Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

*Please Help!* I Believe I Deleted the Boot Partition?


  • Please log in to reply
27 replies to this topic

#1 EazySteve

EazySteve

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:01:05 PM

Posted 02 June 2012 - 09:16 PM

HP/Compaq 6910p laptop running on Win XP Home. I'm a rookie and not very computer savvy, but I'll try and give a little history? I know I shouldn't have messed around with this.

I was infected with the Alureon virus according to MSE in boot something or another (I can't remember, and I know I should have wrote it down). But MSE couldn't remove it and I was tired of every time MSE notifying me of the virus right after restart. After reading online about Avast doing boot-time scans I decided uninstall MSE to try Avast, but no luck after several attempts. Then tried malwarebytes, but didn't even find anything. So, I read online in the link below and that's where I really screwed up. I deleted the 2mb partition like it said and then my computer wouldn't boot after restart.

http://answers.microsoft.com/en-us/protect/forum/protect_scanning/how-to-remove-trojandosalureone/1791a068-a6ec-43be-aa66-9968f01cfa16

Originally the laptop had Win Vista Business, but went to Win XP Pro, and then Win XP Home. I have the Win XP Upgrade disk I used to do the last install, but it's not working in stall or "R" mode. It says it can't find the hard drive and I also attached a picture. Then I tried my buddy's Dell "Re-installation DVD Windows Vista Home Basic 32bit and says I have 2 partitions. See attached for pictures. I'm not sure what to do at this point? Any help you guys can give me is greatly appreciated. I don't have a vista key so I didn't want to move forward without more guidance. Thank you!

Attached Files



BC AdBot (Login to Remove)

 


m

#2 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:08:05 PM

Posted 02 June 2012 - 09:40 PM

The Windows Upgrade Disk I believe does not have the recovery options on it.

However, I will report this to the people who deal with unbootables to provide you with some assistance.

#3 EazySteve

EazySteve
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:01:05 PM

Posted 02 June 2012 - 10:34 PM

The Windows Upgrade Disk I believe does not have the recovery options on it.

However, I will report this to the people who deal with unbootables to provide you with some assistance.

Thanks for the reply. There were 2 options and if I hit "R" or enter it goes to the same screen saying setup didn't find a hard drive...

#4 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:08:05 PM

Posted 02 June 2012 - 10:35 PM

The second error happens, because you need to load the drivers via floppy drive first.

#5 EazySteve

EazySteve
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:01:05 PM

Posted 02 June 2012 - 11:13 PM

The second error happens, because you need to load the drivers via floppy drive first.

awww man, I don't have a floppy drive

Edited by EazySteve, 02 June 2012 - 11:32 PM.


#6 EazySteve

EazySteve
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:01:05 PM

Posted 04 June 2012 - 01:35 PM

How should I move forward with this?

#7 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:08:05 PM

Posted 04 June 2012 - 04:05 PM

I think the best advice is ti reinstall, and to back up all your data.

#8 EazySteve

EazySteve
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:01:05 PM

Posted 04 June 2012 - 04:07 PM

How should I move forward with this?

How do I do that when my win xp doesn't show a hard drive?

#9 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:08:05 PM

Posted 04 June 2012 - 04:12 PM

I recommend going back to Windows Vista.

#10 EazySteve

EazySteve
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:01:05 PM

Posted 04 June 2012 - 08:00 PM

I recommend going back to Windows Vista.

Thanks. My only problem is I don't have the original disk. I do have that dell reinstallation vista, but it's my buddy's. I have a Vista Business key on the bottom of my laptop. Will that work for it?

#11 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:08:05 PM

Posted 05 June 2012 - 02:01 AM

You will need to have HP send you a replacement disk.

#12 EazySteve

EazySteve
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:01:05 PM

Posted 05 June 2012 - 12:34 PM

You will need to have HP send you a replacement disk.

Thank you. Would you happen to have a good number for them?

#13 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:08:05 PM

Posted 05 June 2012 - 12:37 PM

Here is the link for that information:

http://h10025.www1.hp.com/ewfrf/wc/document?lc=en&cc=us&docname=bph07143

#14 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,317 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:10:05 PM

Posted 07 June 2012 - 01:34 AM

Hello, if you did not yet go ahead with the restore, we can still fix this, as it might be a simple case of adjusting the bootflag in the partition table.

Just be sure never to follow advanced steps like deleting partitions on your own if you do not truly understand what you are doing as that may seriously complicate matters. :)

Try this please. You will need a USB drive.

Download GETxPUD.exe to the desktop of your clean computer
  • Run GETxPUD.exe
  • A new folder will appear on the desktop.
  • Open the GETxPUD folder and click on the get&burn.bat
  • The program will download xpud_0.9.2.iso, and upon finished will open BurnCDCC ready to burn the image.
  • Click on Start and follow the prompts to burn the image to a CD.
  • Remove the USB & CD and insert it in the sick computer
  • Boot the Sick computer with the CD you just burned
  • The computer must be set to boot from the CD
  • Gently tap F12 and choose to boot from the CD
  • Follow the prompts
  • A Welcome to xPUD screen will appear
  • Press File
  • Expand mnt
  • sda1,2...usually corresponds to your HDD
  • sdb1 is likely your USB
  • Click on the folder that represents your USB drive (sdb1 ?)
  • Press Tool at the top
  • Choose Open Terminal
  • Type the following and press enter:

    dd if=/dev/sda of=mbr.bin bs=512 count=1

  • Press Enter
  • After it has finished a file will be located on your USB drive named mbr.bin
  • Remove the USB drive and insert it back in your working computer and navigate to mbr.bin, zip it up and attach it to your next reply.

This will allow me to have a look at the MasterBootRecord of your drive and see if it is infected.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#15 EazySteve

EazySteve
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:01:05 PM

Posted 07 June 2012 - 10:10 PM

I think I got it and thank you for the step by step directions. I hope it's okay that I zipped it. It said I wasn't allowed to attach it the way it was

Attached Files

  • Attached File  mbr.zip   508bytes   2 downloads





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users