Tech Support Forum banner

harddrive image infected

5338 Views 4 Replies 2 Participants Last post by  Frater EIE
I just had to reformat my harddrive, due to a nasty bit of malware, and now have windows up and running and have downloaded and installed all the windows updates and device drivers (I think).

Now, all my old files are held on an "image" on my portable harddrive - in a set of .arc files. I can't remember what software I used to create that image, but I imagine any program that unpacks .arc files will do.

However, I am a bit nervous as I know for sure that the original malware which caused the problem in the first place is also on that image, since I made that backup image right before my computer crashed. So...can someone please help me in the process of unpacking the image and retrieving my files, without inadvertently transferring over the malware?

For detail on the malware, and the problems it caused, please see original thread:

My specs:
Intel® Core ™2 DUO CPU
E4600 @ 2.40 GHz
2.39 GHz, 3.00 GB of RAM
Physical Address Extension

Windows XP Home Edition
Vers. 2002
Service Pack 3

Not open for further replies.
1 - 5 of 5 Posts
ok, so.... I'm afraid your reply wasn't very clear. Are you saying I should do the RegistryBoosterScan? I've been told before numerous times that running a registry scan is a bad idea, since no scanner can ever properly detect what should be deleted and what shouldn't be (hence, causing all sorts of unnecessary problems).

Or are you just giving me general information about the .arc file extension?

The link you gave me suggests I am having trouble opening .arc files. I'm not. As I said in my post, I want to unpack and retrieve my old files without getting the malware that attacked the harddrive.
"The link you gave me suggests I am having trouble opening .arc files. I'm not."

Okay, I take that back. I just tried to use FreeArc to open the set of .arc files. I got the message:
"ERROR: E:\backup\harddrive2.arc isn't archive or this archive is corrupt: archive signature not found at the end of archive. Please recover it using 'r' command or use -tp- option to ignore Recovery Record"

What does this mean? I am worried now, as I assumed that it would be no problem unpacking the compressed harddrive image
ok, never mind, you can close this thread. I was able to connect the image as a Virtual Disk, so I can retrieve any of my old files without contaminating my new system
1 - 5 of 5 Posts
Not open for further replies.