Windows 8 and 8.1 Forums

Rescue data from virus HDD

  1. #1

    Posts : 4
    Windows 8.1

    Rescue data from virus HDD

    I have a external HDD, which probably have some viruses. because:
    I had virus on my PC, no antivirus could see it and tried quiet a lot, and chose fro the bests,but my PC always froze, im having two HDDS in my computer and if i removed on formatted the first reinstalled windows it was good when i connected the second it started freezing so im 100% sure i had virus.
    So started windows safe mode, and backed up some very important files, mainly school documents and projects to external HDD in safe mode,

    Now i need some of the files back, what should i do? If i boot up the Linux or BSD and copy here the important files back and then format the hard-drive would it help?


      My System SpecsSystem Spec

  2. #2

    Posts : 328
    Windows 8.1 (x64)

    This might actually be a hardware fault (your second drive failing maybe...).

    From your explanation I understand you think your 2d HDD is infected right ? If your second drive only contains data, and no executables then it should be safe assuming you have autoplay off at least on this drive. The same is true for your external HDD. If your main drive (where the OS is installed) is infected then the safest solution is to wipe it (and probably get rid of the mbr with partitioning tools).

    Anyway I would recommend using a live cd. Some knoppix based ones are made especially for this task, and they contain partition/av tools.

    - Disconnect your external HDD (to avoid wiping it by mistake).
    - Boot from the live cd.
    - Launch GParted and delete all partitions on both HDDs
    - Follow this thread to clean the MBR on each one : I want to delete the Boot Sector (Page 1) ? Live Media ? GParted forum
    - Reconnect your external HDD.
    - Scan it with any AVs included on the live-cd if you want (not really necessary but you might as well do it)
    - Disconnect your external HDD (important)
    - Reinstall/Restore your OS (I assume you have the discs or an image) on HDD1 and boot from it.
    - Once the OS is reinstalled, Disable Autoplay on all drives (this is a useful feature but very bad for security).
    - Disable all macros in word/excel (highest security level in each one) and disable javascript in adobe reader (or only use a lightweight pdf reader like sumatraPDF)
    - Only then can you reconnect your external HDD
    - Uncheck hide system files in file explorer (folder/options)
    - Check if there's an autorun.inf file on the external disk's root, if so delete it.
    - Move the location of each libary folder to some new folder on HDD2 (ex: right click My Documents in file explorer, properties/location/move to)
    - Copy all your data files in the appropriates library folder which will be redirected automatically to HDD2
    - Download/Install a disk imaging application (Macrium Reflect FREE Edition - Information and download is good and free)
    - Follow the instructions to create a bootable disc/usb this program
    - Make an image of HDD1 to your external disk and/or a dvd/usb stick.

    If anything happens again, just reboot from cd/dvd with your imaging soft and get a clean install very easily with all your data safe (HDD2).
    Last edited by oneeyed; 25 Nov 2013 at 11:46.
      My System SpecsSystem Spec

  3. #3

    Posts : 4
    Windows 8.1

    Thank you very much, i did everything this way, and reconnected the HDD. deleted all exe files, it was just some random shitty apps i programmed i can anytime recompile :-D and it looks good, i formatted it in linux and cleaned up, if it will start freezing again, i will get rid of the MBR too, otherwise the HDD contained just images, documents, videos, pdfs, so hope finally i should be virus free :-)
      My System SpecsSystem Spec

Rescue data from virus HDD

Similar Threads
Thread Forum
Favorite USB rescue with UEFI GPT support etc.?
Favorite USB rescue with UEFI GPT support etc.? That pretty much says it. At the moment I'm relying on a USB with Macrium Reflect Free. But I would like to get something going for running utilities from a bootable USB.
Performance & Maintenance
Windows Phone 8.1 Data Sense App - Manage Data Usage
How to Use Data Sense App to Manage your Data Usage on Windows Phone 8.1 As unlimited mobile data plans become less common, it's more important than ever to understand how much cellular data your phone is using. Even if you have “unlimited” data, you might have access to the highest speed...
What kind of CDs do should I use for Rescue Disks?
Hello, I want to make some bootable Antivirus CDs, and I would like to know what kind of CDs to use. There are lots of them, which one is the most reliable, and cheapest? I have no experience with disks, because in the past I put it all on USB drives, but I would like to start using some disks.
General Support
Macrium Rescue and Partition Assistant Rescue 1 thmb drv
Hello, I need some advice Right now I have Macrium Reflect rescue on one thumb drive and AOMEI Partition Assistant Rescue on another. They both are Windows PE programs. Can anyone think of a way to have them both on one thumb drive. I suppose there would be a menu where I would select which I...
Performance & Maintenance
Windows Defender - delete virus, rescue data
Hi everyone, i have a problem with my USB stick: i've borrowed it to a colleague 20 minutes, and now, when he returned me i have a little surprize: instead of finding my personal data from faculty, i found these shorcuts, who turns out that are viruses (Windows Defender alerted me). 32039 The...
System Security
Windows 8.1 won't rescue PC market this year, IDC says
Windows 8.1 won't rescue PC market this year, IDC says - Computerworld
Windows 8 News
Macrium Win PE Rescue disk booting
My laptop is acer aspire V5-571P-6815 bought recently a few days ago. It has EFI-GPT booting and partition system. It does not give recovery disk making facility from DVDs. I used macrium reflect and taken total disk images in external usb HDD. I also made Macrium Windows PE rescue disk using...
Performance & Maintenance

Eight Forums Android App Eight Forums IOS App Follow us on Facebook