Hacked Computer

[stpug]

Tried to do new back up,ran for a bit then failed. "Config registry database is corrupted" (0x800703F1)? This is for drive D:. Dammit. I had high hopes for D: drive too. Needs more work I guess. continue cloud search...

This is most likely remnants from the malware that got into your system and probably has nothing to do with your D: drive. I'm sure there are several remaining invalid registry keys remaining on your system that will just linger like lost memories . While there are tools that can automate the cleaning of the registry, I have found most to be a little too heavy-handed. It's possible to rectify the registry to a state that will allow windows modules like 'backup' to run correctly again, but it could take a bit of work. It's also possible to find a use a 3rd party backup software - specifically a free and/or open-source backup software. One I'm familiar with is Cobian (freeware but not open-source), however I believe there may be a better alternative out there. Let's see if anyone else has a suggestion for a free/opensource simplified backup software to replace microsoft's backup utility.

 

[stpug]

Here's a free, simplified backup software that looks like it might do the job without much fuss:
http://www.aomeisoftware.com/download/adb/BackupperFull.exe

You can read more about it here, but I would use the link above to download the program if you decide you want it:
http://www.aomeitech.com/

I've never used this software but I have reviewed the webpage, and read reviews on this software and it seems like it might be just the ticket for a simplified backup process. I don't know if you've done this already or not, but I would ensure you have the equal amount of space on your D: drive that you have used on your C: drive. If you need help determining this just let us know.

 

[stpug]

If you want you can open a command prompt and use the following command to generate the available/free bytes:
fsutil volume diskfree c:

And then do the same thing for your D: drive:
fsutil volume diskfree d:

You can then right-click in the command prompt window, choose Edit - Select All.
Right-click on the window's titlebar and, choose Edit - Copy.
And then you can paste the results here in a post.

You should see something like this:

Microsoft Windows [Version 6.3.9600]
(c) 2013 Microsoft Corporation. All rights reserved.

C:\Users\home>fsutil volume diskfree c:
Total # of free bytes        : 683142660096
Total # of bytes             : 999835037696
Total # of avail free bytes  : 683142660096

C:\Users\home>fsutil volume diskfree d:
Total # of free bytes        : 138759753728
Total # of bytes             : 500105216000
Total # of avail free bytes  : 138759753728

C:\Users\home>

 

[balrog]

I second the notion of not doing registry cleaning, and reiterate the idea that a second hard drive be introduced as the new system onto which Windows is installed, leaving the old drive inside the chassis but not the boot drive, for copying from then wiping. As for backups, I'd kinda recommend doing DOS XCOPY from each user's MyDocs (\documents and settings\username\my documents for XP or \users\username for Win7)

 

[unionrdr]

I'm using Google Chrome right now. I tried your suggestion in the start box thing. it says fsutil is not recognized as an internal or external command,operable program or batch file? By the way,I got that wavy red watermark under "fsutil" again,so spell checker is also working again! so that's something,at least...It also looks like I need to import the HDD viewer stuff to chrome as well. Resolution of fonts,etc could be a tad better by the look of things.
So dosxcopy is how I save users profiles? The thumb drive came in a lil while ago from newsman,so thanks there.

 

[GeneticBrew]

A general tip (to help avoid computer viruses) is to install VMware Player and the latest Ubuntu (or perhaps just make a USB stick install of Ubuntu).

This has two purposes:

1.) If the host is dirty, the virtual machine will most likely be clean.

2.) If the host is clean, "suspect sites" can be viewed from within the virtual machine.

 

[unionrdr]

So this VMware & Ubuntu has something to do with saving needed files to thumb drive?

 

[balrog]

For now I'd just copy files. The Ubuntu thing is for later (my $0.02). You need to get files copied if at all possible first.

 

[unionrdr]

I'm thinking of going to the computer screen & see if it recognizes the thumb drive now...

 

[stpug]

Sorry but VMWare and Ubuntu only serve to confuse matters at this point.

If you're comfortable with working at the command prompt then Xcopy might be the ticket, but I don't really think this is a viable solution for you at this time. To keep things really simple, you could just copy/paste your data files over to your D: drive using the regular old windows file manager. I was suggesting the backup software above as a simple, automated way of creating a complete backup of your system. Alternatively, it can be used to only backup specific folders.

The other way of telling us your drive availability is to open 'This PC' or 'Computer' or 'My Computer', and right-click the C: drive and choose 'Properties'. It will show you used space and free space. The same can be done for the D: drive. This is just to figure out how much space is used on your C: drive to determine if your D: drive can hold a complete backup of your system, OR if the backup will need to be whittled down to fit.

 

[balrog]

I think you are in good hands with STPUG, I would like to help but too many IT guys in the kitchen is worse than none

 

[unionrdr]

I'll get back to that in a bit. But on the computer screen,it doesn't show which drive has the thumb drive plugged in. It did open a little window for drivers & such for it. "Ready to use" as well,but can't see which drive it is to load selected files to it?

 

[GilSwillBasementBrews]

if you open my computer it should show which drive it is
Local Disk C:/ will be your hardrive
RECOVERY d:\ would be restore partition

your usb drive should be listed underneath them and it will tell you size of drive. would be similar to
USB DRIVE e:\

 

[unionrdr]

DVD RW drive E: is listed,with a bunch of removable drives. But no USB listed?

 

[GilSwillBasementBrews]

It should be one of the removable devices listed. It may or may not be listed as USB drive. could also be listed by the maker of the device. If you know what size the thumb drive is it should show available drive space so just open the compatible one.

Worst case scenario remove the drive and see which one gets removed from the list of devices

 

[GilSwillBasementBrews]

under normal operating conditions when you plug the USB drive in a box should pop up asking what you want to do? Just click on the option to open and view files if it pops up. Given your issues not sure if it will or not.

 

[unionrdr]

I removed & re-inserted it,& it shows as removable drive K:\. Documents was like 1.54GB alone. Pic file too big,maybe even for a cloud. Have to get D: working again to save some of the big stuff,& just redo drive C: I guess?

 

[GilSwillBasementBrews]

you mentioned your son has a laptop also? you could fill the thumb drive then move them to the laptop until you've recovered all you want to save. then after fixed and updated back copy all the information.

 

[unionrdr]

Yeah,it looks like I may have to do just that. But tomorrow. It's Friday,6PM. Time to watch Bonanza with my multi-handicapped #1 son.

 

[GilSwillBasementBrews]

Yeah,it looks like I may have to do just that. But tomorrow. It's Friday,6PM. Time to watch Bonanza with my multi-handicapped #1 son.