Jump to content

Welcome to MSFN Forum
Register now to gain access to all of our features. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more. This message will be removed once you have signed in.
Login to Account Create an Account


Photo

Hidden message or Virus?!?


  • Please log in to reply
12 replies to this topic

#1
Fr33m4n

Fr33m4n

    Member

  • Member
  • PipPip
  • 120 posts
Diggin through my drawer i found an old 2GB usb stick that I had gotten at work some time ago. I plugged it into my machine and discovered it contained a few old work documents. Since none of it was essential I decided to reformat the drive. I left the name as "untitled" and proceded to format it as fat32. What happened next is complete mystery.

The drive somehow formated itself into two partitions where one was a 500mb hidden unaccessible partition with the name "untitled" and the other partition was 1.5GB and had named itself "arid in Pes". I then opened the "arid in Pes" partition and was surprised to see that it contained 81 files all of which was 0 kb in size and no extension but had different file names. If you read through the list of files you could make out fragments of sentances spanning several files. It was really wierd. I'm attatching two screenshot of the files.

So what do you guys think this is? A virus or a cleverly hidden message?

Attached Files




How to remove advertisement from MSFN

#2
5eraph

5eraph

    Update Packrat

  • MSFN Sponsor
  • 1,137 posts
  • OS:XP Pro x64
  • Country: Country Flag

Donator

It seems more likely that, in the course of formatting the USB stick, the location of the file allocation table was changed to overlap what was once the contents of a text file. What you are seeing were the previous contents of that text file.

#3
Fr33m4n

Fr33m4n

    Member

  • Member
  • PipPip
  • 120 posts
That would be amazing, but seriously, what's the odds of something like that happening? I can't quite think of which text file it would be either. The contents sound more like something out of a novel really.

#4
Fr33m4n

Fr33m4n

    Member

  • Member
  • PipPip
  • 120 posts
I reformated a second time. This time I only got one partition but the partition was still named "arid in pes" and it appears to have the same 0 kb files all over. Strange.

#5
iamtheky

iamtheky

    Friend of MSFN

  • Member
  • PipPipPipPipPip
  • 866 posts
what are you formatting with, have you tried a third party utility? maybe sdelete everything on it then format it.
iamtheKy

#6
puntoMX

puntoMX

    n00b of Masters and Vice Versa

  • Super Moderator
  • 4,845 posts
  • OS:Windows 8.1 x64
  • Country: Country Flag

So what do you guys think this is? A virus or a cleverly hidden message?

A Virus (that did his work) or a half dead USB thump-drive that doesn't let you format it well. Now, remove the partitions with disk-manager and remove the drive from the PC, plug it back in and make a new partition, format it with fat32 or NTFS or so. now, let's see what happens.

#7
DigeratiPrime

DigeratiPrime

    MSFN Junkie

  • Patrons
  • 3,550 posts
  • OS:Windows 7 x64
  • Country: Country Flag
I was going to suggest erasing the disk with diskpart cmd or disk management mmc, but it looks like your using osx.
Recommended Software: KeePass | Microsoft ICE | VisualWget | Vitamin D Video |

#8
Tripredacus

Tripredacus

    K-Mart-ian Legend

  • Super Moderator
  • 9,672 posts
  • OS:Server 2012
  • Country: Country Flag

Donator

I was going to suggest erasing the disk with diskpart cmd or disk management mmc, but it looks like your using osx.


Or WindowBlinds. I can make my Win98 PC look like that too.

half dead USB thump-drive


:lol:
MSFN RULES | GimageX HTA for PE 3.x | lol probloms
msfn2_zpsc37c7153.jpg

#9
Octopuss

Octopuss

    I am the walrus

  • Member
  • PipPipPipPipPipPip
  • 1,127 posts
  • OS:Windows 7 x64
  • Country: Country Flag

Donator

I would try the HP USB format tool.

#10
dencorso

dencorso

    Adiuvat plus qui nihil obstat

  • Super Moderator
  • 5,754 posts
  • OS:98SE
  • Country: Country Flag

Donator

No. Use the free version of Active@ Kill Disk to fully zero it out. Then repartition and reformat. And let's see what happens. In case the pendrive is OK, this will get it pristine once again.

#11
puntoMX

puntoMX

    n00b of Masters and Vice Versa

  • Super Moderator
  • 4,845 posts
  • OS:Windows 8.1 x64
  • Country: Country Flag

half dead USB thump-drive


:lol:

I wasn't joking, there is more to it than 1 and 0. What I mend was: You can access the drive but can't set some bits to 0 again. (that LoL sign is on the wrong side of the screen ;))

#12
Tripredacus

Tripredacus

    K-Mart-ian Legend

  • Super Moderator
  • 9,672 posts
  • OS:Server 2012
  • Country: Country Flag

Donator


half dead USB thump-drive


:lol:

I wasn't joking, there is more to it than 1 and 0. What I mend was: You can access the drive but can't set some bits to 0 again. (that LoL sign is on the wrong side of the screen ;))


Thump thump :whistle:
MSFN RULES | GimageX HTA for PE 3.x | lol probloms
msfn2_zpsc37c7153.jpg

#13
iamtheky

iamtheky

    Friend of MSFN

  • Member
  • PipPipPipPipPip
  • 866 posts
not with your signature :no:
iamtheKy




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users



How to remove advertisement from MSFN