Multipule Explorer.exe using a lot of memory.

[UsernameIssues]

How odd. I suggest MSE because it is very conservative in the actions that it takes.

You can use a tool like this to boot and copy your files off (just in case):
How to record Kaspersky Rescue Disk 10 to an USB device and boot my computer from it?
You can also check to see if explorer.exe is still there:
C:\Windows\explorer.exe
And you can scan the system with that tool - if you want.

To bring it back to life, you might try these steps:
http://www.sevenforums.com/tutorials/3413-repair-install.html
That tutorial includes a link to download W7 install disk - if you need it,

 

[StevenMax]

Working on using KasperSky to recover data. I have downloaded it onto a USB and am prompted with the attached image. I can't take the USB out and put it in my laptop - i turn it on and nothing happens. I can't change the way it boots and make it boot via my flash drive either.

Am I missing something?

Also, how do i check if explorer is still there if i can't open anything or start windows?

 

[StevenMax]

Add- it does let me get to the ASUS Preload Wizard.

My issue is it clearly states
"WARNING: All files on your hard disk partitions, will be lost during the recovery process. ASUSTeK Computer Inc. shall not be liable for any incidental or consequential damages."

I do not want to loose anything on the drive.

Thanks
-Steve

 

[UsernameIssues]

If you cannot change the way that the laptop boots, then you can use create a CD from the rescue disk ISO file and boot to it that way. How to record Kaspersky Rescue Disk 10 to a CD/DVD and boot my computer from the disk?

The rescue disk comes with a file explorer. You can use it to copy your files off and to see if the Windows (file) Explorer app is still there.

 

[StevenMax]

Ok I got Kaspersky to work! This is good. I did start a scan, but I'm missing how to copy files off. You said File explorer - there is nothing but a file manager and that doesn't bring anything up.

Where have I gone wrong?

Thanks,
-Steve

 

[UsernameIssues]

When it first loads, it should try to automatically mount the local hard drive(s):




Once mounted, the desktop should change to look like this:




You should be able to double click on "C" and get to your files.

 

[StevenMax]

From what I can understand by reading more in depth about Kaspersky is since it lists

Disk boot sectors
Hidden startup objects
sda1
sda2

there is no C:/ ? Does this mean it can't find my harddrive to either scan or view files in?

 

[UsernameIssues]

From what I can understand by reading more in depth about Kaspersky is since it lists "Disk boot sectors, Hidden startup objects sda1 and sda2 there is no C:/ ? Does this mean it can't find my harddrive to either scan or view files in?

That seems to be the case.

I'll ask others to stop by your thread and see if they can suggest a course of action.

 

[StevenMax]

Thanks, I appreciate it.

As of now. - Would it help if I took out my hard drive and had a sata to USB adapter and hooked it into another laptop?

I could potentially use my hard drive as an external to rip the data off it. Then go back to figuring out how to get my laptop back up and running.

 

[ICIT2LOL]

Thanks, I appreciate it.

As of now. - Would it help if I took out my hard drive and had a sata to USB adapter and hooked it into another laptop?

I could potentially use my hard drive as an external to rip the data off it. Then go back to figuring out how to get my laptop back up and running.

Worth a try or you could try this

BOOTABLEUBUNTU

Make a bootable Ubuntu disk http://www.ubuntu.com/download

Set the BIOS to boot from theoptical when the machine boots it will show you a screen with TRY or INSTALL> select TRY

When it is finished - it takes verylittle time you will get a screen like in the pic .

Open the drive you want > Userand dig down until you get to the data / settings you may be able to copy /paste the material you want to an external source or other installed drive doingthis.

I am not sure if it will but I haverecovered tons of data etc using this method both on "dead" or justplain drives that you cannot get data from using Windows.

 

[UsernameIssues]

Thanks, I appreciate it.

As of now. - Would it help if I took out my hard drive and had a sata to USB adapter and hooked it into another laptop?

I could potentially use my hard drive as an external to rip the data off it. Then go back to figuring out how to get my laptop back up and running.

That might work - but I hesitate to suggest anything. I'm not sure if any part of mounting the drive via Windows OS could make things worse.

 

[StevenMax]

Thanks ICit2lol! I'm downloading it right now and will update you to my findings.http://www.sevenforums.com/members/icit2lol.html

 

[ICIT2LOL]

Thanks, I appreciate it.

As of now. - Would it help if I took out my hard drive and had a sata to USB adapter and hooked it into another laptop?

I could potentially use my hard drive as an external to rip the data off it. Then go back to figuring out how to get my laptop back up and running.

That might work - but I hesitate to suggest anything. I'm not sure if any part of mounting the drive via Windows OS could make things worse.

I agree User plus it possibly could "infect" the other machine.

Personally I would try the Ubuntu approach.

 

[StevenMax]

Bit of a problem the file is 733mb where my CD which im trying to burn it on is only a 700mb disk.

Is it possible to download a smaller version of this?

 

[StevenMax]

Would using; http://www.pendrivelinux.com/universal-usb-installer-easy-as-1-2-3/ to create it on a USB stick work? I'm not sure if i can even boot from a USB since I've had recent issues doing.

 

[StevenMax]

It's installed but there is no try;

Install Ubuntu
Check disc for defects
test memory
boot from first hard disk
rescue a broken system

Those are my only options.

Suggestions?

 

[UsernameIssues]

I was downloading the same ISO while I posted that link.

I saw the same options - so I removed the post/link.

Sorry, we will need to wait on ICit2lol or others.

 

[StevenMax]

I'll pick up blank DVDs tomorrow and give it a shot. I'll re-post when I find something out or unless there are any other suggestions.

I really do appreciate you staying on top of this. Thanks a lot. Let's hope it works, will go to the store when they open. It's 3AM here Nothing is open right now lol.

- Steve

 

[Slartybart]

From what I can understand by reading more in depth about Kaspersky is since it lists

Disk boot sectors
Hidden startup objects
sda1
sda2

there is no C:/ ? Does this mean it can't find my harddrive to either scan or view files in?

Hi Steve,

I'm know you're on a path with ICIT2lol - please follow one path at a time, don't let my post distract you.

It's difficult to follow two sets of instructions and provide good feedback - things get a bit screwy - so stick with ICIT2lol and the Ubuntu path. Come back to Kaspersky if you reach a dead end or if there is a consensus to take a different tact due to the risk of cross contamination (drive installed or ext. USB'd to another machine)

I'd like to see what you see with Kaspersky Rescue disk, a camera shot would be fine. I'd like to see the same or similar screens that Username provided to you as examples in post 12

Reference: Kaspersky Rescue Disk manual (PDF)

[edit] In the Kaspersky manual (near the end) there's a note about not seeing C: and suggests that it might be due to raid.
I suggested to Username that a "repair disc" boot using the repair option might help.
I came across a few utilities that will provide more information about the issue.

• Farbar Listparts
  >> download the correct bitdepth (32 bit or 64 bit) for your machine
  http://www.bleepingcomputer.com/download/listparts/
  ListParts is a small utility that will create a log that contains a listing of all the hard drive partitions on your computer, which can then be posted on the forum that you are receiving help. This tool is useful for diagnosing rootkit infections that create additional hidden partitions on your computer.
• Old Timer-Listit
  http://www.bleepingcomputer.com/download/otl/
  OTL, or OldTimer ListIt, is a tool that is used to diagnose a computer for a possible malware presence and to provide system diagnostics information that can by someone working on a computer. When run, OTL will scan your computer for a variety of information and then generate a report with a tremendous amount of information about your computer's hardware, programs, files, and running environment.
  >> Guide: http://www.geekstogo.com/forum/topi...oldtimer-listit/page__p__1834531#entry1834531

Both can be placed on a flash drive and you should be able to run them in a Recovery boot. Please post the output from both utilities when you get the chance to run them.
[/edit]

Thanks,

Bill
.

 

[StevenMax]

Hi Slartybart, thank you for your advice. Here are the latest Kasper and Ubuntu images for all to see.

I am in the process of burning the latest ver of Ubuntu onto DVD and trying it that way.
Then will move on to Farbar Listparts and Old Timer-Listit. Will post images of all 3 results.

Thanks all

-Steve