Discussion Locked

Hard Repair Tool

0 helpful
6 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
There is a hard disk that was infected with "Wyx" virus which reside o on MBR. an attempt was made by the user of the computer to remove this virus. unfortunately he choose delete when prompted for an action. the MBR was subsequently deleted as a result of this action. Since then the HDD has refused to boot again. There are lots of important information on this HDD. Is there a way I can revive the HDD without formatting?

6 replies

by scott.heath

Make a ghost image of the hard disk if you can. This it was I do most often when I can't boot a system. If it is truly the mbr that is gone and you can't make an image try fdisk /mbr from a boot dist. Should rebuild the mbr, but I make no promises to it not making it worse. Viruses are a sticky situation, i would stick with making the image of the HD if you can.

by dmiles

Prior to boot sector viruses, it was rare that any support person even knew what a MBR was. For background on the MBR: MBR Explained. If your MBR has been contaminated by a virus, use the virus vendors document to recover it. If you can not, the preferred approach is to have a backup of the MBR. See Backup/Restore MBR. If its too late for that the next best approach is to rewrite the Master Boot Record using the DOS-based FDISK command:
fdisk /mbr

Use a dos boot disk and run it. If you don't understand what this means, don't try this tip.

You can now install a replacement MBR using fdisk.
Caution: if you need to replace the MBR to remove a boot sector virus, check your virus vendors documentation on the virus very carefully.Replacing the MBR may the worst thing you can do given certain viruses that twiddle with disk sectors - hidding or encrypting data. In such a case, replacement of the MBR will result in ALL your disk partitions and data being lost. If you have such a virus, use anti-virus software to remove the virus.

Remember the term backups? Sorry. Couldn't resist.

by docwade

Similar to slaving the hard drive, I would recomend connecting the drive to another PC's CD cables and copying the information you need to the other hard drive. I would HIGHLY recommend, however, that you scan the drive for viruses BEFORE you copy any data.

by gkheart1

Hi, I agree with answers 3 and 5. Slave it into another machine. First scan it for viruses and get your important data from it. After that you may want to try a repair, If it works that's great and if it doesn't you still have what you wanted off ofthe drive.
Regards, Gil

This discussion is closed to new replies.