• Announcements

    • xper

      MSFN Sponsorship and AdBlockers!   07/10/2016

      Dear members, MSFN is made available via subscriptions, donations and advertising revenue. The use of ad-blocking software hurts the site. Please disable ad-blocking software or set an exception for MSFN. Alternatively, become a site sponsor and ads will be disabled automatically and by subscribing you get other sponsor benefits.
Fr33m4n

Hidden message or Virus?!?

13 posts in this topic

Diggin through my drawer i found an old 2GB usb stick that I had gotten at work some time ago. I plugged it into my machine and discovered it contained a few old work documents. Since none of it was essential I decided to reformat the drive. I left the name as "untitled" and proceded to format it as fat32. What happened next is complete mystery.

The drive somehow formated itself into two partitions where one was a 500mb hidden unaccessible partition with the name "untitled" and the other partition was 1.5GB and had named itself "arid in Pes". I then opened the "arid in Pes" partition and was surprised to see that it contained 81 files all of which was 0 kb in size and no extension but had different file names. If you read through the list of files you could make out fragments of sentances spanning several files. It was really wierd. I'm attatching two screenshot of the files.

So what do you guys think this is? A virus or a cleverly hidden message?

post-83748-127560316731_thumb.png

post-83748-127560317749_thumb.png

0

Share this post


Link to post
Share on other sites

It seems more likely that, in the course of formatting the USB stick, the location of the file allocation table was changed to overlap what was once the contents of a text file. What you are seeing were the previous contents of that text file.

0

Share this post


Link to post
Share on other sites

That would be amazing, but seriously, what's the odds of something like that happening? I can't quite think of which text file it would be either. The contents sound more like something out of a novel really.

0

Share this post


Link to post
Share on other sites

I reformated a second time. This time I only got one partition but the partition was still named "arid in pes" and it appears to have the same 0 kb files all over. Strange.

0

Share this post


Link to post
Share on other sites

what are you formatting with, have you tried a third party utility? maybe sdelete everything on it then format it.

0

Share this post


Link to post
Share on other sites

So what do you guys think this is? A virus or a cleverly hidden message?

A Virus (that did his work) or a half dead USB thump-drive that doesn't let you format it well. Now, remove the partitions with disk-manager and remove the drive from the PC, plug it back in and make a new partition, format it with fat32 or NTFS or so. now, let's see what happens.
0

Share this post


Link to post
Share on other sites

I was going to suggest erasing the disk with diskpart cmd or disk management mmc, but it looks like your using osx.

0

Share this post


Link to post
Share on other sites

I was going to suggest erasing the disk with diskpart cmd or disk management mmc, but it looks like your using osx.

Or WindowBlinds. I can make my Win98 PC look like that too.

half dead USB thump-drive

:lol:

0

Share this post


Link to post
Share on other sites

I would try the HP USB format tool.

0

Share this post


Link to post
Share on other sites

No. Use the free version of Active@ Kill Disk to fully zero it out. Then repartition and reformat. And let's see what happens. In case the pendrive is OK, this will get it pristine once again.

0

Share this post


Link to post
Share on other sites
half dead USB thump-drive

:lol:

I wasn't joking, there is more to it than 1 and 0. What I mend was: You can access the drive but can't set some bits to 0 again. (that LoL sign is on the wrong side of the screen ;))
0

Share this post


Link to post
Share on other sites
half dead USB thump-drive

:lol:

I wasn't joking, there is more to it than 1 and 0. What I mend was: You can access the drive but can't set some bits to 0 again. (that LoL sign is on the wrong side of the screen ;))

Thump thump :whistle:

0

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.