Jump to content

Build Theme!
  •  
  • Infected?

big grin WE'RE SURE THAT YOU'LL LOVE US!

We invite you to ask questions, share experiences, and learn. It's 100% free. Did we mention that it's free. It is. It's free. Join 91603 other members! Anybody can ask, anybody can answer. Consistently helpful members with best answers are invited to staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.

Try What the Tech -- It's free!


Photo

Registry repair/still having issues [Solved]


  • This topic is locked This topic is locked
132 replies to this topic

#121 Tomk

Tomk

    Beguilement Monitor

  • Classroom Admin
  • 20,134 posts

Posted 08 February 2014 - 09:45 PM

Ok... let's try this in stages.

 

Go back into your disk management.  Select the first drive - the little one that says EISA configuration.   Start like your going to change it's drive letter but instead of clicking change click remove.  Hopefully this will free up G:  Then try changing (new volume) to G:  if g: still doesn't appear in the drop down, then try restarting your computer and go back in and look again.

 

Let me know.


Tomk
------------------------------------------------------------

mvplogo1_zpsea7gtc7e.gif


WTT-Grad1.jpg

Topics are closed after 5 days without response
unite_blue_zpsbfd3cd98.png

    Advertisements

Register to Remove


#122 btbenoit

btbenoit

    Authentic Member

  • Authentic Member
  • PipPip
  • 95 posts

Posted 08 February 2014 - 10:01 PM

When I right click on that drive, it only gives me a help option. No change drive letter, or remove?


Edited by btbenoit, 08 February 2014 - 10:06 PM.


#123 Tomk

Tomk

    Beguilement Monitor

  • Classroom Admin
  • 20,134 posts

Posted 08 February 2014 - 10:22 PM

Well... then let's try the other one.

 

Go back in and change (new volume) to drive I - unless you magically have the option to make it G:

Then change (recovery) to D:   Again, if D: doesn't appear... reboot and try again.


Tomk
------------------------------------------------------------

mvplogo1_zpsea7gtc7e.gif


WTT-Grad1.jpg

Topics are closed after 5 days without response
unite_blue_zpsbfd3cd98.png


#124 btbenoit

btbenoit

    Authentic Member

  • Authentic Member
  • PipPip
  • 95 posts

Posted 09 February 2014 - 07:38 AM

I changed new volume to I: Recovery is changed to D:, But now the small drive (EISA configuration) is G: and it doesn't let me change its drive letter.



#125 Tomk

Tomk

    Beguilement Monitor

  • Classroom Admin
  • 20,134 posts

Posted 09 February 2014 - 01:56 PM

EISA configuration is a Dell partition that is supposed to be hidden and not take up any of the letters.  Research shows that running some emulation software and/or some partitioning utilities can "unhide" it and exhibit the behavior you're seeing.  Also, rootkits can corrupt the boot configuration and do the same thing.  I have been unable to find a solution other than sometimes when the emulation software is uninstalled, things return to normal.  Other times I can find that if the rootikit is removed, the partition again "hides'.

 

Even though some tools say that your Master Boot Record (MBR) may be infected, when I scanned it, it appeared clean and some tools say it is clean.  Kaspersky has been the program that has had greatest success in restoring the hidden partition to normal... but when we ran TDSSkiller, it did not give you the option of curing, which would "correct" the MBR.

 

My honest opinion, due to the fact that this has been an ongoing issue since at least November, and in each case there has been at least traces pointing to rootkits..., your best course of action would be to to a reformat of your main drive and reinstall your operating system.

 

Because you have a dell... you would need the Dell disk to do this - you would probably have to get this from Dell.  I understand the charge a nominal fee for this. 

 

You cannot use the full XP disk because your product key will only work with the Dell OEM disk.

 

You should be able to remove your new drive and leave as is... but you would lose anything on the main drive in the formatting process so you need to have a good backup before proceeding.

 

Anyhow, that's my best advice.  Other than that we could try TDSSkiller again and see if it will cure this time.  Or, and not my recommendation because of the possibility of a rootkit as the culprit, you can just point your shortcuts that are now looking for the G: drive to the I: drive.  You do this by right clicking on the shortcut and changing the G: in the target to I:.


Tomk
------------------------------------------------------------

mvplogo1_zpsea7gtc7e.gif


WTT-Grad1.jpg

Topics are closed after 5 days without response
unite_blue_zpsbfd3cd98.png


#126 btbenoit

btbenoit

    Authentic Member

  • Authentic Member
  • PipPip
  • 95 posts

Posted 09 February 2014 - 02:07 PM

I'll try TDSSkiller again. If this doesnt work then I will change the shortcuts ti the I: drive. My PC has some age to it. If this will get me by for another year or two, then it will be time to replace. I'll post what TDSSkiller says.



#127 btbenoit

btbenoit

    Authentic Member

  • Authentic Member
  • PipPip
  • 95 posts

Posted 09 February 2014 - 02:25 PM

pic.JPG



#128 Tomk

Tomk

    Beguilement Monitor

  • Classroom Admin
  • 20,134 posts

Posted 09 February 2014 - 04:37 PM

when you click the little arrow beside skip... what other choices are you given?


Tomk
------------------------------------------------------------

mvplogo1_zpsea7gtc7e.gif


WTT-Grad1.jpg

Topics are closed after 5 days without response
unite_blue_zpsbfd3cd98.png


#129 btbenoit

btbenoit

    Authentic Member

  • Authentic Member
  • PipPip
  • 95 posts

Posted 09 February 2014 - 05:06 PM

Skip

Copy to quarantine

Delete



#130 Tomk

Tomk

    Beguilement Monitor

  • Classroom Admin
  • 20,134 posts

Posted 09 February 2014 - 05:43 PM

Neither are acceptable.  Either will render your machine unbootable.


Tomk
------------------------------------------------------------

mvplogo1_zpsea7gtc7e.gif


WTT-Grad1.jpg

Topics are closed after 5 days without response
unite_blue_zpsbfd3cd98.png

    Advertisements

Register to Remove


#131 btbenoit

btbenoit

    Authentic Member

  • Authentic Member
  • PipPip
  • 95 posts

Posted 14 February 2014 - 01:22 PM

TOMK. Thanks for all your help. My PC is running better than before.  I'm getting everything lined up to do a reformat in the near future.



#132 Tomk

Tomk

    Beguilement Monitor

  • Classroom Admin
  • 20,134 posts

Posted 14 February 2014 - 04:06 PM

I'm sorry I couldn't have given you better news... but I think you're making the right decision.

 

Good luck and be well. :adios:


Tomk
------------------------------------------------------------

mvplogo1_zpsea7gtc7e.gif


WTT-Grad1.jpg

Topics are closed after 5 days without response
unite_blue_zpsbfd3cd98.png


#133 Tomk

Tomk

    Beguilement Monitor

  • Classroom Admin
  • 20,134 posts

Posted 14 February 2014 - 04:06 PM

Since this issue appears to be resolved ... this Topic has been closed. Glad we could be of assistance.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please follow the instructions here http://forums.whatth...ed_t106388.html
and start a New Topic.

Tomk
------------------------------------------------------------

mvplogo1_zpsea7gtc7e.gif


WTT-Grad1.jpg

Topics are closed after 5 days without response
unite_blue_zpsbfd3cd98.png

Related Topics



0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users