Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Need to clean an external hard drive that's badly infected.

12 Feb 2015   #1
jonnyhillow

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 
Need to clean an external hard drive that's badly infected.

My parents had a desktop that was terribly infected and they copied all their important info to an external hardrive without cleaning or should i say before cleaning the computer . They then scrapped the old computer .

Yeah i know , but anyway , how would i go about cleaning the stuff thats on this external hard drive so they can get their important info back clean?

I have a clean computer to plug it into via USB but i'm nervous as hell.

Thank you


My System SpecsSystem Spec
.
12 Feb 2015   #2
ShoTTaS

Windows 7 Pro 32bit
 
 

If you are certain that your computer is clean, you can plug that external HD on it. But, before you do that , make sure that your AV and anti-malware software are up-to-date. To be sure on doing that, you can run your scan from Safe Mode.
My System SpecsSystem Spec
13 Feb 2015   #3
Borg 386

Win 7 32 Home Premium, Win 7 64 Pro, Win 8.1, Win 10
 
 

Also, make sure to verify that your AV settings are indeed set to scan external drives. If it is set up like this, your AV should scan the drive immediately when you plug it in & start trying to disinfect any infections.
My System SpecsSystem Spec
.

13 Feb 2015   #4
jonnyhillow

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 

Thanks guys , yeah i can scan it with Kaspersky and other on demand scanners but what i'm concerned with is many anti malware solutions that i tried to clean their machine with was ineffective .

They had the Alereon rootkit , numerous Trojans , you name it , don't have much confidence in just scanning with a certain AV and expect to have everything wiped out.
My System SpecsSystem Spec
14 Feb 2015   #5
cottonball

Windows 7 Home Premium
 
 

jonnyhillow,

Consider using the tool UsbFix:

It can detect and remove infections found on removable devices such as an external hard drive.
Download UsbFix

Press: Download UsbFix Windows Installer- 3.73 MB | version: 7.812

Next, please, temporarily disable your antivirus software so it does not interfere with the running of USBFix.

Next, right-click the downloaded USBFix file and select: Run as Administrator

Connect the external hard drive to your PC, turn it on (if powered), but, do not open it.
At the main console of USBFix, press: Listing

Once a scan is completed, a report is generated. It is normally found at C:\USBFix\Log
Please post the Listing report in your reply.

Once again, run USBFix as Administrator, but, this time, press: Research
Also post the Research report in your reply.
My System SpecsSystem Spec
14 Feb 2015   #6
Borg 386

Win 7 32 Home Premium, Win 7 64 Pro, Win 8.1, Win 10
 
 

Once you get the files transferred you want to save, wiping the drive is probably the best option. Here is a list of drive erasers:

Five hard disk cleaning and erasing tools - TechRepublic

Also, TDSSKiller is a good rootkit cleaner, but there are others you can try:

Five free portable rootkit removers - TechRepublic
My System SpecsSystem Spec
25 Feb 2015   #7
jonnyhillow

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 

Been away for awhile, sorry guys . Finally got around to doing a few things as requested.



Rapport


############################## | UsbFix V 7.901 | [Research]

User: charles (Administrator) # CHARLES-PC
Updated 25/02/2015 by El Desaparecido - SosVirus
Started at 15:39:59 | 25/02/2015

Website : UsbFix - Official Website
Changelog : Changelog Archives
Support : SosVirus
Live detection : How To Remove ?
Contact : Contact El Desaparecido, UsbFix author

################## | System information |

MB: ASUSTeK Computer Inc. (U56E)
CPU: Intel(R) Core(TM) i5-2430M CPU @ 2.40GHz
GC: Intel(R) HD Graphics 3000
RAM -> [Total : 6049 Mo | Free : 4658 Mo]
Bios: American Megatrends Inc.
Boot: Normal boot

OS: Microsoft™ Windows 7 Home Premium (6.1.7601 64-Bit) Service Pack 1
WB: Internet Explorer : 11.00.9600.16428
WB: Opera : 27.0.1689.76

################## | Security Information |

AV: Kaspersky Anti-Virus [(!) Disabled |Updated]
AS: Kaspersky Anti-Virus [(!) Disabled |Updated]
AS: Windows Defender [(!) Disabled |Updated]
AS: Malwarebytes Anti-Malware : 2.0.4.1028
FW: Windows Firewall [Enabled]
SC: Security Center [Enabled]
WU: Windows Update [Enabled]

################## | Disk Information |

C:\ (%SystemDrive%) -> Fixed disk # 224 Gb (192 Gb free - 86%) [] # NTFS
E:\ -> Fixed disk # 298 Gb (257 Gb free - 86%) [FreeAgent Drive] # NTFS

################## | Regedit Run |

F2 - HKLM\..\Winlogon : [Shell] explorer.exe
F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe
F2 - HKLM\..\Winlogon : [Userinit] userinit.exe
F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
04 - HKCU\..\Run : [SandboxieControl] "C:\Program Files\Sandboxie\SbieCtrl.exe"
04 - HKLM\..\Run : [SonicMasterTray] C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe
04 - [x64] HKLM\..\Run : [IntelPAN] "C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel PAN Tray
04 - [x64] HKLM\..\Run : [AmIcoSinglun64] C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
04 - [x64] HKLM\..\Run : [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
04 - [x64] HKLM\..\Run : [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /SF3
04 - [x64] HKLM\..\Run : [IntelWirelessWiMAX] "C:\Program Files\Intel\WiMAX\Bin\WiMAXCU.exe" /tasktray /nosplash
04 - [x64] HKLM\..\Run : [IgfxTray] "C:\Windows\system32\igfxtray.exe"
04 - [x64] HKLM\..\Run : [HotKeysCmds] "C:\Windows\system32\hkcmd.exe"
04 - [x64] HKLM\..\Run : [Persistence] "C:\Windows\system32\igfxpers.exe"
04 - [x64] HKLM\..\Run : [Everything] "C:\Program Files\Everything\Everything.exe" -startup
04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-21-2936650077-4203905920-2493637114-1000\..\Run : [SandboxieControl] "C:\Program Files\Sandboxie\SbieCtrl.exe"
04 - HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04GS - Secunia PSI Tray.lnk : C:\Program Files (x86)\Secunia\PSI\psi_tray.exe

################## | Generic Research |


################## | Registry |


################## | UsbFix - Information |

Info : How to remove shortcut virus on flash disk (Video)
Info : Shortcut virus on flash disk, What is it ?
Live detection : How To Remove ?

################## | Hijack |


################## | E.O.F | SosVirus | UsbFix - Official Website |



I don't know if any malware is present by the results , hoping someone can let me know.


Attached Files
File Type: txt UsbFix [Scan 1] CHARLES-PC.txt (4.0 KB, 2 views)
My System SpecsSystem Spec
25 Feb 2015   #8
cottonball

Windows 7 Home Premium
 
 

jonnyhillow,

Also need the Listing report.

Thanks!
My System SpecsSystem Spec
25 Feb 2015   #9
cottonball

Windows 7 Home Premium
 
 

Duplicate - please disregard.
My System SpecsSystem Spec
26 Feb 2015   #10
jonnyhillow

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 

Quote   Quote: Originally Posted by cottonball View Post
jonnyhillow,

Also need the Listing report.

Thanks!






UsbFix Report 428cad4671940b931f146f914481709db3340e2b.txt


Attached Files
File Type: txt UsbFix [Listing 1] CHARLES-PC.txt (4.0 KB, 6 views)
My System SpecsSystem Spec
Reply

 Need to clean an external hard drive that's badly infected.




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Best external to external hard drive synchronized backup plan?
So I want to clone one external 2TB with another. So one drive is the main use one and another the backup one. So I copy everything over to backup and i store the backup at another house and then I start using the main: deleting and adding/editing files. What is the best software or whatever to...
Hardware & Devices
My hard drive has been infected by Conduit
My hard drive is infected with Conduit. It is so powerful that after I turned a post into a Word document with the top line reading "How to Remove Conduit" (no quotation marks), when I pressed "Save As" the file was saved as "How to Remove". Fortunately it "allowed me" to rename the file "How to...
System Security
Clean Install of Win7 - Wipe Hard Drive Clean
Hi Folks, I just did a clean install of Win7 and must have done something wrong. I found a file called Windows.old.:confused: I would like to wipe my hard drive completely clean and then install a fresh copy of Windows 7 Home Premium. How do I accomplish this task? It's a good time to...
Installation & Setup
would I need to worry about 2nd hard drive getting infected as well
I recently installed another 500GB hard drive in one of my dell desktops (i5 580) and have a question regarding viruses. I used to store my system images on an external hard drive however I prefer using an internal hard drive since it seems to create images faster and I also don't have to plug and...
System Security
clean XP hard drive using win 7 clean commands?
Hi, I want to clean/erase my xp hard drive. followed the tutorial on this forum and got to cmd - diskpart - select disk - clean all - exit but it weon't do anything. I put clean ), O clean, cean all O, etc and it just says Im not doing it right and so nothing happens. I can't find any similar...
Hardware & Devices
svchost.exe infected badly...
Hi all... Well i have ran full virus scans with the follow anti-virus/anti-malware program. ESET Smart Security Kaspkery Internet Security Avira Premium Security Suite Malwarebytes' Anti Malware Hitman PRO And did some cleaning with ccleaner,etc..
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 13:55.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App