External disk -folders not visible -access denied system volume info

Hi Zoyana,

When I saw the screenshot the one thing that struck me was that one of the partitions in your external drive is flagged active. Though many reports suggest it is inconsequential, I would consider removing the active flag better.

Try setting that particular partition in the external drive inactive.

Though it can be done with Diskpart, you may find it easy to do with Partition Wizard Home Edition 8 Free download Magic Partition Manager Software, partition magic alternative, free partition magic, partition magic Windows 7 and server partition software - Partition Wizard Online

Install and run Partition Wizard. Right click on the selected external drive partition > Modify > Set Inactive and then APPLY ( top menu)

For the real problem, though I have been giving cursory glances, I have not formulated any ideas on how to go about it. So let me see whether I get any flash tonight. Good night.

Edit: Once done take a screenshot of how your external drive looks in Partition Wizard and post.
Please remove all other external drives/pen drives/Card Readers except the problem external drive when you take the screenshots so that we don't get confused. We are already confused .

zoyana,

I was the one confused. The name My Passport did not initially register in my brain as a Western Digital external drive. It finally clicked!!

Is it a 500GB?

zoyana,

Have you run any program that led you to believe the External drive, System Volume Information folder was infected?

If so, do you have the results of the program?

jumanji said:

Hi Zoyana,

When I saw the screenshot the one thing that struck me was that one of the partitions in your external drive is flagged active. Though many reports suggest it is inconsequential, I would consider removing the active flag better.

Try setting that particular partition in the external drive inactive.

Though it can be done with Diskpart, you may find it easy to do with Partition Wizard Home Edition 8 Free download Magic Partition Manager Software, partition magic alternative, free partition magic, partition magic Windows 7 and server partition software - Partition Wizard Online

Install and run Partition Wizard. Right click on the selected external drive partition > Modify > Set Inactive and then APPLY ( top menu)

For the real problem, though I have been giving cursory glances, I have not formulated any ideas on how to go about it. So let me see whether I get any flash tonight. Good night.

Edit: Once done take a screenshot of how your external drive looks in Partition Wizard and post.
Please remove all other external drives/pen drives/Card Readers except the problem external drive when you take the screenshots so that we don't get confused. We are already confused .

When I turn on my external enclosure with a WD 1tb model you will see it marked as an healthy "active" primary partition. That's normal behavior with external drives when compared to the other internal HDs. Have a look. Note Disk #4 is the drive in the external usb enclosure.

Thanks for the clarification, Night Hawk.

Was expecting for it to be the Removable E:.

Have never owned an External drive. Those little ol' pen drives do it for me!!

When going to use a flash drive if you happen to custom install an OS project like VBox portable or a Linux distro you may see some familiar things at times as well. Generally Windows sees the external HDs, flash drives, hand helds but not just any optical media as possible bootable media and mounts the volumes as active. I think that's where the confusion comes in.

With externals I use regularly like a cell phone with camera or a particular flash drive I will assign each one a specific drive letter like P for the cell representing Personal and each time I go to plug it in the drive letter will remain the same over randomly plugging in the enclosure or other flash drive. Notice the letter "I" for the enclosure this time since I haven't had that turned on since the recent clean install of 7 I saw. Never got around to changing it to K again so it automatically took I as the next available instead.

For zoyana I could advice changing the external there to a higher drive letter like H so each time he goes to plug it in Windows would also remember that drive with that letter. You will notice the internal storage were moved higher up the food chain by choice however S for storage and T for the second almost clone of the first to back up the first of the two in case one should fail.

When backing up the first to the second the system security will also pick up on any old files containing bugs from downloads that sat idle never being used I found. I could recommend having a good firewall running as well as bug detection program while rescuing files from that drive to detect whatever contaminated files are still present to prevent any infection from reaching the main drive.

If you are lacking a good av program zoyanna give the VIPRE Internet Security free 30 day trial a run. That even in trial when activated for the 30 days can find bugs hidden in zip and rar files gone undetected by other programs! When I came across that situation on more then one occasion when finally going to filter out some old XP downloads still onhand the bug alerts sounded instantly! Free Antivirus Trial and Antivirus Download | VIPRE Antivirus

I found after 3 full years of use VIPRE eliminated the need for seeing 3 or 4 separate av, spyware removers, adware buners and wrapped up a lengthy list of bug detectors under one roof. It outperformed several other av programs examined. The reason for the VIPRE IS and not regular av program is that the premium version includes a good firewall as well as web filtering to keep those bugs you have now from connecting out as well as blocking out bad sites where they come from.

zoyana,

Let's work on making sure the laptop and the External drive are free of malware. Once that happens, there may be other options in the data recovery area, and someone else can guide you through it.

Please connect your External drive, and, if you have not disabled Autorun, hold down the Shift key when connecting it. This action stops the autorun.inf from executing automatically

Please run Malwarebytes Anti-Malware:
Download: Malwarebytes Anti-Malware Download
Save to the Desktop
Double-click the downloaded MBAM file to run it.

When the installation begins, follow the prompts in the setup process.
DO NOT make any changes to default settings, and when the program has finished installing, make sure only the following options are checked:
>Update Malwarebytes’ Anti-Malware
>Launch Malwarebytes’ Anti-Malware
Uncheck:
>Enable free trial of Malwarebytes Anti-Malware PRO

Click on the Finish button.

If an update is found, the program automatically updates itself.
At the program console, on the Scanner tab, and select: Perform Full Scan

When the Select the Drives to Scan prompt appears, make sure all drives (except: CD-Rom/DVD and your connection device) are selected, and in particular the drive letters belonging to the External drive.

Next, click on the Scan button.

When the Malwarebytes scan is completed, click on: Show Results

When presented with a screen showing the malware detected, make sure everything is Checked, and click on: Remove Selected

When removal is completed, a report opens in Notepad.
Please copy/paste the entire contents of the MBAM report in your reply.

Note: If MBAM encounters a file that is difficult to remove, you are asked to reboot the computer so MBAM can proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot normally (not into safe mode) prevents MBAM from removing all the malware.

Thanks Night Hawk. For now I shall get going with zoyana with some quick instructions.

Cottonball has given some instructions for checking your system+external hard drive to get rid of any malware.

Before you carryout his instructions, just do this and report.

Download and install WinRAR (32bit or 64 bit as per your system) WinRAR archiver, a powerful tool to process RAR and ZIP files

Keeping the shift key pressed, plugin only your external drive to prevent any autorun executing.

Run WinRAR and explore the partitions on your external drive. It should show you all files and folders including hidden files. I am sure you will see all the data files and delighted.:) Yes, all your data is there and sure we will get it.

If you see any autorun.inf file,open it with Notepad. Take a screenshot and post it for cottonball to see and further instruct.



While it is not our intention to intrude into your privacy and peep into the contents of your external drive, if you do not mind explore the contents of both partitions in WinRAR and post screenshots for our examination. (Please use Windows Snipping tool) OR delete any file or folder - after opening it and examinaing its contents- that you had not created and saved. Just right click on it and delete. Make sure that you do not delete any of your data files/folders. Our intention is to delete any unwanted and suspicious malware files. (Try opening the recyclebin and system volume Information too and try to delete the files in those. Do not bother if the contents in those could not be deleted)

But for sure we would like to read the autorun inf file, look for any .exe file , trace it on your PC and annihilate it.You will delete that file - the autorun.inf file - also on further instructions.

Once you have done this and posted all the requested info, wait for further instructions from cottonball before you execute his instructions in post #19. I may also gatecrash if needed.:)