Forum Home
Press F1
 
Thread ID: 32882 2003-04-30 12:18:00 Access Denied after virus (I think) win XP Pro Richard N (974) Press F1
Post ID Timestamp Content User
140392 2003-04-30 12:18:00 Friends PC that has ?? had a virus. The HDD is not bootable now. Put the HDD in my PC and removed 4 instances of w32bugbear. Still not bootable. Tried Repair function with Admin password, used 'chkdsk' no luck, tried 'fixboot' no luck tried 'fixmbr' still not bootable. The folder I need access to, with the very valuable info in it, is within Documents and Settings in a 20 gig Fat32 Part. I can access two other users accounts without passwords within this folder but not his. In fact it doesn't show up that it has any data in his folder at all (just his name)but I have seen the data and sub-folders there when I boot up with the 'drive image 2002' floppies. I could just drop an image over the top but my friend really needs this data for all his business accounts.(backup backup I know:-))

Any ideas would be hugely appreciated. I am now totally lost as to what my next step is. Or even is there a next step??
Thanks in anticipation Richard
Richard N (974)
140393 2003-04-30 13:29:00 If the file system is FAT32 then have you tried viewing the files using a command line interface like DOS. I realise you can't see any files in his folder using, I gather, your OS on your hard drive .... but it doesn't take long at all. If you can view it maybe you can copy it over to your h/d. Then again, maybe I've been smoking tooo much weed.

Just a thought ... good luck.



> Friends PC that has ?? had a virus. The HDD is not
> bootable now. Put the HDD in my PC and removed 4
> instances of w32bugbear. Still not bootable. Tried
> Repair function with Admin password, used 'chkdsk' no
> luck, tried 'fixboot' no luck tried 'fixmbr' still
> not bootable. The folder I need access to, with the
> very valuable info in it, is within Documents and
> Settings in a 20 gig Fat32 Part. I can access two
> other users accounts without passwords within this
> folder but not his. In fact it doesn't show up that
> it has any data in his folder at all (just his
> name)but I have seen the data and sub-folders there
> when I boot up with the 'drive image 2002' floppies.
> I could just drop an image over the top but my
> friend really needs this data for all his business
> accounts.(backup backup I know:-))
>
> Any ideas would be hugely appreciated. I am now
> totally lost as to what my next step is. Or even is
> there a next step??
> Thanks in anticipation Richard
to_kubernetes (3704)
140394 2003-05-01 04:46:00 to to_kubernetes,
thanks for your help there . I must be blind because today I realised that this is not a FAT32 but indeed an NTFS volume . Not sure how I made that mistake, sorry .

So that changes things considerably I guess . Does anyone know how to access this folder in an NTFS partition? Another thing has changed today, I can now actually see the folders beneath the username when I view it as a slave drive in my PC but now just get the 'Access Denied' when I try to access . We do have the Administrator password for this folder .

Can this be done? I still can't boot from the drive however .

Hope someone can help please .

Richard
Richard N (974)
140395 2003-05-01 06:08:00 If you've got that far you should be OK . The details . . .

I'm not sure the administrator password for the other system will help . :-( Perhaps logging in as Administrator on your system will do it .

If that works . . . you are happy .

I have a feeling that reinstalling XP should just get you back a working system, with non-XP directories and data preserved . Of course, you have to firmly stop any attempt of the installer to format the disk . :D

Didn't the recovery console give that option? Where are the XP experts?

If not, it might be safer to boot the computer (your one) with a Linux which is a "live CD system" . That is, it boots from the CD, and does not get "installed on, or use the host's hard disk for the system . The Knoppix distribution which was put on the PC World cover CD a few months ago can read a Windows NTFS disk , and can write to another (Windows format) disk .
Graham L (2)
140396 2003-05-01 06:16:00 Another thought: add your friend as a user on your system, with the same username and password as on his own machine. Graham L (2)
140397 2003-05-02 08:34:00 If your data is stored on an NTFS partition, you will need another operating system running on NTFS to access that partition. Either that or Linux.

Or do the recovery from the Windows XP Cd.

This is probably your best option if WindowsXP recovery doesnt work for you:

Partition the hard drive off using partition magic. Don't do it with cheap rubbish like fdisk. With partition magic, you know exactly whats going on.

Ok make the original XP partition smaller (chop off about 4Gb if u can)

Now with the unallocated space format it as NTFS (a Primary partition I think?) or you can let the windowsXP installer do that.

Install a fresh copy of XP with the NTFS file system on the new space you have created.

Once thats done, boot into your new XP system, install Norton AntiVirus and run live update. Scan the old xp partition thoroughly (so you don't transfer the viruses onto the new partition.

Now backup your important files onto the new partiton.

If you can't access a specific folder and it is saying 'access denied' (a folder uve put security restrictions on so only a specific person can access it) then try making the exact same username, and logging in under that with the same password. Also turn off 'simple file sharing' under My Computer - Tools - Folder options -> View Tab -> Scroll down and uncheck 'simple file sharing'

I recommend after you've saved your important stuff to the new XP partition, formatting the old one again, and reinstalling xp onto there again. It will involve a fair amount of shifting/resizing etc.

Ultimitely a repair is the best option -lol
PoWa (203)
140398 2003-05-02 08:38:00 Actually WHOOPS. Maybe it isn't the best idea to repair xp to get those important settings back. Xp most likely would overwrite the documents and settings folders. Especially if your friends data is inside the 'Administrator' logon.

best bet, do that other option I was talking about. Post back and tell us how you get on.
PoWa (203)
140399 2003-05-02 12:32:00 Success success!! After a really late night last night today it is all OK. Lat night I booted up with Knoppix and coud see all the data that was previously denied and I was able to send all the small files to the floppy. However he also had some MS money files that were too big and not being a linux chap I had a real major job getting to write any files to any of my other partitions (Fat32 or NTFS) even when I realised that the defalut settingis read only. I gave up with a headache at 2am this morning. I am sure this option would have worked if I knew what I was doing!
Tonight was the night! I did an image using Drive Image 2002 and copied onto another partition and then restored the necessary files onto a Fat32 part. This canned all hte security and low and behold there was all the data in a usable form! Restored a previous image onto the partition in question and all is back up and running.

Thanks To all who have helped me. That Knoppix CD is great isn't it. Shame I didn't know more about it

Thanks again Richard
Richard N (974)
1