This kind of compilation software provides a compilation of programs to help resolves most and some uncommon Internet and computer issues like driver failure, intermittent internet connection and other computer malfunctions. When it comes to having a certain PC streamlined, base lined, or simply reformatted, there are various ways to do so. Many resort to using the traditional clean install, where the primary driver is reformatted, thus leaving the PC clean and new, and the only thing that is very tedious to do afterwards are none other than installing once again the drivers or hardware installed on the computer, which usually take 2 or 3 hours to finish. What more if the computer is having a problem to boot or load the operating system?
HBCD Fan & Discussion Platform. Download; Burning. Universal TCP/IP Network 6.4: MSDOS Network Client to connect via TCP/IP to a.
What if the BIOS (Basic I/O or Input / Output System) becomes corrupt thus not able to access the operating system like Windows or Mac, and not being able to access the files? Well, there is a solution to this, and it’s another easy to use software: Hiren’s BootCD. Partition Tools Partition means to divide a certain part of a hard drive for backup and system files, like separating a part from the whole. In most computers, the primary disk is C:, since it hold the operating system and program files. When a hard drive on the computer is partitioned, there are 2 independent drives, the primary for the OS, and the other for backup files. Since the 2 drives are independent, the drives work isolated and when becomes corrupt, the other is not affected. Partition Tools not only help in creating a new partition while there is still an open operating system, but it also helps manage and control the use of these partitioned drives.
As a computer user, the person may opt to modify, resize the total capacity or delete any partitions made within the computer through the compiled list of programs which include Macrium Reflect, Partition Image and Partition Saving as one of the programs included. And that way, the creation of hard drive partitions without the need of installing an OS like Windows, Linux or Mac is lessened, which is the main goal of these computer programs, that is to add, modify or remove computer drive partitions without compromising the reinstallation of an Operating System. Backup & Recovery Files maybe sometimes irretrievable due to being accidentally deleted or the file was not recognized by the computer system.
Although the search feature in Windows may prove worthy, it sometimes leads to no files being found even though the file is available and still on the said hard drive. Another thing to note is the backup and recovery of the files from a computer. People may never know when disaster strikes and files have already been missing or deleted somehow without the user noticing.
BootCD has a list of programs that can be used to backup, recover and retrieve files easily and with no hassle. Aside from backup and retrieve purposes, some files that are backed up can be also corrupted and certain programs can help in recovering and making the file corrupted accessible to use. Now, the main purpose of having programs loike this is to ease the burdens of backing, thoug it may be a good practice. Software like these include GetDataBack, HDD Scan and Recuva, from the makers of the CCleaner software, Piriform. Antivirus Tools Most computers require an antivirus program. An antivirus program can be defined as a certain computer program designed to program and maintain the computer secure, meaning free of viruses and corrupt data. It also helps in maintaining computer performance in tip-top shape, so as to maintain the integrity of the hardware and system itself.
Hiren’s BootCD has a number of free antivirus and can be used immediately. There are also a number of hard drive cleaners if ever there is a chance that the computer is already infected with malware, spyware, Trojan or any other virus. Aside from these purposes, some antivirus does not take much or hog the system resources and work in the background not unless the computer is idle for a time being, that way processes of other programs that take more power and resources can be given priority. Some programs included are Avira AntiVirus, SpyBot: Search & Destroy, and Malwarebytes Anti-Malware. Testing Tools Maintaining a certain PC is a craft. It’s hard work in the process. The BootCD software has programs that can help in maintaining computer stability.
It also has programs to check errors on the hardware installed. Aside from these, a certain program can estimate the life of hard disk or hardware installed. Aside from the fact that can estimate and test a computer for known and unusual hardware activity and hardware life, it also tests a certain computer component for any possible errors it can make which can render the PC unusable or corrupted. It can also monitor faults in RAM (Random Access Memory) or the memory for storing processes. Aside from RAM, it can also monitor possible faults in devices like the hard drive, CD Drive even the USB (Universal Serial Bus) ports. The variety of software that can be used can also monitor the physical aspect of the device or driver installed.
It can give a report that a certain computer component has physical damage and the user has to check if it has an error in placement or the device is really defective. Password Tools Passwords are an important security feature in most systems. But as time passes by, a certain user may forget such passwords. The BootCD software contains programs like Autologon, WindowsGate, or Windows Key Finder help manage and remember passwords for forgetful PC users. Certain programs also provide password encryption and requirement for hard drive writing or removal of files or simply to secure the net as well. Mini Windows XP A simple version of Windows XP is made as an option to be used in cases that require a separate or independent OS, like in a scenario that a certain computer has been filled with viruses.
That way, another OS is working on the installed Operating System, and the user can use any available program to clean such viruses without having the need to reformat. What's New: • BattStat 0.99b: Battery Status monitor and power management freeware for Windows 7/Vista/XP/2000 x86/x64. • BrowsingHistoryView 1.05: To view history data of Internet Explorer, Mozilla Firefox, Google Chrome, and Safari Web browsers in one table. • ClearLock 1.4.0: To lock your desktop with a transparent layer, allowing you to see what is happening on your desktop and at the same time prevent access to the computer without the proper password. • DRevitalize 1.2: Repairs bad sectors (physical defects) on hard drives by generating a special sequence of high and low signals around the physically damaged area. • EncFS 1.7.4: This should be used for secure online file backup services such as Google Drive, Dropbox and Sugarsync as the encryption do not occupy a fixed size containers and backup programs can copy encrypted files and can be accessed from linux, iPhone/iOS and android using BoxCryptor and Cryptonite.
• ImDisk 1.6.0: To create/mount virtual hard disk, floppy or CD/DVD drives using image files or system memory. • MBRCheck 1.2.3: Checks the legitimacy of the Master Boot Record (MBR) code of the hard drives. • McAfee Removal Tool 6.0. Download De Jogos 2d Pc there. 152.0: McAfee Consumer Product Removal Tool removes all 2005 – 2012 versions of McAfee products. • MiniXP: Added/updated Storage/LAN/WLAN drivers and other minor improvements, iso boot works, path can be changed in HBCD XP X using notepad. • Norton Removal Tool 20.0.0.21: SymNRT uninstalls most Norton AntiVirus, Norton Internet Security, Norton 360, and Norton SystemWorks even when the uninstaller fails to remove them.
• Remove Non Present Drivers: Automatically remove all non-present/disconnected devices from a Windows and can often be useful to prevent misbehaving/unnecessary drivers from being loaded, cleanup drivers when you replaced motherboard or used backup image of different hardware. • Tor Browser 2.2.39: Surf the internet anonymously through encryption, even https sites can be browsed safely where it is blocked by your local ISP.
• WifiInfoView 1.05: Wireless networks information including Network Name (SSID), MAC Address, PHY Type (802.11g or 802.11n), RSSI, Signal Quality, Frequency, Channel Number, Maximum Speed, Company Name, Router Name/Model and more. • Windows Product Key Update Tool 1.7: This tool is from microsoft to change the key of illegal/pirated installed xp to legit xp keys from the sticker on the PC, even if it is oem and not retail/corporate.
Has MSE come up with a boot sector scan solution yet? I read some posts from last year that said MSE couldn't resolve boot issues.
My anti-virus program has identified a contaminated file in the program files area but it can't fix it or move it out. Have tried two other malware/spyware scanning programs that don't even detect it. My start up is so slow it takes about 20-25 minutes before the computer is usable, then other slow issues continue to plague me. Maybe it's just time to move on from XP! Unfortunately your post is off topic here, in the TechNet Site Feedback forum, because it is not Feedback about the TechNet Website or Subscription. This is a standard response I’ve written up in advance to help many people (thousands, really.) who post their question in this forum in error, but please don’t ignore it.
The links I share below I’ve collected to help you get right where you need to go with your issue. For technical issues with Microsoft products that you would run into as an end user of those products, one great source of info and help is which has sections for Windows, Hotmail, Office, IE, and other products. For Technical issues with Microsoft products that you might have as an IT professional (like technical installation issues, or other IT issues), you should head to the TechNet Discussion forums at and search for your product name. For issues with products you might have as a Developer (like how to talk to APIs, what version of software do what, or other developer issues), you should head to the MSDN discussion forums at and search for your product or issue. If you really think your issue is related to the subscription or the TechNet Website, and I screwed up, I apologize!
Please repost your question to the discussion forum and include much more detail about your problem, that could include screenshots of the issue (do not include subscription information or product keys in your screenshots!), and/or links to the problem you’re seeing. If you really had no idea where to post this question but you still posted it here, you still shouldn’t have because we have a forum just for you! It’s called the Where is the forum for? Forum and it’s here: Moving to off topic. Thanks, MikeMSDN and TechNet Subscriptions Support Read the Subscriptions Blog! Hi,I am trying to erase, blank check and program a u-boot image in MPC8560 Rev A ADS board Flash using Code Warrior Development Studio Linux Application edition (linux Hosted) flash programmer. Has anyone else encountered this issue, or does anyone have any more ideas on a workaround?
I am currently trying to program the flash memory of an MPC8540 board, which also uses an Intel Strata IN28F640J3 flash memory, and I am getting the same error: 'Chip reported Low VPP Error Status' I am using a CodeWarrior USB TAP jtag debugger to access the flash memory, and I have verified that it is operating correctly and communicating with the processor. I am using CodeWarrior 8.8.3 (the newest available version). Regarding Black's suggestions: Black wrote: The error message that you get might have several causes including a wrongboard switches position: - Write signal not getting to the flash devices, 'Write Protect' Enabled in the Chip Selects for the flash device - WRITE disabled in MMU please check the BAT, TLB registers - WE signal blocked by target hardware - Algorithm writes to wrong location, confirm flash base address, confirm MMU configuration.
Having seen the UNMOUNTABLE_BOOT_VOLUME error, I ran recovery console and typed fixboot (which usually solves the problem - as its happened before). This time, however, it said the boot sector was corrupt and repaired it. It fixed the problem for a few days, when again the error showed and it said the boot sector was corrupt.
Is there anything I can do to stop my boot sector from going corrupt? Any programs/utilities I can use?
I'm using an I5150, 3.06ghz, 512mb Ram, 60gb hd, nvidia geforce go5200. Thanks in advance. When booting into my laptop I receive error 0xe0020022 which points to a KB article referencing this exact situation. When booting into my laptop I receive error 0xe0020022 which points to a KB article referencing this exact situation. Hi Takashi Please tell me the definition of the Sector in this context. Is this the first page in the NAND flash Block (address is smallest)? Yes this is correct understanding.
In particular sect.8.5.2.7.1 BCH ECC Page Organization IMX6DQRM states The first data block is called block 0 and the rest of the blocks are called block N. Separate ECC level scan be used for block 0 and block N. The metadata bytes should be located at the beginning of a page, starting at byte 0. Best regards igor ----------------------------------------------------------------------------------------------------------------------- Note: If this post answers your question, please click the Correct Answer button. One of my PCs was recently infected with the 'Vundo Trojan'. I knew it had an infection, but was late in finding a way to remove it.
My McAfee Security Center was absolutely worthless in detecting, removing, or preventing it on my PC. Vundo is an extremely destructive malware trojan unless you catch it early. My infected PC was still able to operate despite the symptoms which accurately match those on Wiki: I tried to remove the virus by following these directions on Bleepingcomputer.com When I installed the recovery console from my WinXP setup CD to my c: hard drive the virus caused the setup to fail and it corrupted the boot sector which locked up my PC. I had to reboot via holding the reset button. Reboot then failed to find NTLDR. All attempts to recover the boot sector with FIXMBR failed. Nearly all of the directories were rendered unreadable with error: 'Abort Fail Retry'.
To do anything I had to boot from WinXP setup CD with recovery console. All I can do now is reformat my C: drive and re-install WinXP. Unfortunately, my WinXP setup CD is the upgrade version.
It won't allow me to re-install windows because it can'f find a valid copy of windows on my C: drive which was destroyed by the Vundo Trojan! Trashing your hard drive is about the most destructive thing any virus or trojan can do. Don't let this happen to you. Protect your PC with with newer and more effective malware programs, even if you have McAfee, or Norton. See anti-malware tools this post: ing. Can anyone help?I would consider myself an expert on computers but not an all star.
I think my computer has been infected with some malware, virus, whatever.First symptom: it doesn't boot up in this order, cd/DVD rom then hard drive. By default, and if not, I always enable this because its common sense for me. Now the boot up sequence has changed - strangeSecond symptom: I've used many passwords and I do cycle them and time to time I change. I've tried 90% of all possible passwords that I may have used.no diceThird symptom: I used to reset to default install done per quarterly in a year. I missed one quarter. My system right now is unstable. Before it would boot up in less than a minute.
Now it takes 5 minutes - strangeSo my problem: I want to re-instal to factory default but can't because since the boot sequence is changed, I cannot type the proper password to change boot up to CDROM. Please helpEdit: some reason, it did boot up to CDROM and started the recovery process. However, when it asked me to partition my hard disk, the capacity mentioned on the screen said 0.0 gb. That to me is strange so I clicked on cancel; thinking that maybe the virus or whatever it is has reside itself in the 0 boot sector part. I still need help. Quick update:Removing the CMOS battery does reset the BIOS to factory default.I have re-configured my bios, and now using my re-install disk to format my hdd and install everything.
This time when I'm portioning, it shows the proper data. Before it showed 0.0 and I'm glad I didn't continue because it would have infected and possible mess up my computer more.Key take away:1.
Removing the CMOS battery will reset BIOSAnd I did google how to reset CMOS and BIOS and came up with videos and many articles. Downloading a software will not fix your computer; maybe it does but I am always wary of the things we find on the Internet. Do plenty of research and if you decide to fix it yourself, be prepared to make mistakes that would cause you to buy a new computer. It's what happened to me in the past and I am glad all those trial and error, I posted a problem and replied to myself with the solution.Happy trails ). I have been battling this for three days. Everytime I log in I get this popup:Which says that c: windows explorere.exe has been infected with StealthMBR!mbr--Infected (boot sector)I am running VirusScan Enterprise 8.5, Dat Verision 5548Steps Taken:1) I have done a FULL SCAN using McAfee (up to date), in both safe and regular mode but found nothing. 2) I installed AVAST to do a full scan before booting, and found nothing.
3) I have run MBR.exe (from on both my drives from gmer.net and found nothing:device: opened successfullyuser: MBR read successfullykernel: MBR read successfullyuser kernel MBR OK 4) I have run Malwarebyte's Anti Malware (up to date) and found nothing. 5) I followed instructions from McAfee, turnned off system restore, to boot into Windows XP Recovery Console and ran FIXMBR to create a new boot record. Still the message came back.
6) I found a FixMebRoot.exe from Symantec, and ran it. But it told me I wasn't infected.7) I uploaded the infected file (explorer.exe) to VirusTotal and had it scanned by 39 processes, but it only found one hit. I created an account at McAfee webimmune, and uploaded the infected file (explorer.exe) and got the following results:AVERT Labs - BeavertonCurrent Scan Engine Version:5300.2777Current DAT Version:5548.0000Thank you for your submission.Analysis ID: 5190224Name Findings Detection Type Extra explorer.exe no malware no no malware [ explorer.exe ]Avert Labs has found no indications of malicious code. Upon examining the file we observed no malicious behavior.Can anyone, ANYONE, tell me what I can try next? Bob If your infection is a recent one and if System Restore is enabled and you can go back far enough, restore the computer to an earlier date using Safe Mode. To do so, restart the computer and start tapping the F8 key, select the Safe Mode with Command Prompt option. If you are asked to select an operating system, use the arrow keys to select the correct one and press Enter.
Log on as an administrator or with an account that has administrator credentials. At the command prompt, type%systemroot% system32 rstrui.exe and then press Enter.
Follow the prompts to restore the computer to an earlier date. Re scanning is use minimal resources selected? If so deselect it. Couple questions are you using a subscription version of Mcafee or that supplied by a partner ie yopur ISP or say Dell?
Re virus what message does it give to imply you have an issue? If your copy is a subscription there is a new version 2011 available for download on the Australian server. It has faster scanning and you can exclude files and folders for Custom and scheduled scans. You would need to uninstall reinstall your copy after you make sure your account is active.
F you think you have a virus infection on your PC do one or both of the following: - Run the free Mcafee Stinger program from - set it to Report Mode (in Preferences) and post the logs of anything it detects.( set it to very high sensitivity) - Join the McAfee Getsusp group at Download here the latest version Before you use Getsusp, you should go to this document and download the PDF file explaining what Getsusp is and how it works, and this document which downloads the installation guide PDF document. If you want a second opinion, or to be on the safe side, then you can do a scan with the free versions of these tools: Malwarebytes and SuperAntiSpyware. I have an OEM application that uses Sandisk CF cards. The latest batch failed in the application, but I found that if I absolutely forced it to reformat from scratch, I could get the cards to work. Further investigation found that on the original cards, the boot sector (0) did NOT begin with the traditional '0xEB 0x3C 0x90' jump instruction. Instead, that information was located at sector 1, 512 bytes later. Windows XP does not appear to have any issues with this format, but I've been unable to find any reference on the Internet that supports this format.
I'd like to know a guaranteed way to locate this information properly from my source application. It seems an interesting side note that if I tell Windows XP to format the card, it retains this structure wherein sector 1 contains the jump instruction. But if I force raw writes to the card to overwrite the formatting, and THEN tell Windows XP to format the card, it puts the jump instruction in sector 0. Any clues as to how I can definitively find the boot sector and BPB structure when it's located somewhere other than sector 0?
When creating my backups using Rescue and Recovery, I had some 'odd' partioning scheme on my system disk:1 - SYSTEM_DRV (1GB)2 - linux boot (1GB)3 - Windows7_OS (400 GB)4 - Extended Partition4a - linux swap (12 GB)4b - linux root (55 GB)When using a new hard disk, recreating the same partition scheme and trying to do a full system recovery in 'Rescue and Recovery', I was expecting that partitions 1 and 3 would be restored.Unfortunately, RR seems to first overwrite the master boot sector, deleting all partitions which are follwing the first 2. Thereafter the master boot sector only contains partitions 1 and 2 (I checked this afterwards using a special partitioning program, 'GParted').Then partition 1 is restored, which takes around 10 minutes. Then I get an error message saying that 'not all data could be restored since the partitions could not be found'.How can I prevent RR to destroy my master boot sector before restoring my files? Is there e.g. A file containing a part of the master boot sector among the backup files on my network share? Could I perhaps alter or delete this file in order to make the restore process work?Any help would be appreciated since I seem to have a complete loss of data although I have 1 base backup (70 GB) and 3 incremental backups (aroung 12 GB each) on my network share.
Right now it looks like there isn't any way to restore the data from these backups using 'Rescue and Recovery'. When creating my backups using Rescue and Recovery, I had some 'odd' partioning scheme on my system disk:1 - SYSTEM_DRV (1GB)2 - linux boot (1GB)3 - Windows7_OS (400 GB)4 - Extended Partition4a - linux swap (12 GB)4b - linux root (55 GB)When using a new hard disk, recreating the same partition scheme and trying to do a full system recovery in 'Rescue and Recovery', I was expecting that partitions 1 and 3 would be restored.Unfortunately, RR seems to first overwrite the master boot sector, deleting all partitions which are follwing the first 2.
Thereafter the master boot sector only contains partitions 1 and 2 (I checked this afterwards using a special partitioning program, 'GParted').Then partition 1 is restored, which takes around 10 minutes. Then I get an error message saying that 'not all data could be restored since the partitions could not be found'.How can I prevent RR to destroy my master boot sector before restoring my files? Is there e.g.
A file containing a part of the master boot sector among the backup files on my network share? Could I perhaps alter or delete this file in order to make the restore process work?Any help would be appreciated since I seem to have a complete loss of data although I have 1 base backup (70 GB) and 3 incremental backups (aroung 12 GB each) on my network share. Right now it looks like there isn't any way to restore the data from these backups using 'Rescue and Recovery'. On Tue, 05 Sep 2006 15:07:42 GMT, ccoldwell@mesquiteisd.org wrote: Were you able to find out any info? It will definetly not work if you use rp with a1:p1 though. -' + '- If you have already compiled drivers or have linux.2 please put them on Live BootCd and USB Disk from Mike Charles eZie Marcus Breiden If you are asked to email me information please change -' + '- to - in my e-mail address.
The content of this mail is my private and personal opinion. I installed arch in a virtualbox VM using the disk 2013.11.01. Everything seems to be correct. But after I boot into the new system, the screen kept blank. I tried the Fallback initramfs in grub menu, it shows:error: no such device XXXXXXXX-XXXXXX-XXXXXXXXX-XXXXXXLoading linux core repo kernel.error: no such partitionLoading initial ramdisk.error: you need to load the kernel first My system is installed on a GPT partition table.
The VM is a BIOS system. Disk /dev/sda: 83886080 sectors, 40.0 GiBLogical sector size: 512 bytesDisk identifier (GUID): 6846B7BC-C1B5-4C9F-BBE7-6E227CDB84E2Partition Table holds up to 128 entriesFirst usable sectoris 34, last usable sector is 83886046Partitions will be aligned on 2-sector bondariesTotal free space is 0 sectors (0 bytes) Number Start (sector) End (sector) Size Code Name 1 206 40.0 GiB 8300 Linux filesystem 2 34 2047 1007.0 KiB EF02 BIOS boot partition. Sorry this isn't really mb related, but i didn't know where exactly to put it (if it should be moved, please do so) i have an older hd i am planning to put in a usb enclosure, but it seemed (i think) to have some kind of boot sector virus or something, when i used to boot with it, it would format itself, but as long as it didn't boot, it was fine. So my questions are these: 1. Will it cause any problems with it's messed up boot sector as a usb drive? How would i wipe the boot sector clean?
I don't think fdisk can do it.(think being the key word) thanks for any help! For comparison (i know it's totally unfair but still) before the format i just ran ut2004 w/ the new card in (wanted to check to see if it works before i formatted) and i got about 80fps average @ 1280x1024 max everything (same map) i'll try again for my own benefit but if someone wants to know if it's better after format, let me know raven, you can try the bittorrent sites (suprnova.org and torrentbits) or even ebay.i never got around to playing the expansions, but i really liked the original.i'm sure they can be found for cheap on ebay if someone has it. Hi msvv, Please share the system model.
Make sure the hard drive is getting detected in BIOS. To enter the BIOS (system setup); restart the system and keep tapping F2 as soon as the Dell logo appears. In case the hard drive is getting detected, put the disk and try re-installing the operating system again. When you get the message No boot sector on Internal hard drive, you should get an option to press F1/F2. Press F1 and see if that makes a difference. Keep me posted.
Please reply for any further questions. I successfully updated an m4 64 GB drive. The drive had experienced the firmware bug where the computer would crash after an hour once the drives usage has exceeded 5184 hours. This happened several times before I found out what the problem was. Now that the firmware is updated, the computer won't boot any longer. The drive has 2 partitions: a boot partition that is ext2 and a root partition that is btrfs.
I'm running Kubuntu 12.04. Running bootinfoscriptVersion 0.61 (2012-04-01) gives this info: ============================= Boot Info Summary: =============================== = Grub2 (v1.99) is installed in the MBR of /dev/sda and looks at sector 1 of the same hard drive for core.img.
Core.img is at this location and looks for (,msdos1)/grub on this drive. = No boot loader is installed in the MBR of /dev/sdb. = No boot loader is installed in the MBR of /dev/sdc. Hi dqp, I'm sorry to hear that you are having issues with your SSD drive.
It sounds like there may have been a problem with the firmware upgrade. In most cases, your SSD can be returned to normal operating condition by completing a power cycle. This resets the firmware in the SSD to allow it to be detected again. No data is lost during this process and it will take approximately one hour to complete. Simply follow the steps from this Crucial.com Knowledge Base article: If you need any additional assistance or advice, please do not hesitate to contact us.
Junket, Crucial Moderator UK________________________How do I know what memory to buy?Shop for your region: US UK EU France GlobalI think my memory is bad. What do I do now?FAQs and Top Forum SolutionsWe want your feedback! Post in the Suggestion BoxDid a user help you?
Say thanks by giving Kudos!Still need help? Contact Customer Service. Dear Pros, What could be the cause for the following error message.
Loading 'flash:/c3560-advipservicesk9-mz.122-44.SE.bin'.@@@@@@@@@@@@@@@@@@@@@@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @@@@@@@@@@@@@@@@@@@@@@flashfs[0]: Trying to read a sector from block 34, with an invalid sector number!!! Flashfs[0]: The sector number (65024) is not between 0 and 251. Flashfs[0]: filesystem marked down. Use 'fsck' to recover. Error loading 'flash:/c3560-advipservicesk9-mz.122-44.SE.bin' Interrupt within 5 seconds to abort boot process. Boot process failed.
Switch: Thanks in advance. Was having trouble with Windows Update not working. After much discussion with an agent on Microsoft's community forum, the agent said I had malware and that I should just do a clean install of Windows. I don't want to do a reinstall for a variety of reasons but I will do it as a last resort.
I thought I would ask you all if you thought I had malware and whether I can remove it before I hauled off and did the clean install. I list the details below. Anyone have any thoughts? Jkwheeler ----- Details ----- Windows XP Media Center Edition Version 2002 SP3McAfee Security Center v11.0, has VirusScan v15.0, DAT 6549.0000, Engine v5400.1158 (I have autoupdate turned on and working)Ran a full scan in safe mode with networking. No problems reported. All zeros in the report.Ran Stinger in safe mode with networking. Sensitivity level 'Very High' with 'Report only.'
Here is the report: McAfee(r) Labs Stinger(tm) Version 10.2.0.408 built on Dec 2 2011Copyright (c) 2011 McAfee, Inc. All Rights Reserved.Virus data file v1000.0000 created on Dec 2 2011.Ready to scan for 3515 viruses, trojans and variants. Scan initiated on Sun Dec 04 17:Rootkit scan result: Not Scanned Master Boot Record(s).1 Possibly Infected..0 Boot Sector(s)...1 Possibly Infected..0 Number of clean files: 18534 Mmmm. I see the line that says 'Rootkit scan result: Not Scanned.' Do I need to do something to get Stinger to give a rootkit scan result?
Does this mean Stinger did not scan for rootkits? Stinger also created a file called vscan.bof. Do you want me to attach that file in another post?Ran GetSusp in safe mode with networking. GetSusp created a log called GetSusp.xml.
Do you want me to attach that file in another post?Previously, I posted to Malwarebytes forum. Their agent went through a lot of details and decided I did not have malware. But, the Microsoft agent still thought I had undetected malware even though VirusScan said 'no' and the Malwarebytes agent said 'no.' The Malwarebytes thread is at:that on the Malwarebytes discussion I mentioned a network problem. That problem is resolved now so you probably can ignore that part.
New Stinger report with Windows running in normal mode instead of safe mode. I made sure the rootkit box was checked. McAfee(r) Labs Stinger(tm) Version 10.2.0.419 built on Dec 7 2011Copyright (c) 2011 McAfee, Inc. All Rights Reserved.Virus data file v1000.0000 created on Dec 7 2011.Ready to scan for 3690 viruses, trojans and variants. Scan initiated on Wed Dec 07 18: Master Boot Record(s).1 Possibly Infected..0 Boot Sector(s)...1 Possibly Infected..0 Number of clean files: 18635 Seems to show no issues. Also ran Microsoft Safety Scanner.
It said it ran successfully and found no problems. With these results, can we reliably say that the PC has no malware? I'm still concerned that the GetSusp report called some files 'suspicious.' I still can attach the GetSusp.xml file if you like.
If you think that I really don't have malware, then I can set out to try the Windows Update fixes that you listed that I have not already tried. Should I open a new discussion thread for that? If so, which community discussion should I use?
Note that I have not shared all the symptoms the PC has of not running Windows Update so I would need to share those details. I also ran MBSA. I pasted in the report below.
The MBSA report starts off saying that it cannot scan for security updates because it cannot load the securityCAB file. Is that because Windows Update is hosed? MBSA also said that there were incomplete updates and that I needed to reboot to complete the updates. That surprised me because the last Windows update before the updater stopped running was back in August. I've rebooted lots of times since August, including. Just for grins, I rebooted after I saw this item in the MBSA report and got the same result. The attached report is the one I ran after rebooting.
I'm also surprised MBSA complained that Windows Firewall was not running. I thought MBSA would have detected that the McAfee Firewall was running and not complained. ----- Begin MBSA report ------ Security assessment: Incomplete ScanComputer name: WORKGROUP COMPUTER2IP address: 192.168.1.103Security report name: WORKGROUP - COMPUTER2 (12-7-2011 7-58 PM)Scan date: 12/7/2011 7:58 PMScanned with MBSA version: 2.2.2170.0Catalog synchronization date: 2011-11-23T00:16:31Z Security Updates Scan Results Issue: Security Updates Score: Unable to scan Result: Cannot load security CAB file. Operating System Scan Results Administrative Vulnerabilities Issue: Local Account Password Test Score: Check passed Result: No user accounts have simple passwords. Detail: User Weak Password Locked Out Disabled Guest - - Disabled HelpAssistant - - Disabled SUPPORT_388945a0 - - Disabled Administrator - - - David - - - Issue: File System Score: Check passed Result: All hard drives (1) are using the NTFS file system. Detail: Drive Letter File System C: NTFS Issue: Password Expiration Score: Check not performed Result: This check was skipped because the computer is not joined to a domain.
Issue: Guest Account Score: Check passed Result: The Guest account is disabled on this computer. Issue: Autologon Score: Check not performed Result: This check was skipped because the computer is not joined to a domain. Issue: Restrict Anonymous Score: Check passed Result: Computer is properly restricting anonymous access. Issue: Administrators Score: Check passed Result: No more than 2 Administrators were found on this computer.
Detail: User Administrator David Issue: Windows Firewall Score: Best practice Result: Windows Firewall is disabled and has exceptions configured. Detail: Connection Name Firewall Exceptions All Connections Off Programs Local Area Connection 4 Off* Programs* Issue: Automatic Updates Score: Check failed (critical) Result: The Automatic Updates system service is not running. Issue: Incomplete Updates Score: Best practice Result: No incomplete software update installations were found. Additional System Information Issue: Windows Version Score: Best practice Result: Computer is running Microsoft Windows XP. Issue: Auditing Score: Best practice Result: This check was skipped because the computer is not joined to a domain. Issue: Shares Score: Best practice Result: 2 share(s) are present on your computer. Detail: Share Directory Share ACL Directory ACL ADMIN$ C: WINDOWS Admin Share BUILTIN Users - RX, BUILTIN Power Users - RWXD, BUILTIN Administrators - F, NT AUTHORITY SYSTEM - F C$ C: Admin Share BUILTIN Administrators - F, NT AUTHORITY SYSTEM - F, BUILTIN Users - RX, Everyone - RX Issue: Services Score: Best practice Result: Some potentially unnecessary services are installed.
Detail: Service State Telnet Stopped Internet Information Services (IIS) Scan ResultsIIS is not running on this computer. SQL Server Scan Results Instance MICROSOFTBCM Administrative Vulnerabilities Issue: SQL Server/MSDE Security Mode Score: Check failed (non-critical) Result: SQL Server and/or MSDE authentication mode is set to SQL Server and/or MSDE and Windows (Mixed Mode). Issue: Exposed SQL Server/MSDE Password Score: Check passed Result: The 'sa' password and SQL service account password are not exposed in text files. Issue: CmdExec role Score: Check passed Result: CmdExec is restricted to sysadmin only. Issue: Registry Permissions Score: Check failed (critical) Result: The Everyone group has more than Read access to the SQL Server and/or MSDE registry keys.
Issue: Folder Permissions Score: Check passed Result: Permissions on the SQL Server and/or MSDE installation folders are set properly. Issue: Sysadmin role members Score: Best practice Result: BUILTIN Administrators group should not be part of sysadmin role. Issue: Guest Account Score: Check passed Result: The Guest account is not enabled in any of the databases. Issue: Sysadmins Score: Check passed Result: No more than 2 members of sysadmin role are present. Issue: SQL Server/MSDE Account Password Test Score: Check passed Result: No SQL user accounts have weak passwords.
Issue: Service Accounts Score: Best practice Result: SQL Server, SQL Server Agent, MSDE and/or MSDE Agent service accounts should not be members of the local Administrators group or run as LocalSystem. Detail: Instance Service Account Issue MICROSOFTBCM MSSQL$MICROSOFTBCM SYSTEM LocalSystem account. MICROSOFTBCM SQLAgent$MICROSOFTBCM SYSTEM LocalSystem account. Desktop Application Scan Results Administrative Vulnerabilities Issue: IE Zones Score: Check passed Result: Internet Explorer zones have secure settings for all users. Issue: Macro Security Score: Check passed Result: 4 Microsoft Office product(s) are installed. No issues were found. Detail: Issue User Advice Microsoft Office Excel 2003 All Users No security issues were found. Microsoft Office Outlook 2003 All Users No security issues were found. Microsoft Office PowerPoint 2003 All Users No security issues were found. Microsoft Office Word 2003 All Users No security issues were found. ----- End MBSA report.
I'm trying to upgrade my T61 (bought in Canada with Windows Vista) to Windows 7. However, the installation aborts partway through, with the message 'Windows cannot write to the boot sector'. The most common solutions that I have found online do not work - there doesn't seem to be any problem with my registry - and it appears that the boot sector has become corrupted, although I cannot notice any problem with normal operation.One solution I have found to this problem is to use the Windows Vista installation disk to 'repair' the boot sector. However, my T61 didn't come with Vista disks, just the Lenovo RR package.
I haven't found a way to repair the boot sector this way.Without some help I don't think I'll be able to perform the upgrade. Go to Solution. HP elitebook 8730w Was running windows 8 trial release with HP protection tools and had encrypted the HDD. Did not decrypt the disk before attempting to install windows 8 rtm Windows 8 install wrote to the boot sector and now disk is not bootable but encrypted. Do not have the encryption key ( lost the USB, I know) Still know the password.
How do I fix the boot sector even though I can't decrypt the drive? I do have dpms2 Wintech / safetech boot cd, but can't use it without the key?
Does HPsupport offer services to remotely connect to a pc and use their master key to decrypt HDD's? Hdd has been removed and placed in a USB HDD enclosure. Any other tools or ways to fix the encrypted boot sector so I can acced the encrypted data? My system has XP on one SATA HD and W7 (upgrade) on the other SATA.
There is a third eide drive that is necessary for XP since it can not install to a SATA drive. This system worked well for a long time. About a week ago I started having trouble booting to W7, boot sector problems kept sending me to CHKDSK. I also had problems with Windows Live Mail at the same time. These problems got progressively worse until I could no longer boot into W7.
What I have tried: Whole system scans with Norton Antivirus, Windows Defender and several other virus/malware scans. Uninstalled Windows Live Checked all HDs thoroughly, they are okay. Took the opportunity to replace MB + Processor. Reformatted the W7 HD and reinstalled W7. Everything seemed okay for a few boot cycles, then it went into the trash again.
Speculation: Some Windows 7 update is messing up the boot manager. Please, how can I get W7 reinstalled in this computer. I would very much like to leave XP installed and dual boot. [this situation proves the value of that, I still have a working XP computer and can use the W7 Upgrade install with the preexisting XP install.]. Hi, I have started force decryption in a machine which we have got error of Disk Information Failure.
We have started decryption in such a way by caliculating sectors. Used WinPE Recovary f: Start sector: 284672 sector count: 167772160 End Sector: 168058879 (167772-1) e: Start Sctor: 168058880 Sector Count: 231796736 End Sector: 399857663 d: Start sector: 399857664 Sector count: 225282736 End Sector: 625140399 In the place of number of sectors we have givan end sector while doing force decryption, Successfully recovered two partions F: and E: While doing d: drive where we have givan start sector as 399857664 and End Sector as 625140399, where it is showing warning as total sectors 625142448. Please suggest us for the right method to follw. Hi, I have started force decryption in a machine which we have got error of Disk Information Failure.
We have started decryption in such a way by caliculating sectors. Used WinPE Recovary f: Start sector: 284672 sector count: 167772160 End Sector: 168058879 (167772-1) e: Start Sctor: 168058880 Sector Count: 231796736 End Sector: 399857663 d: Start sector: 399857664 Sector count: 225282736 End Sector: 625140399 In the place of number of sectors we have givan end sector while doing force decryption, Successfully recovered two partions F: and E: While doing d: drive where we have givan start sector as 399857664 and End Sector as 625140399, where it is showing warning as total sectors 625142448. Please suggest us for the right method to follw. Hi, Try the steps provided below and check if they help. Method 1: You may try to boot the system in Last Known Good Configuration.
For more information on Last Known Good Configuration check the link provided below. Using Last Known Good Configuration Method 2: I would suggest that you run startup repair on the computer using the windows7 DVD and check if it works.
If you have a Windows 7 installation disc, you need to restart (boot) your computer using the installation disc. If you do not restart your computer from the disc, the option to repair your computer will not appear. A) Insert the installation disc.
B) Restart your computer. C) Click the Start button, click the arrow next to the Lock button, and then click Restart. If prompted, press any key to start Windows from the installation disc.
Note If your computer is not configured to start from a CD or DVD, check the information that came with your computer. You may need to change your computer's BIOS settings. For more information, see BIOS: frequently asked questions.
D) Choose your language settings, and then click next. E) Click Repair your computer. F) Select the operating system you want to repair, and then click next. G) On the System Recovery Options menu, click on Startup Repair.
For more information on Startup repair check the link provided below. Startup Repair: frequently asked questions Method 3: You may also try to perform system restore from WinRE (Windows Recovery Environment) to resolve the issue. A) Insert the Windows 7 installation disc into the disc drive, and then start the computer. B) Press a key when the message indicating 'Press any key to boot from CD or DVD '. C) Select a language, a time and currency, and a keyboard or input method, and then click Next.
D) Click Repair your computer. E) In the System Recovery Options dialog box, choose the drive of your Windows installation and click Next f) At the System Recovery Options Dialog Box, click on System Restore. G) Follow the System Restore Wizard instruction and choose the appropriate restore point. H) Click Finish to restore the system. For more information check: What are the system recovery options in Windows 7? I really do not understand what you are asking.
Recovery Console (RC) is not dependent on the boot sector in order to open. I would recommend you repair the Master Boot Record by following the instructions on the link below. Regards, Joel Sometimes deciding which battle to fight is the toughest battle of all.
Please visit my website @ If I can take the time to answer you can take the time to vote to enable others to find solutions easier. We have rebooted our ESX server and upon reboot the server gets stuck now with errors and locks up: A reboot results in the same error and locks up again. I am running XP HE SP3 all updates. Also Emsisoft AV/malware. A hard disc performance tool shows the speed to about a tenth of the speed it should be for sequential read and writes. After running the Avira anti virus/rootkit boot rescue disc to remove a rootkit trojan one of the actions their actions was FixMBR which I clicked on. The computer restarted but was slow to startup and load in programs so I decided to run the Avira linux based rescue boot disc again as my system now seems slower to load than previously.
The report from the Boot Sector scan shows two warnings which I do not know how to deal with: Avira / Linux Version 1.9.152.0 Copyright (c) 2010 by Avira GmbH All rights reserved. Engine set: 8.2.10.62 VDF Version: 7.11.29.94 Scan start time: Tue May 8 00: configuration file: /etc/avira/scancl.conf Master boot sector (disk /dev/hda) WARNING: [IO error on file] Master boot sector (disk /dev/hdc) WARNING: [Error opening file. (No such file or directory)] Master boot sector (disk /dev/hdd) Master boot sector (disk /dev/sda) Master boot sector (disk /dev/fd0) Boot sector (/dev/hda1) Boot sector (/dev/hda2) Boot sector (/dev/sda1) Statistics: Master boot sectors.: 3 Infected..: 0 Boot sectors..: 3 Infected..: 0 Directories..: 0 Files...: 1 Infected..: 0 Warnings..: 2 Suspicious..: 0 Infections..: 0 THE REPORT FROM THE ALL FILES SCAN shows additional alerts which again I am unsure how to deal with: Avira / Linux Version 1.9.152.0 Copyright (c) 2010 by Avira GmbH All rights reserved. Maybe you have not selected a proper boot image. The following website may help you on the whole process of deploying a system. Windows 7 Deployment Using SCCM 2007 SP2 You only need to add the USMT capture task before the system deployment task into the task sequence mentioned in the above article.Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
BKDR_MATSNU is currently being distributed via spam targeting users in Germany. Trend Micro researchersrecently came across Windows malware thats capable not of remotely controlling an infected system and wiping the Master Boot Record. The malware, BKDR_MATSNU.MCB, is curently being distributed via German spam that claims the recipient owes money, and that details of the debt are included in an attachment. Opening the attachment then executes the malware.
Read more here: http://www.esecurityplanet.com/malware/new-windows-malware-wipes-master-boot-record.html. BKDR_MATSNU is currently being distributed via spam targeting users in Germany. Trend Micro researchersrecently came across Windows malware thats capable not of remotely controlling an infected system and wiping the Master Boot Record. The malware, BKDR_MATSNU.MCB, is curently being distributed via German spam that claims the recipient owes money, and that details of the debt are included in an attachment. Opening the attachment then executes the malware. Read more here: http://www.esecurityplanet.com/malware/new-windows-malware-wipes-master-boot-record.html. Free third-party product “rescue disk” scanners.
These have decided advantages when it comes to dealing with infections like Alureon. This type of scanner runs from a bootable CD or flash drive – so it does Safe Mode one better by completely bypassing the operating system startup. This not only means that malware won’t have much chance of running interference (because it won’t be started up by the operating system); it also means that any potential impairment of the operating system itself won’t be a contributing factor in hindering the cleanup process. Additionally, there’s no need to worry about conflicts with your installed antimalware product, because that won’t be started up either. As many of the respective vendors have pointed out, this is the preferred strategy for cleaning up heavily-infected systems, or for dealing with malware that uses highly-evolved defensive components like rootkits. None of these scanners need to be installed: Each rescue scanner will miss things – because none of them will have a perfectly complete and up-to-date set of definitions; so you might need to use several of these rescue scanners, or something like the Shardana Antivirus Rescue Disk Utility, which creates a custom bootable CD or flash drive that includes multiple rescue scanners: http://www.sarducd.it/.
Yesterday I bought a WD Livewire Powerline AV Network Kit, modelt# WDBABY000NBK-NESN at local BestBuy. So far, the kit hardware seems to be running fine: On my 25Mbps cable router feed into one 4-port Livewire unit at one end of the house, the 4-port unit 150ft awayat the other end of the house (on different subpanel) outputs aprox 12Mbps (down) 1.4Mbps (up) to my laptop. HOWEVER, when I attempted to run Setup.exe on the included WD LiveWire Setup CD, ThreatFire blocked the install process and quarantined an embedded Trojan known as 'Trojan.Malagent.AGJ'.
It happened so quickly that I'm unsure if that trojan is in the Setup.exe, or the associated WinPcap installer, or in the WDSetup.exefile.The F: Setup.exe on the CD is version 1.2.0.3 dated 9/14/2008, the F: WD_Windows_Tools WDSetup.exe file is version 1.0.0.0 (same as printed on the CD) dated 6/10/2010, and the F: WD_Windows_Tools WDLivewire WDLivewireSetup.exe (apparently a self-extracting compressed file) has no version but is dated 6/7/2010. I have Auto-Run disabled (as everyone should) to prevent any CD boot-sector malware from automatically transferring itself to my laptop (memory or hard drive). ThreatFire ant-malware seemed to interced as the WinPcap install was running, but I ca't be sure (all happened too fast). Instead I downloaded thecompressed 'LivewireUtility_1.0.3.005.zip' file fromWDsetup_1.0.3.005.exe from WD Support. That zipp contains WDSetup_1.0.3.005.exe dated 6/17/2010 and WinPcap_4_1_1.exe dated. I ffirst ran WinPcap.exe and the WDSetup.exe - both installed fine Western Digital should investigate the CDs they are shipping in this Kit. Alucardx23- Yes I am aware that I didn't need to install the utility - for normal, default use.
However, I wanted to explore the options to setup a more secure private WD Livewire network, modify default passwords (partly so that I can 'see' the WDL 4-port switch at the other end, etc., etc. Those configurations REQUIRE the utility to be installed. At any rate, the primary reason I posted this thread is to make WD - AND OTHER USERS- aware of the nasty TROJAN on their CD, and to push WD to FIX their CD. Can anyone tell me how to get rid of the mongrel malware?
McAfee seems useless for it. It doesn't even detect it is there. I thought when I bought McAfee I was protected. Seems I was wrong. I seem to have removed everything except for a process called 'qidsysguaed.exe'. I can manually stop this at startup but don't know how to remove it as I can't find it anywhere on the hard drive. I assume this may mean it is hidden in the boot sector somewhere in which case I have no idea where to go to remove it.
Everyone seems to be suggesting installing Spyware Doctor or MalwareBytes. I've done this and they indeed can see the Malware but I have to pay to get the full version which will remove it. I will do this as a last resort, but very dissappointed the McAfee won't do it. Any help welcome.
Hi, I have a question about writing to the 1st/boot sector of a floppy. I use a the simple stream handlers: FileInputStream and FileOutputStream. The FileInputStream reads a binary file and the FileOutputStream writes every single byte to the 1st sector. This is easy within Linux, since you can write the bytes to /dev/fd0, so I get: FileOutputStream fos = new FileOutputStream('/dev/fd0'); When I run the application it works fine. As a test I wrote the GRUB bootloader to the boot sector using my application and it worked. Could anyone tell me how to do this in Windows? There isn't any device access like /dev/fd0.
How is this being done? Thank you very much, Jeroen. Hi, I want to access a sector in twogbmaxextent sparse vmdk file.
I have a sector in sector variable. And i.e is greater than the no of sectors of 2gb i.e 4194304 so i done sector = sector - 4194304 and then traverses the test-s002.vmdk file acccording to the gde and gte.But this is not workinig properly. I also tried sector = sector - sph.capacity / /sparse header capacity but this also not work. I also tried this sector = sector - 4194304 - sph.overhead sector = sector - sph.capacity-sph.overHead but this also not work. Can anybody tell me what is the problem in this. Or tell me how to traverse twogbmaxextent sparse vmdk files for accessing a particular sector.
Thanks in Advance. It seems that you've missed part of VMDK document which talks about descriptor file. You must parse it to understand contents of binary *.vmdk files. I cannot figure out what Im doing wrong trying to boot Arch, Windows 7, and FreeBSD on my system. My motherboard has UEFI 2.x firmware and my disk contains a GPT table. Anyway, I can boot Arch Linux and Windows 7 without issues using the firmwares built in UEFI shell and from GRUB2.
However, FreeBSD simply will not boot. GRUB2 is installed under Arch, which is why Im asking the question in this forum -- perhaps a few people know a little more about whats what in the package grub2=efi-x86_64.
Heres some useful information: GPT disk information: #gdisk -l /dev/sda GPT fdisk (gdisk) version 0.8.2 Partition table scan: MBR: protective BSD: not present APM: not present GPT: present Found valid GPT with protective MBR; using GPT. Disk /dev/sda: sectors, 1.8 TiB Logical sector size: 512 bytes Disk identifier (GUID): 1188BEF2-7D18-467B-A5ED-0E7A37229F9E Partition table holds up to 128 entries First usable sector is 34, last usable sector is Partitions will be aligned on 8-sector boundaries Total free space is 1380469 sectors (674.1 MiB) Number Start (sector) End (sector) Size Code Name 1 4096 823295 400.0 MiB EF00 EFI System 2 8551295 1.5 TiB 8300 Linux filesystem 3 265.0 GiB 0700 Basic data partition 4 64.0 KiB A501 5 93.0 GiB A503 6 4.0 GiB A502.
While Windows has had support for theUEFI (Unified Extensible Firmware Interface)prior to Windows 8, most consumer computers have continued to bootusing BIOS Firmware. This changes with Windows 8, as UEFI Firmware mode is now a Windows 8 client logo requirement. UEFI is also required to enable several features and inprovements, such as: GUID Partition Table (GPT) Disk Partitioning - GPT Partitions enable larger partitions, and are supported by UEFI. For more details on GPT and advantages of the same Click Here Boot From Larger Drives - GPT and native 4K sector disk support in Windows 8 enables support for greater than 2.2TB Boot drives Secure Boot - Signature checks on early boot components, protecting pre-boot manager components from tampering. The three main actions related to Secure Boot are: 1.The firmware verifies all UEFI executables and the OS loader to be sure they are trusted. Windows Boot Components verify the signature on each component to be loaded.
Any non-trusted components will not be loaded and will triggerremediation. The signatures on all Boot Critical Drivers are checked as part of Secure Boot verification in WinLoad and by the Early Launch Anti-Malware drive. Measured Boot - Measured Boot is another bootfeature in Windows 8 that is also related to Anti-Malware software. Measured Boot gives the Anti-Malware software a detailed,reliable log of components that loaded prior to the ant-malware driver during startup. This log can be used by anti-malware software or an administrator in a business environment to validate whether there may be malware on the computer, or evidence of tampering with boot components. Early Launch Anti-Malware - This provides the ability for an anti- malware driver to register as a trusted Boot Critical Driver.
This makes it the first non- Microsoft, non-Platform specific code that will run on the computer. The anti-malware driver can then verify other drivers in turn before they are initialized. Secure Boot helps prevent malware from running before the OS. Early Launch AV helps insure trusted anti-malware software is the first third party component run on each startup. Trusted Boot - A combination of Secure Boot, Measure Boot, and Early Launch Anti-Malware that helps establish that the system is in a trusted state.
Boot on computer with no VGA Support - UEFI removes the need for VGA support, enabling Windows 8 to be installed on computers that do not use this legacy video technology. While Windows has had support for theUEFI (Unified Extensible Firmware Interface)prior to Windows 8, most consumer computers have continued to bootusing BIOS Firmware. This changes with Windows 8, as UEFI Firmware mode is now a Windows 8 client logo requirement. UEFI is also required to enable several features and inprovements, such as: GUID Partition Table (GPT) Disk Partitioning - GPT Partitions enable larger partitions, and are supported by UEFI. For more details on GPT and advantages of the same Click Here Boot From Larger Drives - GPT and native 4K sector disk support in Windows 8 enables support for greater than 2.2TB Boot drives Secure Boot - Signature checks on early boot components, protecting pre-boot manager components from tampering. The three main actions related to Secure Boot are: 1.The firmware verifies all UEFI executables and the OS loader to be sure they are trusted.
Windows Boot Components verify the signature on each component to be loaded. Any non-trusted components will not be loaded and will triggerremediation. The signatures on all Boot Critical Drivers are checked as part of Secure Boot verification in WinLoad and by the Early Launch Anti-Malware drive. Measured Boot - Measured Boot is another bootfeature in Windows 8 that is also related to Anti-Malware software. Measured Boot gives the Anti-Malware software a detailed,reliable log of components that loaded prior to the ant-malware driver during startup.
This log can be used by anti-malware software or an administrator in a business environment to validate whether there may be malware on the computer, or evidence of tampering with boot components. Early Launch Anti-Malware - This provides the ability for an anti- malware driver to register as a trusted Boot Critical Driver. This makes it the first non- Microsoft, non-Platform specific code that will run on the computer.
The anti-malware driver can then verify other drivers in turn before they are initialized. Secure Boot helps prevent malware from running before the OS. Early Launch AV helps insure trusted anti-malware software is the first third party component run on each startup. Trusted Boot - A combination of Secure Boot, Measure Boot, and Early Launch Anti-Malware that helps establish that the system is in a trusted state. Boot on computer with no VGA Support - UEFI removes the need for VGA support, enabling Windows 8 to be installed on computers that do not use this legacy video technology. And it would require a 1-1 File Size and idential HDDs which would be quite limiting. Restoring 300-1GB images would be a tad slow.
-' + '- Craig Wilson - MCNE, MCSE, CCNA Novell Support Forums Volunteer Sysop Novell does not officially monitor these forums. Suggestions/Opinions/Statements made by me are solely my own. These thoughts may not be shared by either Novell or any rational human. Shaun Pond spond@no-mx.forums.novell.com wrote in message news:VA.0000cc82.03c28c0c@no-mx.forums.novell.com. Sdjones, it 's the same basic system,so no -' + '- Shaun Pond.
I am trying to come as close to a low level format as possible so I wrote zero's to my HD using the 'clean all' command in diskpart.exe. I also fixed the master boot record using the bootrec.exe 'bootrec /fixmbr' command.
Afterwards, Ibecame worried that I may have erased the bad sector map so I tried to run chkdsk but ran into problems. Primarily, I was told that the drive was write protected which seemed strange because I am able to install windows. Perhaps I was not using an elevated command prompt with administrator permissions? I did not assign a drive letter beforehand or use a drive letter when running chkdsk (although I did try '0' and 'disk 0') so perhaps that was the source of the problem.
Perhaps I should askwhether Windows 7 checks for bad sectors on a HD while installing? Ultimately, what I need to know is whether performing the 'clean all' command in diskpart erases the map of bad sectors or not because I am worried about malware hiding in that portion of the hard drive. If'clean all'doesn't erase that portion of the drive then I need to figure out how to do so (preferably by booting to Windows 7 and/or DOS command line). If'cleam all'does erase the map of bad sectors, then I need to figure out how to recreate it.
Any help will be appreciated. Thanks in advance. My computer has a dual boot with Windows XP and the latest opensuse linux. Recently, i saw an error message in the system log that said I had 1 unreadable (pending) sector and 1 offline uncorrectable sectors.
I read everything online including SMART's homepage and decided to force my hardrive to reallocate the sector by writing to it. I located the sector by running a short self test (smartctl -l short /dev/sda).
Next I determined the sector was in my Windows ntfs-3g partition. I confirmed that it didn't point to any files (this is irrevelent for discussion). Finally I used dd to write to the sector. The command returned with an error message. I checked the system log which recorded the error. In the system log's error post, it said autoreallocate failed. I checked the number of reallocated-sector-count in smartctl -A and it says 0, so i know i haven't filled up the reserve sectors.
Why didn't the hard drive's firmware remap the bad sector? The smart statistics and system error log are posted in the next post. I downloaded Western Digital's hard drive repair software and ran the extensive test. The result was 'Errors Repaired' exit code 223. When i rebooted into Linux and checked the SMART statistics, there was now zero current pending sectors but still 1 offline uncorrectable. What was odd is that there are also zero reallocated sectors.
I ran smartctl -t short and it completed fine and then I used dd to read from the previously troublesome sector and it read fine (there were all zeros there). I now have 3 questions: (1) What did the disk repair software do?
Did it remap the bad sector or did it physically fix it somehow? (2) What does it mean that the drive still has 1 offline uncorrectable sector? And (3) Why didn't the drive repair itself when i tried to write to the bad sector earlier? Hello Last night I did a complete wiping of my hard drive on my old HP620 laptop in order to start my ideal Arch setup from the scratch.I decided to give GPT a try, since Ive been sick of the brain damaged MBR all those years. I did the install as usual, using cgdiskto partition the drive within the freshly created GUID partition table.
I made up 5 partitions, with the leading 1MiB BIOS boot partition,which I created inside the first 40-2047 sector boundaries and set it to type ef02. Everything has been alligned properly and passed without any errors. I partitioned the drive as follows: quetzalcoatl% sudo gdisk -l /dev/sda GPT fdisk (gdisk) version 0.8.10 Partition table scan: MBR: protective BSD: not present APM: not present GPT: present Found valid GPT with protective MBR; using GPT. Disk /dev/sda: 625142448 sectors, 298.1 GiB Logical sector size: 512 bytes Disk identifier (GUID): 1DC6DA85-2730-4101-ADA1-69EA884CC1B7 Partition table holds up to 128 entries First usable sector is 34, last usable sector is 625142414 Partitions will be aligned on 8-sector boundaries Total free space is 362996373 sectors (173.1 GiB) Number Start (sector) End (sector) Size Code Name 1 40 2047 1004.0 KiB EF02 2 207 25.0 GiB 8300 3 5245279 16.0 GiB 8300 4 8593887 4.0 GiB 8200 5 94346047 80.0 GiB 8302. I have the same problem with my T510.
Unlike my eeepc, the T510 won't boot from the SD(HC) card slot (and eSATA btw), while booting from an external usb card reader is possible on both. Also the T510s SD card slot seems extremely picky on which cards it reads.
For example it accepts almost no microSDHC card in a SD adaptor card, which works excellent on all my other card readers. It's really a shame that a $1500 device can't do what a $350 device achieves flawlessly!
Another issue I noticed is that the normal boot process from a HDD seems to be interrupted until the dvd drive has recognized the disc in it, which can take quite a while. My computer was the system down on damage PSU explosive during it was playing internet. After that, I have changed new PSU and Mainboard installation with the same previous bootable HDD. The problem had occured when HDD hadn't detect to new mainboard. I put in hirenbootcd bootable one, so on checking FDISK to select Active on my harddisk fully format.
Then I again select to non-active, after it forwarded to windows 7 installation which is shown free unallocated sector. When i type Disk Management on search file from Windows, the boot sector has appeared in drive C: that's should be in system reserved, right? I would have asked the moderator how to put the boot sector into system reserved, in addition to have a new installation for optimized system for such as making partition, virus harmful in boot sector, nice speed harddisk from hdtune, etc. Thanks a lot hihi. The biggest mistake was to use the Hiren BootCD. No one knows what you actually did to the hard drive using that utility so it virtuallyimpossible to tell you how to fix the problem. Suggest you do a clean install of Windows 7, or you can try a Repair Install of Windows 7.Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question.
This can be beneficial to other community members reading the thread. My Dad removed a Boot Sector Virus from a Windows Vista laptop using Trend Micro.
(first time using this trend mirco) When restarting the laptop it shut itself down. Then restarted and shut down again. The only way to stop it from doing this was to remove the battery! Does anyone know why this is happening since detecting and removing this Boot Sector virus? And how on earth can I get the laptop to start normally again??
This laptop came with no discs etc. No recovery disc! It wont even let you start in safe mode. It just keeps shutting itself down. Hi, You can't do a RepairInstall if it won't Boot.
You need to have Vista running to do a Repair Install, which you can't do. You can do a Startup Repair or a FULL reinstall. _____________________________________________ As Safe Mode also does not work: Try a Startup Repairand / or aSystem Restore using a Microsoft Vista DVD Manufacturers Recovery Disks do not normally have Repair Options; thay are normallya reinstall to Factory Settings optiononly. Here is the guide to using the Repair Options while using a Microsoft Vista DVD. If a friend or work acquantance of yourshas one, you may borrow and use it for Repairs.
Table of Contents Overview of the Windows Vista Repair options How to perform an automatic repair of Windows Vista using Startup Repair Advanced Tools overview Conclusion If you do not have or can not borrow a Microsoft DVD there isa download of a VistaStartup Repair ISO file availablewhich you can make into a Bootable disk to do the aboveStartup Repair andthatmethodis recommended by a lot of posters in these Forums. Unfortunately, you have to buy it. Here is a link to it: _________________________________________________ There are various methods to reinstall Vista.
Thismay assist you (download the files and make your own DVD): You can contact yourComputer Manufacturer and ask them to send you a set of Recovery Disks. They should do that for a small cost. To reinstall Vista using their Recovery Disk/s, you Boot from the 1st RecoveryDisk they supplyand follow the Manufacturer's instructions to reinstall: You will have to change the Boot Order to make the DVD/CD Drive 1st in the Boot Order: How to change the Boot Order in BIOS: 'How to replace Microsoft software or hardware, order service packs, and replace product manuals' And if you never received a Recovery Disk when you purchased your Computer there should be a Recovery Partition on the Hard Drive to reinstallWindows back to how you bought your Computer. The Recovery process can be started by pressing a particular Key or Keyscombination at Boot. (Power On / Startup) It may be F10, F11, Alt + F10, etc depending on the Manufacturer.
Ask them for the correct Key sequence.. Some manufacturers no longer have Vista Recovery Disks available. If that happens, you may have to try this instead: You can also borrow and usea Microsoft Vista DVD, that contains the files for the various Vista Editions (Home Basic, Home Premium, Business and Ultimate)to be installed.
The Product Key on your Computer / Laptop casedetermines which Edition is installed. Other Manufacturers' Recovery DVDs are not to be used for theabove purpose. Andyou need to knowthe 'bit' version for Vista, as 32bit and 64bit Editionscome on different DVDs Here is how to do a clean install of Vista, using a Microsoft Vista DVD: 'How to Do a Clean Install and Setup with a Full Version of Vista' And once the Operating System is installed, go to your Computer Manufacturer's website and obtain the latest Drivers for your particular Model Computer or Laptop. And phone Activation may be required when using the above clean install Method. 'How to Activate Vista Normally and by Phone Activation' _______________________________________ And how to save your Data before you reinstall, if you wish to.
Saving your files: You can pull the Hard Drive and put it in a USB Hard Drive Enclosure plug it into another Computer and attempt to read and copy over your Data that way. Or, you can download Knoppix make a Bootable disk from it Boot into your System with it (IF your Hardware is all working) and copy your Data from the Hard Drive that way. If you have a bad sector, you got a near to dead product on your hands. You can open an RMA for a replacement which will be another [deleted] from WD in California. I had the same problem four times during the last year. Each time a rectified drive with the same problem was sent to me.
By their help desk's own admission, they just run a few scans and isolate the bad areas and make it someone else's problem again. I would make sure you back up your software and go by a brand new Seagate which is what I am doing. I have some malware in IE9 that I've been unable to remove for the past couple of weeks. Symptoms are: - I perform a google search using the google.co.uk site (not a search bar in IE) - After clicking on a link the the results list IE9 displays a blank page and the tab shows the address as googledoubleclicks.com - Sometimes I will be redirected to the page I wanted other times it will redirect me to an unrelated site I have tried numerous anti-virus / anti-malware tools including McAfee VSE, Malwarebytes Anti-Malware, McAfee anti-rootkit amongst others suggested elsewhere in the web. Malwarebytes initially found and removed a Trojan in C: Users my_username AppData Local Temp mscmdi.dll (Trojan.Midhos). This hasn't reappeared and I'm not sure it's related. No other scans found anything.
I've been through the process of uninstalling IE9 from the list of Windows Updates and reinstalled, reset IE to default condition using Properties Advanced Reset. And tried disabling and removing all suspicious add-on's.
I've also used HiJack-This and msconfig to remove any suspicious startup items. Lastly I ran a bootsect. Khatrimaza Hollywood Movies Fast And Furious 7. exe /FixMBR to get rid of any potential boot sector trojans that may have gone undetected. What I really want to do is to complete wipe IE9 and perform a clean install but there does not appear to be a way of doing this as I believe the trojan has now embedded itself in the IE9 code. Alternatively I need to find where the malware may have embedded itself so I can try a manual repair. I have already been through the following article: http://answers.microsoft.com/en-us/ie/forum/ie9-windows_7/methods-to-uninstall-remove-ie9/e28fba17-245a-e011-8dfc-68b599b31bf5.
Hi, Try to format it using your phone format option or just try to format it via phone using usb cable.mine is working but still having some little problems. Files disapearing without delete.think that it got bad sectors or something like zat. This problem is caused when you do frequently remove your memory card from your phone even when using REMOVE MEMORY CARD. So the best advice is to switch off your mobile before removing the memory card. Good luck to everybody ___________________________________________________________.
I used Microsoft Windows Defender Offline to try to eliminate a recurring svchost malware. I booted from the disk and it found a virus labeled Trojan:DOS/Alureon.H in the location boot:. PHYSICALDRIVE0 (MBR). After I allowed the tool to delete the object, it destroyed some part of the boot record/sector. It was so bad that I couldn't even recover using the system image. I had to rebuild most of my computer using installation media and get it up to a functioning PC before another attempt at image recovery actually worked. What happened?
I will never use Microsoft Windows Defender Offline again. Thanks, Russ G. After such, you should always start with: When you boot on the CD, follow the prompts: Press any key to boot from CD. The Windows Setup. Will proceed. Press 'R' to enter the Recovery Console.
Select the installation you want to access (usually 1: C: WINDOWS) You may be asked to enter the Administrator password (usually empty). You should be in the C: WINDOWS folder. This is the same as the C: WINDOWS folder you see in explorer.
RC allows basic file commands - copy, rename, replace, delete, cd, chkdsk, fixboot, fixmbr, etc. From the command prompt window run the chkdsk command on the drive where Windows is installed to try to repair any problems on the afflicted drive.
Running chkdsk is fine to run even if it doesn't find any problems. Assuming your boot drive is C, run the following command: chkdsk C: /r Let chkdsk finish and correct any problems it might find. It may take a long time to complete or appear to be 'stuck'. If the HDD light is still flashing, it is doing something. Keep an eye on the percentage amount to be sure it is still making progress. It may even appear to go backwards sometimes. You should run chkdsk /r again until it finds no errors to correct.
Remove the CD and type 'exit' to leave the RC and restart the computer. You do not have to adjust the BIOS again to boot on the HDD since the CD will not be present. To eliminate questions and guessing, please provide additional information about your system.
What is your system make and model? What is your XP version and Service Pack? Click Start, Run and in the box enter: msinfo32 Click OK, and when the System Summary info appears, click Edit, Select All, Copy and then paste the information back here. There will be some personal information (like System Name and User Name), and whatever appears to be private information to you, just delete it from the pasted information.
Describe your current antivirus and anti malware situation: McAfee, Norton, Spybot, AVG, Avira!, MSE, Defender, ZoneAlarm, PC Tools, Comodo, etc. We will need more information to troubleshoot any remaining issues (or you can try things). Don't guess what the problem might be - figure it out and fix it. I need YOUR votes and points for helpful replies and Propose as Answers. I am saving up for a pony!
I have exactly the same problem, and as you i could not find a solution to resolve this. But i did turn my efforts on a workaround and came up with the following result. With the configuration program that runs after the error; You come to an option to change the boot tasks (F4 option), choose this option Change the autoboot setting to ON Change the timeout setting to 5 seconds (or up to you) Change the default boot device to be your boot device (maxtor HDD etc) Then return to the main menus and continue as usual This will then (in essesnce) ignore the message and continue the boot as usual.
Not a solution, but it saves rebuilding the OS on a new HDD. How to activate Windows 7 or Vista manually (activate by phone) 1) Click Start, and in the Search box type: slui.exe 4 2) Next press the 'ENTER' key 3) Select your 'Country' from the list. 4) Choose the 'Phone Activation' option. 5) Stay on the phone and wait for a person to help you with activation. (tell the person why you had to do the reinstall). Also: How to Activate Windows 7 by Phone How to Activate Windows Vista by Phone Microsoft Activation Centers Worldwide Telephone Numbers: (This site is for Volume License Activation but if you call they will help you) Product Activation Solution Center Windows 7 activation error: invalid product key JS Never be afraid to ask. This forum has some of the best people in the world available to help.
Dear experts! We designed a customized P2020 board. We want to flash burn the u-boot to S29GL256P NOR FLASH. But it seems not successful! The print are as follows; fl::target -lc 'LC for Simple Flash' fl::target -b 0x2000 0x30000 fl::target -v off -l off cmdwin::fl::device -d 'S29GL256P' -o '16Mx16x1' -a 0xfe000000 0xffffffff cmdwin::fl::image -f 'E: tl ppc_work p2020_nor P2020RDB_nor_flash_image.bin' -t 'Auto Detect' -re on -r 0xfe000000 0xffffffff -oe on -o 0xff000000 cmdwin::fl::erase image Beginning Operation. ------------------------- Auto-detection is successful.
File is of type Binary/Raw Format. Performing target initialization. Downloading Flash Device Driver. Reading flash ID. Hello Li Tian, Not noticing that you are programming the whole flash image.
It should take some time to flash the whole flash image, previously I have done a verification, it took about 3 minutes to flash u-boot to P2020DS Nor Flash. So you should wait for a moment to flash the whole image, maybe 20 to 30 minutes.
Have a great day,Yiping -----------------------------------------------------------------------------------------------------------------------Note: If this post answers your question, please click the Correct Answer button. I'm a brand new user of Sophos AV Mac Home. I searched the forums on 'boot' and 'startup' but found no info on this issue.
I've always been a Mac user at home, but I used Windows machines at work 'til 2002. To properly scan a Windows machine, we had to boot it from a CD or a locked floppy so we could scan for boot sector viruses. If we booted up the Windows machine from its hard drive and ran a virus scanner, it couldn't see that malware. Is there a need to do this on a Mac?
That is, if I boot my Mac normally from my hard drive and run a Sophos scan, are there certain files and/or firmware that Sophos can't scan because they are 'in use' or otherwise inaccessible, and would they be scannable with a boot from CD? Thanks, Peter.