Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Window 7 - Unable to Boot - Malware Suspected


  • This topic is locked This topic is locked

#31
TangentMedia

TangentMedia

    Member

  • Topic Starter
  • Member
  • PipPip
  • 75 posts
I think sda1 was the disc drive with the xPUD on it. And I suspect sdc1 in an earlier trial was the USB. But it doesn't always show up. I am now trying to get it to show up in the tree using different USB plugs.
  • 0

Advertisements


#32
TangentMedia

TangentMedia

    Member

  • Topic Starter
  • Member
  • PipPip
  • 75 posts
Okay. I used my Windows Recovery Disc to get to a command line and copy the testdisk folder to the data drive (f:) so I could run the testdisk_static off of that drive from xPUD, which i did. But when i ran it, it immediately returned Segmentation fault. So the TestDisk command window never opened.
  • 0

#33
JSntgRvr

JSntgRvr

    Global Moderator

  • Global Moderator
  • 11,018 posts
There is a partition that is FAT32, which also is detected as the RAW Volume (meaning it is detected as not formatted). So, either sdb1 or sdc1 should be your USB drive. By clicking on any of these, you should be able to see the contents of your USB drive.
  • 0

#34
TangentMedia

TangentMedia

    Member

  • Topic Starter
  • Member
  • PipPip
  • 75 posts
I can't get sdc1 to show up anymore. The first one always locks it up (sda1) and the other 3 are the system drive and 2 data drives. Did you see that i executed the testdisk_static from f: and got a Segmentation fault? A google search suggest it may be because it is an older version of testdisk, but i don't know that for sure.

Edited by TangentMedia, 30 December 2011 - 12:04 AM.

  • 0

#35
JSntgRvr

JSntgRvr

    Global Moderator

  • Global Moderator
  • 11,018 posts
Which is the location of your system drive in xPUD?
  • 0

#36
TangentMedia

TangentMedia

    Member

  • Topic Starter
  • Member
  • PipPip
  • 75 posts
sda2
  • 0

#37
TangentMedia

TangentMedia

    Member

  • Topic Starter
  • Member
  • PipPip
  • 75 posts
I downloaded the latest testdisk for linux (6.13) and copied the testdisk files to f:. Going to try running testdisk_static from there again. Will let you know how that goes in a few minutes.
  • 0

#38
TangentMedia

TangentMedia

    Member

  • Topic Starter
  • Member
  • PipPip
  • 75 posts
It's working... :) Will post the log here soon!
  • 0

#39
JSntgRvr

JSntgRvr

    Global Moderator

  • Global Moderator
  • 11,018 posts
We may need to use both ways, xPUD and the repair console to get the report I want to see.

  • While on xPUD, click on the folder that represents your System drive (sda2)
  • Press Tool at the top
  • Choose Open Terminal
  • Type the following:

    parted /dev/sda print >Parted.txt

    Leave a space between the following arguments:

    parted
    /dev/sda
    print
    >Parted.txt


  • After it has finished a report will be located in the root directory your System drive named Parted.txt
  • Now boot to the Repair Console
  • In the repair console we know your system drive is E: as it is the only drive that has the Windows and the <JUNCTION> to Documents and Settings [C:\Users], and the USB drive is H:.
  • At the repair console prompt type the following and press ENter:

    Copy E:\Parted.txt H:\

If successful you may be able to post the contents of the Parted.txt file from your USB drive in your next reply.
  • 0

#40
JSntgRvr

JSntgRvr

    Global Moderator

  • Global Moderator
  • 11,018 posts

It's working... :) Will post the log here soon!


Follow the instructions. My concern is how you would be able to post that report. If successful, you can also run Parted and get a report.
  • 0

Advertisements


#41
TangentMedia

TangentMedia

    Member

  • Topic Starter
  • Member
  • PipPip
  • 75 posts
Okay. I will post whatever i can generate; perhaps both. ;) Testdisk_static is still running the Deeeper Search routine.
  • 0

#42
TangentMedia

TangentMedia

    Member

  • Topic Starter
  • Member
  • PipPip
  • 75 posts
Looks like that deeper_search is going to take awhile. Can I run the other report (Parted.txt) at the same time?

Also, do you have any idea yet whether this is malware related?
  • 0

#43
JSntgRvr

JSntgRvr

    Global Moderator

  • Global Moderator
  • 11,018 posts

Looks like that deeper_search is going to take awhile. Can I run the other report (Parted.txt) at the same time?

Also, do you have any idea yet whether this is malware related?

Not recommendable.
  • 0

#44
JSntgRvr

JSntgRvr

    Global Moderator

  • Global Moderator
  • 11,018 posts
I'll be here tomorrow.
  • 0

#45
TangentMedia

TangentMedia

    Member

  • Topic Starter
  • Member
  • PipPip
  • 75 posts
Okay. Thanks. I will post results in the morning. Will be out of town all day. And will follow up in the evening. Thanks again for your help. I'm anxious to get my workstation back online.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP