Fixing Other drives after Virus attack....

[sukatoa]

I don't know where to post this kind of question...

But, maybe there are some/all of you had experience on this....

About other Hard Disk...

I have:

C -Other OS (Win XP SP2)
D -Current System Used (Win XP SP2) ( Used Deep Freeze latest (Safe) Not affected)
E & F - Applications and data...

I've been attacked by a Brontok, kavo.exe, Genetik Trojans...

Im using NOD32...

All of them are deleted....

But!!!!

My drive C, E & F are affected...

When i double click those drives, it will redirect to My Documents....
@ right click, The choices Open, Explore and Search are now changed into some unknown format.... Maybe it was damaged...

CAn anybody tell me how to retrieve its original state?

What software can you guys recommend?

Any reply will be appreciated...

Sukatoa

[AmberJain]

I don't know where to post this kind of question...

But, maybe there are some/all of you had experience on this....

About other Hard Disk...

I have:

C -Other OS (Win XP SP2)
D -Current System Used (Win XP SP2) ( Used Deep Freeze latest (Safe) Not affected)
E & F - Applications and data...

I've been attacked by a Brontok, kavo.exe, Genetik Trojans...

Im using NOD32...

All of them are deleted....

But!!!!

My drive C, E & F are affected...

When i double click those drives, it will redirect to My Documents....
@ right click, The choices Open, Explore and Search are now changed into some unknown format.... Maybe it was damaged...

CAn anybody tell me how to retrieve its original state?

What software can you guys recommend?

Any reply will be appreciated...

Sukatoa

You have posted the question in appropriate forum.

First please answer some of questions below.
1. Does drive d remains unaffected?
2. Can you explain this (as you said) in DETAIL :
_______________ _______________ _______________ _______________ _____
"About other Hard Disk...

I have:

C -Other OS (Win XP SP2)
D -Current System Used (Win XP SP2) ( Used Deep Freeze latest (Safe) Not affected)
E & F - Applications and data..."
_______________ _______________ _______________ _______________ _____
I don't know any software to recover from such a problem but I will to find out one.

If you are unable to access any of the drives, try this:
Create a new shortcut on the desktop and point it to C: or any other drive. This will allow you access to specific drive.
_______________ _______________ _______________ _______________ _____
HOPE THIS HELPS..........

[sukatoa]

You have posted the question in appropriate forum.

First please answer some of questions below.
1. Does drive d remains unaffected?
2. Can you explain this (as you said) in DETAIL :
_______________ _______________ _______________ _______________ _____
"About other Hard Disk...

I have:

C -Other OS (Win XP SP2)
D -Current System Used (Win XP SP2) ( Used Deep Freeze latest (Safe) Not affected)
E & F - Applications and data..."
_______________ _______________ _______________ _______________ _____
I don't know any software to recover from such a problem but I will to find out one.

If you are unable to access any of the drives, try this:
Create a new shortcut on the desktop and point it to C: or any other drive. This will allow you access to specific drive.
_______________ _______________ _______________ _______________ _____
HOPE THIS HELPS..........

For me, Drive D is hundred percent clean.... I've set it in Freeze state last last week... ( For antivirus updates and others )....

I suspect it was from my Flash drive....

C, E and F drives are not in freeze state.... C is for back-up OS if what am i use now might be corrupted soon.... ( Just in case )

E and F are for permanent storage for my files... Documents, source code...
Projects... Because, i cannot store it in D (Freeze state, Remove at shutdown or next restart)

C, E and F can be access by clicking folder (Beside Search) in windows explorer....

But, i hate to do it that way.... As i need fast searching for my files....


Thanks for you reply bro... ;-)

[AmberJain]

For me, Drive D is hundred percent clean.... I've set it in "Freeze" state
C, E and F drives are not in "freeze" state....

("Freeze" state, Remove at shutdown or next restart)

What do you mean by FREEZE state? I heard about this for the first time and am pretty unsure about it.

So please tell me what do you mean by FREEZE state?

THANKS IN ADVANCE........ .......

[sukatoa]

What do you mean by FREEZE state? I heard about this for the first time and am pretty unsure about it.

So please tell me what do you mean by FREEZE state?

THANKS IN ADVANCE........ .......

Im using DeepFreeze Standard Edition... (latest)

It is from Faronics

Try to look at this...

Less maintenance...

[AmberJain]

I don't know where to post this kind of question...

But, maybe there are some/all of you had experience on this....

About other Hard Disk...

I have:

C -Other OS (Win XP SP2)
D -Current System Used (Win XP SP2) ( Used Deep Freeze latest (Safe) Not affected)
E & F - Applications and data...

I've been attacked by a Brontok, kavo.exe, Genetik Trojans...

Im using NOD32...

All of them are deleted....

But!!!!

My drive C, E & F are affected...

When i double click those drives, it will redirect to My Documents....
@ right click, The choices Open, Explore and Search are now changed into some unknown format.... Maybe it was damaged...

CAn anybody tell me how to retrieve its original state?

What software can you guys recommend?

Any reply will be appreciated...

Sukatoa

It had been a month since we discussed this problem and I hope this is solved.
But if it remains unsolved then I can probably help you in this matter (after I have successfully solved the same problem on my friend's PC).

If problem is still unsolved then follow the following steps:-

1. As you said that there are four drives [C:],[D:],[E:],[F:] in your PC. Search for all the files with name [Autorun.inf] in the root of all drives i.e. search for all files with following structure:

c:\autorun.inf
d:\autorun.inf
e:\autorun.inf
f:\autorun.inf

and delete all above mentioned [autorun.inf] files.
_______________ _______________ _______________ _______________ _____
+++++++++++++++ +++++++++++++++ +++++++++++++++ ++++++++++++
___NOTE____ : The files [autorun.inf] might be hidden. So first of all you will need to show hidden files. Follow these steps if files are hidden :
To see hidden files:
1.
On the Tools menu in Windows Explorer, click Folder Options.

2.
Click the View tab.

3.
Under Hidden files and folders, click Show hidden files and folders.


Note To access Windows Explorer, click Start, point to All Programs, and then click Windows Explorer.
+++++++++++++++ +++++++++++++++ +++++++++++++++ ++++++++++++
_______________ _______________ _______________ _______________ _____

Actually, all the autorun.inf files are causing weird characters in place of right context menu of your drives. Plus these files are also diverting you to [my documents] when you double click any drive letters. So deleting them is perfect solution to this problem.


I already suggested this (although INDIRECTLY) to you in the following thread started by you :-
THREAD

_______________ _______________ _______________ _______________ _____
If this doesnot helps, tell me. I have alternative solutions to this problem.

HOPE THIS HELPS.......... .

============
AmbrNewlearner
============