Free Republic
Browse · Search
Bloggers & Personal
Topics · Post Article

Skip to comments.

S.M.A.R.T. HDD Virus Removal
5/4/12 | EQAndyBuzz

Posted on 05/04/2012 1:49:50 PM PDT by EQAndyBuzz

Last night, my lovely's computer started kicking out messages about her disk being unreadable and she needed to run diagnostics. Thankfully she didn't.

I ran RKILL to get rid of the processes and am currently running a Malwarebytes full scan to hunt this thing down.

I checked Internet Options to see if there was a proxy server involved, but there does not appear to be any.

Problem I am having is I cannot 1) boot up to safe mode (it is asking for operating system to use) and 2)from Start tab, I cannot get to any screens to do a system restore.

Any ideas?


TOPICS: Computers/Internet
KEYWORDS: computervirus; malware; virus

1 posted on 05/04/2012 1:49:53 PM PDT by EQAndyBuzz
[ Post Reply | Private Reply | View Replies]

To: EQAndyBuzz; ShadowAce

Ping!


2 posted on 05/04/2012 1:53:39 PM PDT by moose07 (The truth will out, one day.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: EQAndyBuzz
I just ran Malware on mine last night and had 11 virus places removed. Anyone here that have G mail, I have a question. I just got it and having trouble figuring it out. Would appreciate a comeback from a seasoned G mail user. Aloha from Maui.
3 posted on 05/04/2012 1:56:45 PM PDT by fish hawk (Religion: Man's attempt to gain salvation or the approbation of God by his own works)
[ Post Reply | Private Reply | To 1 | View Replies]

To: EQAndyBuzz

Sounds nasty. Here’s what I found (been lucky w/ Norton 360) on removing it:

http://answers.microsoft.com/en-us/protect/forum/protect_scanning/remove-smart-hdd-virus/75a81856-32d7-45d5-b76b-131d033d6566

and

http://virusremovalhelps.com/help-smart-hdd-virus-removal/

and the search page’s many links:

http://www.google.com/search?client=opera&rls=en&q=S.M.A.R.T.+HDD+Virus+Removal&sourceid=opera&ie=utf-8&oe=utf-8&channel=suggest


4 posted on 05/04/2012 1:56:49 PM PDT by carriage_hill (((.)))
[ Post Reply | Private Reply | To 1 | View Replies]

To: EQAndyBuzz

I love Glary Utilities— It has helped me many times-free version and I will be buying the Pro Version soon.


5 posted on 05/04/2012 1:58:07 PM PDT by Mark (Don't argue with my posts. I typed while under sniper fire..)
[ Post Reply | Private Reply | To 1 | View Replies]

To: EQAndyBuzz

Install drive in another pc ... or disinfect via an anti-virus boot cd..


6 posted on 05/04/2012 1:59:16 PM PDT by Neidermeyer
[ Post Reply | Private Reply | To 1 | View Replies]

To: EQAndyBuzz

2 things; www.bleepingcomputer.com the forums are great. Also run super spyware remover as well.


7 posted on 05/04/2012 2:03:43 PM PDT by big bad easter bunny (If it weren't for coffee I would still be living with my parents!)
[ Post Reply | Private Reply | To 1 | View Replies]

To: EQAndyBuzz

Ms came up with a freestanding boot program that runs off a USB stick. I. Believe it is called system Sweeper. It may help you out.


8 posted on 05/04/2012 2:05:13 PM PDT by UB355 (Slower traffic keep right)
[ Post Reply | Private Reply | To 1 | View Replies]

To: EQAndyBuzz

Ms came up with a freestanding boot program that runs off a USB stick. I. Believe it is called system Sweeper. It may help you out.


9 posted on 05/04/2012 2:05:22 PM PDT by UB355 (Slower traffic keep right)
[ Post Reply | Private Reply | To 1 | View Replies]

To: EQAndyBuzz

Ms came up with a freestanding boot program that runs off a USB stick. I. Believe it is called system Sweeper. It may help you out.


10 posted on 05/04/2012 2:05:22 PM PDT by UB355 (Slower traffic keep right)
[ Post Reply | Private Reply | To 1 | View Replies]

To: EQAndyBuzz

Ms came up with a freestanding boot program that runs off a USB stick. I. Believe it is called system Sweeper. It may help you out.


11 posted on 05/04/2012 2:05:29 PM PDT by UB355 (Slower traffic keep right)
[ Post Reply | Private Reply | To 1 | View Replies]

To: EQAndyBuzz

Ms came up with a freestanding boot program that runs off a USB stick. I. Believe it is called system Sweeper. It may help you out.


12 posted on 05/04/2012 2:05:29 PM PDT by UB355 (Slower traffic keep right)
[ Post Reply | Private Reply | To 1 | View Replies]

To: EQAndyBuzz

Ms came up with a freestanding boot program that runs off a USB stick. I. Believe it is called system Sweeper. It may help you out.


13 posted on 05/04/2012 2:05:41 PM PDT by UB355 (Slower traffic keep right)
[ Post Reply | Private Reply | To 1 | View Replies]

To: EQAndyBuzz

Ms came up with a freestanding boot program that runs off a USB stick. I. Believe it is called system Sweeper. It may help you out.


14 posted on 05/04/2012 2:05:48 PM PDT by UB355 (Slower traffic keep right)
[ Post Reply | Private Reply | To 1 | View Replies]

To: EQAndyBuzz

Ms came up with a freestanding boot program that runs off a USB stick. I. Believe it is called system Sweeper. It may help you out.


15 posted on 05/04/2012 2:05:48 PM PDT by UB355 (Slower traffic keep right)
[ Post Reply | Private Reply | To 1 | View Replies]

To: EQAndyBuzz

Ms came up with a freestanding boot program that runs off a USB stick. I. Believe it is called system Sweeper. It may help you out.


16 posted on 05/04/2012 2:05:52 PM PDT by UB355 (Slower traffic keep right)
[ Post Reply | Private Reply | To 1 | View Replies]

To: EQAndyBuzz

Ms came up with a freestanding boot program that runs off a USB stick. I. Believe it is called system Sweeper. It may help you out.


17 posted on 05/04/2012 2:06:02 PM PDT by UB355 (Slower traffic keep right)
[ Post Reply | Private Reply | To 1 | View Replies]

To: EQAndyBuzz

http://www.greatis.com/unhackme/

boot into safe mode and run a boot scan.

Havn’t found anything it cant fix

remove it when you cure the system.

It is an ugly program, and you have to know what you are doing.

On the other hand, I have had 100% success with it no matter what malware a client picked up. BTW, you don’t need to pay for it, although I did.


18 posted on 05/04/2012 2:08:00 PM PDT by LesbianThespianGymnasticMidget (God punishes Conservatives by making them argue with fools.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: UB355

http://microsoft-standalone-system-sweeper.en.softonic.com/


19 posted on 05/04/2012 2:12:55 PM PDT by UB355 (Slower traffic keep right)
[ Post Reply | Private Reply | To 17 | View Replies]

To: UB355

I think your computer is afflicted.


20 posted on 05/04/2012 2:12:55 PM PDT by MARTIAL MONK (I'm waiting for the POP!)
[ Post Reply | Private Reply | To 17 | View Replies]

To: UB355

http://microsoft-standalone-system-sweeper.en.softonic.com/


21 posted on 05/04/2012 2:12:55 PM PDT by UB355 (Slower traffic keep right)
[ Post Reply | Private Reply | To 17 | View Replies]

To: UB355

http://microsoft-standalone-system-sweeper.en.softonic.com/


22 posted on 05/04/2012 2:13:04 PM PDT by UB355 (Slower traffic keep right)
[ Post Reply | Private Reply | To 17 | View Replies]

To: EQAndyBuzz

“I cannot 1) boot up to safe mode (it is asking for operating system to use)”

Is “asking for the operating system to use” really a problem?

I just logged off and booted up to safe mode and it wanted to know the operating system. I did that as a check, but I can’t remember a time when it didn’t want to know the operating system. Not that it makes a lot of difference since I only have one operating system on this computer.


23 posted on 05/04/2012 2:14:59 PM PDT by KrisKrinkle (Blessed be those who know the depth and breadth of their ignorance. Cursed be those who don't.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: EQAndyBuzz

Sounds like the Windows Restore Virus that I had. Look up the virus on another computer and there are a couple sets of instructions to clear it up. Do not run windows restore and do not but the $39 fix. You will loose your credit card and computer.


24 posted on 05/04/2012 2:14:59 PM PDT by mountainlion (I am voting for Sarah after getting screwed again by the DC Thugs.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: EQAndyBuzz

SMART is generally a hardware technology having to do with disk drive health, not contents.

It is trying to tell you you have an imminent hardware failure.

Your hard drive is ready to go to the recycle bin...


25 posted on 05/04/2012 2:15:31 PM PDT by djf (Life's a play, we're actors not authors, and nobody even cared to give us the script!)
[ Post Reply | Private Reply | To 1 | View Replies]

To: EQAndyBuzz

bump for later reading and such.


26 posted on 05/04/2012 2:16:45 PM PDT by techcor (I hope Obama succeeds, in being a one term president.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: EQAndyBuzz

put in an operating system disk and boot from it
go to recovery console
run fix mbr in recovery console
then reboot and use the unhackme program in safe mode and then in regular mode.
run a deep scan.


27 posted on 05/04/2012 2:23:48 PM PDT by LesbianThespianGymnasticMidget (God punishes Conservatives by making them argue with fools.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: UB355

Multi-post virus?

I probably can’t help more than what has already been suggested, but I do want to add that people who write viruses (or “helpware” like w3click) should be dragged naked through gravel by their genitals, then stoned the way that muslims do it.

Then they should be executed — but only after making sure they can’t feel pain anymore. If they are still capable of feeling pain, the punishment should continue.


28 posted on 05/04/2012 2:24:56 PM PDT by freedumb2003 ('RETRO' Abortions = performed on 84th trimester individuals who think killing babies is a "right.")
[ Post Reply | Private Reply | To 17 | View Replies]

To: freedumb2003

sorry, i posted off a touch screen tablet. Silly thing


29 posted on 05/04/2012 2:26:42 PM PDT by UB355 (Slower traffic keep right)
[ Post Reply | Private Reply | To 28 | View Replies]

To: UB355

10 in a row, that’s got to be some kind of record


30 posted on 05/04/2012 2:41:30 PM PDT by tx_eggman (Liberalism is only possible in that moment when a man chooses Barabas over Christ.)
[ Post Reply | Private Reply | To 17 | View Replies]

To: djf
SMART is generally a hardware technology having to do with disk drive health, not contents. It is trying to tell you you have an imminent hardware failure. Your hard drive is ready to go to the recycle bin...

I concur. It can't find an OS because it can't read parts of the hard drive.

31 posted on 05/04/2012 2:42:26 PM PDT by bubbacluck (I'll pay more for tomatoes, thank you.)
[ Post Reply | Private Reply | To 25 | View Replies]

To: EQAndyBuzz
Sounds like your boot sector is hosed.

If that is the case then all you have to do is restore from that image you took of your C:\drive last week and stored on external storage.

Didn't make one? Then reinstall the OS after formatting the drive. Then restore your sensitive data...from the backup you made last week on external storage...back in place and start the process of configuring Winders.

Didn't backup the sensitive data? Hmmm....got nuthin' except start from scratch.

32 posted on 05/04/2012 3:24:03 PM PDT by Bloody Sam Roberts (I will not comply. I will NEVER submit.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: tx_eggman
10 in a row, that’s got to be some kind of record



I THINK it would have been... but there was an earlier thread from JimRob that had 1 poster post around 25 or so :p
33 posted on 05/04/2012 3:44:29 PM PDT by Bikkuri
[ Post Reply | Private Reply | To 30 | View Replies]

To: Bloody Sam Roberts

34 posted on 05/04/2012 3:47:46 PM PDT by Bikkuri
[ Post Reply | Private Reply | To 32 | View Replies]

To: EQAndyBuzz

We just had the Smart HDD virus hit our computer. We aren’t much use with diy fixes so brought it to the local folks here to fix. We had MacAfee anti-whatever running, but got it anyhow.

The next-day fix cost about $150 plus another $50 or so for the software they recommended. MacAfee fortunately protected our computer enough so we didn’t lose any files.

Very distressing.


35 posted on 05/04/2012 3:49:28 PM PDT by finnsheep
[ Post Reply | Private Reply | To 1 | View Replies]

To: EQAndyBuzz

Did you confirm a virus/malware? S.M.A.R.T. monitoring is a legit function built in to newer hard drives to warn of impending failure.
http://hddlife.com/eng/smart.html
http://en.wikipedia.org/wiki/S.M.A.R.T.


36 posted on 05/04/2012 3:59:30 PM PDT by Drago
[ Post Reply | Private Reply | To 1 | View Replies]

To: Bloody Sam Roberts

Could he take the hard drive out and install it into another computer (that has all antivirus and anti malware up to date), find and copy “My Documents” etc, reformat the failing drive, then install into “old” box and then reinstall windows?

Or just but a new disk drive install windows and then antivirus and antimalware and then search for my Docs ??


37 posted on 05/04/2012 4:22:28 PM PDT by John Galt's cousin (Principled Conservatism NOW! * * * * * * * * * * Repeal the 17th Amendment!)
[ Post Reply | Private Reply | To 32 | View Replies]

To: Bloody Sam Roberts

Could he take the hard drive out and install it into another computer (that has all antivirus and anti malware up to date), find and copy “My Documents” etc, reformat the failing drive, then install into “old” box and then reinstall windows?

Or just but a new disk drive install windows and then antivirus and antimalware and then search for my Docs ??


38 posted on 05/04/2012 4:26:07 PM PDT by John Galt's cousin (Principled Conservatism NOW! * * * * * * * * * * Repeal the 17th Amendment!)
[ Post Reply | Private Reply | To 32 | View Replies]

To: EQAndyBuzz

format


39 posted on 05/04/2012 5:03:38 PM PDT by Figment
[ Post Reply | Private Reply | To 1 | View Replies]

To: Figment

Or, you could avoid these kinds of problems.

Save your data, install another operating system - such as linux; and install your data.


40 posted on 05/04/2012 5:44:13 PM PDT by robertc5 (In Forida we call it Sinkhole de Mayo)
[ Post Reply | Private Reply | To 39 | View Replies]

To: MARTIAL MONK

Or, he just likes to talk a lot. :-)


41 posted on 05/04/2012 6:17:49 PM PDT by ataDude (Its like 1933, mixed with the Carter 70s, plus the books 1984 and Animal Farm, all at the same time.)
[ Post Reply | Private Reply | To 20 | View Replies]

To: liege; All

Some of the newer BIOS’s have log files. He should boot into BIOS setup mode and see if it has any error reports logged. I doubt it’s a virus. I think it’s a real hardware alert.

The drive is hosed.

Just as an fyi, if a drive starts giving failure alerts like this you can sometimes rescue them for long enough to copy important data - put it in a plastic bag and put it IN YOUR FREEZER for an hour or so!

True! It works! Been there!

Bot recommended for very humid climates...

and if it is truly a hardware failure, running a hundred virus scans is just about the worst thing you could do...


42 posted on 05/04/2012 7:22:45 PM PDT by djf (Life's a play, we're actors not authors, and nobody even cared to give us the script!)
[ Post Reply | Private Reply | To 31 | View Replies]

To: Bloody Sam Roberts

What’s a backup? You mean I am supposed to do something with all that file stuff that is sitting on that spinning thingy inside that big black box under my desk?

Seriously. Everything is backed up.


43 posted on 05/04/2012 9:36:33 PM PDT by EQAndyBuzz (Would you rather eat dog food or cat food? Guess it's Romney 2012.)
[ Post Reply | Private Reply | To 32 | View Replies]

To: djf

Concur. If there’s truly an imminent hard drive failure, GET THAT DATA OFF!

You can always scan it on another machine, and you can always delete the copied data if we’re wrong about failure and nothing’s infected, but it sounds to me like your OS install was ruined when the hard drive began to fail. Seen it before, got damn lucky that it was only the OS eaten. Managed to save every relevant file including game saves from the user directory, and stuff on the desktop.

But, use it as little as possible in the process of simply getting the data off the drive, and prioritize. The less that’s done to the drive, the more chance you’ll be able to save more/everything before complete failure.


44 posted on 05/05/2012 12:01:01 AM PDT by Fire_on_High (WTB new tagline, PST!)
[ Post Reply | Private Reply | To 42 | View Replies]

To: EQAndyBuzz

I got hit with a couple viruses in the past year on Windows XP that mimicked an “imminent hard drive failure” but it was all fake. The virus bypassed fully updated virus scanners and installed itself just by me going to a web page. It didn’t do any permanent damage, but was somewhat difficult to clean up. The first step I think was to download and run TDSS Killer. I don’t think you need to be in safe mode to do that, but some of these viruses will try to stop you from running that program, so you may need to rename the file. I think the virus may try to stop you from running any .exes, so that might require you to boot into safe mode and/or run the other RKill program to kill running processes. You should pick Windows XP with Networking when booting into Safe Mode. The TDSS Killer very quickly erases “rootkit” viruses which are difficult for normal virus scanners to find.

The virus’s main function was to make Google searches redirect to advertisement sites. Fixing that required me finding the hosts file and deleting the hacked entries. One version of the virus also made all files on the computer “hidden” so that it looked like they had been deleted. I think I had to highlight my entire hard drive and check off not to hide anything. And then I ran the Malwarebytes which I believe deleted some virus files and registry entries. Another thing I might have had to do is clear the whole browser cache and history, because the virus was hiding in some flash files or something like that. I also used a date-sorted search on the PC’s files to find when the virus installed itself and its location on the hard drive. I don’t remember if I needed to do that to track down the files and delete them myself or if the virus scanner was able to do that.


45 posted on 05/05/2012 12:15:25 AM PDT by JediJones (From the makers of Romney, Bloomberg/Schwarzenegger 2016. Because the GOP can never go too far left.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: John Galt's cousin
Could he take the hard drive out and install it into another computer

Yes...I have done that in order to get data from one in such condition. It ought to work. But as a boot drive...it's toast.

46 posted on 05/05/2012 5:25:39 AM PDT by Bloody Sam Roberts (I will not comply. I will NEVER submit.)
[ Post Reply | Private Reply | To 37 | View Replies]

To: djf

I had this thing a few months ago.

The virus is only emulating a SMART failure warning. There is most likely nothing wrong with his hardware.

I had to pay our IT shop to fix mine. They ran combofix, malwarebytes, superspyremover, spybot, AVG.


47 posted on 05/05/2012 5:42:25 AM PDT by 2111USMC (Not a hard man to track. Leaves dead men wherever he goes.)
[ Post Reply | Private Reply | To 42 | View Replies]

To: EQAndyBuzz
Seriously. Everything is backed up.

Excellent. Then it's time for a new drive, a cup of coffee and about an hour or so at the workbench.

"A lick of paint, she's good as new. Now give us a muffin."


48 posted on 05/05/2012 5:45:18 AM PDT by Bloody Sam Roberts (I will not comply. I will NEVER submit.)
[ Post Reply | Private Reply | To 43 | View Replies]

To: Bloody Sam Roberts

Actually, I have Kaspersky hidden on the computer in the event of this. I am going to try that one time and if it works, great. If not, my wife will have to wait a bit till I get back to fix it.


49 posted on 05/05/2012 7:27:59 AM PDT by EQAndyBuzz (Would you rather eat dog food or cat food? Guess it's Romney 2012.)
[ Post Reply | Private Reply | To 48 | View Replies]

To: Fire_on_High
I concur.
Take the drive out and don't plug it in until you are ready
to directly extract the data. Been there and lost some really
important business files. Now I have two backup drives, one for backup directly
and one to back up the backup separately and not connected to the main computer or net..
50 posted on 05/05/2012 7:40:51 AM PDT by MaxMax
[ Post Reply | Private Reply | To 44 | View Replies]

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
Bloggers & Personal
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson