Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest

Plugging an infected drive in externally

  • 19-10-2009 12:21AM
    #1
    kowloon
    Registered Users, Registered Users 2 Posts: 13,684 ✭✭✭✭


    So I was happliy torrenting away when the firewall icon told me there was no firewall and within seconds I get the bluescreen of death and one of those paged fault in non paged area errors.
    So I had a new drive for my machine anyway which I put in, installed XP and a few bits.
    I'm not massively upset about this as I needed to change the drive anyway, but there are a few college files and my year planner which I wouldn't mind getting my hands on.
    What are the chances the virus has only damaged the OS and won't spread if I connect the drive externally to retrieve my files?


Comments

  • #2
    xprepairs
    Closed Accounts Posts: 69 ✭✭xprepairs


    First of all, my client had a PC that did a continuous boot and wouldn't allow me to do an XP repair install, so here's what I did.

    What I did was took out the infected drive, it had the notorious TDDS MBR rootkit on it (I found out), put it into an external USB case, unplugged my PC from the internet, ran avast free and deleted all the infected files. On my clients HD I deleted the TDDS problems, some infected MP3's and lots of infected files.
    I then installed the HD back into the PC and proceeded to do the repair install. Then I loaded in SP2 which I have on a disc from MS and all went well.

    In the end, I did all the critical updates, installed IE7 (I refuse to install IE8 as it is a real resource hog) and stopped SP3 from being installed, then turned on the automatic updates and returned the PC to my client. She was real happy I saved all her files, pics, etc.....after the TDDS MBR rootkit, most techs would say to reformat, I only do that as a LAST resort. A fresh install could take weeks to set up all the progs,etc if the client did not have backups.


  • #3
    kowloon
    Registered Users, Registered Users 2 Posts: 13,684 ✭✭✭✭kowloon


    Picked up a rootkit on the scan, nuked it and have recovered my files.


  • #4
    xprepairs
    Closed Accounts Posts: 69 ✭✭xprepairs


    kowloon wrote: »
    Picked up a rootkit on the scan, nuked it and have recovered my files.

    Which scan did you do?


Advertisement