Virus recovery plan

HI all,

This is one of my posts that was initially found at:
http://forum.avast.com/index.php?topic=42709.75;topicseen

Wow,

this virus seems to have even the gurus worried which for me is a first. I have a simple question pertaining not just to this but to viruses in general. My drive is partitioned as follows:
C:\ for system files
D:\ recovery partition.

This D: partition is somehow protected and I can’t access it even in administrative mode (which is the only mode I use.
So is it likely that a virus will have access even if i don’t? Keep in mind that I have used this partition in order to get my system formatted as it were (it’s called system restore to factory defaults but it’s much like a format of the c: partition)
When I see that even experts are having a hard time to get rid of it, even after format I am getting worried about my my own plan of system restoration in case of the unthinkable.

Also how do you recover your docs with out opening the OS? do you use a live Cd Linux distribution to transfer simple files (since executabels in windows won’t work in Linux… I think) or do you pull out the hard drive and put it in another computer and then go on from there?

Thank you for any and all replies? I hope this is not too off topic for this thread.

I am still interested in any replies if possible.
thank you.

It should basically be no different from any disaster recovery plan, you should already have a Back-up and Recovery Strategy.

– System Back-up and Recovery Strategy.
If you fail to plan, then you plan to fail.
If you have a back-up and recovery plan, you can recover from anything in minutes, not hours or days.

  1. back-up all the things that you don’t want to lose, data files, like documents, spreadsheets, emails, email account details, registration keys, address book, favourites/bookmarks, downloaded files/programs, etc. the list goes on and on but if you don’t want to lose it back it up. There are many back-up programs that can simplify this task and run it every day.

  2. Recovery - re-installing your system really is a poor choice and one of last resort. There are tools (Drive Imaging software) that take exact images of your Partitions or Hard Disks and these images can be restored in minutes if you suffer a major catastrophe and that doesn’t have to be a virus attack.

I do a weekly image of my partitions and save them to my 2nd hard disk, they can also be saved to off-line storage, DVD, USB external hard disk, etc. as part of my weekly system maintenance.

So if the worst comes to the worst at most I lose:
A. 6 days worth of program updates or new installations, but with my daily back-up I can recover most of that.
B. less than one days data files, emails, etc.
None of these is a problem and much quicker than a system reinstall and I don’t have to go on-line to download the myriad of security updates needed to secure my system where there is a chance to get reinfected whilst my system has vulnerabilities because of these missing patches. Not to mention all my system tweaks and program settings are retained and I will have saved myself many hours of work and a huge amount of stress.

Many of these programs cost, there are some free ones, but it will take some research on your part to find these tools and decide on what is best for you from reviews, user feed back, etc. good luck.

Wow DavidR,

That was prompt. Thank you for the info.

back-up all the things that you don't want to lose, data files, like documents, spreadsheets, emails, email account details, registration keys, address book, favourites/bookmarks, downloaded files/programs, etc. the list goes on and on but if you don't want to lose it back it up. There are many back-up programs that can simplify this task and run it every day.
I usually have a spare system on which I have old files and it acts as the last resort in case all else fails (not the very last resort but among them in case i need a spare).
ecovery - re-installing your system really is a poor choice and one of last resort. There are tools (Drive Imaging software) that take exact images of your Partitions or Hard Disks and these images can be restored in minutes if you suffer a major catastrophe and that doesn't have to be a virus attack.
I admit that after a few system restore to factory defaults I have had enough of this so I will look into the Drive Imaging software. I am curios to see how it works and if I don't have to redo the whole format thing then I would be most grateful.

One last thing.

Also how do you recover your docs with out opening the OS? do you use a live Cd Linux distribution to transfer simple files (since executabels in windows won't work in Linux... I think) or do you pull out the hard drive and put it in another computer and then go on from there?
Is this a valid way to recover files?

Thanks again.

How are you going to recover files from a crashed/trashed/dead drive, answer unlikely even from a live cd, so that isn’t a 100% certain option.

The drive imaging software (mine at least) comes with a bootable CD and that runs outside the OS as you can’t replace an active OS. You restore the image copy of your partition, overwriting the original partition/drive, in the case of a dead drive on to a new drive.

Ah I understand. I have a recovery CD from the company that works much the same way I take It. You boot it and it installs the image it has from the Computer maker. So the os and the recovery partition. At least I think so. But in your case you make your own disc image which you can then use to recover the computer drivers and all as it was before.

Thanks.

Similar but slightly different as the image isn’t on the CD but on the second internal HDD or external HDD, you have to select the location of the image file (certainly on mine).

Well in my case i have an image on the same HDD but under a different partition. I’m curios, if my computer is infected is it it possible for the virus to reach the disk image as well? (by the way this is usually locked and I can’t access it even with administrative rights).

Hi Confused Computer User :slight_smile:

I think you’re talking about the normal recovery disks that you either get by…
1/ They come with your new computer.
OR…
2/ You are given the opportunity to make just one set of recovery disks for your new computer.
I think you either get one or the other : e.g. - Supplied For You … or … Make Them Yourself!

I think most people also have a Recovery Partition on their Hard Drive … Containing an exact copy of how the computer was when it was brand new.
This can also be used to recover your computer to how it was when you first bought it.
It Kind Of Goes Like This…
Computer Is Seriously I’ll - What Should I Do?
1/ Try to fix or remove what caused the problem.
If That Doesn’t Work - Could Try…
2/ System Restore
If That Doesn’t Work - Might Have No Choice…
3/ Full Recovery from the Recovery Partition on the Hard Drive.
If That Doesn’t Work - Last Resort / Last Chance…
4/ Full Recovery from your Recovery Disks.

What DavidR is talking about is quite different… He’s using Disk Imaging Software :slight_smile:
If his computer goes wrong… He doesn’t have to go back to how it was when it was brand new
e.g. Without his installed programs and pictures and stuff.
DavidR can just go back to how his computer was when he last took an Image of it.

Kind of like how System Restore Works… But Much Better! :wink:

I’d really love to learn how to use Disk Imaging Software.
But it always sounds so complicated to use :-[
Knowing Me!
I’d probably get myself in such a muddle…
I’d end up having to do the very thing I’d be trying to avoid - Full Recovery :cry:

Maybe I’ll get the confidence to try it - One day! ::slight_smile:
Until then…
I just try to keep all my personal stuff like photos backed up.

Thank you Hally,

I’m leaning more and more on getting a disk imaging software but before that I think I will get a asecond internal HDD or at least an external one. We’ll see. So far I’ll have to make do with backup on older computers and a general optic of: it’s better to prevent than to mend.

Cheers

Hi Confused Computer User :slight_smile:

You’re Welcome! :wink:

Did you know…
Windows Sky Drive - Now lets you have 25 GB

Free! :smiley:

hmh,

I was not aware of that.

Thanks