Multipule Explorer.exe using a lot of memory.

UsernameIssues said:

StevenMax said:

Thanks, I appreciate it.

As of now. - Would it help if I took out my hard drive and had a sata to USB adapter and hooked it into another laptop?

I could potentially use my hard drive as an external to rip the data off it. Then go back to figuring out how to get my laptop back up and running.

That might work - but I hesitate to suggest anything. I'm not sure if any part of mounting the drive via Windows OS could make things worse.

I agree User plus it possibly could "infect" the other machine.

Personally I would try the Ubuntu approach.

I was downloading the same ISO while I posted that link.

I saw the same options - so I removed the post/link.

Sorry, we will need to wait on ICit2lol or others.

StevenMax said:

From what I can understand by reading more in depth about Kaspersky is since it lists

Disk boot sectors
Hidden startup objects
sda1
sda2

there is no C:/ ? Does this mean it can't find my harddrive to either scan or view files in?

Hi Steve,

I'm know you're on a path with ICIT2lol - please follow one path at a time, don't let my post distract you.

It's difficult to follow two sets of instructions and provide good feedback - things get a bit screwy - so stick with ICIT2lol and the Ubuntu path. Come back to Kaspersky if you reach a dead end or if there is a consensus to take a different tact due to the risk of cross contamination (drive installed or ext. USB'd to another machine)

I'd like to see what you see with Kaspersky Rescue disk, a camera shot would be fine. I'd like to see the same or similar screens that Username provided to you as examples in post 12

Reference: Kaspersky Rescue Disk manual (PDF)

[edit] In the Kaspersky manual (near the end) there's a note about not seeing C: and suggests that it might be due to raid.
I suggested to Username that a "repair disc" boot using the repair option might help.
I came across a few utilities that will provide more information about the issue.

• Farbar Listparts
  >> download the correct bitdepth (32 bit or 64 bit) for your machine
  http://www.bleepingcomputer.com/download/listparts/
  ListParts is a small utility that will create a log that contains a listing of all the hard drive partitions on your computer, which can then be posted on the forum that you are receiving help. This tool is useful for diagnosing rootkit infections that create additional hidden partitions on your computer.
• Old Timer-Listit
  http://www.bleepingcomputer.com/download/otl/
  OTL, or OldTimer ListIt, is a tool that is used to diagnose a computer for a possible malware presence and to provide system diagnostics information that can by someone working on a computer. When run, OTL will scan your computer for a variety of information and then generate a report with a tremendous amount of information about your computer's hardware, programs, files, and running environment.
  >> Guide: http://www.geekstogo.com/forum/topic...1#entry1834531

Both can be placed on a flash drive and you should be able to run them in a Recovery boot. Please post the output from both utilities when you get the chance to run them.
[/edit]

Thanks,

Bill
.