Win XP Pro help...

[jact]

Okay, so a virus has apparently ripped through my system causing much havoc. I tried booting with the installation CD and doing a repair (It says my System directory isn't there and suggested a repair, so I did it) and the installation of Windows isn't listed.. Joy.

So I try to install Windows again to see what's up with my partitions, drive #2 is fine, with NTFS and everything peachy keen, drive #1, the boot drive is now "Unknown" file system and no longer NTFS. I have the choice to format the partition to install Windows. Not a good option, I need that data.

Now, I've been reading some docs on fixmbr and fixboot and they both suggest that I shouldn't be using them if I'm having trouble accessing my drive(s), so I'm assuming I shouldn't run these... What the fuck can I do? I really need the data off this drive...... Help?

[Seb From Holland]

Isn't there a way that you can take your HD out of your computer and install it in a second computer als a 'slave' HD?

That way, you could easily access or repair both partitions (if they really aren't seriously fucked up) and copy your files to a different HD, and then format the whole bunch.

Sebastian.

[jact]

Originally posted by Seb From Holland
Isn't there a way that you can take your HD out of your computer and install it in a second computer als a 'slave' HD?

That way, you could easily access or repair both partitions (if they really aren't seriously fucked up) and copy your files to a different HD, and then format the whole bunch.

Sebastian.

With the filesystem as "Unknown" I can't do much of anything with it, I can't read the drive whatsoever even if it was a slave....

[Seb From Holland]

OK jact,

This is a link I stored on my laptop for a long time, but I have never had to use it. I hope it is helpful for you. You can always try right? This program is supposed to recover everything even if your HD is lost or has been formatted.

http://63.141.194.5/rescue/index.html

Good luck!

Sebastian.

[jact]

Tuesday, July 29th

First Signs of Anticipated
DCOM/RPC Internet Worm

Just several weeks ago Microsoft confessed an extremely serious remotely exploitable vulnerability in all versions of Windows NT/2000/XP/2003. Being called the worst vulnerability in history, this Windows design flaw allows a malicious hacker to remotely inject and run their own code in anyone else's non-patched and non-firewalled Windows system on the Internet.

Despite the fact that the security group who found the flaw deliberately withheld their release of sample exploit code, just two weeks later (a few days ago) versions of exploit code began surfacing on the Internet.

And finally today, firewall log watchers are reporting a dramatic jump in port 135 and cable modem "ARP Broadcast" traffic. Both of these are indicative of Internet worm propagation.

It appears that we have a new worm crawling the Internet, finding and infecting the computers of Windows users worldwide. Once again, many users are at the mercy of Internet hackers, and Microsoft Windows. We can only hope that these worms are interested only in propagating and not in destroying. They could certainly be capable of either, or both.

Okay, well, it's malicious.. Anyone got a solution for me?

[Arty]

Originally posted by jact


Okay, well, it's malicious.. Anyone got a solution for me?

It loks like your master boot record is gone.

Check here for some info

You need to try fixboot or some 3rd party as "Get Data Back" or "Easy Recovery".