Re: Recovering data after Sasser

From: Robert Gregory (res02qj2_at_gte.com)
Date: 07/24/04 

Date: Sat, 24 Jul 2004 19:48:33 GMT

Thanks for the help. I'll take a look at the kb article. As for the
firewalls, my computer has been an almost prison for years -- I have never
been infected before. That's what's so perplexing about this. I do
remember, however, about a month ago when I changed over from a wired to a
wireless router for the other machines though, I didn't have the firewall up
and running -- for about half a day. That's the only time I can figure I
got this.

As long as I can get the data off the machine, as you suggested, then yes,
everything is coming off and I'll start over.

Thanks again for your quick response.

Robert

"Lanwench [MVP - Exchange]"
<lanwench@heybuddy.donotsendme.unsolicitedmail.atyahoo.com> wrote in message
news:#bV4eYYcEHA.2544@TK2MSFTNGP10.phx.gbl...
| See http://support.microsoft.com/default.aspx?scid=KB;EN-US;q268019& for
| help taking 'ownership' of the files/folders you want - then if I were you
| I'd back them up elsewhere and do a clean install to start over.
|
| Make sure you get a good firewall - don't connect to the Internet without
| one.
|
| Robert Gregory wrote:
| > I started getting blue screens and finally last week realized I had
| > been infected with Sasser.
| >
| > Two days ago during boot up I kept getting the X-Notice entitled
| > "lsass.exe" with some message in the body saying why it couldn't
| > continue to boot-up. The end effect was a continual loop to this
| > error message and no further. After an hour with Dell tech support
| > they advised to just reformat, reinstall Windows, case closed. Only
| > problem? Last three months of data gonezo not to mention about six
| > years worth in Outlook 2002. I'm not a tech guy but was determined I
| > wouldn't give in to loosing so much data. Realizing I had a pretty
| > large hard drive I installed a second version of WindowsXP (at
| > C:\windows2\) and that's what I'm using right now, with no effects
| > from Sasser that still resides on the other side of the partition.
| >
| > My issue now is how to recover the data I 'know' is still on the
| > other side of my hard drive. When I boot-up in the new (Windows2)
| > installation I can see the old data folders "C:Windows\Documents and
| > Settings\My Documents" but it says these files cannot be accessed.
| > I'm also trying through the DOS prompt to get to the other side of
| > the partition to recover them but no luck yet. I can't seem to
| > locate them and don't remember enough DOS from the early 80s.
| > Another thing: once I booted-up in the Windows2 installation last
| > night I d/l and ran the Norton fix for Sasser and it said all was
| > well but I still can't boot-up with the original Windows installation
| > -- suggesting the fix only 'sees' the Windows2 installation on one
| > side of the partitioned hard drive.
| >
| > With that background here is my question: How can I recover my data
| > from my original Windows installation contained at:
| > C:\Windows\Documents and Settings\All Users\ ....etc? I can't bring
| > my self (yet) to reformatting and loosing all my data, not to mention
| > all the apps I've d/l and installed over the years!!!
| >
| > All help is greatly, greatly appreciated!!! Thanks!
| >
| > Robert
|
|

Relevant Pages

  • Re: Encrypted Files/Folders recovery
    ... If you still have your user profile from the previous Windows installation ... [Microsoft Security Developer] ... Please tell me any way to recover these ...
    (microsoft.public.windowsxp.security_admin)
  • Dialup Lockup - Finally Found The Problem!
    ... I found what has been creating a conflict. ... internet communication locks up completely, ... > Norton CleanSweep monitored the installation and I used CleanSweep to ... I read that WinXP's built-in firewall can sometimes cause conflicts ...
    (microsoft.public.windowsxp.security_admin)
  • FreeBSD Firewall on a Nokia IP330 Mini-Howto
    ... PC hardware in general, and with FreeBSD. ... after the operating system installation is ... interface named '/etc/start_if.fxpN' (replacing N with the interface ... You do not need to recompile the firewall in order to use the PF ...
    (comp.unix.bsd.freebsd.misc)
  • FreeBSD Firewall on a Nokia IP330 Mini-Howto
    ... PC hardware in general, and with FreeBSD. ... after the operating system installation is ... interface named '/etc/start_if.fxpN' (replacing N with the interface ... You do not need to recompile the firewall in order to use the PF ...
    (comp.security.firewalls)
  • Re: Windows XP running very slow
    ... > installation media sets using your favorite copying method (CD/DVD Burner ... > understand and utilize good passwords. ... > Why you should use a computer firewall.. ... > The system restore feature is a new one - first appearing in Windows ...
    (microsoft.public.windowsxp.general)