cwhummel

I tried to remove some spyware from my main computer today using windows defender. Sorry, dont remember what the spyware was. Anyway, it failed to remove all 3 pieces of SW. I tried rebooting into safemode to try again, but I never got that far. It will just sit there and reboot and reboot, even when I try safemode. I tried to do a system repair, but that errored out. I then tried to reinstall windows xp pro, and that also errored out saying it could not install on my HD. Anybody got any tips, clues...or whatever? I really, really hope my HD isnt screwed.

linderman

can you accept erasing your hard drive ????? do you have data on the drive thats critical to you ????

if you can live with erasing your drive >>> then use dariks boot & nuke (free in my signature) that will erase the virus or spyware or whatever else is bugging your OS ?????? it will return your drive to a factory "clean" state ready for clean install of windows.

after making the boot & nuke floppy disk (floppy version is easier) the computer will need to boot up using the boot & nuke floppy >>>> then choose AUTO NUKE from the console options make sure you unplug the power plug from any drives you may have that you dont want wiped clean !!

dont hesitate to ask more questions if needed

cwhummel

I'd prefer not too. Its got lots and lots of important stuff on it. I believe the spyware destroyed sector 0. The install errors out while it says its examining sector 0.

Geekgirl

First off, you should never try removing any infections off your computer without technical assitance.
If you can boot into Windows then follow the First Steps at Removing the Malware and Posting your HJT Log

If no go on the removal instructions, what part of the boot up are you reaching before crashing ?

cwhummel

Makes it to the windows boot screen. Acts like its finished booting and then just reboots. While trying to boot on safe mode it makes it to BTHidMGR.sys (not sure if that file matters or not), and sits there for about 15 seconds, and then reboots.

I also just went in and to see exactly what happens when I try to reinstall windows, and it shows my c drive as being unformatted and completely empty, which is quite the opposite of how it was this morning before all this started.

linderman

Do you have any blue tooth devices installed on your computer ?????? it sounds like a blue tooth driver crashed and most likely ruined your registry


the sector "0" thing bugs me though >>>> thats a partition parameter which indicates a deeper problem ?????

you may learn the pitfalls of data back-up before this is over :(

I would try this http://www.runtime.org/

its not cheap(around $80.00) ; but it will let you scan before you pay to see if you can "see" your data

or PC inspector
http://www.pcinspector.de/file_recovery/uk/download.htm

PC inspector is free but not an equal to get data back if you have data that would "kill" you to lose I would use GDB

keep us posted how you progress

cwhummel

Yes, actually, I did just install a bluetooth usb adapter last week. Some generic device, uses a program called IVT Bluesoleil.

linderman

one of those two blue tooth device or blue soleil was involved with your crash


have you made any advancement with the data recovery software yet


I would try the win xp repair install and disconnect all devices other than the vital ones and boot hard drive and see if it will complete a repair install

cwhummel

I tried the repair, but it just sends me to do a dos prompt, and I really have no clue what to do from there. I will probably try the data recovery this afternoon after I go get another HD (and possibly an external for backup).

linderman

it sounds like you got into the recovery console instead of the repair install


read this carefully (REPAIR INSTALL)

http://www.michaelstevenstech.com/XPrepairinstall.htm

cwhummel

The repair install (even regular install) errors out while examening the hd. None of the recovery programs will even recognize the drive. I got a new HD and will try later once I get windows installed.

cwhummel

So, I got xp installed on my new HD, and got both of the data recovery software loaded, and neither will recognize the old hd. Is it hopeless at this point?

linderman

the hopes of recovering data are beginning to look slim. Have you tried downloading the manufacturer's diagnostic utility and run it on the drive ????

Volt-Schwibe

i've had to do this many many times, but i can't remember it word for word.

i will see if i can find a super simple tutorial for it.

EDIT: found one. http://www.windowsnetworking.com/j_helmig/wxprcons.htm

also, microsoft's own page for this subject http://support.microsoft.com/?kbid=314058 (they seem to hate pics.)

fixboot is the command i think you need.
if that doesn't do it, fixmbr is worth a shot.

cwhummel

So I got Western Digitals utility cd going, and it see's the drive, but when I run the tests, it locks up instantly.

linderman

hmmmmm >>>>> funeral for hard drive :(

cwhummel

awesome.

cwhummel

Alright, not giving up just yet. I tried running Partition Magic, and it also saw the drive, but when running a check on it, it gave me these errors:
1516 - Partition improperly dismounted
1507 - bad file record signature
725
1534- cluster crosslinked or not allocated
1608 - file record marked used

Any help?

cwhummel

Progress!!! Using Active@ NTFS Reader, I am able to access and copy all my stuff. YAY!

cwhummel

Alright, so I got in, copied what I needed, and successfully formatted the partition, which my new install now recognizes. So, at this point, I guess you could say case closed. Thanks