Tom's Hardware > Forum > Storage > Hard Disks > Virus changed hard drive type how to recover?

Virus changed hard drive type how to recover?

Forum Storage : Hard Disks - Virus changed hard drive type how to recover?

Tom's Hardware: Over 1.4 million members in 6 different countries available to answer all your high-tech questions. Sign up now! Its free!
Word :    Username :           
 

Hi all,

I got a virus or Trojan and when I started to rid my system of it, it changed the parameters on my hard drive. I can see the data is still there with testdisk and copy some of it. But the CHS values are wrong and the partitions are not recognized. The drive is a WD6400AAKS the reported values are CHS 77825 255 63. Does anyone have some suggestions.

TIA

Sponsored Links
Register or log in to remove.

Stay away from kiddie porn. Sorry but you mug shot fits the profile.

Reply to daship

grab a live CD of ubuntu or backtrack. then transfer the files by mounting the disk ( should automatically do it, but if not look thru the forums ) from there transfer the files to a second HDD.
if u cant see the disk or partitions for windows then force mount the drive ( try sda1 , sda2, sda3 )
then create a windows directory ( mkdir _____ ). then transfer files via mv _____ or copy with cp ____


and ditto to the post above. theres a reason your computer got a virus, either your ignorant of how to maintain a computer which i doubt seeing as you found yourself a decent HDD. or your looking at things you know you ought not to be.

------------------------------ http://valid.canardpc.com/cache/banner/480253.png
Reply to mcnuggetofdeath

The first step with a virus/trojan is to identify what it is/was, it makes the job of removal and repair far easier.

I presume it's a Windows machine (you didn't say), so if TestDisk can't recover the partition data try something like GetDataBack from Runtime.org.

Reply to MrLinux

wtf ???? He gets a virus/trojan and he's branded a kiddie fiddler ????

Reply to Joey2oo9

Google is your friend.

Google " wd6400aaks chs values" and you will see a post summary:

"... with non-removable media Model Number: WDC WD6400AAKS-65A7B0 Serial ... 16 sectors/track 63 63 -- CHS current addressable sectors: 16514064 LBA ... IORDY(can be disabled) Queue depth: 32 Standby timer values: spec'd ...
ubuntuforums.org/showthread.php?p=6771129 - 66k - "

And next time, use good anti-virus and fire wall programs.

Reply to jsc
Tom's Hardware > Forum > Storage > Hard Disks > Virus changed hard drive type how to recover?
Go to:

There are 930 identified and unidentified users. To see the list of identified users, Click here.

Please mind

You are about to answer a thread that has been inactive for more than 6 months.
If you still wish to proceed, please ensure that your posting is original and does not duplicate or overlap any prior responses to this thread.

Add a reply Cancel
Sponsored links
  • Ask the community now
  • Publish
Ad
They won a badge
Join us in greeting them