Re: Hacked!! no loading into system.

From: Karl Levinson [x y] mvp (levinson_k@excite.com)
Date: 01/09/03


From: "Karl Levinson [x y] mvp" <levinson_k@excite.com>
Date: Wed, 8 Jan 2003 21:41:30 -0500


I agree. Could be a failing hard drive... you might be able to detect this
by booting to a DOS or Windows 9x floppy [created on a known virus free PC]
or download a DOS boot floppy from www.bootdisk.com and then run a full
scandisk, allowing scandisk to do a full scan to look for bad sectors.
[This will not work on partitions formatted in NTFS however... though you
could press F8 before Windows starts to try booting to Command prompt.]

On the one hand, if this is a failing hard drive, continuing to use it or
running a scandisk could cause it to fail for good... on the other hand, you
want to diagnose whether the disk is physically sound in order to determine
whether to reuse it or return it. If you are concerned about losing data
from the drive, you first want to back it up.

You should also consider running a virus scan, such as the free one at
www.f-prot.com/products which you can run while you are booted into DOS.

"Jeff Cochran" <jcochran.nospam@naplesgov.com> wrote in message
news:3e211df5.679432502@news.easynews.com...
> >A user got hacked and now the system can not be booted.
> >
> >The user have Firewall software on.
> >The system was compromised twice.
>
> How do you know?
>
> >The first time, it attempts reboots but it failed to boot
> >for an hour.
> >
> >After everthing was back on, it happened again. it
> >attempts to reboot but this time after an hour, the system
> >files were corrupted.
> >
> >On the boot up it goes into Win2000 boot screen but it
> >stop and says the winnt/system32/system or
> >winnt/system32/systemd
> >
> >is corrupted or missing!!
> >
> >now it doesn't boot pass that message.
> >
> >What can be done?!
>
> Reformat and reinstall, especially if you believe the system was
> hacked. Harden the system, try http://securityadmin.info/ for helpful
> pointers.
>
> But...
>
> None of the symptoms you've descirbed indicate the system was hacked,
> so answer the first question I posed. You more likely have another
> type of error.
>
> Jeff



Relevant Pages

  • Re: editing XP registry through DOS?
    ... > still occurs whenever windows boots up. ... > However I don't have this problem using DOS after I insert my floppy boot ... > change my settings to the registry from DOS? ... > and reboots to the Windows log in screen where I enter the password again ...
    (microsoft.public.windowsxp.hardware)
  • Re: editing XP registry through DOS?
    ... > still occurs whenever windows boots up. ... > However I don't have this problem using DOS after I insert my floppy boot ... > change my settings to the registry from DOS? ... > and reboots to the Windows log in screen where I enter the password again ...
    (microsoft.public.windowsxp.general)
  • Re: editing XP registry through DOS?
    ... > still occurs whenever windows boots up. ... > However I don't have this problem using DOS after I insert my floppy boot ... > change my settings to the registry from DOS? ... > and reboots to the Windows log in screen where I enter the password again ...
    (microsoft.public.windowsxp.customize)
  • Re: editing XP registry through DOS?
    ... > still occurs whenever windows boots up. ... > However I don't have this problem using DOS after I insert my floppy boot ... > change my settings to the registry from DOS? ... > and reboots to the Windows log in screen where I enter the password again ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: editing XP registry through DOS?
    ... > still occurs whenever windows boots up. ... > However I don't have this problem using DOS after I insert my floppy boot ... > change my settings to the registry from DOS? ... > and reboots to the Windows log in screen where I enter the password again ...
    (microsoft.public.windowsxp.work_remotely)