Solved External Hard Drive error ~$WV.FAT32

[jumanji]

Thanks to the mods/admins for merging the two threads. Good job.

In the screenshot @ posts #21 and 25 ( both same), the OP is seen running the LLF Tool on a Seagate Portable SF04 500.1 GB external drive. He had also mentioned Seagate in one of the posts.

The external drive in the last RKreport shows Toshiba External USB 3.0 USB device, perhaps 1TB.

OP needs to clarify this.

 

[Flippylumpy]

In Disk Management, do you see any unallocated space?
If so, what is the size?
Is the external hard drive bootable?

Yeah, here it is.

That Toshiba was my other ext.Hd, guess that i did plug the wrong HD when i did the scan, sorry!

Uhm, yeah I guess so. But all of my backup files are in there, which I can't afford any memory to place all of the files in that Hd in case that i need to format it too.

Here's the Shortcut fix report, View attachment RKreport[2]_SC_03192013_02d2106.txt

 

[jumanji]

Another clarification Flippylumpy.

Is the screenshot above that of the Seagate external drive before you ran the shortcut fix or after you ran the shortcut fix? We do miss the RK report with the Seagate external drive plugged in. I would have loved to see how MBR was reported there.

In other words, were you able to see the drive in DiskManagement even before running the shortcut fix?

Now let us wait for cottonball.

 

[Flippylumpy]

@Jumanji

It is already there before i ran the shortcut fix. Maybe I just did not notice that part of the disk management before cause I always just look at the Volume list part.

 

[cottonball]

The Shortcuts should be gone by now.

Disk Management shows Unallocated space in Disk 1 of about +/- 465GB

The External drive in question, at one point named Letrang (Tagalog: Letter) H:, with a size of +/- 465GB happens to be the same size!

If this drive was LLF, and there is no Partition, I don't think it will be showing in a RogueKiller report, or any other malware tool which identifies partitions as infected, etc. Someone please correct me if I am wrong!!

~~~~
Let's see if we can figure this out...

Please run the Command Prompt as Administrator and do some checking:

Please click on the Start button.
In the seasch box above, type: cmd
Right-click the cmd entry that appears at the top of the programs list, and select: Run as Administrator

Right-click next to the blinking cursor of the Command Prompt, and paste each line in the quote box below, one at a time, and after each line, press Enter:

Diskpart
list volume
select disk 1
detail disk

To provide the information in your next reply, right-click the upper frame of the Command Prompt, and select: Edit > Select all
Go back to the upper frame, right-click, and select: Copy
Open Notepad, and Paste the info on it, and from there provide it in your reply.


~~~~
Also, please download:
32-bit Downloading ListParts
64-bit Downloading ListParts
Save to the Desktop.

Double-click the downloaded file to run the program.

Check: List BCD
Click: Scan

When done, please post the Result.txt in your reply.

 

[ICIT2LOL]

Hum now my two cents worth I keep seeing that Yontoo mentioned in those reports - it is a well I had better keep my language agreeable - APITA and a pig to get rid of, and one that downloads to the unwary with other apps.

I don't know what anyone else thinks?

Personally I had to dig into the registry to get rid of it but that is my experience of it.

 

[cottonball]

@ICit2lol,

In Post #2, you suggested AdwCleaner, and it does dig into the Registry.

Also, RogueKiller was run later on.

Between those two proggies, the pita was toasted, and it didn't even get any olive oil!!

 

[ICIT2LOL]

@ICit2lol,

In Post #2, you suggested AdwCleaner, and it does dig into the Registry.

Also, RogueKiller was run later on.

Between those two proggies, the pita was toasted, and it didn't even get any olive oil!!

Yes mate but I don't remember having seen that it had been run. The rotten thing is a type of control where you go app and personally I found it such a hindrance, and very unnecessary.
So it had me wanting to get rid of real quick only to find it is a stubborn rat and doing it from the reg myself was the only answer.

 

[Flippylumpy]

@Cottonball

Here's the Diskpart result, View attachment Diskpart.txt
And here's the Listparts result, View attachment Result.txt

 

[cottonball]

Flippylumpy,

Thanks for the info!

Partitions of Disk 1:
===============
Disk ID: 6B8EB0C8
There are no partitions on this disk to show.



@jumanji

Your guidance is needed to proceed!

 

[jumanji]

Simple, Flippylumpy

Just rightclick on the unallocated space, click on New Simple Volume and format your drive with the wizard that kicks in. (assign drive letter, file system, Volume label etc., and quick format.) I think that should go through without any problems.



(yep, I was just experimenting and had an unallocated pendrive and sure I had used LLF Tool to lowlevel format, Partition Wizard to make it unallocated and trying all sorts of things. )

Thanks to cottonball for cleansing your PC and making this possible.

 

[cottonball]

Any time jumanji, glad to help.

If any time in the future you get someone with malware, just let me know, and will do my best.

Regards...

 

[Flippylumpy]

woah, Thank you so much guys! I appreciate the time you spend here to discuss and solve me problem, It was really informative. Ohmm, one more thing, how do I revert the Unhide.exe effect?

 

[jumanji]

I haven't used unhide.exe anytime and so I wouldn't know what effect you are mentioning.

If you mention in detail what exactly is the "effect" that you may want to undo, perhaps some solution may be forthcoming. Let us see whether cottonball has something to say on it.

 

[cottonball]

Here we go...

To hide the files in Windows, reverse the steps that follow:

Close all programs so that you are at the Desktop.

Go to Start > Control Panel > Appearance and Personalization > Folder Options

In Folder Opgtions > View tab:
Uncheck: Show Hidden Files or Folders
Under the Hidden files and folders section uncheck: Show hidden files, folders, or drives
Check: Hide extensions for known file types
Remove the check from: Hide protected operating system files (Recommended)

Press: Apply > OK

For other files not governed by Windows Folder Options, manually hide
them by right-clicking on the file, selecting Properties, and checking the Attributes box
next to Hidden.

 

[Flippylumpy]

That works, now I can use all the stuffs I learned here if it happens again. Thanks again guys, specially for Jumanji who helped me from the very start.

 

[jumanji]

Glad to see the solved tick mark on this thread. While I do rightly take pride in what I had done on this thread, a major part, that of cleansing your PC of all malware, was carried out by mate cottonball, the Malware Buster.

I had no doubt whatsoever that once your PC was clean, your external hard disk can be fixed. I also knew that it could have easily been done on another clean PC but the need of the hour was cleansing your PC and that is why I diverted you to the System Security sub-forum.

As Slartybart rightly said (" Soon enough FlippyLumpy will be an expert" ) in his post #35, you are one now , thanks to SevenForums.

I also appreciate your perseverance and following the instructions to the dot throughout this thread.

Have a good night.

 

[cottonball]

@Flippy lumpy

Thanks again guys, specially for Jumanji who helped me from the very start.

Rightly so. jumanji is very knowledgeable, and a true expert.



@jumanji,
Malware Buster??

I like to destroy malware like a heat seeking missile!

...as long as the missile does not turn around and hit me in the...rear!!!

 

[mq15]

Hello sir. I am having the same problem with my USB Flash Drive. I did all as directed by jumanji in post#11. Now WinRAR shows the drive empty. Windows Explorer also shows "This folder is empty". Although it shows 3.73 as total size and 3.63 free. This hints me that my data is still there on the flash drive.

Attached is the result of DIR/A:H in CMD. It shows a DIR without any name.

 

[jumanji]

Shut down your computer completely after safely removing your pen drive.

Reboot and plug in your pen drive.

Run WinRAR and explore the contents of your pen drive and post a screenshot of it.

Afterwards, close WinRAR ( do not plug out the pen drive) and take a screenshot of Windows Disk Management. Let us see how the pen drive shows up in Disk Management. http://www.sevenforums.com/tutorials/274797-disk-management-post-screen-capture-image.html

I shall be back here after another six hours and then examine it. So you have all the time in the world.

( I only hope that you have not deleted all the files in WinRAR. You should have examined the contents of each and every folder and deleted only what obviously are not your data files/folders. Let us see.)