mass email attack

[Broni]

Check, if you can see it in Disk Management and how it's listed there.

[TyWelcome]

When I open Disk managment I get a window that says:

you must initialize a disk bfore logical disk manager can access it...
I have options for partition style:

MBR or GPT.. I would select MBR but I dont want to lose data on that drive.
are you familiar with this?

I hope this is clear.

I can post pic somewhere that might help.. but I dont know where.

I am hoping that using a MBR option would fix the disk.
There is a drive listed as Disk 0. And the size matches to what it should be to be the D: data drive. But it is listed as Unallocated.

[Broni]

I would select MBR

This is exactly what you should do.
See here: http://technet.microsoft.com/en-us/l...8WS.10%29.aspx
Whatever you do, I don't see any danger to your data.
That MBR has to be set correctly no matter what.

[TyWelcome]

I have a file on my desktop labeled :
MBRCheck_MBR_Backup_08-13-10_11-16-20.bak

Is there a way to restore this MBR so that I can get some files off of my D: and then reset the MBR?

I have school data on the D: and need them. That is why I have not intialized the disk yet for fear of losing data. I have searched the net and can't find how to restore using that backup file.

[Broni]

Is there a way to restore this MBR

I don't think, it's possible.
What you could possibly do is to hook up that drive as a slave in another computer and it may be readable from there.

[crunchie]

Hi TyWelcome. I do not see any danger of losing that data on the disc doing the process that Broni advises.
For the data to be lost it either has to get corrupted or formatted over.
The MBR needs to be fixed on the pc as it has been modified by malware. The information you need is still on the disk and can be accessed from another pc, if need be.
Try going into device manager and right click on the computer name and scan for hardware changes. See if the disc is recognised now.
If not, try removing the disc and reconnecting it to see if it gets recognised.

[TyWelcome]

The website link for initializing the drive is for Server 2003 versions.

I do not have the option to "initialize" disk. I only have "new simple volume".
Will that option work?

[Broni]

You said:

you must initialize a disk bfore logical disk manager can access it...
I have options for partition style:

MBR or GPT..

[JPnyc]

This is the latest trend in spamming. The probability is that your password was guessed with a brute force attack, and it's not the result of anything local to your computer. It's happened to several people I know and to me myself. The best defense is immediately change your password to something in excess of one dozen mixed characters (letters, numbers, symbols, etc.). This sort of thing is positively rampant right now.

[TyWelcome]

Broni sorry about that I forgot to post my results.

As stated earlier when I load Disk manager I get that popup asking for MBR or GPT.
I selected MBR but the drive is still not showing up.

I tried what crunchie said by scanning new hardware and also restarted my machine without the drive in and then rebooted with it installed.

What is next? do I go back to the link you posted about "intializing". If so that link was for server 2003 and not Win7.

Thanks again,
Terry

[Broni]

Let's try to re-run MBRCheck again....

Run MBRCheck again.

When it's done you'll see the following line:
Enter 'Y' and hit ENTER for more options, or 'N' to exit:
Pres the Y key and then press Enter

When the program asks you to Enter your choice, enter 2 and press the Enter key.

Next the program will ask you to Enter the physical disk number to fix (0-99, -1 to cancel):
Enter 0 (zero) and press the Enter key.

Next the program will show Available MBR codes:, followed by a list of operating systems.
Please enter 5 for Windows 7, and then press Enter.

Next the program will prompt for confirmation.
Type YES and hit Enter.

When it's done there should be a text file with the results on your desktop.
Please copy and paste it back here.

Then reboot, run MBRCheck again and post new log.

[Broni]

If the above doesn't work, I strongly suggest, you slave that drive in another computer (or use hard drive enclosure) to save your data.

[TyWelcome]

MBRcheck is longer giving me the "options" command. I think this is because the MBR is correct for the windows drive C: and D: is longer visible.

I am getting a SATA to USB adapter sent out so I will not be able to test the slave thingy for few days. I will post back at that time.

[Broni]

Keep us posted.
Sorry for all those problems