Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

HDD partitions not accessible after virus removal


  • Please log in to reply
1 reply to this topic

#1 Sam666666

Sam666666

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:11:10 AM

Posted 25 January 2009 - 06:50 AM

Hello all,

Well someone else used my computer in my absence and got it infected with a virus. When i returned & rebooted the PC, I saw the following things:

In spite of having a valid license for my KIS 2009, the error message i got was:

The database date does not correspond to the license validity period.

While trying to update, I got the message that : Task cannot be started, error code: 80000100

Even the repair & remove function of KIS 2009 stopped working.

Apart from the C drive(which has my OS Win XP SP2), all other drives became inaccessable. The message I got was " Disk not formatted, format now yes/no". Also the CD & DVD drives would not recognize any CD or DVD.

Well I checked my startup logs with Hijack this & these were the suspicious exe's running:

C:\WINDOWS\system32\olhrwef.exe
C:\WINDOWS\system32\kamsoft.exe

Then I used Malware bytes Anti malware program to scan & remove the infections, following the exact instructions in the forum.

Immediately after that KIS 2009 started working. I updated it & scanned the system all over again.

I assume that the system is free from malware now.

My main focus now is to get back all my data from my drives(which cannot be accessed), otherwise I am in serious trouble......

I checked through the control panel, all my partitions of the HDD are in good health. Also Malware bytes Anti malware could recognize the data in those drives, during a full system scan. I tried booting in safe mode, after cleaning the system, but still the non OS partitions of the HDD & the CD & DVD drives were not accessible. I get the same Drive not formatted message and the drive properties show the format as RAW(not FAT 32).

So what to do now? I really need to get my data back without reformatting, coz I have valuable data in them which are not backed up. How should I go about doing it?

Also I want to know whether its the virus that caused this damage to the HDD's, coz nobody else who were infected with the same virus has reported the same.

Please share your knowledge.

Thanks & regards.

Sam.

Edited by garmanma, 25 January 2009 - 12:10 PM.


BC AdBot (Login to Remove)

 


#2 Budapest

Budapest

    Bleepin' Cynic


  • Moderator
  • 23,579 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:40 PM

Posted 25 January 2009 - 03:41 PM

See if you can access the data with this freeware data recovery software:

http://www.pcinspector.de/Sites/file_recov....htm?language=1
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users