Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


infected hdd

  • Please log in to reply
1 reply to this topic

#1 Juggyb


  • Members
  • 3 posts

Posted 13 September 2013 - 02:02 AM

Recently my 1 tb extrenal hdd is been infected by virus. When i open my hdd it says this folder is empty. Whilst my hdd have 900 gb of data.What should i do ?? Plzz suggest me a solution so that i wont loose any of my data



BC AdBot (Login to Remove)


#2 Aaflac


    Doin' Dis 'n Dat...

  • Malware Response Team
  • 2,307 posts
  • Gender:Not Telling
  • Location:USA
  • Local time:04:00 AM

Posted 13 September 2013 - 10:36 PM



:welcome: to the BC forum!


Let's do the following...


:step1:  To stop the Autorun feature, download and run the following:

Microsoft Fix It 50471:



Scroll down to: How to disable or enable all Autorun features in Windows 7 and other operating systems

Click Run in the File Download dialog box, and follow the steps of the wizard.


Reboot the system after applying the Microsoft FixIt.


Note: There is also an option to enable Autorun automatically. You can do so when we are all done here, if you wish.


:step2:  Please click on the Start button and then on Control Panel
In Control Panel, select: Folder Options
Click on the View tab in the Folder Options window.


In the Advanced settings area, locate the Hidden files and folders category.

Check: Show hidden files, folders, and drives
Uncheck: Hide protected operating system files (Recommended)
Click Apply and OK at the bottom of the Folder Options window.

:step3:  Next, please download UsbFix:
It is a Spanish language website, but the program is in English.
To download. press the button that says: Descagar   (Translation: Download)

Save to the Desktop


Right-click the downloaded file and select: Run as Administrator

Connect your USB External drive when requested.

Press: Research


When done, the program closes on its own, and a report appears.

The report file is also  found at C:\UsbFix.txt

>> Please post the UsbFix.txt (Research Mode) report in your reply.

:step4:  Run USBFix once again, and this time select: Listing
>> Please post the UsbFix.txt (Listing Mode) report in your reply.


Note 1: If USBFix does not run in normal Windows, please run in Safe Mode:

Restart your computer.

When the computer starts, tap the F8 key on the keyboard repeatedly until presented with the Advanced Boot Options menu

Using the arrow keys, select: Safe Mode

Press the Enter key on your keyboard to boot into the selected mode


Note 2: If your AntiVirus program detects USB as malware, either let the AV program allow USBFix to run, or, temporarily disable your AntiVirus program:

Info - http://www.bleepingcomputer.com/forums/t/114351/how-to-temporarily-disable-your-anti-virus-firewall-and-anti-malware-programs/

When done with USBFix, re-enable your AV!


:step5:  Last, please download the Farbar Recovery Scan Tool
Download: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/
Select the version that applies to your system.
Save it to your Desktop.

Double-click the downloaded file to run it.

When the tool opens click Yes to the disclaimer.


Press the Scan button.


The tool makes a log (FRST.txt) in the same directory from which the tool is run (Desktop).

>> Please provide the FRST.txt in your reply.


The first time the tool is run, it also makes another log: Addition.txt

>> Also post the Addition.txt in your reply.

Edited by Aaflac, 13 September 2013 - 10:39 PM.

Old duck...

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users