Solved

windows kb files "The volume for a file was externally altered" virus

Posted on 2010-08-26
3
866 Views
Last Modified: 2013-11-22
Does anyone ever heard about this error message.
It shows everytime we try to execute any update file downloaded from microsoft.

i.e.: We are trying to install XP SP3 in a XP SP2 Pro box, but, after de expand files process, the error mesage is shown again.

OneCare Live on-line analisys didn't correct the problem nor Microsoft Forefront.

Tried to scan the HD connected to another (clean) box. Even it detected and erased several files, back to the original box the issue remains.

These are the basic lines, if you need aditional info, just demand it.

0
Comment
Question by:Catalaziz
3 Comments
 
LVL 24

Expert Comment

by:Mohammed Hamada
ID: 33537063
What is the file system type "NTFS or Fat 32 " ? Can you try to check your disk if there's some bad sectors that needs to be checked.

Click Start
Run
Type cmd
type chkdsk /f c: and enter
It will ask you to schedule the chkdsk on reboot, Type Y and enter
Do the same thing for the other partitions by changing the Letter C.

GL
0
 
LVL 2

Accepted Solution

by:
ccampbell15 earned 125 total points
ID: 33539674
fownload malwarebytes from http://www.malwarebytes.org/ 
Install and run

Download Gmer from http://www.gmer.net/ 
and run it

Report back with the results
0
 

Author Closing Comment

by:Catalaziz
ID: 33540131
You did it.

MalwareBites identified the thread as a rootkik.
Unfortunately I can't get the log.

It's strange that Microsoft Forefront didn't found it. And even googleing about atapidrv.sys, the engine didn't found too much references.

Many thanks.
Josep.
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

These are on the increase and getting more common these days. Users who use the Google search engine may complain of having their search redirected to unwanted sites, regardless of what browser is used. This happens when the system is infected with…
PREFACE The purpose of this guide is to explain what the SEPC Status Utility is and how it works. I have written the utility using AutoIt and have included the source code for your review. You are welcome to modify the code to your liking, but I wi…
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question