Q: Is rootkit protection, or anyother cause a drive no longer read discs?
I had a HP Disc Writer CD52 that over time increasingly recognized music and data discs over time.
That drive is set as a master on my MOBOs Secondary Channel.
I that station moved to the slave position on the secondary channel and added a CD-ROM drive in the Master position. I think it worked a little better after that. However, over time, the CD52 CD-RW Drive does not recognize any disks of any kind.
I replace the HP with my old TDK burner in the slave position. Everything is working well when I use the CD to rip music with CDex and the TDK burner to burn discs. Problem
The Returns
——————-
I attmepted to rip two “Greatest Hits” Greatest Hits 196 297 750 320
20 1963
or
The Best of 60s Party Rock
placed into my CD-ROM using CDex I always keep .
u003cShiftu003e key.
I get the “read from the CD Cursor” on my screen for a moment at a time for maybe three or four times. CDex my computer and show no disk in the drive. After a while, the disk ejects on its own. No discs can be read / seen / found in my CD-ROM drive.
I remember trying to rip one of the 20 Greatest Hits discs back when I used the HP CD52. I put the above three disks to destroy.
I have ripping other discs in my TDK CD-RW in the slave position with CDex.
Could something happen to one of the above discs that my HP CD52 slain and now my CD-ROM drive?
What can I do / try?
Thanks
Re:Just an update …
Well, I successfulle ripped those three discs with my TDK with no problems.
So, it wasn't the disks.
I've yet to change the cable or run either rootkit finding program.
Re:I ran RootKit Revealer months ago and it found nothing.
I'm DL'ing BlackLight Beta Now.
I'll try another cable.
Re:Try a repair install of Windows … Also check your IDE Ribbon cables .. I had a pc once (friends)
that one cd drive was not recognized (pc was about 4 months old) … trouble was about 3 or 4
wires broken in the IDE Ribbon cable .. new cable, fixed it right up
Re:Removing the rootkit can make Windows stop reading from the drives. It's a messy situation.
Re:I checked a list of rootkit baring discs at cdfreaks.com.
None of my discs are on the list.
I thought rootkits disabled a drive's ability to read music discs but had no effect on data discs.
My HP cd52 burner recognizes no discs.
I replaced it with my OLD TDK burner in the Slave position on the Master Channel.
The CD-ROM in the Master position of the Master Channel now recognizes NO discs.
The TDK burner sees all discs and rips well.
The failed cd52 is about a year old with as much use.
The failed CD-ROM is about 5-years old with 3-years and 3-months use.
The working TDK is about 5-years old with 3-years and 3-months use.
I have a rootkit revealer I DL'd some time ago.
I'll check out BlackLight beta.
Re:If the CD you bought is a Sony/BMG product, it probably is Rootkit at work.
Re:If you've been keeping your system up-to-date on its Microsoft patching, then you don't need to worry about JS/Exploit and its buddies there. Your system's immune once it's been patched, and this patch came out back in 2003.
The explaination might be a rootkit, yeah. Try F-Secure's BlackLight beta (http://www.f-secure.com/blacklight) rootkit detector and see if it spots any.
Re:Disk Management shows no media in either of my two optical drives.
Note there is a music disc present.
Disk Management states no media present no matter which drive the disc is in.
———————————–
The following events took place over the last month….
———————————–
XP System Event Log Shows:
Source: Service Control Manager
The IPSEC Services service terminated with the following error:
The attempted operation is not supported for the type of object referenced.
Event ID: 7023
———————————–
XP System Event Log Shows:
Source: Cdrom
\Device\CDRom2, has a bad block.
Event ID: 7
The above error occured on the below drives/dates:
CDrom2 05-02-06
CDrom2 05-02-06
CDrom3 05-02-06
CDrom3 05-02-06
CDrom3 05-02-06
CDrom3 05-02-06
CDrom3 05-02-06
CDrom3 05-02-06
CDrom3 05-02-06
CDrom3 05-02-06
CDrom2 04-19-06
CDrom2 04-19-06
————————————-
McAfee found a trojan created on my system on 05-01-06.
Trojan Name: Exploit-ByteVerify, JV/Shinwow, OLowZones-2.gen
It detected the trojan in a zip file.
The zip file contained
Name Size
——————————
Counter.class 19,952
Gummy.class 240
VerifierBug.class 902
Web.exe 7,151
Worker.class 3,400
Xeyond.class 1,263
The above files were created on 04-03-06.
The zip file was created on my computer on 05-01-06
I deleted the zip file that contained the trojan.
There's still a *.idx file of the same name.
I dragged it to my desktop to see if it effected Java.
If it doesn't, I'll delete it.
The idx file contains Japanese characters when viewed as unicode. Viewing as JAPANESE (Shift-JIS) shows
http://zllin.info/e/us36/jar.jar
` ?( x.x.x.x? w
—————————————————–
I've experienced the problem of discs not recognized in that CD-ROM drive.
The system attemts to read every so often and then ejects weather I holddown the <Shift> or not.
The CD-RW on the same channel sees the disc and works with it.
XP System Even Log shows no Events tonight or the last few days I've experienced this problem.
Re:Have you looked in your XP System Event Logs to see what's being reported by Windows?
Re:Primary Channel
Master = CD-ROM
Slave = CD-RW
Secondary Channel
Master = ATA100 HD
Slave = ATA100 HD
Device Manager
——————
Intel(R) 82801EB Ultra ATA Storage Controllers
Intel(R) 82801EB Ultra ATA Storage Controllers
Primary IDE Channel
Primary IDE Channel
Secondary IDE Channel
Secondary IDE Channel
First listed Primary IDE Channel Advanced Settings
Device 0
Device Type: Auto Detection (Greyed Out)
Transfer Mode: DMA if available
Current Transfer Mode: Ultra DMA Mode 5
Device 1
Device Type: Auto Detection
Transfer Mode: DMA if available
Current Transfer Mode: Not Applicable
Second listed Primary IDE Channel Advanced Settings
Device 0
Device Type: Auto Detection (Greyed Out)
Transfer Mode: DMA if available
Current Transfer Mode: Ultra DMA Mode 2
Device 1
Device Type: Auto Detection (Greyed Out)
Transfer Mode: DMA if available
Current Transfer Mode: Multi-Word DMA Mode 2
First listed Secondary IDE Channel Advanced Settings
Device 0
Device Type: Auto Detection
Transfer Mode: DMA if available
Current Transfer Mode: Not Applicable
Device 1
Device Type: Auto Detection
Transfer Mode: DMA if available
Current Transfer Mode: Not Applicable
Second listed Secondary IDE Channel Advanced Settings
Device 0
Device Type: Auto Detection (Greyed Out)
Transfer Mode: DMA if available
Current Transfer Mode: Ultra DMA Mode 5
Device 1
Device Type: Auto Detection (Greyed Out)
Transfer Mode: DMA if available
Current Transfer Mode: Ultra DMA Mode 5
Re:Double-check the IDE controller properties on your PC.
/Computer Management/Device Manager/IDE ATA/ATAPI Controllers/Primary IDE Channel/Advanced. (Also, check the Secondary IDE Channel/Advanced).
Make sure that the Transfer Mode in "Advanced Settings" is set to "DMA if Available".
0 Comments.