|Posted on Thursday, February 13, 2003 - 7:18 am: |
On Windows 98, I have a machine that once logged in to, opens a DOS window and tries to run fdisk EVERY TIME YOU TURN ON THE MACHINE. It is really annoying, but other than that, no big deal. I have gone into the system settings during the bootup and can't find anything to stop it from happening. Any ideas?
|Posted on Thursday, February 13, 2003 - 5:23 pm: |
for that to happen, it's a virus, i'd say, unless it's a gag that someone put on the pc. the gag being you think fdisk is running, but it really isn't, it just makes it look as if it is. it'd be set to do what you describe.
|Posted on Thursday, February 13, 2003 - 8:44 pm: |
Yup, just like the old cd tray always popping out every 10 seconds or so... check for environmental variables which may affect your startup or while in DOS mode check autoexec.bat with the EDIT command for a subroutine or batch file with fdisk in a line. If you still don't find anything related to FDISK than definatly scan for viruses.
|Posted on Friday, February 14, 2003 - 6:28 am: |
It is not just a spoof, it actually is fdisk. I can move around within the program and use it just like I would while installing windows. We have the very latest version of Sophos anti-virus installed on it, so any other ideas?
|Posted on Friday, February 14, 2003 - 7:48 am: |
Does FDISK load before or after Windows loads?
|Posted on Friday, February 14, 2003 - 10:27 am: |
First of all, it's on a Novell network. We login to Novell, then Windows starts to load, as windows is loading the desktop/start menu/etc, and fdisk DOS window opens.
|Posted on Tuesday, February 18, 2003 - 10:07 am: |
I checked out the boot up files (autoexec, config.sys, etc.) they do not invoke fdisk to run. I also scanned for viruses using Sophos Sweep v. 3.66 (latest version) and it was clean. Any other ideas?
|Posted on Tuesday, February 18, 2003 - 8:42 pm: |
I'm not familiar with Novell networks, could it be invoked from another source? Like another IP on the network?
|Posted on Wednesday, February 19, 2003 - 10:34 am: |
If it is invoked from another ip address on the network, shouldn't fdisk pop up on other machines? I have never seen anything like this. I have even gone into the menu during bootup and can't find any settings that might be turned on that shouldn't be or vice-versa. Do you know of any other files that I could check to see if they invoke the program?
|Posted on Wednesday, February 19, 2003 - 9:13 pm: |
have you checked the startup in the registry?
|Posted on Wednesday, February 19, 2003 - 9:28 pm: |
To answer big guys question. Not if only the one PC is the target.
|Posted on Wednesday, February 26, 2003 - 12:54 pm: |
I checked the registry and nothing...what next?