Author Topic: Virus: need help  (Read 3257 times)

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
Virus: need help
« Reply #20 on: May 24, 2009, 01:41:14 PM »
A knoppix CD might be easier as it will automount internal drives
But let's try the following

This will be easier if your using Firefox in Ubuntu, so you can copy/paste some instructions
In Ubuntu, click on PLACES>>COMPUTER
Double click on your drive Windows is installed on
You will probably get the error it couldn't mount

In the error box, click on Details.....
I need the info in the quote box below right after the following: For example type on the command line:
as eg.. it will look like the following

Quote
mount -t ntfs-3g /dev/sda1 /media/disk -o force

IF you don't post this back Exactly as you see on your screen, we won't be able to do it properly

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here


Offline Arpan

  • Jr. Member
  • **
  • Posts: 88
  • Karma: +0/-0
    • View Profile
Virus: need help
« Reply #21 on: May 24, 2009, 10:12:17 PM »
[quote name=\'guestolo\' post=\'462973\' date=\'May 25 2009, 12:11 AM\']You will probably get the error it couldn't mount

In the error box, click on Details.....[/quote]
The error details of the drive in which windows is installed is same as i mentioned in my previous post.

Quote
In the error box, click on Details.....
I need the info in the quote box below right after the following: For example type on the command line:
as eg.. it will look like the following

IF you don't post this back Exactly as you see on your screen, we won't be able to do it properly

I did not understand what exactly you asked me to do in the above lines but still i tried what i could understand. Here is the screen shot of command line instructions i had typed. Explain me if i have done something wrong.

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
Virus: need help
« Reply #22 on: May 24, 2009, 10:23:27 PM »
Edit>>Get out of Terminal for now, I need you on the desktop of Ubuntu

In Ubuntu, click on PLACES at the top>>COMPUTER
Double click on your drive Windows is installed on
You will probably get the error it couldn't mount

In the error box, click on Details.....
« Last Edit: May 24, 2009, 10:31:39 PM by guestolo »

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here


Offline Arpan

  • Jr. Member
  • **
  • Posts: 88
  • Karma: +0/-0
    • View Profile
Virus: need help
« Reply #23 on: May 24, 2009, 10:30:21 PM »
[quote name=\'guestolo\' post=\'463005\' date=\'May 25 2009, 08:53 AM\']In Ubuntu, click on PLACES>>COMPUTER
Double click on your drive Windows is installed on
You will probably get the error it couldn't mount

In the error box, click on Details.....[/quote]

When i clicked on show more details in the error box. it stated..
error:device/dev/sda5 is not removable
error:could not execute pmount

There is only one option left to click "ok" button.

edit:  
error:device/dev/sda1 is not removable
error:could not execute pmount
« Last Edit: May 24, 2009, 10:33:06 PM by Arpan »

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
Virus: need help
« Reply #24 on: May 24, 2009, 10:36:15 PM »
Let's see what we can do with just that info

Open up Terminal
On the top menu bar click on Applications>>Accessories>>Terminal

Let me know when you have Terminal open, don't do anything with it yet

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here


Offline Arpan

  • Jr. Member
  • **
  • Posts: 88
  • Karma: +0/-0
    • View Profile
Virus: need help
« Reply #25 on: May 24, 2009, 10:38:28 PM »
I m ready with terminal open..

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
Virus: need help
« Reply #26 on: May 24, 2009, 10:41:02 PM »
Right after the ~$ can you type the following, or copy/paste it if your running Firefox from within Ubuntu

Exactly as following:

sudo /bin/bash
Hit Enter on your keyboard, there is a single space after sudo
Let me know what happens, don't type anything after that

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here


Offline Arpan

  • Jr. Member
  • **
  • Posts: 88
  • Karma: +0/-0
    • View Profile
Virus: need help
« Reply #27 on: May 24, 2009, 10:44:38 PM »
command executed successfully and in the next line now i can see...

root@ubuntu:~#

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
Virus: need help
« Reply #28 on: May 24, 2009, 10:48:18 PM »
great, I hope your copy/pasting these, the next command isn't so bad, but the next after is a bit long
Let me know if your copy/pasting these commands please

type, or copy/paste the next command exactly

[color=\"#800080\"]mkdir /media/disk[/color]

Hit Enter on keyboard
single space after mkdir

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here


Offline Arpan

  • Jr. Member
  • **
  • Posts: 88
  • Karma: +0/-0
    • View Profile
Virus: need help
« Reply #29 on: May 24, 2009, 10:51:36 PM »
command was successful. well i am actually typing it because i'm replying from my desktop. I will type the command, no worries....

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
Virus: need help
« Reply #30 on: May 24, 2009, 10:55:42 PM »
type the following exactly,

[color=\"#9932CC\"]mount -t ntfs-3g /dev/sda1 /media/disk -o force[/color]

hit Enter
note the single spaces
after mount>-t>ntfs-3g>/dev/sda1>/media/disk>-o>force

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here


Offline Arpan

  • Jr. Member
  • **
  • Posts: 88
  • Karma: +0/-0
    • View Profile
Virus: need help
« Reply #31 on: May 24, 2009, 11:02:08 PM »
command resulted as follows:

root@ubuntu:~# mount -t ntfs-3g /dev/sda1 /media/disk -o force
mount: unknown filesystem type 'ntfs-3g'
root@ubuntu:~#

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
Virus: need help
« Reply #32 on: May 24, 2009, 11:09:02 PM »
darn, I don't think your version of Ubuntu has the correct package on disk

We could try an updated version of Ubuntu, but maybe we should stick with knoppix as it should mount the drives a lot easier

I posted instructions a long time ago, see if I can find them

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here


Offline Arpan

  • Jr. Member
  • **
  • Posts: 88
  • Karma: +0/-0
    • View Profile
Virus: need help
« Reply #33 on: May 24, 2009, 11:12:05 PM »
oh, that is quite tiring for you, isnt it?

By the way I am ok with any version you say, no problem at all.

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
Virus: need help
« Reply #34 on: May 24, 2009, 11:14:39 PM »
Actually what happen in Terminal as root if you type the following exactly

[color=\"#4169E1\"]sudo mount /dev/sda1 /media/disk -t ntfs[/color]

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here


Offline Arpan

  • Jr. Member
  • **
  • Posts: 88
  • Karma: +0/-0
    • View Profile
Virus: need help
« Reply #35 on: May 24, 2009, 11:19:34 PM »
It executed successfully leaving no visible results just as follows...


root@ubuntu:~# sudo mount /dev/sda1 /media/disk -t ntfs
root@ubuntu:~#

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
Virus: need help
« Reply #36 on: May 24, 2009, 11:22:54 PM »
I'm not quite sure how much access you will have with that
But can you do the following, minimize the Terminal box

Then click on Places and your XP drive, what happens?

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here


Offline Arpan

  • Jr. Member
  • **
  • Posts: 88
  • Karma: +0/-0
    • View Profile
Virus: need help
« Reply #37 on: May 24, 2009, 11:26:42 PM »
It neither gives any error nor it executes successfully. I mean hitting enter on that drive practically does nothing.

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
Virus: need help
« Reply #38 on: May 24, 2009, 11:27:59 PM »
Is there an icon on the desktop for that drive?
What do you mean hitting Enter does nothing?

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here


Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
Virus: need help
« Reply #39 on: May 24, 2009, 11:35:01 PM »
Can you type this command in terminal as root

[color=\"#800080\"]sudo mount /dev/sda1 /media/disk -t ntfs -o nls=utf8,umask=0222[/color]


See if you have access to the drive afterwards

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here