[rshaffer61]

You might want to include a link in your malware topic to this topic so that they can see what we have already attempted.

[Advertisements]

Attached is the jumper setting diagram from Western Digital for my drives. I'm running all drives in the default (no jumper) configuration.


I'd did put a link to this thread on the Malware forum post.

Something interesting. Last night while waiting for something to do, I noticed things were moving pretty good, so I tried running MalwareBytes. For about 10 minutes, it scanned very quickly and went through almost 75,000 items. Then a screeching halt, and it slowed down to a crawl. I ultimately stopped the scan which incidentally, didn't find any infected files. Since then its been back to sloooooow operation on everything.

I tried installing a RAID utility from MARVELL, in hopes of being able to run some diagnostics on the drives ... it didn't work (perhaps the wrong utility - don't know).

Also, I tried scheduling an autorepair, recovery scan of the C drive, which was supposed to run on next start up ... It didn't appear to launch on boot. I may have to go to Safe Mode to do a chkdsk /r.

Attached Thumbnails

• 

Edited by MSC2, 19 November 2011 - 12:07 PM.

[MSC2]

Attached is the jumper setting diagram from Western Digital for my drives. I'm running all drives in the default (no jumper) configuration.


I'd did put a link to this thread on the Malware forum post.

Something interesting. Last night while waiting for something to do, I noticed things were moving pretty good, so I tried running MalwareBytes. For about 10 minutes, it scanned very quickly and went through almost 75,000 items. Then a screeching halt, and it slowed down to a crawl. I ultimately stopped the scan which incidentally, didn't find any infected files. Since then its been back to sloooooow operation on everything.

I tried installing a RAID utility from MARVELL, in hopes of being able to run some diagnostics on the drives ... it didn't work (perhaps the wrong utility - don't know).

Also, I tried scheduling an autorepair, recovery scan of the C drive, which was supposed to run on next start up ... It didn't appear to launch on boot. I may have to go to Safe Mode to do a chkdsk /r.

Attached Thumbnails

• 

Edited by MSC2, 19 November 2011 - 12:07 PM.

[happyrock]

I may have to go to Safe Mode to do a chkdsk /r.

yep...do it now...

[MSC2]

OK, I will get to it as soon as I can. I'm having some success backing stuff up from Windows Explorer. As long as this is behaving I'll continue backing up, and then I'll get to chkdsk. I have a new 1TB replacement HD available to use if needed as either a replacement for one of the RAID drives, or a new system (non-RAID) drive depending upon where this journey takes us. I haven't heard anything from the Malware Forum (I think they're a bit overwhelmed with requests), but I'm still hoping they'll see an easily removed infection as the culprit and that way I can avoid doing the HD jockey thing

Edited by MSC2, 19 November 2011 - 06:36 PM.

[MSC2]

OK, I finished chkdsk and it found some minor things. Nothing affecting any files, but it said it corrected the status of a number of sectors (it didn't save a log anywhere) I then rebooted and it was quick to the login screen (about 1 minute), and even moved along well for a bit beyond that as I saw the second monitor come to life, but it has been sitting there with a black screen and a mouse pointer for over 20 minutes now.

I was able to backup a good amount of data from the drive, without too much difficulty (only sluggish response to my interactions on the desktop applications). The drive itself was responsive and I copied a good amount of data from the C drive and a few large blocks from my data drive to another computer over my LAN.

OK, after about 20 minutes I see the first signs of life - the desktop is beginning to load, but its choppy (the task bar first, then the desktop), so things are still bogged down.

I don't know, to me it kind of looks like the drive might be OK, but something during startup is slowing things up. Any thoughts?

updated: about 1-1/2 hours in and startup stuff is still loading

Edited by MSC2, 20 November 2011 - 07:20 AM.

[happyrock]

try this to get to the chkdsk log...
click on start...type in wininit...click on wininit.txt from the search results above..
copy and paste the results back here

[MSC2]

I had to run chkdsk from the recovery console. It didn't save a log, and came back with failed to transfer logged messages to the event log error message 50. I checked, but there is no wininit.txt file.

After running chkdsk, when I rebooted, my system finally attempted to run the logged chkdsk on startup that I had requested during my last desktop session. Having just completed this, I cancelled it before it started.

[happyrock]

you should run chkdsk /r until it does not find and fix any errors

[MSC2]

Happyrock,

Here is the chkdsk log. I think it looks error free. A Malware Expert over on in the malware forum has asked me to run several utilities, which I'll be working on tonight. I'll keep you informed of the progress.

Edited by MSC2, 21 November 2011 - 05:34 PM.

[happyrock]

no log showed up

[MSC2]

Log Name: Application
Source: Microsoft-Windows-Wininit
Date: 11/21/2011 12:06:53 AM
Event ID: 1001
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: MIKE2011
Description:


Checking file system on C:
The type of the file system is NTFS.

A disk check has been scheduled.
Windows will now check the disk.

CHKDSK is verifying files (stage 1 of 5)...
288768 file records processed.

File verification completed.
507 large file records processed.

0 bad file records processed.

2 EA records processed.

60 reparse records processed.

CHKDSK is verifying indexes (stage 2 of 5)...
379518 index entries processed.

Index verification completed.
0 unindexed files scanned.

0 unindexed files recovered.

CHKDSK is verifying security descriptors (stage 3 of 5)...
288768 file SDs/SIDs processed.

Security descriptor verification completed.
45376 data files processed.

CHKDSK is verifying Usn Journal...
34491784 USN bytes processed.

Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
288752 files processed.

File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
217330922 free clusters processed.

Free space verification is complete.
Windows has checked the file system and found no problems.

976591871 KB total disk space.
106730280 KB in 224585 files.
118192 KB in 45377 indexes.
0 KB in bad sectors.
419711 KB in use by the system.
65536 KB occupied by the log file.
869323688 KB available on disk.

4096 bytes in each allocation unit.
244147967 total allocation units on disk.
217330922 allocation units available on disk.

Internal Info:
00 68 04 00 95 1e 04 00 30 6a 07 00 00 00 00 00 .h......0j......
79 03 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 y...<...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

Windows has finished checking your disk.
Please wait while your computer restarts.

Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-11-21T05:06:53.000000000Z" />
<EventRecordID>16296</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>MIKE2011</Computer>
<Security />
</System>
<EventData>
<Data>

Checking file system on C:
The type of the file system is NTFS.

A disk check has been scheduled.
Windows will now check the disk.

CHKDSK is verifying files (stage 1 of 5)...
288768 file records processed.

File verification completed.
507 large file records processed.

0 bad file records processed.

2 EA records processed.

60 reparse records processed.

CHKDSK is verifying indexes (stage 2 of 5)...
379518 index entries processed.

Index verification completed.
0 unindexed files scanned.

0 unindexed files recovered.

CHKDSK is verifying security descriptors (stage 3 of 5)...
288768 file SDs/SIDs processed.

Security descriptor verification completed.
45376 data files processed.

CHKDSK is verifying Usn Journal...
34491784 USN bytes processed.

Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
288752 files processed.

File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
217330922 free clusters processed.

Free space verification is complete.
Windows has checked the file system and found no problems.

976591871 KB total disk space.
106730280 KB in 224585 files.
118192 KB in 45377 indexes.
0 KB in bad sectors.
419711 KB in use by the system.
65536 KB occupied by the log file.
869323688 KB available on disk.

4096 bytes in each allocation unit.
244147967 total allocation units on disk.
217330922 allocation units available on disk.

Internal Info:
00 68 04 00 95 1e 04 00 30 6a 07 00 00 00 00 00 .h......0j......
79 03 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 y...&lt;...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

Windows has finished checking your disk.
Please wait while your computer restarts.
</Data>
</EventData>
</Event>

[happyrock]

it looks good...let us know when you get help in the malware section ...I would like to follow it..
post a link to it back here please

[MSC2]

http://www.geekstogo...ew__getlastpost

[happyrock]

in the malware trhread you say this,,,

Also my C Drive is made up of two Western Digital (WD1002FAEX, SATA 6 Gb/s,

that is a RAID 0 setup...
can you get a screenshot of whats showing in my computer

[MSC2]

OK, my machine seems to be back to normal, but I can't really put my finger on what it was. You can review the thread over on the Malware forum, but it doesn't look like there was any infection. I guess there's a chance of some impending hard drive issues, so maybe I'll try to replace one of the RAID drives. I may also have some BIOS setting issues, as it was pointed out that during the prolonged power outage, my MoBo battery may have run down and caused some BIOS setting issues. Do you have any experience with BIOS settings so I can check to make sure things are set where they should be?

Also, I've done some searches on the MARVELL RAID interface, and it doesn't get very good press. I'm wondering if I'd be better off moving my system image to a single non-RAID drive. Is it possible to move my existing image over to another drive without have to reinstall everything??