Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Some Help with possible Virus [Solved]


  • This topic is locked This topic is locked

#61
TheTorment

TheTorment

    Member

  • Topic Starter
  • Member
  • PipPip
  • 49 posts
I think I have it saved to USB. Ive attached a screenshot f contents of USB.


When I click on mnt there are 4 files

sda1 sda2 sda3 sda4

Ive clicked on each of them and then clicked open terminal and entered bash rst.sh but I get the same result for all.

Attached Thumbnails

  • usb.jpg

  • 0

Advertisements


#62
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
The command bash rst.sh is case sensitive so it does need to be all lower case

Which sda relates to your hard drive (windows)
  • 0

#63
TheTorment

TheTorment

    Member

  • Topic Starter
  • Member
  • PipPip
  • 49 posts
I used all lower case.

sda2 is the one with most on it.
There is a windows folder in it too.
  • 0

#64
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Select sda2
Mount it
Then run the bash rst.sh command
  • 0

#65
TheTorment

TheTorment

    Member

  • Topic Starter
  • Member
  • PipPip
  • 49 posts
This could be a silly question. When you say mount it what exactly does that mean?
  • 0

#66
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Mount places it as the active drive to be examined
  • 0

#67
TheTorment

TheTorment

    Member

  • Topic Starter
  • Member
  • PipPip
  • 49 posts
so I just click it and then open terminal? I tried that and it said file not found
  • 0

#68
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
OK I have a picture now which may help

  • Select on the File icon; on the right pane click on the "mnt" folder and highlight "sdb1" - this is your USB device.

    sda1,2...usually corresponds to your HDD
    sdb1 is likely your USB

  • Click on the "Tool" menu and select Open Terminal
    Posted Image
  • In the open terminal window, type in the following:

    bash rst.sh
  • Press "Enter" and let it run uninterrupted.
    (The program lists available Restore Points and will save a report enum.log located in the USB drive.)
  • The program is finished when it say's "Done".
  • Type "Exit" to close the terminal window.
  • Please attached the enum.log file in your reply. (You may remove your USB drive when transferring log to a clean computer).

  • 0

#69
TheTorment

TheTorment

    Member

  • Topic Starter
  • Member
  • PipPip
  • 49 posts
There is no sdb1 on the left in the mnt

only sda1 sda2 sda3 sda4
  • 0

#70
TheTorment

TheTorment

    Member

  • Topic Starter
  • Member
  • PipPip
  • 49 posts
I just tried using the USB in a different port.....its working now
  • 0

Advertisements


#71
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Select each in turn until you get the same files as shown in the picture e.g. Boot, Opt etc
  • 0

#72
TheTorment

TheTorment

    Member

  • Topic Starter
  • Member
  • PipPip
  • 49 posts
log

Attached Files

  • Attached File  enum.log   123bytes   124 downloads

  • 0

#73
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Is that the entire file as I was looking for something like this

40.4M Sep 14 03:07 /sda2/~/RP2800/~SOFTWARE
40.4M Sep 15 23:50 /sda2/~/RP2801/~SOFTWARE
40.4M Sep 17 02:06 /sda2/~/RP2802/~SOFTWARE
40.4M Sep 18 22:59 /sda2/~/RP2803/~SOFTWARE
40.4M Sep 21 13:18 /sda2/~/RP2804/~SOFTWARE
40.5M Sep 23 11:59 /sda2/~/RP2805/~SOFTWARE
40.5M Sep 27 11:03 /sda2/~/RP2806/~SOFTWARE
40.6M Sep 30 10:17 /sda2/~/RP2807/~SOFTWARE
40.6M Oct 1 11:41 /sda2/~/RP2808/~SOFTWARE
40.6M Oct 4 03:15 /sda2/~/RP2809/~SOFTWARE
40.5M Oct 4 10:08 /sda2/~/RP2810/~SOFTWARE


  • 0

#74
TheTorment

TheTorment

    Member

  • Topic Starter
  • Member
  • PipPip
  • 49 posts
thats it!

will I try it again?
  • 0

#75
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Yes please and I will have a quick thunk
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP