Share this topic on Del.icio.usShare this topic on FacebookShare this topic on MySpaceShare this topic on StumbleUponShare this topic on TwitterShare this topic on Google buzz

Author Topic: moving files from an infested HD  (Read 4865 times)

0 Members and 1 Guest are viewing this topic.

BoTTleKid

  • *
  • Posts: 2965
  • Location: Canada, NS
  • Joined:Sep 2003
    • http://kemicalimbalance.deviantart.com
  • Offline
moving files from an infested HD
« on: Sep 30, 2008, 05:06 PM »
Hey folks. Today, I downloaded what I thought was PowerISO but was in fact an .exe loaded with virsus that froze up my anti virus, redirected all of my browsers, filled my desktop with porn links, tried to trick me into installing 'helpful' PC repair programs that were just more spyware, and finally destroyed any hope of windows starting up. (I get a blue screen that says the display driver failed.) My question is: How can I take what's on this infested drive, (C:drive) and move parts that I want to keep to a safe place before doing a new install of Windows? Can I take C out of my puter, plug it in someone else's computer, and hope it will be recognised as a secondary HD that I can pull some stuff I want off of? Is it that simple? Please, please help. I'm at my wits end - so many computer problems lately it's unreal. I need someone to help me - no one knows what to do.
"...he keeps stickin' a fuckin' gun in my face."
-

Tiggy Puddin

  • *
  • Posts: 4672
  • Gender: Female
  • Joined:May 2006
  • Offline
Re: moving files from an infested HD
« Reply #1 on: Sep 30, 2008, 05:15 PM »
What a bummer, I feel for you! I haven't physically tried to remove a virus-affected HD and plug it into another computer so I don't know whether that will work.

As you HD is not physically damaged, it may be easier to try to identify the virus and get rid of it. Do you get any messages or warnings that you could Google to see what the virus might be? Chances are someone else has been affected by it.

BoTTleKid

  • *
  • Posts: 2965
  • Location: Canada, NS
  • Joined:Sep 2003
    • http://kemicalimbalance.deviantart.com
  • Offline
Re: moving files from an infested HD
« Reply #2 on: Sep 30, 2008, 05:59 PM »
Unfortunately, like I said, Windows will not start up. I get a blue screen, even if I start in safe mode. It just will not boot. So I can't even go into windows to search and destroy. I'm surprised no one has ever tried to hook a HD up to another computer. Everyone I've asked says they have no idea if that would work, like it's a foreign concept entirely.  :? It's weird. :(
"...he keeps stickin' a fuckin' gun in my face."
-

Tiggy Puddin

  • *
  • Posts: 4672
  • Gender: Female
  • Joined:May 2006
  • Offline
Re: moving files from an infested HD
« Reply #3 on: Sep 30, 2008, 06:14 PM »
I had a similar problem with my HD on two different pcs. I managed to run the recovery disc's diagnostics check (it took many attempts before it ran all the check all the way through, it kept rebooting before it got to Windows, but it got there in the end).

Now that assumes you have the original recovery disc...!

I'll ask my IT guru tomorrow, see if he knows anything.

shake

  • *
  • Posts: 9751
  • Gender: Male
  • Location: Cape Bretoner now living in Ottawa
  • Joined:Jun 2004
  • Offline
Re: moving files from an infested HD
« Reply #4 on: Sep 30, 2008, 06:23 PM »
Unfortunately, like I said, Windows will not start up. I get a blue screen, even if I start in safe mode. It just will not boot. So I can't even go into windows to search and destroy. I'm surprised no one has ever tried to hook a HD up to another computer. Everyone I've asked says they have no idea if that would work, like it's a foreign concept entirely.  :? It's weird. :(

Yeah it is possible to hook up a HD to another computer, although I have never done it.  I'd be kind of leary the virus would spread to the new computer, but maybe it's not a threat.  Your best bet is to call a PC repair shop and see what they say, maybe it is simple and they wouldn't charge too much.

RadBunny

  • *
  • Posts: 172
  • Gender: Male
  • Location: The Rock, New York
  • Joined:Sep 2008
  • Offline
Re: moving files from an infested HD
« Reply #5 on: Sep 30, 2008, 06:25 PM »
Sounds like your hard drive is fucked. I'm a warez mod on another board and i can't tell you how many times i've seen this happen to people.

Depends on how long the virus has been in your system and how long the up time of the drive has been since the virus was installed. If it was only a few minutes before you cut the power you could still be safe, however it sounds alot longer than that. What you have is a cluster trojan horse virus man, which means you are totally fucked. The virus installs itself on your drive and then acts as a download manager for other viruses. You could have hundreds if not thousands of infected files, and at some point it becomes useless to try and regain what you have lost. So i hate to be the bearer of bad news bottlekid, but it sounds like your gonna havta lose all that info. Format C: is your only option now. Back in the days of Dos this would have never happened. In the future, be more careful on what you download, especially exe files from  anywhere (especially torrents).

Live and learn man.

PS: Good call on the diagnostics Shake, a professional could sort out the files if the drive is not too overwritten, however recovering files costs a pretty penny. Next time you need an iso burner, let me know, i have tons of them.
« Last Edit: Sep 30, 2008, 06:32 PM by RadBunny »

BoTTleKid

  • *
  • Posts: 2965
  • Location: Canada, NS
  • Joined:Sep 2003
    • http://kemicalimbalance.deviantart.com
  • Offline
Re: moving files from an infested HD
« Reply #6 on: Sep 30, 2008, 06:46 PM »
I've downloaded tons upon tons of things in the past, encountered viruses along the way, but it was nothing as major as this...I did try to do a recovery by inserting my Windows install disc (yep, a legitimate copy), but when it asked for the Admin password it kept saying whatever I put in wasn't correct. So obviously the virus(es) have changed the password. Pretty bad set of infections, for sure.
Redbunny: So even stuff I want to recover could have bugs attached, huh? Alright, I guess I'll just need to admit defeat.
How do I reformat the drive though? I can't get on windows, so what can I do? Can I just install windows overtop of it? Will that wipe out what's there and replace it?
"...he keeps stickin' a fuckin' gun in my face."
-

RadBunny

  • *
  • Posts: 172
  • Gender: Male
  • Location: The Rock, New York
  • Joined:Sep 2008
  • Offline
Re: moving files from an infested HD
« Reply #7 on: Sep 30, 2008, 07:07 PM »
I'm guessing you didn't make a recovery CD when you first installed windows, usually you would just use that. However in this case, its really bad. Even if you did re-install windows, the probability of it stopping halfway due to some system critical files that are now set to read only is probably very high. Even if it does install properly, the chance that the virus is still in the drive would be pretty high too. There are three courses of action that you can take from here.

1: When you first got your hard drive (hopefully in a box) there should've been a set of diagnostic disks (Floppy disks) that came with it. Hopefully the virus hasn't spread into your cmos and it will boot from the A: drive (your floppy drive) first. If it does it should be easy to format the disk from there.

2: Tap into your cmos menu. As the pc first starts up and boots, you should be able to press either F1 or F2 to get to your cmos menu. If anything has been changed since you last looked at it, the virus is in your cmos, which means it won't matter what the fuck you do, it will install itself on your new drive. An easy way to combat this is to unplug your computer and take out the cmos battery on your motherboard (should look like a giant hearing aide battery) for a half hour. after the cmos loses battery power, it goes back to its default programming. If you can get into your cmos you should be able to format the drive from there, unless you have an older computer.

3: Take the hard drive and turn it into a paper weight, and get yourself a new drive. Also, if you have a mirco wave you won't miss, put it in there. Just make sure its outdoors.

Fishyneil

  • *
  • Posts: 10934
  • Gender: Male
  • Location: Halifax, Nova Scotia
  • Joined:Aug 2004
    • Doritos commercial
  • Offline
Re: moving files from an infested HD
« Reply #8 on: Sep 30, 2008, 07:12 PM »
Dude,
 You can 'slave' your drive into another computer, scan with the other computer for bad shit and then copy your needed files to a folder on the main drive. Format your hard drive from there and reinstall it into your main box. Then boot from your good CD of windows and then copy over files by switching it back again. Fuck, it's hard to explain how to do it but it's really easy. If you want, I can do it for you. All I need is another working computer with compatible hard drive cables.
Fishy
"So why would you care
To get out of this place
You and me and all our friends
Such a happy human race"

TPB FAQ's... http://www.trailerparkboys.org/forums/index.php?topic=6806.0

RadBunny

  • *
  • Posts: 172
  • Gender: Male
  • Location: The Rock, New York
  • Joined:Sep 2008
  • Offline
Re: moving files from an infested HD
« Reply #9 on: Sep 30, 2008, 07:14 PM »
Fishy:

Just make sure the virus isn't in the cmos. If you slave the drive it wont matter.

Fishyneil

  • *
  • Posts: 10934
  • Gender: Male
  • Location: Halifax, Nova Scotia
  • Joined:Aug 2004
    • Doritos commercial
  • Offline
Re: moving files from an infested HD
« Reply #10 on: Sep 30, 2008, 07:28 PM »
If BK's drive is just a secondary drive you don't have to go anywhere near his cmos ;) Just copy the files that he had on his hard drive before it got all fucked up.
Fishy
"So why would you care
To get out of this place
You and me and all our friends
Such a happy human race"

TPB FAQ's... http://www.trailerparkboys.org/forums/index.php?topic=6806.0

BoTTleKid

  • *
  • Posts: 2965
  • Location: Canada, NS
  • Joined:Sep 2003
    • http://kemicalimbalance.deviantart.com
  • Offline
Re: moving files from an infested HD
« Reply #11 on: Sep 30, 2008, 08:01 PM »
Fishy: I don't have another computer to use. I wish I did. :(
This isn't a secondary drive, it's the main HD.
I have an Ubuntu partition on my PC and my uncle suggested I try using that, see if it sees Windows, and then move what I want on to Ubuntu. Also I can run scans through Ubuntu. Assuming windows shows up there. I will be a fumbling idiot trying to use Linux though. I hate that OS!
Through Linux I could theoretically download some sort of boot disc that will scan for viruses.  -sigh- I have no idea what cmos is, never heard of it. BIOS??
"...he keeps stickin' a fuckin' gun in my face."
-

walterx2

  • *
  • Posts: 1825
  • Gender: Male
  • Location: Pittsburgh PA
  • Joined:Mar 2005
  • Offline
Re: moving files from an infested HD
« Reply #12 on: Sep 30, 2008, 09:14 PM »
Don't reformat yet. It appears that your boot sequence is corrupted. I had a similar problem recently. I sent you a PM or two. Lets get your windows back before you decide what your next move is.

That way you could burn the files you want to save to DVDs.
"There’s class warfare, all right, but it’s my class, the rich class, that’s making war, and we’re winning."

—Warren Buffett

RadBunny

  • *
  • Posts: 172
  • Gender: Male
  • Location: The Rock, New York
  • Joined:Sep 2008
  • Offline
Re: moving files from an infested HD
« Reply #13 on: Sep 30, 2008, 09:18 PM »
Yes the Cmos is the BIOS, we got a new version in america, i didnt think about that.

jakemaster1390

  • *
  • Posts: 840
  • Gender: Female
  • Location: Orillia
  • Joined:Apr 2007
  • Offline
Re: moving files from an infested HD
« Reply #14 on: Oct 01, 2008, 01:32 PM »
Another thing that you could try is see if a friend can make you a windows repair cd. These are not system specific and will give you the options especially to do a restore if you are lucky enough to have a secondary drive
"Dope, Dope Dopity, fuckin' Dope, Dope"- Ricky

"Fuck this court, fuck Jim Layhey, fuck Randy, fuck those two idiot cops right there, fuck suit dummies, as a matter of fact fuck legal aid, fuck Danny and Terry's Buffalo Chicken wings, fuck all the old wood in here, fuck the moon, fuck corn on the cob, fuck squirrels, fuck me, fuck you, fuck everything."-Ricky

"It wasn't me, It was the Liquor"-Layhey


Shit machine gun

  • *
  • Posts: 8598
  • Gender: Male
  • Location: Brockvegas
  • Joined:Feb 2005
  • Offline
Re: moving files from an infested HD
« Reply #15 on: Oct 01, 2008, 02:20 PM »
I believe the proper way to handle this problem, is, to, hit it with a hammer.  :hammer_2:
2009-2010 TPB FANTASY HOCKEY CHAMPION. 

"I can be bought. If they paid me enough, I'd work for the Klan." - Charles Barkley

I HATE Conky

"I hear chicken, cola fizz, mustard and relish, all coagulatin together, and french fries and onion rings, but you know what, I don't hear a heart, Motherfucker"

BoTTleKid

  • *
  • Posts: 2965
  • Location: Canada, NS
  • Joined:Sep 2003
    • http://kemicalimbalance.deviantart.com
  • Offline
Re: moving files from an infested HD
« Reply #16 on: Oct 06, 2008, 01:47 AM »
SMG: Still not funny.
Meanwhile,
I've got a semi related issue. I got my PC upgraded with a cracked windows from my uncle, he installed some games and stuff and evidently installed... you guessed it. Trojans galore, spyware as far as you can see! My computer is another breeding ground for digital bugs, just when I thought I cleaned it. (Thanks a lot!)
But my question is this: If I install Windows 2000 SP4 on my PC (cracked) and then use an upgrade disc for XP SP1 (legitimate), will that work? I want a legitimate copy of windows... it would just be easier. But all I have is an upgrade disc, so I can't use it to install windows and I can't use it to "upgrade" a version of windows that is more advanced than SP1. The only thing I could do, presumably, is install 2000 and then upgrade it with my genuine copy of windows. Then just apply the automatic updates to get up to the latest SP. Sound good? Or am I missing something?
"...he keeps stickin' a fuckin' gun in my face."
-

RadBunny

  • *
  • Posts: 172
  • Gender: Male
  • Location: The Rock, New York
  • Joined:Sep 2008
  • Offline
Re: moving files from an infested HD
« Reply #17 on: Oct 06, 2008, 02:01 AM »
Theoretically i think it could be done, however i have never heard of it being done that way before. Quite frankly i wouldn't bother upgrading to XP. 2000 wasn't a bad OS, and with a good firewall it should cover all your problems.

BoTTleKid

  • *
  • Posts: 2965
  • Location: Canada, NS
  • Joined:Sep 2003
    • http://kemicalimbalance.deviantart.com
  • Offline
Re: moving files from an infested HD
« Reply #18 on: Oct 06, 2008, 02:07 AM »
But isn't that what the upgrade disc is for? Upgrading to XP from previous versions of Windows?
I'd use 2000 if I had a valid copy of it. All I have is a valid copy of XP and I want to use it because it's valid.
"...he keeps stickin' a fuckin' gun in my face."
-

walterx2

  • *
  • Posts: 1825
  • Gender: Male
  • Location: Pittsburgh PA
  • Joined:Mar 2005
  • Offline
Re: moving files from an infested HD
« Reply #19 on: Oct 06, 2008, 09:22 AM »
I'd give it a shot. If I remember correctly the option to upgrade will not be available if it is not possible. XP has many security upgrades over 2000 and it seems that you need that BK.

Yesterday XP's Malicious Software Tool caught two trojans on my machine.
"There’s class warfare, all right, but it’s my class, the rich class, that’s making war, and we’re winning."

—Warren Buffett

Rocket Surgeon

  • *
  • Posts: 478
  • Gender: Male
  • Location: SoCal
  • Joined:Aug 2006
  • Offline
Re: moving files from an infested HD
« Reply #20 on: Oct 06, 2008, 08:48 PM »
As long as you have a legitimate key for your XP upgrade disk and the 2K disk has the same directory structure as a legitimate 2K disk you can install XP clean without having to install 2k first.  During setup you will be prompted to put your 2K or NT4 disk in your CD drive for verification.  Setup looks for specific files on the disk which are usually there even on a 2K disk that has had the key added to the winnt.sif file and then allows you to complete the setup.  This will give you a cleaner install than upgrading from a 2K install.  PM me if you have any questions or problems.
"We're all victims of our own gene pools.  Somebody must have peed in yours"

jakemaster1390

  • *
  • Posts: 840
  • Gender: Female
  • Location: Orillia
  • Joined:Apr 2007
  • Offline
Re: moving files from an infested HD
« Reply #21 on: Oct 07, 2008, 04:05 PM »
IF upgrading just try. but make sure to save the cracked version if you have to revert to it if the upgrade doesn't work. Also invest in a good Virus checker program like mcaffee, ( you can get a free thirty day trial on the internet and that should help as well.
"Dope, Dope Dopity, fuckin' Dope, Dope"- Ricky

"Fuck this court, fuck Jim Layhey, fuck Randy, fuck those two idiot cops right there, fuck suit dummies, as a matter of fact fuck legal aid, fuck Danny and Terry's Buffalo Chicken wings, fuck all the old wood in here, fuck the moon, fuck corn on the cob, fuck squirrels, fuck me, fuck you, fuck everything."-Ricky

"It wasn't me, It was the Liquor"-Layhey


BoTTleKid

  • *
  • Posts: 2965
  • Location: Canada, NS
  • Joined:Sep 2003
    • http://kemicalimbalance.deviantart.com
  • Offline
Re: moving files from an infested HD
« Reply #22 on: Oct 16, 2008, 09:40 PM »
All is well now. Thanks for the assistance, folks. This forum has great tech support.   :D
"...he keeps stickin' a fuckin' gun in my face."
-

walterx2

  • *
  • Posts: 1825
  • Gender: Male
  • Location: Pittsburgh PA
  • Joined:Mar 2005
  • Offline
Re: moving files from an infested HD
« Reply #23 on: Oct 17, 2008, 04:01 AM »
All is well now. Thanks for the assistance, folks. This forum has great tech support.   :D

If you are now running a legal copy of XP make sure you enable microsoft updates. This will keep your machine up to date with security updates.

If you need an antivirus I run AVG Free in most of my machines with good results. And it is free.
"There’s class warfare, all right, but it’s my class, the rich class, that’s making war, and we’re winning."

—Warren Buffett

BoTTleKid

  • *
  • Posts: 2965
  • Location: Canada, NS
  • Joined:Sep 2003
    • http://kemicalimbalance.deviantart.com
  • Offline
Re: moving files from an infested HD
« Reply #24 on: Oct 17, 2008, 09:10 AM »
Yeah, I have my legit copy of XP and it's all updated!  8) Should hold me over for a while...
I am using kapersky as an anti virus. So far it's doing a fine job.
"...he keeps stickin' a fuckin' gun in my face."
-