Solved

windows kb files "The volume for a file was externally altered" virus

Posted on 2010-08-26
3
831 Views
Last Modified: 2013-11-22
Does anyone ever heard about this error message.
It shows everytime we try to execute any update file downloaded from microsoft.

i.e.: We are trying to install XP SP3 in a XP SP2 Pro box, but, after de expand files process, the error mesage is shown again.

OneCare Live on-line analisys didn't correct the problem nor Microsoft Forefront.

Tried to scan the HD connected to another (clean) box. Even it detected and erased several files, back to the original box the issue remains.

These are the basic lines, if you need aditional info, just demand it.

0
Comment
Question by:Catalaziz
3 Comments
 
LVL 23

Expert Comment

by:Mohammed Hamada
ID: 33537063
What is the file system type "NTFS or Fat 32 " ? Can you try to check your disk if there's some bad sectors that needs to be checked.

Click Start
Run
Type cmd
type chkdsk /f c: and enter
It will ask you to schedule the chkdsk on reboot, Type Y and enter
Do the same thing for the other partitions by changing the Letter C.

GL
0
 
LVL 2

Accepted Solution

by:
ccampbell15 earned 125 total points
ID: 33539674
fownload malwarebytes from http://www.malwarebytes.org/
Install and run

Download Gmer from http://www.gmer.net/
and run it

Report back with the results
0
 

Author Closing Comment

by:Catalaziz
ID: 33540131
You did it.

MalwareBites identified the thread as a rootkik.
Unfortunately I can't get the log.

It's strange that Microsoft Forefront didn't found it. And even googleing about atapidrv.sys, the engine didn't found too much references.

Many thanks.
Josep.
0

Featured Post

6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

Join & Write a Comment

12 Steps to a more secure Internet experience (http://tekblog.teksquisite.com/) Everyone who is a licensed driver initially had to pass a driving test that consisted of taking:    1. a written test    2. a road test    3. a vision test Le…
PREFACE The purpose of this guide is to explain how to manually move a SEP client to a different client group by performing steps on the client-side. These steps may prove particularly useful because they allow the client to move after it has alrea…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now