C located in c>windows>system>cmd.exe it said they were both noncleanable so i went to try and delete them through the hard drive(right click delete) the s.dll wasnt there and the cmd32.exe was running? so i opened up task manager and found nothing cmd32 on it. so i search for them and i find them both in those 2 files. What do i need to do now? once i get it fixed im thinking bout saving all of my wanted files on one folder and transfering it to my families other pc and reformating the drive. any problems its got a lot of junk on it we used it together then my mom used it for her business then i got this hunk of crap so its filled with junk. |
|
|
|
|
|
#11 |
|
Forum Administrator
Staff
Premium Member
Join Date: May 2000
Location: Joplin MO
Posts: 37,786
|
Delete the files in safe mode.
|
|
|
|
|
|
#12 |
|
Member (6 bit)
Join Date: May 2004
Posts: 39
|
well i guess trend micro cant find it cuz the files r still screwed and its reading no viruses trojans or anything
|
|
|
|
|
|
#13 |
|
Member (12 bit)
Join Date: Nov 2001
Location: Woodland Hills, CA (suburb of Los Angeles)
Posts: 4,014
|
Did the Gateway come with a Recovery Disk?
If so, that would allow you the easiest path to a reformat/reinstall. It would, however, erase any data and programs added since the computer arrived home from the store [a complete Recovery usually reformats the entire drive, Recovery partitions too]. The Recovery is helpful if you want to keep the software bundle that the PC arrived with. After this sort of Recovery, you need to go straight to Windows Update for the patches [if you've got a Windows Security Update CD around, run that first, and then go to Windows Update for the patches since]. But don't hook up to the Internet or a home network until you're certain that you have firewall/antivirus/antispyware installed and active. Or you'll be back in this same boat again. If your CD burner is still working, you can try to save some files to CD-R = then scan the heck out of them with AV/Antispyware tools. Don't restore them until you're sure they're clean. . . . Gary [p.s. ...actually, might want to copy them to a CD-RW disk first, and then when that scans clean, finalize those on a CD-R & scan them one more time, just to be sure. I like to keep backups on write-protected media, so that they can be restored at any time with no risk of infection] Last edited by GaryRouth; 08-06-2004 at 02:37 AM. |
|
|
|
|
|
#14 |
|
Member (7 bit)
Join Date: Jun 2004
Posts: 92
|
"well i guess trend micro cant find it cuz the files r still screwed and its reading no viruses trojans or anything"
You could have gotten rid of the virus, but the damage it did is still there. I think a backup and reformat is in order. Otherwise you would have to manually delete all extraneous files. |
|
|
|
![]() |
| Bookmarks |
| Thread Tools | Search this Thread |
| Display Modes | Rate This Thread |
|
|