BleepingComputer.com: External Hard Drive Killed by AntiVirus

Jump to content

Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

External Hard Drive Killed by AntiVirus

#1 User is offline   Tamlin 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 2
  • Joined: 14-July 11

Posted 14 July 2011 - 10:33 PM

Today's Avira scan reported both 'Master boot sector HD1' and 'Boot sector 'L:\'' contained 'BOO/Whistler.A' [virus] and deleted it. External drive (L) no longer appears in windows explorer, but does appear in Disk Management as an unallocated drive with no letter.

If this was a legitimate virus, it has long resided in my external drive for without any issues or detection on prior scans. Can anyone suggest how I might restore the drive without losing data? My OS is Windows XP. Thanks very much for any advice.

#2 User is offline   Eyesee 

  • Bleepin Teck Shop
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 3,446
  • Joined: 15-July 06
  • Gender:Male
  • Location:In the middle of Kansas

Posted 15 July 2011 - 01:02 PM

Hello and welcome to the forum!

Sounds like the partition may have been deleted. Try initializing the drive in disk management.
Unfortunately, if the partition on the drive has been deleted, so has the data that was on it.
In the beginning there was the command line.

#3 User is offline   Tamlin 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 2
  • Joined: 14-July 11

Posted 16 July 2011 - 11:06 AM

Eyesee, I appreciate your response. I restored the partition with a partition recovery wizard. Everything is back to normal, and no data was lost. I am convinced that a false detection by Avira caused the problem, so I am considering whether to switch to another anti-virus.

#4 User is online   AustrAlien 

  • Inquisitor
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 4,711
  • Joined: 15-July 09
  • Gender:Male
  • Location:Cowra NSW Australia

Posted 17 July 2011 - 01:53 AM

View PostTamlin, on 16 July 2011 - 11:06 AM, said:

I am convinced that a false detection by Avira caused the problem

Not necessarily: It may well have been a valid detection.

Did Avira quarantine (rather than delete) by any chance? Do you still have the relevant "deletion" in Avira's virus "vault". It may be possible to examine it and confirm one way or another whether the detection was legitimate or not.
AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users