From owner-freebsd-questions@FreeBSD.ORG Wed Dec 6 21:50:14 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id C291416A49E for ; Wed, 6 Dec 2006 21:50:14 +0000 (UTC) (envelope-from david.robillard@gmail.com) Received: from ug-out-1314.google.com (ug-out-1314.google.com [66.249.92.168]) by mx1.FreeBSD.org (Postfix) with ESMTP id 60CC143D64 for ; Wed, 6 Dec 2006 21:18:07 +0000 (GMT) (envelope-from david.robillard@gmail.com) Received: by ug-out-1314.google.com with SMTP id o2so241293uge for ; Wed, 06 Dec 2006 13:18:54 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=GziSlo8N2emc2z3+4JfBzzzXpHJHhqXpvsYF7vfSzrKbYfnvTgYeBy7dG3ULE8Lp7GxNytSMvcu6r9S2YfET3ON0K0h6ecLg+EVmspVyn/3tb7n0UTuRxYsXBfESwuKNXkMVV91smsiae7m/o7ywd81MiFCTrDAyWwkA8t18skE= Received: by 10.67.97.18 with SMTP id z18mr1576086ugl.1165439933554; Wed, 06 Dec 2006 13:18:53 -0800 (PST) Received: by 10.67.105.15 with HTTP; Wed, 6 Dec 2006 13:18:53 -0800 (PST) Message-ID: <226ae0c60612061318o210aa4cbq88aa9b610426562b@mail.gmail.com> Date: Wed, 6 Dec 2006 16:18:53 -0500 From: "David Robillard" To: "Erik Norgaard" In-Reply-To: <45772ECE.6040000@locolomo.org> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <226ae0c60612061231i3f5a93actc6645034be5783b@mail.gmail.com> <45772ECE.6040000@locolomo.org> Cc: FreeBSD Questions Subject: Re: Which live CD for recovery X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Dec 2006 21:50:14 -0000 On 12/6/06, Erik Norgaard wrote: > > Do you have a USB drive? Can you mount it on the crippled Windows Box? > > If so, then I would suggest that you backup the user's data, format > > the crippled box's disk drive and do a clean Windows install. After > > all, there probably was a virus on this box. Are you sure you want to > > take chances? > > Well, the system won't boot, not even in safemode, so there is no such > alternative. I hope this is just some systemfile in the vault of AVG > anti virus. > > Take the chance... well it can't get much worse. If at least the system > gets back working then I can try other ways to clean it. If you can get the machine to mount the USB drive or have it's network connection online, you can simply backup the contents of "C:\Documents and Settings\All Users" "C:\Documents and Settings\${username}" (replace ${username} with the various usernames configured on the crippled box). Once you backup the content of those two directories, you should have all of your user's data. Therefore you should be ok to wipe the disk and perform a clean Windows install. I suggest, however, that you upload those backup onto another Windows machine and have your user double-check to see if you have everything. Better be safe than sorry. Cheers, David -- David Robillard UNIX systems administrator & Oracle DBA CISSP, RHCE & Sun Certified Security Administrator Montreal: +1 514 966 0122