is there a virus that masks or hides with chkdsk?

Having probs with my PC
Don't restore, etc. At the whole cleaning thing. At first I couldn't find my chkdsk at all. Dug around in the registry... Well Yes, still here. BUT also found these puppies:

(I've included the script case-sensitive)

Name                                                  In Folder
-----------------------------------------------------------------------
CHKDSK C:\WINDOWS\ I386

CHKDSK. EXE - 0B42230E.pf C:\WINDOWS\Prefetch 13KO
CHKDSK.EXE - 12KO C:\WINDOWS\Prefetch 1CB38688.pf
CHKDSK.EXE - 2CC4C59D.pf C:\WINDOWS\Prefetch 15.1 KB

When I did a search on the web and MS I have nothing. Given the size of the files, I tend to believe that it can be viral. All intuitive thought would be appreciated. Moreover, this small number bypassed my Norton 360. Will try several diagnostics and see if I can get more information, but I'm not that tech savvy, so don't expect much.
Thanks for the ear.
Angela

Hi Angela,.

You should be able to locate chkdsk under its listed as chkdsk.exe C:\WINDOWS\system32 (12 KB - properties will show you this file as 11.5 KB (11 776 bytes)). You can restore this file from the I386 folder and put it back in the C:\windows\system32 folder.

I hope this helps.

Tags: Windows

Similar Questions

  • Is there a virus that causes the "cannot find server" message for any website?

    Having had no problem at all with firefox, after that my brother found himself on a "questionable" site that has closed the browser suddenly, any time I opened my browser to look at any page on my home pc I got the message 'server not found '. My laptop and phone are sailing very well without any problems. Thanks for your help.

    Make a check of malware with a few programs to scan for malware.
    You must use all of the programs, because each detect different malware.
    Make sure you update each program to get the latest version before doing a scan.

    http://housecall.trendmicro.com/ - Trendmicro online

    http://www.malwarebytes.org/mbam.php - Malwarebytes' Anti-Malware

    http://www.superantispyware.com/ - SuperAntispyware

    http://www.safer-networking.org/en/index.html - Spybot Search & Destroy

    http://www.lavasoft.com/products/ad_aware_free.php - Ad-Aware Free

    http://www.Microsoft.com/Windows/antivirus-partners/Windows-XP.aspx

    See also for a rootkit TDSSKiller infection.

    http://support.Kaspersky.com/viruses/solutions?QID=208280684

    Thanks again

  • I had a virus that says that the FBI caught me downloaded inlegal stuff a fine of 72 hours or there would be charges pressed against me and I don't know how it get out!

    I had a virus that says that the FBI caught me downloaded inlegal stuff a fine of 72 hours or there would be charges pressed against me and I don't know how it get out!  Whenever I turn on my computer it pops up and I can't do anything! Sometimes I can go and get online! If anyone knows how to remove it please help me!

    What you are investigating your pc with?  What anti virus?

    Some malware knows how to avoid the standard as applications McAffee, Norton and Kaspersky, Avast.

    To be absolutely sure, you may have to reset it to the factory or clean install.  Make sure that you have a backup first.

  • I have a virus that cannot be deleted. I want to reformat the drive, but I don't know how to clean my computer. Will this remove the virus, or simply write about it? also is there a way to erase and start over.

    Windows has identified a virus that cannot be deleted. reformatting will solve this problem? also wiping my own comouter solve this problem or just to write about it. Is there an online tool to clean my computer... more, after that how do I reinstall windows

    Try AVG and Avast free programs to find and fix the problem. In the future, these two will warn you if the malware is a download.  If this does not work, try the highjackthis program.  It will save a log that can be used by sites for free assistance to correct your problem.

    I would NEVER erase the hard drive!  I've been SP since its release and have have 60 programs on my computer.

  • Horrible virus that prevents opening executable files?

    I recently managed to infect my computer with the worst virus that I've ever seen. I was on several different sites at the same time research on Elder Scrolls traditions for a mod I did. They were TESNEXUS, The Elder Scrolls Wiki and PlanetElderScrolls... With Bungie.net. IM POSITIVE it was TESNEXUS who gave me the virus, as they were recently hacked and I check other sites regularly.

    The virus opens and downloaded instantly (less than 1 second) and the second, he disappeared from Firefox crashed. I knew it was a virus and immediately tried to open spybot, but a protective icon in my tray called "Spyware" gave me the notice:
    'Spybot.exe' is infected with W32/Blaster.worm

    I got a similar message for any program, including the editor of the register, System Restore and command prompt. It was not long until things began to disappear and changing. I lost a lot of data from my program files. Photoshop works more and more than most of my games. Whenever I open a file, it would make a sound screams instead of his usual. My color scheme has been changed and the flooded icon my screen "You are infected" put warning.

    But what worries the most is another message that appears at the bottom of my screen. He said that a large number of files have been transferred remotely on another computer. When I accessed my other computers, there was a strange bond that I had never seen before. The network did not have a normal name, instead, it was a string of numbers.

    I turned off my computer and used my drive to start super - duper to the restoration of the system (such as the file .exe from the system restore did not work) and now everything is normal. I ran Spybot and AVG and neither program returned from the virus either.

    So how is it safe? This rest TAPI in my system virus hides my anti-virus? Can I clean my computer if needed, but it would be a serious pain in the stock and a good 3-4 working days to get things in order. It is with a backup on hand.

    Advice anyone?

    Thanks to Malwarebytes, I managed to find the potential killer.

    I had a total of 9 infections, of whom 8 were temporary files listed as Adware.

    The latest infection was listed as spyware and it was found in a folder in my program called relevant knowledge files.

  • How can I find out if there are viruses on my laptop and how do I clean them

    How can I find out if there are viruses on my laptop and how do I clean them?

    Please provide details as to why you feel that there is a virus on your computer.

  • Cannot access my music on my Ipad or Iphone. Whenever I have select the music icon, there is a picture of a girl with his Iphone hide list of music, I can't getrid of this image. I don't want to try or buy music

    cannot access my music on my Ipad or Iphone. Whenever I have select the music icon, there is a picture of a girl with his Iphone hide list of music, I can't getrid of this image. I don't want to not try or don't buy music if I touch the image, nothing happens no connection to the music store. The image is there, and that's all. How to get back to my music.

    On one of the devices, try to reboot (to give a fresh start to iOS).  Data are not affected.

    Restart your iPhone, iPad or iPod touch - Apple Support

    Then, go to settings-> musicand make that Show Apple music is turned OFF.  Tap the music app.  If you see this image with the girl holding the iPhone, there should be choices on the screen to Join Apple music or display your own music (don't remember the exact wording).  Choose the latter.

    no link to the music store

    The store for buying music is a separate application called iTunes Store.

  • Surfing the internet on my iphone, I got a pop-up message warning me that I had a virus that could be stolen my information of credit card through my webcam and call 1-844-854-6870.  I didn't call the number?

    Surfing the internet on my iphone, I received a pop-up message stating that I had a virus that could fly as well as personal information and credit card information used on the phone.  That I should call 1-844-854-6870 immediately to get the virus removed.  I didn't call the number, but rather made sure my privacy filters were ignited, powered my phone is off and connected my office here.  What should I do to make sure that I do not have a virus on my iphone?

    It's just a scam.

    Force restart our iPhone.

    Press and hold the Home and Sleep/Wake buttons for at least ten seconds, until you see the Apple logo.

    As long as you call the number or allow anyone access to your iPhone, so there is no worry for a virus.

  • More effective than a virus - KB930494 MS update ends with true Msg that Windows cannot now work correctly

    More effective than a virus - KB930494 MS update ends with true Msg that Windows cannot now work correctly

    I started to reinstall Windows XP, after he has screwed up and I discovered that all the system snapshot
    I created backups worthless - MS removes automatically after 90 days...

    But when reinstalling Windows XP Pro MCE 2005 I managed to beat or dodge the many problems - like all the
    famous error when update .NET Framework 1.1 Service Pack 1 and many others
    Suddenly I met an error generated by Microsoft of NONRECOVERABLE type!

    While trying to install Windows, I agreed that Windows was full of bugs and security flaws and
    need a large number of fixpacks installed via Windows Update.
    Such a group of patches is called KB930494 and the full name is:

    .NET framework 1.0 Service Pack 3 SYSTEM. WEB. DLL and MSCOREE. DLL Security Update for Windows XP Media Center Edition and Windows XP Tablet PC Edition

    Windows Update gave a brief error msg that this update has failed and I have tried to run this update
    manually when it produces the following error message: (note he's telling the truth when it)
    claims that "Windows may not work correctly")

    ---
    KB930494 Setup error

    Error while updating your system.
    Windows XP has been partially updated and may not work properly.

    Ok
    ---

    So, this update of Microsoft killed my system - it sure that _ 'does not properly"more.
    Lots of things off, lots of BSOD...

    Og - of course I should have used the system restore and created a backup that I should come back...!
    I did well - but this bomb of viral type of Microsoft made sure it was not possible to create
    a valid system by restoring such a backup. Probably because half the file system matches the other.

    The worst part is - even if I try to reinstall Windows again, avoiding this Virus created by MS, how can I be sure that
    This will be the only disguised bomb nothing extraordinary provided by Windows Update as necessary security patches?

    So guys, what is the best utility backup/restore partition there?

    Rgds. E. Ben

    Use Partiton Lofic is a down load for free on the partition, you can also use Easeus Disk Copy. It is a free program with a friendly interface.

  • When the Admin sign on the office comes to the top, but after that the computer does not respond when the user tries to do anything. There are actually turns off the computer with the power button.

    Original title: user profile

    My administrator user profile does not work properly, but I have a user profile that has activated the parental control that worked well for about a year and yesterday when this user logs on the desktop comes up, but after that the computer does not respond when that user tries to do anything. There are actually turns off the computer with the power button.  I ran a virus scan and spyware scan in my user admin profile and he has not found anything.  I don't know what to check.

    Hello rhunter15,

    There may be a program to interfere with Parental controls so that we can try a few things to see if we can determine the application or program that is causing problems.

    First of all, we run System File Checker to see if you have a corrupt file system.

    • Click Start
    • Click on all programs
    • Click Accessories, and then right-click on the command prompt.
    • Select the Security tab and choose "Run as Administrator"
    • Click on command prompt
    • Type SFC/scannow.

    It will scan and repair any damaged operating system files.

    To determine if there is a program because of a conflict, we recommend that you perform a "clean boot" of the computer. A clean boot is designed to disable programs and services in the background as much as possible. This helps determine which service or program can be the cause of the problem.  For more information about how to perform a clean boot for troubleshooting, click the number below to view the article in the Microsoft Knowledge Base.

    KB 929135 - how to solve a problem of performaing a clean boot in Windows Vista.
    http://support.Microsoft.com/kb/929135

    Once you have finished the clean boot, check again and see if you get the error of parental control.

    If please post again and let us know if that helped pinpoint the problem or if you still need help.

    Thank you

    Marilyn
    Microsoft Answers Support Engineer
    Visit our Microsoft answers feedback Forum and let us know what you think.

  • is there a way that we could create a unique link that someone can click on an email to bring them to a cart to fill their quote?

    is there a way that we could create a unique link that someone can click on an email to bring them to a cart to fill their quote?

    Hello

    Here is how the configuration would work - http://client2.worldsecuresystems.com/get-quote/java-in-a-nutshell - you can add some nice CSS to ensure that the screen does not Flash or anything like that. Here's how it was built:

    1. create a new model, paste this piece of code inside:

    {tag_pagecontent}
    

    2 create a new catalog, all the products of this catalogue will redirect users directly to the GET a quote form. Assign the model created in step 1

    3 change the presentation of the latge product and place the button buy now in a hidden div:

     
    

    4. change the shopping basket page layout and make sure the GET a quote button is present:

    {tag_getquotebutton}
    

    5. place this code at the end. You need to replace 606879 with the ID of the catalog created in step 2

    {% if globals.get.CatalogueID == 606879 %}
    
    {% endif %}
    

    What will happen, it is like this:

    1. whenever someone opens a product using the link to the custom catalog buy it button will now be clicked
    2. the site visitor is then redirected to shopping cart layout where the other script checks the catalog, the visitors came. If this is a "known" catalog redirect another arrives and load the GET a quote layout

    Make sure that you have loaded in your models of jQuery and liquid activated on your site.

    One more thing, you need to monitor is you will need hide this catalog custom catalog your site listing.

    Hope this helps,

    Mihai

  • The last time I used identifier apple of my father to the appstore on my macbook pro. (Now, I have my own apple ID). Sometimes, when there are apps that I want to update, a window would jump out to ask me to sign identifying apple of my father, but I want

    The last time I used my id to a friend for the appstore apple on my macbook pro. (Now, I have my own apple ID). Sometimes, when there are apps that I want to update, a window would jump out to ask me to connect to my apple to a friend id, but I want to update the application using my own apple ID. Is that what I have to use my apple ID to update the applications? Please help me!

    The last time I used my id to a friend for the appstore apple on my macbook pro. (Now, I have my own apple ID). Sometimes, when there are apps that I want to update, a window would jump out to ask me to connect to my apple to a friend id, but I want to update the application using my own apple ID. Is that what I have to use my apple ID to update the applications? Please help me!

  • Are there any programs that work similar to the old Adobe Pagemaker?

    Are there any programs that work similar to the old Adobe Pagemaker?

    Aldus Pagemaker, later Adobe Pagemaker were abandoned 12 years ago and since some of it is functionally distributed and shared between Adobe Illustrator and Adobe InDesign.

    If you are looking for something similar, Illustrator and InDesign will be the direct dead unless you have a copy of PageMaker running on an older operating system that supports

    After your choices narrow down to a few suggestions here

    http://www.MakeUseOf.com/tag/free-alternatives-Photoshop-Illustrator-Lightroom/

    and if you are looking for something more 'professional' look in the affinity Designer

    https://affinity.serif.com/en-GB/Designer/

    or QuarkXPress

  • All the Web sites I visit every day are blocked by a virus that seems to be Mozilla (but isn't) and wants personal information in order to unlock parent control. My viru

    I tried to go to Web sites that I visit every day and they are all blocked by a virus that seems to be Mozilla (but isn't) and watch the logo of mozilla and says my site has been blocked by the parent control of Mozilla and you must sign up for this. He asks that all the personal information you give NEVER online so I knew it was a virus. I write this in safe mode. My Vipre will not pick up this virus and Malware bites either. I have deleated Mozilla and reinstalled but it did not work.

    You can attach a screenshot?

    Use a type of compressed as PNG or JPG image to save the screenshot.

    Do a check with some malware malware, analysis of programs on the Windows computer.

    You need to scan with all programs, because each program detects a different malicious program.

    Make sure that you update each program to get the latest version of their databases before scanning.

    Alternatively, you can write a check for an infection rootkit TDSSKiller.

    See also:

  • Is there an extension that will show you the list drop down bookmarks in the location bar?

    I wish the menu drop-down arrow in the address bar to show my favorites instead of show what I typed recently. I use the menu drop-down to go to my most visited sites, so this would be the prefect. Is there an extension that will do this, or something similar?

    You can change a setting: Options > privacy > section of the address bar, change of "bookmarks"; which will display only your bookmarks.

Maybe you are looking for

  • Debugger stopped the unwanted

    Hello I am using the debugger in a web application with a lot of javescript, but he continues to stop, as I set break points a lot of places. How to stop I do that and only break where I have to say?

  • Do not find wireless network card driver

    Hello I have recently reinstalled windows 7 (64-bit) on my HP DV6-6101AX, all the drivers properly installed and very well except for the network controller I tried all the drivers wireless on hp Web site with no luck. I was wondering if someone can

  • Soak the cracked Test new screen phone, what now?

    I'm so happy Tester on a bike X. problem is I dropped my phone and he cracked. So asked for advance replace and Motorola sent me a new phone! Awesome. I signed myself in and put everything to the top (all super smooth but migrate - somehow does not w

  • How can I change the playback speed of a track in windows movie maker

    I recently pulled a song and converted to mp3 format... now I pulled in my windows movie maker to try to divide and set the speed of the track and can not know how change the speed... can someone help!

  • during boot, the BIOS is hidden activity

    The system does not display the activity of the bios when starting upwards. You don't see no activity on the screen until the login screen is in place. I need to access the bios settings for the configuration settings, but do not remember how to reac