I had to reformat because I got a virus

  • Thread starter Thread starter Lost
  • Start date Start date
L

Lost

I had to do a reformat the other day. I got an internet
worm that ate my winlogon.exe. Before I did the reformat,
I unplugged my slave drive, which contains alot of
valuable information. My question is if I plug the slave
drive back in will the info be recoverable off of that
drive, and how would I do this? Both drives were (are)
NTFS formatted. I just can't lose the info on the unhooked
slavedrive. Someone please help.
 
If you plug the hard drive back in then the data files should be readable.
It should recognize it as just another drive. My biggest concern would be
whether the virus remained on that drive and would be brought over once it's
reconnected.

--
J.C. Hornbeck, MCSE
Microsoft Product Support

NOTE: Please reply to the newsgroup and not directly to me. This allows
others to add to and benefit from these threads and also helps to ensure a
more timely response. Thank you!

This posting is provided "AS IS" without warranty either expressed or
implied, including, but not limited to, the implied warranties of
merchantability or fitness for a particular purpose.
 
What I would do is before plugging the slave back in be
sure you've got the worms id and an antivirus program that
can hunt it down and kill it before it jumps to the master
again. Or just have AVG, Norton, and McAfee standing
there ready on the master. Then as fast as possible start
a scan of the slave and get as much spy ware and other
junk off as you can using a spy catcher type program. The
system should boot from the master because of the
reformat. If your slave also has an operating system on
it, you will know at the third screen during start up
where it shows you the list of operating systems and gives
you 30 seconds to pick one. The most recent is usually at
the top of the list. By running repair on the opsys you
have on the slave you might fix your lost file problem.
Failing that you will need to run a whole new install on
the same patition and in the same folder as the old one by
choosing the "erase the old file and put new ones in the
same place" option. Its a lot more predictable than the
repair option. Good luck and let me know if this helped
you.
 
Back
Top