Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: WinRE (G:) Drive suddenly appeared in Windows Explorer?

06 Jan 2012   #1
AndrejSPB

Windows 7 Home Premium 64bit
 
 

Hello dear forumers,

I am worrying about WinRE (G drive which suddenly appeared in Computer (Windows Explorer) window since today. It was never displayed there, and I knew its a system drive that is hidden by default.

Under the name and the used space bar, it says "3,35 GB free of 11,9 GB".

Is this somenhow normal? Any possibility for a fix? Because it was never viewable in Computer screen before.. and I think it shouldn't. I also wondering if the drive should have 11,9 GB or it should have less by default?

Thanks ahead of time.

UPDATE:
And now when rebooting, I get a _ that just is blinking... and nothing goes on...

I think this is related to this somenhow...


My System SpecsSystem Spec
.
06 Jan 2012   #2
Solidwave

Win7Ultimate x64 + x32, Win7Pro x64, XP x32, Win 2003, Ubuntu and OpenIndiana
 
 

Yes, probably related.

Something has altered your partition table. Unless you've been using diskpart or the disk management console, you likely have been infected with bootkit malware that has corrupted your partition table and/or boot loader.

Reinstalling windows is the safest option, but if you don't want to do that, you'll need to boot from your install media or system repair disk, reset the active partition to your windows installation and rebuild your boot loader. Once this has been done, use Hitman Pro or some similar dedicated anti-bootkit tool to check for any leftover bootkit components.
My System SpecsSystem Spec
06 Jan 2012   #3
AndrejSPB

Windows 7 Home Premium 64bit
 
 

Thank you. I am glad that I have upgraded to Windows 7 only a few weeks ago meaning I have not having much problems by reinstalling Windows. (My files are backuped, that's a bonus)

I will try that and report back in a few hours.
My System SpecsSystem Spec
.

06 Jan 2012   #4
AndrejSPB

Windows 7 Home Premium 64bit
 
 

Quote   Quote: Originally Posted by Solidwave View Post
Yes, probably related.

Something has altered your partition table. Unless you've been using diskpart or the disk management console, you likely have been infected with bootkit malware that has corrupted your partition table and/or boot loader.

Reinstalling windows is the safest option, but if you don't want to do that, you'll need to boot from your install media or system repair disk, reset the active partition to your windows installation and rebuild your boot loader. Once this has been done, use Hitman Pro or some similar dedicated anti-bootkit tool to check for any leftover bootkit components.
I have reinstalled windows, but the WinRE is still there in Explorer ... May you elobrate futher on how to rebuild my boot loader using the Windows Install CD?
My System SpecsSystem Spec
06 Jan 2012   #5
gregrocker

 

If Malware is suspected, the first steps are to boot into Safe Mode to run a Malwarebytes full scan or boot Microsoft Standalone System Sweeper to scan the HD: Troubleshooting Win7

How do you know this partition is WinRe? Is it a factory partition labeled System? Where did it come from?

If you are not infected and have no related performance problems, then you can simply remove the drive letter in Disk Management. However I would first check that nothing was written to the partition. We can help you determine this.

Please post back a screenshot of your full Disk management drive map with listings, using Snipping TOol in Start Menu.

Please also post a screenshot of the folders contained within that partition.
My System SpecsSystem Spec
06 Jan 2012   #6
AndrejSPB

Windows 7 Home Premium 64bit
 
 

Quote   Quote: Originally Posted by gregrocker View Post
If Malware was suspected, the first steps are to boot into Safe Mode to run a Malwarebytes full scan or boot Microsoft Standalone System Sweeper to scan the HD, not reinstall Windows.

How do you know this is WinRe? Is this a factory partition labeled System? Where did it come from?

Please post back a screenshot of your full Disk management drive map with listings, using Snipping TOol in Start Menu.

Please also post a screenshot of the folders contained within that partition.
Hello, thanks for responding.

I have run a full antivirus scan that found no results, just before opening this thread. Per your request, I have used the snipping tool and made some screenshots.
-winre.png

Drive contents:
-winrecontents.png

Thanks.


My System SpecsSystem Spec
06 Jan 2012   #7
AndrejSPB

Windows 7 Home Premium 64bit
 
 

EDIT:
Quote:
If you are not infected and have no related performance problems, then you can simply remove the drive letter in Disk Management. However I would first check that nothing was written to the partition. We can help you determine this.
Could you please help with that? I am not sure how I go about this. Also, a few more screenshots..

-1.png

-2.png

-3.png

-4.png

-5.png

-6.png


My System SpecsSystem Spec
06 Jan 2012   #8
gregrocker

 

Where is the Disk Management screenshot? We need to see which is marked System Active. Type DIsk management in Start Search box, maximize window, make a full screen snip.

What was done that might have caused the apparent boot partition and Winre to take a letter?

You can remove it in Disk mgmt by rightclicking on it to Change Drive letter.

But first get a full Malwarebytes scan of all drives.

You'll have to wait til I take my dog to the beach now as I can't wait for the requested Screenshot.
My System SpecsSystem Spec
06 Jan 2012   #9
AndrejSPB

Windows 7 Home Premium 64bit
 
 

Quote   Quote: Originally Posted by gregrocker View Post
Where is the Disk Management screenshot? We need to see which is marked System Active. Type DIsk management in Start Search box, maximize window, make a full screen snip.

What was done that might have caused the apparent boot partition and Winre to take a letter?

You can remove it in Disk mgmt by rightclicking on it to Change Drive letter.

But first get a full Malwarebytes scan of all drives.

You'll have to wait til I take my dog to the beach now as I can't wait for the requested Screenshot.
Hello,

I have attached the Disk Management screenshot to this post, please forgive me for missing that out. And I won't mind you being away from the keyboard for the moment to spend your time with your dog. It's just great that you do that! I am not requesting speedy reply either, so I can wait. I am just wanting to know what this issue is caused by. (Particular the drive suddenly appearing out of nowhere)

-dskmanfull.png


To add on this, I have done nothing but log inn into the PC. I just came from vacation yesterday. I am very sure there is no malware found, since I am running Bullguard Antivirus and it has never failed for me. But I will do what you have suggested, using the offline Microsoft Defender... I report the results back.


My System SpecsSystem Spec
06 Jan 2012   #10
Solidwave

Win7Ultimate x64 + x32, Win7Pro x64, XP x32, Win 2003, Ubuntu and OpenIndiana
 
 

In disk management, right click on your WinRE partition and select "change drive letter and path." In the change drive letter dialog, select "F:" and click on "remove." This will hide the drive letter for your WinRE partition--making it inaccessible while you're running windows--but not delete the partition from the disk.
My System SpecsSystem Spec
Reply

 WinRE (G:) Drive suddenly appeared in Windows Explorer?




Thread Tools




Similar help and support threads
Thread Forum
A SkyDrive folder suddenly appeared, where did it come from?
I've googled, but I haven't found an explanation of how the folder could suddenly appear by itself. Is it evidence of a virus? The folder does have a timestamp near the time I signed up for a free trial of MS Office, but it's disturbing to think that trying Office caused this folder to appear in my...
System Security
UpdatusUser suddenly appeared - What is it?
Installing W7, going well. First noticed on old install, must have occurred in only the last few days. Almost done the basic install with updates, today and noticed it. It is installed under boot/User account and it is marked that the administrative account does not have access to the folder.. ...
General Discussion
According to Windows Explorer, I suddenly have an extra CD drive!!
I just went to save something on a USB stick, and was surprised to see it referred to as Drive F whereas it has always been Drive E. When I looked closely, I could see that Drive E is now a second CD/DVD drive; I only have the one CD/DVD drive, and it has always been (and still is) Drive D. Can I...
Hardware & Devices
System folders & files suddenly appeared in Libraries/Documents
My sister has used windows pcs very productively for many years and currently has a 4-year old Win 7 64bit pc with 8gb ram. Her 500 Gb HDD is only 40% full. The other week, doing something in Windows Explorer, she suddenly found that many system folders/files had appeared in her...
Software
phantom 'Local Disk Q' suddenly appeared
i suddenly have 'Local Disk Q' on my drive list in windows explorer, which of course i cannot access. disk management only shows volume c and d and the dvd drive, as it should. what might cause that and how do i eliminate it?
Performance & Maintenance
Language bar suddenly appeared
after a bad crash trying to get an ancient game to play, my language bar suddenly appeared out of the blue. i have no need for it, so i chose it to be hidden, although i really would like todisable it completely, rather than just hide it. i also now a green 'EN' box appearing in my...
General Discussion


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 00:53.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App