Win2K Help Desperately Needed

[Wazzerphuk]

I come home from a couple of days away, and my pc is littered to fuck with trojans and worms, that my brother has downloaded. Struggling in keeping the install, on a reboot, Win2K decided it would like to check file consistencies and so on. This is probably a good thing, so I take a nap and let it do it.

I come back, and the machine has booted and appears to be working. That is, however, I try and find something on my E: drive. (I took this drive with me whilst I was away.) Now this drive had 25gigs of my personal stuff on, and EVERY LAST BIT of it has gone. The only thing left on the drive is the FOUND.000 directory with thousands of files in it.

What appears to have happened is that it whatever he infected my PC with trashed the file table, so the drive checker found shitloads of data on the drive but no file structure to fit it all into. Now, this has left me VERY pissed off, as you would expect. Is there anyway I can try and get my stuff back? Please help, I don't ask for much around here from you guys (except Wij ).

 

[DAN200]

Just feel lucky you didnt lose the whole lot.

 

[Wazzerphuk]

Thank you so much for your valuable contribution, you little fuck shit. The point is I have lost everything that was mine, all my work, EVERYTHING useful/l33t/cool/ESSENTIAL is GONE. There are some applications running on this drive, and an O/S - big fucking deal, it takes a few minutes to replace them. It'll take months to get back the stuff I had if I have to search it all out again, and lots of it will never be replaced again. Go fuck off and die.

 

[old.charliealpha]

if its gone its gone. theres no magic uninstall feature (apart from ctrl+z) that'll undo it. only third party software can prevent this.

sorry mate.

 

[DAN200]

ok im sorry, i misread your post, i thought iut had all just been moved to this new directory. sorry to cause any offence.

 

[Embattle]

http://www.ontrack.com/easyrecovery/ - There is a version that allows you too see what you could recover.

 

[Summo]

Well, it seems you need to know what these worms are and what they actually do. If you can be sure what's happened you might be able to find a way to undo it, if that's possible.

If you have no up-to-date anti-virus software go to the McAfee ASaP site and sign up for a trial. This will allow you to scan your PC for viruses/worms/trojans etc.

Once done you'll hopefully (!) have a list of bad viri and a load of cleaned files. Go here to find out what does what and how to undo the damage, again, if possible.

To be honest, it sounds like the damage has been done but you can't be sure until you know exactly what's happened. The above steps will help identify that.

Good luck, me ol' mucka!

 

[~Lazarus~]

Not much more I can add to it Waz.

You are one of the unlucky ones that got hit

I know its like slamming the stable door after the horse and all that shite - you could think about using different medium and backing up the files (CD burning, iomega etc)

I know how you fell - same thing happened to me at work - but it was only work that was lost.

Good luck on the recovery

One question - is your brother still unconcious ?

 

[SoWat]

I'm afraid that binaries converted into *.chk files are not recoverable. It's possible to salvage text files, but that involves looking at each and every file to see what is what.

Bummer

 

[Testin da Cable]

oh, and beat your bro up from me as well

btw [and I'm not saying this to be a pain in the arse] you didn't do the "allow all users to log in as the superuser/administrator" thing did you? if you did, well now you know why you shouldn't.

I'm sorry for you Wazz m8eh, and I really hope you get some [or better all] of your stuff back, but I advise wiping everything off the drives _including_ the partition tables then reformatting and reinstalling.

-TdC

 

[]SK[]

25Gb...If i were you I would have backedup.

 

[stu]

unlucky :/

never let your brother use your puter again

then format and reinstall. you aren't getting those files back.

 

[Wij]

Some files may be recoverable. Certainly a mate of mine recovered all his files after something similar. Not quite sure what he used or what file system he was on or what virus it was but I could ask when he gets back next week :/

gl m8 !

 

[]SK[]

goto www.technet.com
see if anything on there helps you out.

took us 8 hours to recover our damaged exchange server on tuesday

 

[Wazzerphuk]

Thanks a lot for your help guys. Turned out Embattle's post was most useful, and lead to the recovery of the majority of the files I wanted back. Thanks.

 

[Will]

I was asleep during this, but congrats on the recovery Embattle. And Waz, hope the files that weren't in the majority are replaceable.
And I'd still kill your brother. What else are they good for anyway?

 

[]SK[]

yeh, youll soon get all your pr0n back.

 

[~Lazarus~]

Originally posted by Wazzerphuk
Thanks a lot for your help guys. Turned out Embattle's post was most useful, and lead to the recovery of the majority of the files I wanted back. Thanks.

/me pats Embattle on back

P.S. Waz - Wanna buy some pr0n ???

 

[Wij]

Originally posted by Wazzerphuk
Thanks a lot for your help guys. Turned out Embattle's post was most useful, and lead to the recovery of the majority of the files I wanted back. Thanks.