Cookie Consent by Free Privacy Policy Generator 📌 Weird disk, Just wondering what it is?

🏠 Team IT Security News

TSecurity.de ist eine Online-Plattform, die sich auf die Bereitstellung von Informationen,alle 15 Minuten neuste Nachrichten, Bildungsressourcen und Dienstleistungen rund um das Thema IT-Sicherheit spezialisiert hat.
Ob es sich um aktuelle Nachrichten, Fachartikel, Blogbeiträge, Webinare, Tutorials, oder Tipps & Tricks handelt, TSecurity.de bietet seinen Nutzern einen umfassenden Überblick über die wichtigsten Aspekte der IT-Sicherheit in einer sich ständig verändernden digitalen Welt.

16.12.2023 - TIP: Wer den Cookie Consent Banner akzeptiert, kann z.B. von Englisch nach Deutsch übersetzen, erst Englisch auswählen dann wieder Deutsch!

Google Android Playstore Download Button für Team IT Security



📚 Weird disk, Just wondering what it is?


💡 Newskategorie: Linux Tipps
🔗 Quelle: reddit.com

Hi,

I only have 3 physical disks plugged into my pc and I did a hardware probe and I found this 4th disk here and I don't see it in any file managers and was wondering how I could maybe go about viewing the contents of it. As the name suggests I would assume it's in ram but I don't know how to access it, the device number is 42. Any help would be great! I also noticed an audio device that I didn't expect to see, I will post that info below these... this audio device says it's plugged into a PCI slot, but I don't think that's true, how can I remove it or unnattach?

I did just go through a major worm attack originating on Windows 10 and it did a bunch of weird things to my system including spread to my cellular device. On the cellular device it created an embedded profile and it "Split" my Bluetooth device into 2 separate devices noticed when pairing with windows it registered Samsung S9 Galaxy AND a Bluetooth LE 12232566433 device, and this device was *Brute Forcing* bluetooth connections to every and any surrounding devices. The malware would automatically infect any downloaded ISO's immediately and the windows ISO's would attach a virtual drive only visible from AOMEI Partition Assistant and never in diskmanagement. This HW Probe is from a Fedora Linux Installation using a program called Hardware Probe. There are probably more irregularities but being able to identify/destroy or remove any of these or at least put my mind to ease would be wonderful. Not sure if iSCSI is default on disks or not but I didn't put any iSCSI information on the drives either. Believe it or not but the malware also used binary and windows media player to read data from the computer almost like an artificial intelligence and learned on the go. I'm 120% confident it was using frequencies from this audio driver and a couple other things coupled with manipulated codecs and windows default sounds to read the system data almost like something out of a freaking Transformers movie where the alien sounds broke into government security in less than 10 seconds. I literally am not making this shit up and I am extremely serious.

39: EXPECTED IDE 300.0: 10600 Disk [Created at block.255] Unique ID: WZeP.Y+aRf3jmyM7 Parent ID: w7Y8.d2XQBlJfSx3 SysFS ID: /class/block/sdb SysFS BusID: 3:0:0:0 SysFS Device Link: /devices/pci0000:00/0000:00:1f.2/ata4/host3/target3:0:0/3:0:0:0 Hardware Class: disk Model: "SanDisk SSD PLUS" Vendor: "SanDisk" Device: "SSD PLUS" Revision: "04RL" Driver: "ahci", "sd" Driver Modules: "ahci" Device File: /dev/sdb Device Number: block 8:16-8:31 Drive status: no medium Config Status: cfg=new, avail=yes, need=no, active=unknown Attached to: #16 (SATA controller)

40: EXPECTED IDE 500.0: 10600 Disk [Created at block.255] Unique ID: _kuT.y8KBOsyOUH9 Parent ID: w7Y8.d2XQBlJfSx3 SysFS ID: /class/block/sdc SysFS BusID: 5:0:0:0 SysFS Device Link: /devices/pci0000:00/0000:00:1f.2/ata6/host5/target5:0:0/5:0:0:0 Hardware Class: disk Model: "Hitachi HTS54757" Vendor: "Hitachi" Device: "HTS54757" Revision: "A50A" Driver: "ahci", "sd" Driver Modules: "ahci" Device File: /dev/sdc Device Number: block 8:32-8:47 Drive status: no medium Config Status: cfg=new, avail=yes, need=no, active=unknown Attached to: #16 (SATA controller)

41: EXPECTED IDE 200.0: 10600 Disk [Created at block.255] Unique ID: 3OOL.6dcrlFL3Ai0 Parent ID: w7Y8.d2XQBlJfSx3 SysFS ID: /class/block/sda SysFS BusID: 2:0:0:0 SysFS Device Link: /devices/pci0000:00/0000:00:1f.2/ata3/host2/target2:0:0/2:0:0:0 Hardware Class: disk Model: "Samsung SSD 870" Vendor: "Samsung" Device: "SSD 870" Revision: "2B6Q" Driver: "ahci", "sd" Driver Modules: "ahci" Device File: /dev/sda Device Number: block 8:0-8:15 Drive status: no medium Config Status: cfg=new, avail=yes, need=no, active=unknown Attached to: #16 (SATA controller)

********ALARM 42: None 00.0: 10600 Disk [Created at block.255] Unique ID: OKyR.Fxp0d3BezAE SysFS ID: /class/block/zram0 Hardware Class: disk Model: "Disk" Device File: /dev/zram0 Device Number: block 252:0 Drive status: no medium Config Status: cfg=new, avail=yes, need=no, active=unknown*********

The random audio device that I don't think exists:

35: ****ALARM PCI 100.1: 0403 Audio device [Created at pci.386] Unique ID: NXNs.SgX80VxvM07 Parent ID: vSkL.OXv6hi5TXAE SysFS ID: /devices/pci0000:00/0000:00:01.0/0000:01:00.1 SysFS BusID: 0000:01:00.1 Hardware Class: sound Model: "nVidia GK110 High Definition Audio Controller" Vendor: pci 0x10de "nVidia Corporation" Device: pci 0x0e1a "GK110 High Definition Audio Controller" SubVendor: pci 0x3842 "eVga.com. Corp." SubDevice: pci 0x2791 Revision: 0xa1 Driver: "snd_hda_intel" Driver Modules: "snd_hda_intel" Memory Range: 0xf7080000-0xf7083fff (rw,non-prefetchable) IRQ: 17 (390 events) Module Alias: "pci:v000010DEd00000E1Asv00003842sd00002791bc04sc03i00" Config Status: cfg=new, avail=yes, need=no, active=unknown Attached to: #19 (PCI bridge)

Also, I found this odd not sure why the mouse has two unique identifiers:
44: *** ALARM USB 00.0: 10503 USB Mouse [Created at usb.122] Unique ID: UfPf._DHUr4WNNo5 Parent ID: 2XnU.Iij6smqB8J2 SysFS ID: /devices/pci0000:00/0000:00:1c.4/0000:05:00.0/usb5/5-1/5-1:1.0 SysFS BusID: 5-1:1.0 Hardware Class: mouse Model: "[Maxxter] USB GAMING MOUSE" Hotplug: USB Vendor: usb 0x18f8 "[Maxxter]" Device: usb 0x1286 "USB GAMING MOUSE" Revision: "1.00" Compatible to: int 0x0210 0x0025 Driver: "usbhid" Driver Modules: "usbhid" Device File: /dev/input/mice (/dev/input/mouse0) Device Files: /dev/input/mice, /dev/input/mouse0, /dev/input/event5 Device Number: char 13:63 (char 13:32) Speed: 1.5 Mbps Module Alias: "usb:v18F8p1286d0100dc00dsc00dp00ic03isc01ip02in00" Driver Info #0: Buttons: 5 Wheels: 2 XFree86 Protocol: explorerps/2 GPM Protocol: exps2 Config Status: cfg=new, avail=yes, need=no, active=unknown Attached to: #52 (Hub)

1 EXPECTED

49: *** ALARM USB 00.1: 0000 Unclassified device [Created at usb.122] Unique ID: xqfj._bs_gOtsRl0 Parent ID: 2XnU.Iij6smqB8J2 SysFS ID: /devices/pci0000:00/0000:00:1c.4/0000:05:00.0/usb5/5-1/5-1:1.1 SysFS BusID: 5-1:1.1 Hardware Class: unknown Model: "[Maxxter] USB GAMING MOUSE" Hotplug: USB Vendor: usb 0x18f8 "[Maxxter]" Device: usb 0x1286 "USB GAMING MOUSE" Revision: "1.00" Driver: "usbhid" Driver Modules: "usbhid" Device File: /dev/input/event6 Device Number: char 13:70 Speed: 1.5 Mbps Module Alias: "usb:v18F8p1286d0100dc00dsc00dp00ic03isc00ip01in01" Config Status: cfg=new, avail=yes, need=no, active=unknown Attached to: #52 (Hub)

I was also curious about my ethernet port, there should only be 1 as there is only 1 physical NIC:

63:*** ALARM None 01.0: 10701 Ethernet [Created at net.126] Unique ID: zHNY.ndpeucax6V1 Parent ID: wcdH.Zd86KcQwZ62 SysFS ID: /class/net/eno1 SysFS Device Link: /devices/pci0000:00/0000:00:19.0 Hardware Class: network interface Model: "Ethernet network interface" Driver: "e1000e" Driver Modules: "e1000e" Device File: eno1 HW Address: B8B9D690C6BF591F2741AD3458FBDF55 Permanent HW Address: B8B9D690C6BF591F2741AD3458FBDF55 Link detected: yes Config Status: cfg=new, avail=yes, need=no, active=unknown Attached to: #26 (Ethernet controller)

26: EXPECTED PCI 19.0: 0200 Ethernet controller [Created at pci.386] Unique ID: wcdH.Zd86KcQwZ62 SysFS ID: /devices/pci0000:00/0000:00:19.0 SysFS BusID: 0000:00:19.0 Hardware Class: network Device Name: "Onboard LAN" Model: "Intel 82579V Gigabit Network Connection" Vendor: pci 0x8086 "Intel Corporation" Device: pci 0x1503 "82579V Gigabit Network Connection" SubVendor: pci 0x1043 "ASUSTeK Computer Inc." SubDevice: pci 0x849c "P8P67 Deluxe Motherboard" Revision: 0x04 Driver: "e1000e" Driver Modules: "e1000e" Device File: eno1 Memory Range: 0xf7400000-0xf741ffff (rw,non-prefetchable) Memory Range: 0xf7439000-0xf7439fff (rw,non-prefetchable) I/O Ports: 0xf040-0xf05f (rw) IRQ: 39 (2895 events) HW Address: B8B9D690C6BF591F2741AD3458FBDF55 Permanent HW Address: B8B9D690C6BF591F2741AD3458FBDF55 Link detected: yes Module Alias: "pci:v00008086d00001503sv00001043sd0000849Cbc02sc00i00" Config Status: cfg=new, avail=yes, need=no, active=unknown

64: NOT SURE None 00.0: 10700 Loopback [Created at net.126] Unique ID: ZsBS.GQNx7L4uPNA SysFS ID: /class/net/lo Hardware Class: network interface Model: "Loopback network interface" Device File: lo Link detected: yes Config Status: cfg=new, avail=yes, need=no, active=unknown

Anyways, any insights would be appreciated thank-you :)

submitted by /u/XyloPoPz1
[link] [comments] ...



📌 Weird disk, Just wondering what it is?


📈 51.06 Punkte

📌 How to Install Spaceview Disk Space Analyzer (Disk Utility) in Ubuntu – A Best Disk Usage Indicator for Linux


📈 30.44 Punkte

📌 Full Tutorial : How to Clone a Smaller Boot Disk onto a Larger Disk for Free with Clonezilla & Delete Disk Partition


📈 30.44 Punkte

📌 diskgraph: For if you're wondering what your disk is doing, a.t.m.


📈 30.1 Punkte

📌 Have you tried Copilot’s “What do you mean” bug? It’s weird but funny. But weird


📈 29.07 Punkte

📌 I just installed windows 11 on my second disk, and accessed it with raw disk access in a vm from linux. Ask me anything.


📈 26.72 Punkte

📌 bumped into this discord server and was just wondering what you guys thought of me learning from it?


📈 26.38 Punkte

📌 Just wondering who will be attending SCALE 17x


📈 26.38 Punkte

📌 Hi. Just wondering if I can run Ubuntu or any other distro on this Samsung Galaxy Nexus I9250.


📈 26.38 Punkte

📌 Switching over from windows entirely, just wondering, what fps games are you guys playing?


📈 26.38 Punkte

📌 As Weird As It May Sound, Windows 10 April 2018 Update Is Just Flawless on My PC


📈 20.96 Punkte

📌 Qualcomm and Huawei: Now Things Are Just Getting Weird


📈 20.96 Punkte

📌 Sentiment Mining is Just Weird! - Kevin Finisterre - SW Unlocked


📈 20.96 Punkte

📌 Something Weird Just Happened That We Can't Really Explain With Existing Physics


📈 20.96 Punkte

📌 '5G Just Got Weird'


📈 20.96 Punkte

📌 Neptune's Weird Dark Spot Just Got Weirder


📈 20.96 Punkte

📌 Is it weird that I love just installing and setting up Linux?


📈 20.96 Punkte

📌 [local] Disk Sorter Enterprise 12.4.16 - 'Disk Sorter Enterprise' Unquoted Service Path


📈 20.29 Punkte

📌 #0daytoday #Disk Sorter Enterprise 12.4.16 - (Disk Sorter Enterprise) Unquoted Service Path Vulnera [#0day #Exploit]


📈 20.29 Punkte

📌 [local] Disk Sorter Server 13.6.12 - 'Disk Sorter Server' Unquoted Service Path


📈 20.29 Punkte

📌 Disk Cleanup Windows 11: 4 Ways to Use It & Free Up Disk Space


📈 20.29 Punkte

📌 Disk Diag 2.0.4 - All-in-one Disk Cleaner.


📈 20.29 Punkte

📌 Virtual Disk Service Error The Disk Is Not Empty [Fix]


📈 20.29 Punkte

📌 "a start job is running for a dev-disk-by\...." error after expanding disk


📈 20.29 Punkte

📌 I have a WD 4TB hard disk. If I lock my HD with password , will the hard disk open on other computers.


📈 20.29 Punkte











matomo