External Hard Disk

[edgardo]

I have an external Hard Disk connect to USB port.

Starting Malwarebytes it scan everything Windows system and all program files 

How may I get the external drive scanned only ?

[Malwarebytes]

***This is an automated reply***

Hi,

Thanks for posting in the Malwarebytes for Windows Help forum.

If you are having technical issues with our Windows product, please do the following:

Malwarebytes Support Tool - Advanced Options

This feature is designed for the following reasons:

• For use when you are on the forums and need to provide logs for assistance
• For use when you don't need or want to create a ticket with Malwarebytes
• For use when you want to perform local troubleshooting on your own

How to use the Advanced Options:

Spoiler

1. Download Malwarebytes Support Tool
2. Double-click mb-support-X.X.X.XXXX.exe to run the program
   • You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent.
3. Place a checkmark next to Accept License Agreement and click Next
4. Navigate to the Advanced tab
5. The Advanced menu page contains four categories:
   • Gather Logs: Collects troubleshooting information from the computer. As part of this process, Farbar Recovery Scan Tool (FRST) is run to perform a complete diagnosis. The information is saved to a file on the Desktop named mbst-grab-results.zip and can be added as an email attachment or uploaded to a forum post to assist with troubleshooting the issue at hand.
   • Clean: Performs an automated uninstallation of all Malwarebytes products installed to the computer and prompts to install the latest version of Malwarebytes for Windows afterwards. The Premium license key is backed up and reinstated. All user configurations and other data are removed. This process requires a reboot.
   •  Repair System: Includes various system-related repairs in case a Windows service is not functioning correctly that Malwarebytes for Windows is dependent on. It is not recommended to use any Repair System options unless instructed by a Malwarebytes Support agent.
   • Anonymously help the community by providing usage and threat statistics: Unchecking this option will prevent Malwarebytes Support Tool from sending anonymous telemetry data on usage of the program.
6. To provide logs for review click the Gather Logs button
7. Upon completion, click OK
8. A file named mbst-grab-results.zip will be saved to your Desktop
9. Please attach the file in your next reply.
10. To uninstall all Malwarebytes Products, click the Clean button.
11. Click the Yes button to proceed. 
12. Save all your work and click OK when you are ready to reboot.
13. After the reboot, you will have the option to re-install the latest version of Malwarebytes for Windows.
14. Select Yes to install Malwarebytes.
15. Malwarebytes for Windows will open once the installation completes successfully.

Screenshots:

Spoiler

 

 

 

 

Spoiler

 

 

 

 

If you are having licensing issues, please do the following: 

Spoiler

For any of these issues:

• Renewals
• Refunds (including double billing)
• Cancellations
• Update Billing Info
• Multiple Transactions
• Consumer Purchases
• Transaction Receipt

Please contact our support team at https://support.malwarebytes.com/hc/en-us/requests/new to get help

If you need help looking up your license details, please head here: Find my premium license key

 

 

Thanks in advance for your patience.

-The Malwarebytes Forum Team

[Porthos]

3 minutes ago, edgardo said:

How may I get the external drive scanned only ?

Let me as you a question first. What kind of files do you store on the external drive?

[edgardo]

52 minutes ago, Porthos said:

Let me as you a question first. What kind of files do you store on the external drive?

 

53 minutes ago, Porthos said:

Let me as you a question first. What kind of files do you store on the external drive?

I have a Western Digital  3Tb with photos (Tiff-Jpeg) and video (Avi). 

 I read all directories but as soon as I click anything on the external drive the PC hangs, it doesn't respond.   Windows chkdsk says there are no errors. Hypothesis of a malware, I have no other ideas.

[Porthos]

2 hours ago, edgardo said:

I have a Western Digital  3Tb with photos (Tiff-Jpeg) and video (Avi). 

Scanning the external is a waste of time for the external because,

Malwarebytes does not target script files during a scan.. That means MB will not target; JS, HTML, VBS, .CLASS, SWF, BAT, CMD, PDF, PHP, etc.

It also does not target documents such as; PDF, DOC, DOCx, XLS, XLSx, PPT, PPS, ODF, etc.

It also does not target media files;  MP3, WMV, JPG, GIF, etc.

Malwarebytes will detect files like these on execution only with the anti-exploit module of the paid program.

[exile360]

What Porthos says above is accurate, but just for reference, an external drive may be scanned either using the Custom Scan option as documented in this support article or by right-clicking on the drive in Windows explorer and selecting Scan with Malwarebytes.

[edgardo]

Thanks Porthos and Exile. 

With the time saved I can drink an excellent beer (hi !!) 

It is better to smile and not get angry when I think that external disk problems are due to a partition software.

I made a mistake, I trusted it and now I'm trying to recover the files. I have a backup of many,  unfortunately not all.

[exile360]

That's unfortunate.  If you wish to seek help with the drive you can post in our General Windows PC Help area to see if anyone has any ideas that might help: https://forums.malwarebytes.com/forum/6-general-windows-pc-help/

[AdvancedSetup]

Hello @edgardo

Can you please run the following and we'll see if we can gather more information to assist you

 

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system.
You can check here if you're not sure if your computer is 32-bit or 64-bit

• Double-click to run it. When the tool opens click Yes to disclaimer.
• Press the Scan button.
• It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
• The first time the tool is run, it also makes another log (Addition.txt). Please attach it to your reply as well.

Thank you

 

 

[edgardo]

303 / 5000

 

Risultati della traduzione

First of all, thanks for your reply. I attach the two Farbar files.

In these three days I have made many attempts (system restart, chkdsk, sfc / scannow),  something has happened

1) The  external hard disk is listed by Windows Disk Management now.   2) Windows explore files shows all the directories in the disk  3) I can click on a directory and see the files   4) The WD hard disk seems good,  disk property finds no errors.

But one click on a file (it is a 20M tiff - just to copy it elsewhere) and the PC hangs, doesn't respond, even system restart hangs. Just remove the hard disk from USB and the PC starts working again    Now I am resigned but so very curious to understand which is the culprit (Virus, defective disk, Windows)

Regards

 

 

Addition.txt FRST.txt

Edited February 28, 2021 by AdvancedSetup
corrected font issue

[AdvancedSetup]

Hi @edgardo

The following show there are issues with the hard drive.

Error: (02/27/2021 05:29:46 PM) (Source: disk) (EventID: 7) (User: )
Description: Rilevato blocco danneggiato sul dispositivo \Device\Harddisk1\DR1.

Error: (02/27/2021 05:29:46 PM) (Source: disk) (EventID: 7) (User:)
Description: Bad block detected on device \ Device \ Harddisk1 \ DR1.

 

Please click on Start and type in "Device Manager" and open it.

Then under Disk drives open it and tell me what the drive model number or name is please.

You can take a screen shot if you like.

You can also click on Start and type in PowerShell and when it shows on the menu, right click and choose "Run as administrator" then copy/paste the following and press the Enter key. Then copy paste what it shows or a screenshot

Get-PhysicalDisk | Format-Table -AutoSize 

Thanks

 

[edgardo]

Hi AdvanceSetup, thank you for taking your time.

Attached screenshots   1) HDD Powershell    2) Western Digital Diagnostics (Test hangs)  3) HDD Scan (shows Errors)  4)  Western Digital HDD Status (Cheer everything is perfect)

I would like to try to isolate bad sectors with some software, time to recover some files and then destroy the disk.  Do you think this is a good idea?

Many thanks again

 

HDD Scan.pdf

[ingber]

On 2/24/2021 at 10:53 AM, Porthos said:

Scanning the external is a waste of time for the external because,

Malwarebytes does not target script files during a scan.. That means MB will not target; JS, HTML, VBS, .CLASS, SWF, BAT, CMD, PDF, PHP, etc.

 

It also does not target documents such as; PDF, DOC, DOCx, XLS, XLSx, PPT, PPS, ODF, etc.

 

It also does not target media files;  MP3, WMV, JPG, GIF, etc.

 

Malwarebytes will detect files like these on execution only with the anti-exploit module of the paid program.

 

Hi.  How does it determine these types of files that it does not target/scan -- by their (stated) suffixes?

[David H. Lipman]

MBAM specifically targets PE binaries that start with the first two characters being; MZ
They can be; EXE, CPL, SYS, DLL, SCR and OCX. Any of these file types can be renamed to be anything such as;  TXT, JPG, CMD and BAT and they will still be targeted just as long as the binary starts with 'MZ'.  This includes file names that use Unicode Right-to-Left Override to obfuscate an executable file extension.

 

 

[AdvancedSetup]

I would most definitely recommend backing up as much of your data as you can to another external drive. Then destroy this drive and purchase a new one to install Windows on and restore your data.