ENTIRE HDD Erased!

Tews · 14 Dec 2009

I agree 100% with pparks.. your system integrity has been severely compromised... Format and reinstall is the only sensible option at this point...

Etihtsarom · 14 Dec 2009

Are those applications legit? If your OS or applications came with cracks or patches or keygens, that's what happens.
Edit: OS actually come with these kinds of extra addons if they are not legit.

karthurk · 14 Dec 2009

Writing from my phone now, everything is dead. I am dl ing and installing antiviruses and anti malware.

The OS is downloaded from msdnaa student program.

And here comes a long night trying to restore 3 years worth of projects, a second time in the last 3 days, as I was not smart enough to burn everything to dvd's, being a poretable hdd and all...

Lesson well learned.

EDIT: is there a software to recover deleted files and directory structure? Active REcovery does not recover restore the files, he made me the last time 5400 dir with DIR0001 - dir5400 no directory structure only the files.

. and I have in total like 500.000 files in my projects.

Jacee · 14 Dec 2009

You managed to pic up a 'Bot' ... definitely a compromised computer!

You will need to change all your passwords using a known clean computer. Remember them, because when you get your OS set up again, you'll need to use the new ones.

This is just the first malware shown --> 4c1044aM.dll
http://www.threatexpert.com/files/4c1044aM.dll.html

Etihtsarom · 14 Dec 2009

There's software that will recover the files, but they're meant to help with deleted files and crahsing drives, not drives that've got autorun malware loaded. Put that drive into a system that's secured with HIPS and disabled autorun and you might be able get your files back. Getdataback for NTFS or FAT will do the job.

Tews · 14 Dec 2009

In a situation like this, you dont want any files from a compromised computer, its not worth the risk... Format completely and reinstall and read up on basic computer safety practices....

gregrocker · 14 Dec 2009

You ran Malwarebites in safe mode?

I would download Avast free home and accept its boot scan. See what else is picked up.

Next I would enter Safe Mode with networking and download Spybot S&D, only its scan function, update and run. If it finds little or nothing, then run Malwarebites again in Safe Mode and you can probably retrieve your files.

If you dont' see any end to it this way, boot into a copy of Win7 DVD Repair console to open a Command line and type:

DISKPART
LIST DISK
SELECT DISK # (for Windows 7 disk)
clean all (for zeroing, deepest possible clean)
create partition primary
select partition 1
assign letter=c:
active
format
exit

Now reinstall Win7. Avast Boot and Spybot Safe Mode scan upon startup, starting with Win7 DVD.

karthurk · 14 Dec 2009

Tews said:

In a situation like this, you dont want any files from a compromised computer, its not worth the risk... Format completely and reinstall and read up on basic computer safety practices....

Sadly enough, I do have to keep my projects, they're my portfolio and if some clients need something modified I need the source files.

In a situation like this, you dont want any files from a compromised computer, its not worth the risk... Format completely and reinstall and read up on basic computer safety practices....

I'm a computer power user since '99(everythign that I used since '99 to 2007 so far was cracks and keygens), and I did not have had such problems, and I did had my fair share of warez-er until 2-3 years ago ... anyhow. I have ESET SMART SECURITY AND ANTIVIRUS 4.0 now, Lavasoft Ad-Aware and UAC turned to paranoid. I'm curious what it'll happen now on a freshly formatted system, now starts the recovery

karthurk · 14 Dec 2009

gregrocker said:

You ran Malwarebites in safe mode?

I would download Avast free home and accept its boot scan. See what else is picked up.

Next I would enter Safe Mode with networking and download Spybot S&D, only its scan function, update and run. If it finds little or nothing, then run Malwarebites again in Safe Mode and you can probably retrieve your files.

If you dont' see any end to it this way, then download Darik's Boot and Nuke and zero the HD before installing Win7. Only when zeroed will you know nothing can rise from the grave.

Yap, after I backup my data to optical storage I will low level format everything and then I will thoroughly scan my DVD's.

And the passwords changed ...... I use foxmarks for bookmarks and password sync (but not the sensitive login into whm or so). it'll be a mouthfull...

Tews · 14 Dec 2009

I disagree, however your knowledge of system security is non existent otherwise you would not be in the predicament to begin with...You apparently have no backup system in place and your willingness to use dodgy programs may well have not only compromised your own computer, but others as well... So dont tell us how much of a power user you are... you seem to be a careless one...