I haven’t really ever dealt with an issue like this before so I’m unsure of how to go about getting the correct information.
I’m mainly certain that what I have is an infection because of what else my brother has told me about his laptop:
“Avast was freezing up before it completes scans and the computer would crash, prior to this happening.”
“I visited ‘X’ porn site and download a bunch of ‘y’.”
I really need to help him find something else for him to do with his free time.
I managed to get a little info from the BSOD but that’s about it:
UNMOUNTABLE_BOOT_VOLUME
STOP: 0x000000ED (0x86F3D568, 0xC0000006, 0x00000000)
I shall try to provide more information as I work on the machine and as I recieve help. Considering I cannot even get it to start, I’m not sure what all I can do.
I’m planning to scan it with the Fabar Recovery Tool, but I feel the need to ask a stupid question. Is there any chance that a flash drive could become infected during this process? I’m guessing not, but I felt the need to ask before proceeding anyway.
That could be a sign of a damaged hard drive, or a corrupted MBR, i don’t know, im not a master in these things.
But i’m 100% of the damaged harddrive.
I’m pretty sure at this point also. The behavior kinda points to it and I will note that the computer had a tendency to “hang” when I was using it in the past, and I’ve had other computers with old, corrupted hard drives do the same thing.
I can’t get it to boot the OS install disk either. Gave me this:
win32k.sys - Address BF8A1E6 base at BF800000, DatStap 3d6de5e5
If others are fairly certain of this, would it be possible for me to get any data recovered off of it by an expert? My brother is really desperate get a few documents off of it, though I don’t think it’s anything too important, he just thinks it is.
You could use OTLPE to try and recover the data, but no guarantees
Please print these instruction out so that you know what you are doing
[*]Download OTLPENet.exe to your desktop
[*]Ensure that you have a blank CD in the drive
[*]Double click OTLPENet.exe and this will then open imgburn to burn the file to CD
[*]Reboot your system using the boot CD you just created. Note : If you do not know how to set your computer to boot from CD follow the steps here
[*]As the CD needs to detect your hardware and load the operating system, I would recommend a nice cup of tea whilst it loads
[*]Your system should now display a Reatogo desktop. Note : as you are running from CD it is not exactly speedy
[*]Use system explorer to locate and copy files to a USB
Well it’s really just a few wordpad documents. I don’t know what they are, or why he didn’t just keep them on a flash drive, but he’s got Asperger syndrome so he does weird things. Like getting freaked out by some documents he doesn’t really need.
Also, thanks for the help Essexboy, I’ll see if it will work.
