OT: Need virus help

ohecht · 01-07-2002, 05:23 AM

Sorry for the off-topic post, but I know there are some professional computer experts on the list:

The boot sector on my hard drive was somehow overwritten last night, I think by a virus. Problem is, my rescue disks are from a point before I upgraded my hard drive and operating system, so that route has not worked.

Can anyone give me any tips or advice on how to access the data on my hard drive? Right now, the it looks like my system thinks I have a 4 GB drive (the old size), when the new drive is 20 GB.

Is there a way to get a somewhat generic set of instructions for the boot sector to access the drive correctly?

I am desperate and cringe when I think of all the Porsche information I will have to re-collect!

That's the last time I fail to update my rescue disks.

The system is a PII 366 laptop, running Windows Me and Norton Anti-Virus.

I would appreciate any advice anyone can provide, my e-mail address is ohecht@earthlink.net.

Thanks,

Olivier

Saffs · 01-07-2002, 06:56 AM

Olivier, no help really, because I'm a Mac person. I feel I'm quite a Mac expert, and if I had that problem on a Mac I'd be running Norton on a startup CD and let it fix the damaged sector. I think all your hard drive data will still be there, but the comp. can't see it due to the damaged sector.
Good luck.....

osidak · 01-07-2002, 07:00 AM

The easiest way to save your info is to take your old drive (4gig) and make it bootable. Install it and boot from that hd. Slave the new (20gig) to the old and copy all the data files off. You may transfer the virus so make sure the 4 gig drive has updated virus software.

When in windows you will see the 4gig as C: and the 20gig as D:

You could also use a program like partition magic to create a new partition and reinstall the os on the new partition and do the same thing.

osidak
78 911sc

Ted Stringer · 01-07-2002, 09:04 AM

you also should be able to sys the disks (done from the command prompt when booted form a floppy) or do an fdisk /mbr (this is done the same as before, and rewrites the Master Boot Record)

tobluforu · tobluforu's Garage

What message are you getting. Missing command interpeter? If so, sys c: will not work if you have the junkie virus which distroys you mbr. Any disk you put in the floppy will become corrupted. Go here and type what the error message is http://support.microsoft.com/default.aspx?pr=kbinfo&
Hopefully it's not that.
Good luck

scedmonds · scedmonds's Garage

Be very careful with fdisk /mbr -- it will rewrite the master boot record and could make the data on your hard drive unreadable.

Wayne's approach is the best in the short term.

Long term, get Win2000 Pro (extremely stable, not as subject to virus hacks) and keep Norton AV updated weekly.

Cheers!

C.

Roland Kunz · 01-08-2002, 06:29 AM

Hello

I had/have the same problem a badtrans variation coming from a Netscape equiped computer overuned my Norton AV. But not as hefty then yours.

If you boot the system what will show up ?

The best is to put a new OS onto the new disk and then install that as master while you jump the old one as slave.

then you can see the old disk as seperate drive and just pull over the needed files.

You also can use a disk managment system or make a dual boot setup........

Grüsse

Roland Kunz · 01-09-2002, 09:33 PM

Hello

Try runing the Norton disc doctor to restore your partition tables.

Grüsse