VIRUS has formatted hard drive

[emaraszek]

also i use avast anti virus as my anti virus device

When you get this sorted out, switch to Microsoft Security Essentials. It's free from MS, updates automatically via Windows Update, it's very light, and is one of the best antivirus solutions available to consumers.

Try running Malwarebytes and have it remove anything it finds

 

[dkny1221]

done a microsoft security essentials and saying everything clean and same for malwarebytes what should i do next

 

[emaraszek]

I would clear off that external drive to make room for a backup and then do a full system image backup.

See the following link:
http://www.sevenforums.com/tutorials/663-backup-complete-computer-create-image-backup.html

Once that is done, play around with the undo delete software and see what you can recover. If something breaks for some reason and you can't boot back into windows, at least you have a backup of your drive exactly as it is now.

If you do get your files, copy them to the external drive and do a clean install of windows 7 on your computer (format the drive completely from the installation media) Then you will need to reinstall all of your programs but you will at least have all of your recovered files.

Most importantly, stop using Avast, it's free and as the saying goes "you get what you pay for." Install MS Security Essentials instead (the one exception to the saying) and be sure to keep your PC up-to-date with the latest patches, versions of Flash, etc. Also, be weary of "sketchy" sites and avoid them if at all possible

 

[dkny1221]

also i forgot to mention ive recovered some windows restore files and they are on my pen drive
Name Date Modified Type Size
PropertyPage.1.etl 14/09/2011 00.00 ETL File 192KB
PropertyPage.2.etl 13/09/2011 23.51 ETL File 51KB
RestoreUI.0.etl 19/11/2011 13.07 ETL File 320KB
RestoreUI.1.etl 23/06/2011 15.13 ETL File 16KB
RestoreUI.2.etl 23/06/2011 11.21 ETL File 31KB
RestoreUI.3.etl 22/02/2011 14.41 ETL File 10KB
RestoreUI.4.etl 30/08/2010 16.26 ETL File 19KB

how would i be able to use these to maybe do a restore without losing anything else or damaging it any more

 

[emaraszek]

also i forgot to mention ive recovered some windows restore files and they are on my pen drive
Name Date Modified Type Size
PropertyPage.1.etl 14/09/2011 00.00 ETL File 192KB
PropertyPage.2.etl 13/09/2011 23.51 ETL File 51KB
RestoreUI.0.etl 19/11/2011 13.07 ETL File 320KB
RestoreUI.1.etl 23/06/2011 15.13 ETL File 16KB
RestoreUI.2.etl 23/06/2011 11.21 ETL File 31KB
RestoreUI.3.etl 22/02/2011 14.41 ETL File 10KB
RestoreUI.4.etl 30/08/2010 16.26 ETL File 19KB

how would i be able to use these to maybe do a restore without losing anything else or damaging it any more

You can try booting to the windows installation disc and see if it will let you use a restore point from the infected drive.

See the following link (Option 2):
http://www.sevenforums.com/tutorials/700-system-restore.html

However, I think that might end up being a dead end if this virus really did delete most of your data. And simply copying those files to a flash drive will not allow you to restore from them. Still, it might be worth a shot.

If not, refer to my previous post

 

[dkny1221]

also that strange user is called uuid:10000000-0000-0000-0200-0025AE90C9E1 and in my user folders has there own folders and all of my folders have been shared with it since the virus but there is no files available on uuid:10000000-0000-0000-0200-0025AE90C9E1 user account

 

[emaraszek]

You may want to try searching these mysterious folders for your lost files

 

[dkny1221]

do you want me to try that remove windows recovery website that pooman posted before??

 

[emaraszek]

That depends, do you have something on your screen like this:

If not then you don't have the virus. You need to either manually try to find those files or do the backup->recover files->reinstall windows procedure I was talking about before

 

[dkny1221]

not that i can remember i just been onto my pen drive and found all of my NTFS are they any good for recovering any of the files that have vanished??

 

[emaraszek]

I'm not sure what you mean

 

[dkny1221]

i mean all of my old ntuser.dat.LOG1 etc.... before that vicious attack on my pc

 

[emaraszek]

Those aren't going to do you any good

 

[dkny1221]

if i could just find a way to get a serial or full version of that undo delete v2.0 id be able to recover them all but i cant seem to find any other program that is showing as much as that one does

 

[emaraszek]

I found this link on a similar post on this site, try it out:
[EXCLUSIVE GIVEAWAY] Unlimited Free Licenses Of EASEUS Data Recovery Wizard Worth $69.95 For Our Blog Readers | Megaleecher.Net

 

[dkny1221]

ok thanks boss il give it a run do you want me install it to my hard drive or pen drive?? also just doing 1 more quick malware scan and its just come across 79 infections so far and still running the second scan but first time it was empty the scan

 

[emaraszek]

You'd probably need to make a bootable CD or USB with it on there and then boot to it before windows starts. I'll download it and see what it wants you to do.

And if you have 79 infections see what happens when they're all taken care of, maybe a complete reinstall won't be necessary.

 

[dkny1221]

thank you so much btw on that kaspersky scan before on the very last file it said either hard drive 4 or drive 4 or summit like that as if it was like another drive there yet ive not got any there or even on the usb ports

 

[emaraszek]

Did it detect an infection on this non-existent drive? Otherwise it could just be indicating something like an empty CD drive or card reader but it shouldn't have found anything there if that's the case

 

[dkny1221]

nope didnt say it was infected ive got no cds or dvds in my drive and all the ports are empty and was empty when doing the scan aswell