1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Solved trojan deleted files cant run chkdsk

Discussion in 'Malware and Virus Removal Archive' started by jbutah, 2011/06/29.

  1. 2011/07/01
    jbutah

    jbutah Inactive Thread Starter

    Joined:
    2011/06/15
    Messages:
    51
    Likes Received:
    0
    so put the recovery cd back in and tried fixmbr and fixboot, and reboot, same problem.. i was having good luck with the tools on the otl xpe cd.. seemed like alot of options, i just know what to do next??
     
  2. 2011/07/01
    jbutah

    jbutah Inactive Thread Starter

    Joined:
    2011/06/15
    Messages:
    51
    Likes Received:
    0
    the fujitsu disk utilities won't boot up
    i can still access files and most things on that reatogo xpe cd.. what can i try?
     

  3. to hide this advert.

  4. 2011/07/01
    jbutah

    jbutah Inactive Thread Starter

    Joined:
    2011/06/15
    Messages:
    51
    Likes Received:
    0
    can i run the other scan / fix utilities from the cd like registry fixes?
     
  5. 2011/07/01
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    What happens?

    There is really not much more we can do with OTLPE CD.
    I checked what was running on your computer and we cleaned everything what could possibly be creating your issue.
     
  6. 2011/07/01
    jbutah

    jbutah Inactive Thread Starter

    Joined:
    2011/06/15
    Messages:
    51
    Likes Received:
    0
    i just had an idea.. i can copy the utility tests to the thumb drive and run them from the xpe cd.. i'll try that until i hear from you..
     
  7. 2011/07/01
    jbutah

    jbutah Inactive Thread Starter

    Joined:
    2011/06/15
    Messages:
    51
    Likes Received:
    0
    ok it seems like the hard drive is ok.. will keep testing.. so many files were deleted from the virus .. will the xpe cd run a .exe file?
     
  8. 2011/07/01
    jbutah

    jbutah Inactive Thread Starter

    Joined:
    2011/06/15
    Messages:
    51
    Likes Received:
    0
    the blue screen starts to load and it runs down to mpup and then freezes.. i'll try to find out what files are on that partition maybe i can run the scan from otl again? it seems like the root keeps getting infected on start up??
     
  9. 2011/07/01
    jbutah

    jbutah Inactive Thread Starter

    Joined:
    2011/06/15
    Messages:
    51
    Likes Received:
    0
    so i copied thumb files to diagnose to folder on desktop but execute file failed to open..
     
  10. 2011/07/01
    jbutah

    jbutah Inactive Thread Starter

    Joined:
    2011/06/15
    Messages:
    51
    Likes Received:
    0
    running deep scan on disk .. (test disk program on cd) will let you know tomorrow.. too tired
     
  11. 2011/07/01
    jbutah

    jbutah Inactive Thread Starter

    Joined:
    2011/06/15
    Messages:
    51
    Likes Received:
    0
    Ok the test disk program said the MFT and MFT mirror are bad and it failed to repair them. No idea what that is?
     
  12. 2011/07/01
    jbutah

    jbutah Inactive Thread Starter

    Joined:
    2011/06/15
    Messages:
    51
    Likes Received:
    0
    wow this is getting intense for me.. i have never gone this far.. i ran the undelete program and found that hundreds of files were deleted from C: so i just need to know what the MFT needs if i defrag or undelete certain files.. i took pictures of the screen with the application files that were deleted... i dont' know where else to look.. how well do you know this xpe cd undelete program??
     
  13. 2011/07/01
    jbutah

    jbutah Inactive Thread Starter

    Joined:
    2011/06/15
    Messages:
    51
    Likes Received:
    0
    also on the disk partitioner program it says there are only C and E partitions available?? 93gig
     
  14. 2011/07/01
    jbutah

    jbutah Inactive Thread Starter

    Joined:
    2011/06/15
    Messages:
    51
    Likes Received:
    0
    ok found C D and E and it says to defrag. i read somewhere that you can defrag several times. I will try that...
     
  15. 2011/07/01
    jbutah

    jbutah Inactive Thread Starter

    Joined:
    2011/06/15
    Messages:
    51
    Likes Received:
    0
    update.. so far the tests say the disk is healthy the partitions are active and part1 ntfs fixed the bad MTF but part2 ntfs says bad mft & mirror. also says the C disk has 0 space on it.. it looks full.
     
    Last edited: 2011/07/01
  16. 2011/07/01
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    I never tried it that way, but give it a shot.
     
  17. 2011/07/02
    jbutah

    jbutah Inactive Thread Starter

    Joined:
    2011/06/15
    Messages:
    51
    Likes Received:
    0
    what do you suggest to do about the bad MFT & mirror?
     
  18. 2011/07/02
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Say again?
     
  19. 2011/07/02
    jbutah

    jbutah Inactive Thread Starter

    Joined:
    2011/06/15
    Messages:
    51
    Likes Received:
    0
    the report said partition 1 ntfs fixed the MFT and mirror ok, the partition 2 had a bad MFT and mirror how about bootcfg /rebuild ? or is the MTF the same on both? can I copy somehow??
     
  20. 2011/07/02
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    OK, at this point, since we're not dealing with an infection (at least for now), I strongly suggest, you create new topic in Windows forum and ask all your questions there.
    You'll get more attention.
    In this forum it's just you and me.
     
  21. 2011/07/02
    jbutah

    jbutah Inactive Thread Starter

    Joined:
    2011/06/15
    Messages:
    51
    Likes Received:
    0
    ok thanks alot for all your help.. you are great..
     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.