This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

Mysterious virtual harddrive without access - new try

77 min read

This thread's last reply is from October 20, 2011, 9:56 PM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

Schubi
October 17, 2011, 9:22 PM UTC
(...)
File Q:\Hartmut\2010_Korsika_Fotobuch\2010_Korsika\content\fce048ff-5a23-4626-afef-b3d0315e398b.jpg 4492258 bytes
File Q:\Hartmut\2010_Korsika_Fotobuch\2010_Korsika\content\fd50c01f-795f-42fd-8edd-29f2660b0a62.jpg 3830464 bytes
File Q:\Hartmut\2010_Korsika_Fotobuch\2010_Korsika\content\febb1d89-6b4e-4799-bfbb-b21a57a2c227.jpg 4283570 bytes
File Q:\Hartmut\2010_Korsika_Fotobuch\2010_Korsika\content\info.txt 39 bytes
File Q:\Hartmut\2010_Korsika_Fotobuch\2010_Korsika\project.log 3283 bytes
File Q:\Hartmut\2010_Korsika_Fotobuch\2010_Korsika\thumb.png 19649 bytes
File Q:\Hartmut\2010_Korsika_Fotobuch\2010_Korsika.dp 239764 bytes
File Q:\Hartmut\2010_Korsika_Fotobuch\content 0 bytes
File Q:\Hartmut\2010_Korsika_Fotobuch\content\info.txt 39 bytes
File Q:\Hartmut\2010_Korsika_Fotobuch\project.log 202 bytes
File Q:\Hartmut\2010_Korsika_Fotobuch\thumb.png 1753 bytes
File Q:\Hartmut\Auswahl 0 bytes
File Q:\Hartmut\Auswahl\DSC01667.JPG 2401228 bytes
File Q:\Hartmut\Auswahl\DSC01671.JPG 2660505 bytes
File Q:\Hartmut\Auswahl\DSC01692.JPG 2044815 bytes
File Q:\Hartmut\Auswahl\DSC01713.JPG 2672191 bytes
File Q:\Hartmut\Auswahl\DSC01912.JPG 2621493 bytes
File Q:\Hartmut\Auswahl\DSC01931.JPG 2480765 bytes
File Q:\Hartmut\Auswahl\DSC01935.JPG 2481587 bytes
File Q:\Hartmut\Auswahl\DSC01985.JPG 2741244 bytes
File Q:\Hartmut\Auswahl\DSC02120.JPG 2405592 bytes
File Q:\Hartmut\Auswahl\DSC02124.JPG 1997660 bytes
File Q:\Hartmut\Auswahl\DSC02180.JPG 2164064 bytes
File Q:\Hartmut\Auswahl\DSC02379.JPG 2314839 bytes
File Q:\Hartmut\SystemtoolsStarten.bat 20 bytes
File Q:\Hartmut\Wunschzettel.txt 59 bytes
File Q:\Hartmut\_Kalender_Anja 0 bytes
File Q:\Hartmut\_Kalender_Anja\DSC00130.JPG 2276789 bytes
File Q:\Hartmut\_Kalender_Anja\DSC00133.JPG 2110274 bytes
File Q:\Hartmut\_Kalender_Anja\DSC00134.JPG 2199774 bytes
File Q:\Hartmut\_Kalender_Anja\DSC00135.JPG 2548644 bytes
File Q:\Hartmut\_Kalender_Anja\DSC00171.JPG 2096214 bytes
File Q:\Hartmut\_Kalender_Anja\DSC00272.JPG 2811648 bytes
File Q:\Hartmut\_Kalender_Anja\DSC08776.JPG 2365776 bytes
File Q:\HartmutDataContainer.tc -503316480 bytes

---- EOF - GMER 1.0.15 ----


Do you need the complete log.
It lists all music files on the harddisc.
It exceeds 9 times your limitation.
Please let me know.
Schubi
October 17, 2011, 9:23 PM UTC
(...)
File Q:\Hartmut\2010_Korsika_Fotobuch\2010_Korsika\content\fce048ff-5a23-4626-afef-b3d0315e398b.jpg 4492258 bytes
File Q:\Hartmut\2010_Korsika_Fotobuch\2010_Korsika\content\fd50c01f-795f-42fd-8edd-29f2660b0a62.jpg 3830464 bytes
File Q:\Hartmut\2010_Korsika_Fotobuch\2010_Korsika\content\febb1d89-6b4e-4799-bfbb-b21a57a2c227.jpg 4283570 bytes
File Q:\Hartmut\2010_Korsika_Fotobuch\2010_Korsika\content\info.txt 39 bytes
File Q:\Hartmut\2010_Korsika_Fotobuch\2010_Korsika\project.log 3283 bytes
File Q:\Hartmut\2010_Korsika_Fotobuch\2010_Korsika\thumb.png 19649 bytes
File Q:\Hartmut\2010_Korsika_Fotobuch\2010_Korsika.dp 239764 bytes
File Q:\Hartmut\2010_Korsika_Fotobuch\content 0 bytes
File Q:\Hartmut\2010_Korsika_Fotobuch\content\info.txt 39 bytes
File Q:\Hartmut\2010_Korsika_Fotobuch\project.log 202 bytes
File Q:\Hartmut\2010_Korsika_Fotobuch\thumb.png 1753 bytes
File Q:\Hartmut\Auswahl 0 bytes
File Q:\Hartmut\Auswahl\DSC01667.JPG 2401228 bytes
File Q:\Hartmut\Auswahl\DSC01671.JPG 2660505 bytes
File Q:\Hartmut\Auswahl\DSC01692.JPG 2044815 bytes
File Q:\Hartmut\Auswahl\DSC01713.JPG 2672191 bytes
File Q:\Hartmut\Auswahl\DSC01912.JPG 2621493 bytes
File Q:\Hartmut\Auswahl\DSC01931.JPG 2480765 bytes
File Q:\Hartmut\Auswahl\DSC01935.JPG 2481587 bytes
File Q:\Hartmut\Auswahl\DSC01985.JPG 2741244 bytes
File Q:\Hartmut\Auswahl\DSC02120.JPG 2405592 bytes
File Q:\Hartmut\Auswahl\DSC02124.JPG 1997660 bytes
File Q:\Hartmut\Auswahl\DSC02180.JPG 2164064 bytes
File Q:\Hartmut\Auswahl\DSC02379.JPG 2314839 bytes
File Q:\Hartmut\SystemtoolsStarten.bat 20 bytes
File Q:\Hartmut\Wunschzettel.txt 59 bytes
File Q:\Hartmut\_Kalender_Anja 0 bytes
File Q:\Hartmut\_Kalender_Anja\DSC00130.JPG 2276789 bytes
File Q:\Hartmut\_Kalender_Anja\DSC00133.JPG 2110274 bytes
File Q:\Hartmut\_Kalender_Anja\DSC00134.JPG 2199774 bytes
File Q:\Hartmut\_Kalender_Anja\DSC00135.JPG 2548644 bytes
File Q:\Hartmut\_Kalender_Anja\DSC00171.JPG 2096214 bytes
File Q:\Hartmut\_Kalender_Anja\DSC00272.JPG 2811648 bytes
File Q:\Hartmut\_Kalender_Anja\DSC08776.JPG 2365776 bytes
File Q:\HartmutDataContainer.tc -503316480 bytes

---- EOF - GMER 1.0.15 ----


Do you need the complete log.
It lists all music files on the harddisc.
It exceeds 9 times your limitation.
Please let me know.
Schubi
October 17, 2011, 9:25 PM UTC
this thread was a mistake - sorry.
Schubi
October 17, 2011, 9:27 PM UTC
(...)
File Q:\Hartmut\2010_Korsika_Fotobuch\2010_Korsika\content\fce048ff-5a23-4626-afef-b3d0315e398b.jpg 4492258 bytes
File Q:\Hartmut\2010_Korsika_Fotobuch\2010_Korsika\content\fd50c01f-795f-42fd-8edd-29f2660b0a62.jpg 3830464 bytes
File Q:\Hartmut\2010_Korsika_Fotobuch\2010_Korsika\content\febb1d89-6b4e-4799-bfbb-b21a57a2c227.jpg 4283570 bytes
File Q:\Hartmut\2010_Korsika_Fotobuch\2010_Korsika\content\info.txt 39 bytes
File Q:\Hartmut\2010_Korsika_Fotobuch\2010_Korsika\project.log 3283 bytes
File Q:\Hartmut\2010_Korsika_Fotobuch\2010_Korsika\thumb.png 19649 bytes
File Q:\Hartmut\2010_Korsika_Fotobuch\2010_Korsika.dp 239764 bytes
File Q:\Hartmut\2010_Korsika_Fotobuch\content 0 bytes
File Q:\Hartmut\2010_Korsika_Fotobuch\content\info.txt 39 bytes
File Q:\Hartmut\2010_Korsika_Fotobuch\project.log 202 bytes
File Q:\Hartmut\2010_Korsika_Fotobuch\thumb.png 1753 bytes
File Q:\Hartmut\Auswahl 0 bytes
File Q:\Hartmut\Auswahl\DSC01667.JPG 2401228 bytes
File Q:\Hartmut\Auswahl\DSC01671.JPG 2660505 bytes
File Q:\Hartmut\Auswahl\DSC01692.JPG 2044815 bytes
File Q:\Hartmut\Auswahl\DSC01713.JPG 2672191 bytes
File Q:\Hartmut\Auswahl\DSC01912.JPG 2621493 bytes
File Q:\Hartmut\Auswahl\DSC01931.JPG 2480765 bytes
File Q:\Hartmut\Auswahl\DSC01935.JPG 2481587 bytes
File Q:\Hartmut\Auswahl\DSC01985.JPG 2741244 bytes
File Q:\Hartmut\Auswahl\DSC02120.JPG 2405592 bytes
File Q:\Hartmut\Auswahl\DSC02124.JPG 1997660 bytes
File Q:\Hartmut\Auswahl\DSC02180.JPG 2164064 bytes
File Q:\Hartmut\Auswahl\DSC02379.JPG 2314839 bytes
File Q:\Hartmut\SystemtoolsStarten.bat 20 bytes
File Q:\Hartmut\Wunschzettel.txt 59 bytes
File Q:\Hartmut\_Kalender_Anja 0 bytes
File Q:\Hartmut\_Kalender_Anja\DSC00130.JPG 2276789 bytes
File Q:\Hartmut\_Kalender_Anja\DSC00133.JPG 2110274 bytes
File Q:\Hartmut\_Kalender_Anja\DSC00134.JPG 2199774 bytes
File Q:\Hartmut\_Kalender_Anja\DSC00135.JPG 2548644 bytes
File Q:\Hartmut\_Kalender_Anja\DSC00171.JPG 2096214 bytes
File Q:\Hartmut\_Kalender_Anja\DSC00272.JPG 2811648 bytes
File Q:\Hartmut\_Kalender_Anja\DSC08776.JPG 2365776 bytes
File Q:\HartmutDataContainer.tc -503316480 bytes

---- EOF - GMER 1.0.15 ----


Do you need the complete log.
It lists all music files on the harddisc.
It exceeds 9 times your limitation.
Please let me know.
Schubi
October 17, 2011, 9:28 PM UTC
It seems that I cannot post to the other thread. I always strand-up here.
Schubi
October 17, 2011, 9:37 PM UTC
I tried to unlock Q: as described. Q: is nor displayed when using Start->Computer->Explorer,
but the Total Commander is still showing it.
Schubi
October 17, 2011, 9:39 PM UTC
Got it. Page 1 and 2 (and not 2 threads) - my mistake - sorry for the redundant posts.
Gary R
October 17, 2011, 11:36 PM UTC
If the music files etc are ones you recognize, and do not seem to have been installed by someone else, then I'd say the Q drive has been created by one of your installed programs.

There's no obvious signs of active malware on your machine that I can see.
Schubi
October 19, 2011, 6:31 PM UTC
One final question. I put attached a screenshot. Because I have a strange MFC-Aplikation on the taskbar,
which I have seen from time to time, but not for a long time now.
Might this app create a virtual drive?

MFC-App.png
Gary R
October 19, 2011, 8:42 PM UTC
I know practically nothing about MFC (Microsoft Foundation Class) applications, so I can't really help you with that.

Potentially I suppose it's possible to write a MFC application capable of creating a virtual disk, but I don't think it's likely.
Schubi
October 19, 2011, 9:39 PM UTC
to sum up:
* there was no malware found.
* the virtual drive might be from one of my applications.
* the MFC app -> I have to investigate somewhere else

Right?
Gary R
October 19, 2011, 10:06 PM UTC
Yes, that sums things up fairly well.

We need to remove the tools we've been using to look at your computer ....

Let's clear out OTL and the files and folders it created. This will also remove GMER (except for the random named file on your Desktop which will need to be deleted manually).
  • Double click OTL.exe to launch the programme.
  • Click on the CleanUp! button.
  • OTL will download a list from the Internet, if your firewall or other defensive programmes alerts you, allow it access.
  • You will be prompted to allow the clean up procedure, click Yes
  • When finished exit out of OTL
  • Now delete OTL.exe (if still present).


Unlocker can be uninstalled using control panel > programs > uninstall a program


Sorry if we haven't really resolved your query, but this forum deals only with malware related issues and as far as I can see you do not have any malware on your computer.
Schubi
October 20, 2011, 9:49 PM UTC
Tools are removed.
"No malware found" is also a good result.

Thanks.
Regards,
Schubi
Gary R
October 20, 2011, 9:56 PM UTC
You're welcome. :)

Keep safe.

Gary

This topic is now closed.