Fortress Forever

Go Back   Fortress Forever > Off Topic > Tech

Reply
 
Thread Tools Display Modes
Old 05-23-2011, 06:18 PM   #1
KubeDawg
Nade Whore
Server Owner
Beta Tester
 
KubeDawg's Avatar
 
Join Date: Sep 2007
Location: Oklahoma
Class/Position: Scout/Soldier
Gametype: CTF/TDM
Affiliations: blunt. Moto
Posts Rated Helpful 128 Times
Transferring files from virus-ridden HDD

So I've never actually had a virus that completely prevented me from fixing, so I'm new to this.

I have 2 PCs. One is my work PC which has XP Media edition and the other is my Home PC which has Win7 Pro. Home PC uses a SATA drive and the work PC uses IDE.

First off, before I attempt anything, is it safe for me to hook up my Home HDD to my work PC and it not only boot the IDE drive, but prevent transfer of the virus to my work PC?

Also, if I am looking to transfer my stuff to my work PC, what if both drives have the same drive letter? (e.g. C:\)

I don't think SATA uses master/slave, but I'm not sure about the compatibility of the old IDE drive.

Finally, I have a separate external drive, one that has no OS installed used as a backup for my files, but since I cannot boot Windows on my Home PC, I don't know of any other way to get those files transferred to it.

Any advice?
__________________
Moto's Funhouse | Dallas, TX - 74.91.114.247:27015

ff_plunder - Complete
KubeDawg is offline   Reply With Quote


Old 05-23-2011, 06:49 PM   #2
SomeOldGuy
older than dirt
 
SomeOldGuy's Avatar
 
Join Date: Mar 2007
Location: just east of the jug handle
Posts Rated Helpful 9 Times
What virus? Have you tried all the normal cleaning agents (MalwareBytes, SuperAntiSpyware, etc)? Have you reinstalled Windows (that doesn't require wiping everything out, you can install Windows on top of itself and it won't reuse the current Windows settings)?

Drive letters won't have be the same on the same PC... that's a Windows assignment that occurs during the boot process

Why can't you boot windows on home pc?

Without knowing which virus or what's going on with your home PC,
I'd be cautious about attaching the HDD to another machine regardless of version of windows.

IDE and SATA drives can co-exist on same PC... just need the proper connections on mobo available

Last edited by SomeOldGuy; 05-23-2011 at 06:53 PM.
SomeOldGuy is offline   Reply With Quote


Old 05-24-2011, 04:24 AM   #3
FreaK367
Everyones favorite FreaK
D&A Member
 
FreaK367's Avatar
 
Join Date: Apr 2011
Location: England
Class/Position: Scout, Engineer and Sniper
Gametype: Capture the Flag
Posts Rated Helpful 17 Times
I can only offer some good virus removal programs really. My brother had a virus not too long ago that took control of his PC, I have a utility on my pen drive that comes with portable versions of software including web browsers and virus removal software, that worked for him because the virus couldn't touch the programs launched from a pen drive.

If that didn't work, I would have put a bootable version of Linux on an external hard drive, and booted up the PC choosing that option in the BIOS, then that would give you full access to all of your files, without the infected windows messing things up.

Other than going into lots of detail, get some virus removal programs and utilities, and boot in Safe mode if you can, and perform some scans, and use some built in windows programs to clean up your hard drive and fix errors etc.. (that's if you haven't already)

As SomeOldGuy said, get Malwarebytes: http://www.malwarebytes.org/

Also, Spybot search and destroy is free and good: http://www.safer-networking.org/index2.html

Avast! free along with many other generic free versions of antivirus programs, all do a great job, I use Avast!, http://www.avast.com/en-gb/index

To generally clean up your pc and make it more responsive and such, I would suggest WinUtilites to anyone. http://www.ylcomputing.com/content/view/327/135/

I hope you can supply more detail, like a virus name if possible, or symptoms.
FreaK367 is offline   Reply With Quote


Old 05-25-2011, 12:51 AM   #4
Innoc
Hitman 2 1 Actual
 
Innoc's Avatar
 
Join Date: Mar 2007
Location: "Oscar Mike"
Gametype: FPS or RTS (just say NO to MMO)
Affiliations: Your Mom
Posts Rated Helpful 8 Times
Send a message via ICQ to Innoc Send a message via AIM to Innoc Send a message via MSN to Innoc Send a message via Yahoo to Innoc
Quote:
Originally Posted by SomeOldGuy View Post
What virus? Have you tried all the normal cleaning agents (MalwareBytes, SuperAntiSpyware, etc)? Have you reinstalled Windows (that doesn't require wiping everything out, you can install Windows on top of itself and it won't reuse the current Windows settings)?

Drive letters won't have be the same on the same PC... that's a Windows assignment that occurs during the boot process

Why can't you boot windows on home pc?

Without knowing which virus or what's going on with your home PC,
I'd be cautious about attaching the HDD to another machine regardless of version of windows.

IDE and SATA drives can co-exist on same PC... just need the proper connections on mobo available
I'd add combofix and sdfix to that list along with USB enclosures/adapters to allow IDE/SATA drives to co-exist as well.

Frankly I don't spend a ton of time trying to clean any more. If the system I'm looking at is fairly well hosed I'll backup that which has been called out as critical, restore to factory original, update and harden the OS and Apps and then restore the critical stuff once I know that the OS and Apps are as current and as protected as I can make it...once all of that's done I'll capture a system image to allow a quick future restoration.
__________________
Mooga on Obama: He can cut taxes. Actually do something useful. Punch Nancy Pelosi in the face. Just to name a few.

You eventually run out of other people's money to spend.
Innoc is offline   Reply With Quote


Old 05-25-2011, 09:00 AM   #5
KubeDawg
Nade Whore
Server Owner
Beta Tester
 
KubeDawg's Avatar
 
Join Date: Sep 2007
Location: Oklahoma
Class/Position: Scout/Soldier
Gametype: CTF/TDM
Affiliations: blunt. Moto
Posts Rated Helpful 128 Times
Quote:
Originally Posted by SomeOldGuy View Post
What virus? Have you tried all the normal cleaning agents (MalwareBytes, SuperAntiSpyware, etc)? Have you reinstalled Windows (that doesn't require wiping everything out, you can install Windows on top of itself and it won't reuse the current Windows settings)?

Drive letters won't have be the same on the same PC... that's a Windows assignment that occurs during the boot process

Why can't you boot windows on home pc?

Without knowing which virus or what's going on with your home PC,
I'd be cautious about attaching the HDD to another machine regardless of version of windows.

IDE and SATA drives can co-exist on same PC... just need the proper connections on mobo available
I updated my Malwarebyte's, then scanned the file I had just downloaded and it immediately shut my PC off. After trying to boot, it went to the, "Windows is attempting to repair itself automatically," then fails and that's where I initially got stuck. After trying to repair with my Windows CD, it finally booted to my login screen. Shortly after entering the password, it blue screens and that's where I'm at now.

Innoc, that's what I plan to do in the future. I wasn't aware of the image functionality Windows 7 Pro had till I encountered this virus issue and none of my system restore points work at all.
__________________
Moto's Funhouse | Dallas, TX - 74.91.114.247:27015

ff_plunder - Complete
KubeDawg is offline   Reply With Quote


Old 05-25-2011, 11:14 AM   #6
SomeOldGuy
older than dirt
 
SomeOldGuy's Avatar
 
Join Date: Mar 2007
Location: just east of the jug handle
Posts Rated Helpful 9 Times
I have found Windows repair to be essentially useless when it comes to fixing virii problems.

I'm going to assume in the 'save what you got' mode you've tried running Malwarebytes and SuperAntiSypware in safe mode with no network, and you've also run combofix and sdfix from DOS.

FYI -- I've twice had to rename the Malwarebytes mbam.exe to something else and run that renamed .exe since the virus blocked it from running normally.

If that fails, what I've done in the past when in the unbootable toasted PC is to perform a "new" install on the same HDD, ignoring the repair option and not formatting the HDD. That seems generally to fix the problem (unless there was an HDD issue). The files are still there, but you have to reinstall programs because the Windows system files are rewritten. Then go thru and run Windows update immediately, intall/update drivers etc, and follow Innoc's todo list on new re-installs.
SomeOldGuy is offline   Reply With Quote


1 members found this post helpful.
Old 05-25-2011, 05:20 PM   #7
KubeDawg
Nade Whore
Server Owner
Beta Tester
 
KubeDawg's Avatar
 
Join Date: Sep 2007
Location: Oklahoma
Class/Position: Scout/Soldier
Gametype: CTF/TDM
Affiliations: blunt. Moto
Posts Rated Helpful 128 Times
Quote:
Originally Posted by SomeOldGuy View Post
I have found Windows repair to be essentially useless when it comes to fixing virii problems.

I'm going to assume in the 'save what you got' mode you've tried running Malwarebytes and SuperAntiSypware in safe mode with no network, and you've also run combofix and sdfix from DOS.

FYI -- I've twice had to rename the Malwarebytes mbam.exe to something else and run that renamed .exe since the virus blocked it from running normally.

If that fails, what I've done in the past when in the unbootable toasted PC is to perform a "new" install on the same HDD, ignoring the repair option and not formatting the HDD. That seems generally to fix the problem (unless there was an HDD issue). The files are still there, but you have to reinstall programs because the Windows system files are rewritten. Then go thru and run Windows update immediately, intall/update drivers etc, and follow Innoc's todo list on new re-installs.
It won't even boot to safe mode. I'll try a new install and see if that works.
__________________
Moto's Funhouse | Dallas, TX - 74.91.114.247:27015

ff_plunder - Complete
KubeDawg is offline   Reply With Quote


Old 05-26-2011, 04:25 AM   #8
FreaK367
Everyones favorite FreaK
D&A Member
 
FreaK367's Avatar
 
Join Date: Apr 2011
Location: England
Class/Position: Scout, Engineer and Sniper
Gametype: Capture the Flag
Posts Rated Helpful 17 Times
It's a long shot, but I'd try removing your RAM and putting it back in, and generally dusting your PC, do the same with hard drives.

The blue screen is commonly associated with Hardware issues, most commonly the hard drive, HDD errors can cause it, some can be fixed, some cannot. If you do get on, try not to open too many programs, and run the command Chkdsk, or find the program in your start menu. That will check your entire hard drive for errors, and attempt to fix them, that could.. work.

Another problem could be that your PC is trying to use the same chunk of memory, that another part of your PC is trying to access. So it clashes, and thus, it blue screens. Hence why I am telling you to remove and replace the Memory, and not to run too many programs, it sometimes works.

My theory is, that it may be an HDD, RAM or Driver error causing it, your Event Viewer may tell you more...
FreaK367 is offline   Reply With Quote


Old 05-26-2011, 10:46 PM   #9
CatzEyes93
Black Mesa Voice Actor
 
Join Date: Mar 2007
Posts Rated Helpful 3 Times
I am coming to you guys from now on when I have issues
CatzEyes93 is offline   Reply With Quote


Old 05-27-2011, 12:49 AM   #10
Lost
Fear teh crowbar.
Retired FF Staff
 
Lost's Avatar
 
Join Date: Jan 2005
Location: Oklahoma
Gametype: CTF ftw, yeh
Posts Rated Helpful 6 Times
Send a message via Yahoo to Lost
All of their answers will be "When will BMS out?"














But they are pretty helpful fuckers.
__________________
Do what you want cuz a pirate is free!

You are a pirate!
Lost is offline   Reply With Quote


Old 05-27-2011, 01:35 AM   #11
Pixel
if(0>1){printf("broked");}
Beta Tester
 
Pixel's Avatar
 
Join Date: Mar 2007
Location: Amerika
Class/Position: O
Posts Rated Helpful 3 Times
You could boot into linux, copy everything and nuke it
Pixel is offline   Reply With Quote


Old 05-28-2011, 03:25 AM   #12
KubeDawg
Nade Whore
Server Owner
Beta Tester
 
KubeDawg's Avatar
 
Join Date: Sep 2007
Location: Oklahoma
Class/Position: Scout/Soldier
Gametype: CTF/TDM
Affiliations: blunt. Moto
Posts Rated Helpful 128 Times
Quote:
Originally Posted by SomeOldGuy View Post
If that fails, what I've done in the past when in the unbootable toasted PC is to perform a "new" install on the same HDD, ignoring the repair option and not formatting the HDD. That seems generally to fix the problem (unless there was an HDD issue). The files are still there, but you have to reinstall programs because the Windows system files are rewritten. Then go thru and run Windows update immediately, intall/update drivers etc, and follow Innoc's todo list on new re-installs.
Thanks yo! This fixed it for me. All my files were redirected to a Windows.Old folder and I was able to move them over after getting rid of the virus files and it's as good as new.
__________________
Moto's Funhouse | Dallas, TX - 74.91.114.247:27015

ff_plunder - Complete
KubeDawg is offline   Reply With Quote


Old 05-28-2011, 11:24 PM   #13
Innoc
Hitman 2 1 Actual
 
Innoc's Avatar
 
Join Date: Mar 2007
Location: "Oscar Mike"
Gametype: FPS or RTS (just say NO to MMO)
Affiliations: Your Mom
Posts Rated Helpful 8 Times
Send a message via ICQ to Innoc Send a message via AIM to Innoc Send a message via MSN to Innoc Send a message via Yahoo to Innoc
Quote:
Originally Posted by KubeDawg View Post
Thanks yo! This fixed it for me. All my files were redirected to a Windows.Old folder and I was able to move them over after getting rid of the virus files and it's as good as new.
Now Image it! And I'd suggest Clonezilla if you don't have access to the ghost32.exe (ver 11.5) executable on the Ghost Solutions Suite (ver 2.5)...I actually create custom Windows PE boot disks with Ghost and a number of other utilities (FreeCommander, Notepad++, etc). I use the Windows Automated Installation Kit 3.0 to create this....failing that...Clonezilla works well...

You can also try to use DISM to do your imaging but if you're not familiar with it...you're not going to like the results! Seriously...a complete disk image with Clonezilla is easy!
__________________
Mooga on Obama: He can cut taxes. Actually do something useful. Punch Nancy Pelosi in the face. Just to name a few.

You eventually run out of other people's money to spend.
Innoc is offline   Reply With Quote


Old 05-29-2011, 03:28 AM   #14
KubeDawg
Nade Whore
Server Owner
Beta Tester
 
KubeDawg's Avatar
 
Join Date: Sep 2007
Location: Oklahoma
Class/Position: Scout/Soldier
Gametype: CTF/TDM
Affiliations: blunt. Moto
Posts Rated Helpful 128 Times
Quote:
Originally Posted by Innoc View Post
Now Image it! And I'd suggest Clonezilla if you don't have access to the ghost32.exe (ver 11.5) executable on the Ghost Solutions Suite (ver 2.5)...I actually create custom Windows PE boot disks with Ghost and a number of other utilities (FreeCommander, Notepad++, etc). I use the Windows Automated Installation Kit 3.0 to create this....failing that...Clonezilla works well...

You can also try to use DISM to do your imaging but if you're not familiar with it...you're not going to like the results! Seriously...a complete disk image with Clonezilla is easy!
Yeah that's my plan once I've installed all my applications again. Windows 7 Pro has a built-in imaging program so no need to find 3rd party apps. Thx for the info tho.
__________________
Moto's Funhouse | Dallas, TX - 74.91.114.247:27015

ff_plunder - Complete
KubeDawg is offline   Reply With Quote


Old 05-29-2011, 04:11 PM   #15
Innoc
Hitman 2 1 Actual
 
Innoc's Avatar
 
Join Date: Mar 2007
Location: "Oscar Mike"
Gametype: FPS or RTS (just say NO to MMO)
Affiliations: Your Mom
Posts Rated Helpful 8 Times
Send a message via ICQ to Innoc Send a message via AIM to Innoc Send a message via MSN to Innoc Send a message via Yahoo to Innoc
Quote:
Originally Posted by KubeDawg View Post
Yeah that's my plan once I've installed all my applications again. Windows 7 Pro has a built-in imaging program so no need to find 3rd party apps. Thx for the info tho.
That's what I'm talking about. If you're not familiar with and comfortable with the built in tools...I suspect you're going to be disappointed with the results and the really bad part of that is that you won't discover this until you go to use that "image".
__________________
Mooga on Obama: He can cut taxes. Actually do something useful. Punch Nancy Pelosi in the face. Just to name a few.

You eventually run out of other people's money to spend.

Last edited by Innoc; 05-29-2011 at 04:12 PM.
Innoc is offline   Reply With Quote


Old 05-29-2011, 06:45 PM   #16
KubeDawg
Nade Whore
Server Owner
Beta Tester
 
KubeDawg's Avatar
 
Join Date: Sep 2007
Location: Oklahoma
Class/Position: Scout/Soldier
Gametype: CTF/TDM
Affiliations: blunt. Moto
Posts Rated Helpful 128 Times
kk thanks
__________________
Moto's Funhouse | Dallas, TX - 74.91.114.247:27015

ff_plunder - Complete
KubeDawg is offline   Reply With Quote


Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 03:31 PM.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2024, vBulletin Solutions, Inc.