Go Back   Hardware Canucks > HARDWARE > Storage

    
Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old March 30, 2012, 08:16 PM
Rookie
 
Join Date: Mar 2011
Posts: 14
Default infected hard drive

Hello,
My friend has a Dell with windows vista. He picked up a nasty virus of some sort.When booting up, as soon as I entered his password, hit enter, the screen would go black. I could still hear the drive going, but stayed black. If I hit alt-ctrl-del the task manager screen would come up.
Safe mode same thing, with "safe mode" in the 4 corners.
Switched hard drives and installed windows 7, and all works well. So I think the motherboard is okay.
Now the problem.
It seems his backup habits are the sameas his surfing habits. pretty bad. non existent .
Hooked up the old hard drive again as a second hdd. and it shows about 100gb out of 150gb used, but clicking open only showed 1 file. Something or other .BAK
So I tried running scan disk on it, but it froze. Then the Antivirus popped up showing a trojan, someting DOS, click to clean. OK. Click to restart OK
Win 7 boots okay on the new drive, but windows says the old drive not accessable.
There are a lot ofpics on the old drive.
Any ideas how to get them off?
Reply With Quote
  #2 (permalink)  
Old March 30, 2012, 09:54 PM
taimoorali007's Avatar
Top Prospect
 
Join Date: Dec 2011
Posts: 182

My System Specs

Default

Did you try to access it from other computer...i mean....booting with other HDD and from there connect your HDD and check from partition?
Reply With Quote
  #3 (permalink)  
Old March 30, 2012, 10:15 PM
SugarJ's Avatar
Moderator
F@H
 
Join Date: Jan 2008
Location: Langley, BC
Posts: 6,079

My System Specs

Default

That's what he did. Read the original post.

You probably just need to assign a drive letter in disk management. Link on how to open it: Disk Management Windows 7 - How To Access Disk Management in Windows 7

Do not add or delete partitions or you will lose your data.

Once you can see the drive, run every antivirus and anti malware you have on it, including MS Malicious Removal Tool. Oh, and make sure you are able to see hidden files/folders, they are probably still there but the trojan hides them.
Reply With Quote
  #4 (permalink)  
Old March 31, 2012, 09:27 AM
Shadowmeph's Avatar
Hall Of Fame
F@H
 
Join Date: Oct 2007
Posts: 3,353

My System Specs

Default

Quote:
Originally Posted by SugarJ View Post
That's what he did. Read the original post.

You probably just need to assign a drive letter in disk management. Link on how to open it: Disk Management Windows 7 - How To Access Disk Management in Windows 7

Do not add or delete partitions or you will lose your data.

Once you can see the drive, run every antivirus and anti malware you have on it, including MS Malicious Removal Tool. Oh, and make sure you are able to see hidden files/folders, they are probably still there but the trojan hides them.
Yes but the first thing you "Have to do" is turn off system restore because the virus or what ever can hide itself inside there.
Also disconnect from the internet and try to boot into safe mode. there are disks that are free in which you can boot into the disk and then choose what you want to do like scan for virus's it takes quite a while to do this. I don't do it like that though what I do is grab a pen drive use a different cp and download some portable virus scanner and update it, then I boot the infected pc into safe mode and scan. there is also the combowfix which usually works
A guide and tutorial on using ComboFix

Last edited by Shadowmeph; March 31, 2012 at 09:38 AM.
Reply With Quote
  #5 (permalink)  
Old March 31, 2012, 10:03 AM
Adzsask's Avatar
Allstar
F@H
 
Join Date: Dec 2011
Location: SK
Posts: 831

My System Specs

Default

Easy way, format drive, hard, but still works version, see above post^
Reply With Quote
Reply


Thread Tools
Display Modes

Similar Threads
Thread Thread Starter Forum Replies Last Post
Infected. Micron O/S's, Drivers & General Software 6 February 8, 2012 02:40 AM
Old hard drive on new PC. My2cents Storage 13 February 3, 2012 05:38 PM
SSD as boot drive Hard drive as storage Linus LinusTechTips Q&A 0 September 27, 2011 12:57 PM
[WTB] DDR3 SODIMM, 2.5" Hard Drive, Hard Drive Enclosure TopDogZero Buy/Sell & Trade 2 May 20, 2011 04:24 PM
WTB: IDE Hard Drive cms Buy/Sell & Trade 1 July 10, 2008 03:10 PM