Data Recovery From Corrupted NTFS

Do you recovered your computer from a system crash and found that some information is missing? Has a system failure caused your hard drive inaccessible, and the operating system unable to load? Have you accidentally formatted or repartitioned your NTFS drive? Do you urgently need to recover as much data as it is still possible after a hard drive accident?
Now hard drives can store hundreds gigabytes of data in millions files A computer crash or a buggy application can cause data corruption at any time, which in turn means the entire hard drive may become inaccessible because of file system failure.
Everything is lost even if you cannot access your hard drive from Windows, or if your computer can not load the operating system. If you connect the crashed hard drive as secondary could not read the files or access the drive.
The NTFS file system totally corrupted and could not recover or read any data from the disk.

Now you can easily Recover the data from crashed disk from this free software for
Data recovery. Even if the disk is formatted, corrupted or not accessible by Operating system.
Download this free software from here
Install on the working computer, connect the corrupted disk a secondary.
The Get back NTFS software recovers all your data easily.
NTFS Data Recovery works with damaged NTFS volumes as well as with entire hard drives, including those that have been repartitioned and/or reformatted. NTFS Data Recovery does not use Windows to access data. It does not solely rely on information stored in the partition table, as it may be damaged. Instead, NTFS Data Recovery uses intelligent deep scanning of entire hard drive to locate, analyze and re-create damaged NTFS volumes, file system structures, and files.
Using NTFS Data Recovery is easy, safe and straightforward thanks to its recovery wizard that allows you to restore data from corrupted partitions, inaccessible or formatted hard drives. You don’t have to pay anything until you are completely sure you can get all your data back! The pre-recovery Live Preview allows you to see what you can and what you cannot recover before you pay. You can see the contents of lost, deleted or corrupted office documents, pictures and archives prior to actual recovery. Live Preview ensures successful data recovery and helps you restore the latest versions of your office documents.
You sure want to recover your documents, pictures and archives before anything else. NTFS Data Recovery allows you to recover what really matters by locating and recovering office documents, pictures, ZIP and RAR archives before the rest of your data.

How to remove Virus from USB Drives

One of the ways by which a virus can infect your PC is through USB/Pen drives. Common

viruses such as ’Ravmon’ , ‘New

Folder.exe’, ‘Orkut is banned’ etc are spreading through

USB drives. Most anti virus programs are unable to detect them and even if they do, in most cases they are unable to delete the file, only quarantine it. Here are the things which you can do if you want to remove such

viruses from your USB Drive

Whenever you plug a USB drive in your system, a window will appear similar to the one shown below

 

Don’t click on Ok , just choose ‘Cancel’. Open the Command Prompt by typing ‘cmd‘ in the run box. In the

command prompt type the drive letter: and press enter . Now type dir /w/a and press enter.

This will display a list of the files in the

pen drive. Check whether the following files are there or not

• Autorun.inf
• Ravmon.exe
• New 
  Folder.exe
• svchost.exe
• Heap41a
• or any other 
  exe file which may be suspicious.

If any of the above files are there, then probably the USB drive is infected. In

command prompt type attrib -r -a -s -h *.* and press enter. This will remove the Read Only, Archive, System and hidden file attribute from all the files. Now just delete the files using the command del filename. example del Ravmon.exe. Delete all the files that are suspicious. To be on a safer side, just scan the USB drive with an anti virus program to check whether it is free of virus or not. Now remove the drive and plug it again. In most of the cases, the real culprit turns out to be the “Autorun.inf” file which mostly gets executed when someone clicks Ok in the dialog window which appears above. Thus the infections can spread

Security Tip

Disable the Autoplay feature of

USB drives. If you disable the Autoplay feature of

USB drives, then there are lesser chances of

the virus spreading. A tool which can perform such a function is Tweak UI. Download it from here install it.

Run the program. Now you can disable the Autoplay feature of the removable drives as shown above. By following the above steps, you can keep your

USB drives clean.

How to fix error "NTLDR is Missing" in Windows XP

Sometimes we see our Windows XP computer can not boot anymore and the error message "NTLDR is Missing". This happens because it is missing or corrupt files of the following:

* NTLDR
* Ntdetect.com
* boot.ini

To overcome the error "NTLDR is Missing" can be done with the guidance provided by Microsoft. This way I have tried myself and prove it.


Microsoft : Generally there are 2 methods to resolve this NTLDR issue.

A. Manual File Re-Patching
This method attempts to copy and replace the corrupted file from the Windows Installation disc to your hard disk. To start, follow these steps:

1. Insert the Windows XP CD into your computer as default boot up media.
2. Enter Windows Recovery Console
3. At the command prompt, assuming drive D refers to your CD Drive, type in the following and hit Enter:
Press Y when prompted to overwrite any existing file.
* copy D:\i386\ntldr C:\
* copy D:\i386\ntdetect.com C:\
4. Restart the computer

If the error message still persist, it is likely that your boot.ini file is corrupted. Try to fix your corrupted boot.ini file instead. Follow the next step.

B. Manually Editing the Boot.ini File

1. Boot from your Windows XP CD in your computer
2. Enter Windows Recovery Console
3. Type in: type c:\Boot.ini
This command checks for a valid Boot.ini file. If your boot file is working fine, you should see like the following:

[boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS

[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS=”Microsoft Windows XP Professional” /fastdetect

4. If you receive the following error messages instead of the above message being displayed, your boot.ini file is corrupted or missing:
* The system cannot find the file or directory specified
* File not found – boot.ini
5. To write a new boot.ini file, follow these steps:
* Type in: edit.com
The MS-DOS editor will launch.
* Type in the following and save it as a boot.ini

[boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS

[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS=”Microsoft Windows XP Professional” /fastdetect

IMPORTANT: partition(1) refers to your first partition of your hard disk which Windows is typically installed on. You may need to change the value if Windows is installed in a different partition.

6. Reboot your computer and the problem should be resolved.

Tips Cleaning Stuxnet Virus : Hardisk Eaters

Stuxnet Virus or also known as Winsta, devouring all the vacant land on the hard disk until full. According to Alfons Tanujaya, antivirus analysts from Vaksincom, to detikINET, Friday (07/30/2010), Indonesia is the country with the second largest Stuxnet victims in the world after Iran.
The virus initially spread from various adult sites, pirated programs and content 'gray' other was quite disturbing. Here are the steps to eradicate the virus, as manifested by antivirus analysts Vaksincom Adi Saputra:

1. Using Dr. Web CureIt

Adi suggested that the victim Winsta Stuxnet alias to download a virus removal software. Removal Tools called Dr.Web CureIt can be downloaded from the site FreeDrWeb.com

2. Registry Fix

Then, Adi registry suggest improvements in Windows that has been modified by a virus. How, first of all, copy the script below into WordPad file.

[Version]
Signature="$Chicago$"
Provider=Vaksincom Oyee
[DefaultInstall]
AddReg=UnhookRegKey
DelReg=del

[UnhookRegKey]
HKCU, Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced, ShowSuperHidden,0x00010001,1
HKCU, Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced, SuperHidden,0x00010001,1
HKCU, Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced, HideFileExt,0x00010001,0
HKLM, SOFTWARE\CLASSES\batfile\shell\open\command,,,"""%1"" %*"
HKLM, SOFTWARE\CLASSES\comfile\shell\open\command,,,"""%1"" %*"
HKLM, SOFTWARE\CLASSES\exefile\shell\open\command,,,"""%1"" %*"
HKLM, SOFTWARE\CLASSES\piffile\shell\open\command,,,"""%1"" %*"
HKLM, SOFTWARE\CLASSES\regfile\shell\open\command,,,"regedit.exe "%1""
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell,0, "Explorer.exe"

[del]
HKLM, SYSTEM\CurrentControlSet\Services\MRxCls
HKLM, SYSTEM\CurrentControlSet\Services\MRxNet
HKLM, SYSTEM\ControlSet001\Services\MRxCls
HKLM, SYSTEM\ControlSet002\Services\MRxNet
HKLM, SYSTEM\CurrentControlSet\Services\Enum\Root\LEGACY_MRXClS
HKLM, SYSTEM\CurrentControlSet\Services\Enum\Root\LEGACY_MRXNET
HKLM, SYSTEM\ControlSet001\Services\Enum\Root\LEGACY_MRXClS
HKLM, SYSTEM\ControlSet002\Services\Enum\Root\LEGACY_MRXNET

Then, save the file with the name 'repair.inf'. Use the Save as type option to Text Document in order to avoid mistakes. Then, right click the file 'repair.inf', select 'Install' and restart the computer.

"Clean up temporary files, this in order to prevent the rest of the trojan is trying to become active again. Use tools such as ATF Cleaner or use the features of Windows that is the Disk Clean-Up," wrote Adi.

3. Emergency Solutions

In addition, the following is a script that can be used in emergencies to prevent re-infecting Winsta not. Save the following script with the name Winsta.bat (file type: Text)

@echo off
del /f c:\windows\system32\winsta.exe
rem rd c:\windows\system32\winsta.exe
md c:\windows\system32\winsta.exe
del /f c:\windows\system32\drivers\mrxnet.sys
rem rd c:\windows\system32\drivers\mrxnet.sys
md c:\windows\system32\drivers\mrxnet.sys
del /f c:\windows\system32\drivers\mrxcls.sys
rem rd c:\windows\system32\drivers\mrxcls.sys
md c:\windows\system32\drivers\mrxcls.sys
attrib +r +h +s c:\windows\system32\winsta.exe
attrib +r +h +s c:\windows\system32\drivers\mrxnet.sys
attrib +r +h +s c:\windows\system32\drivers\mrxnet.sys

Once completed, double-click the resulting file Winsta.bat. For optimal cleaning and prevent re-infection, re-use antivirus software that scans an updated and properly recognize this virus.

Hide Your Partitions ( C , D , E , F) for any 5

This trick is for all those guys whose wants to tons of data into their disks,We want to store some personal files or data which we don't to show anyone or access it This trick is for all those guys!!
Click start button>run type gpedit.msc, now move to user configuration >administrative templates > windows components > windows explorer, press
double click on "Hide these specified drives in My Computer" after following This steps properly You'll find another option "Prevent access to drives from My Computer" double click on dis option & change it accordingly.

To make it normal again click on "disable" by double clicking on "Hide
these specified drives in My Computer" option ..
Thats it ur done with it !!!! enjoy This trick