Help with : Trojan Fake_rean virus locked up hard drive

Asus P4p800-e deluxe motherboard
March 30, 2012 at 10:29:32
Specs: Windows Vista, AMD Turion 64X2 1.90 Ghz 1983 MB RAM 32 Bit
Trojan-fakerean...
I've always had great results when I wrote for help so here I am again. I haven't written for help in a long time but this is a big problem for me. I have an HP Pavilion dv9628 notebook running Windows Vista. This notebook has TWO physical hard drives. My primary drive had Win. Vista and I used my secondary slave for the usual other stuff. I recently got hit with the (?) rogue trojan called fake-rean virus. I got infected so bad that even with Malwarebytes and AVG Antivirus which did find and removed most of the virus. But, I think it's obviously deeper infected to the registry. I eventually got locked out of the drive. I have since swaped my drives. Taking the secondary/slave drive and making it my primary/master and reinstalling a fresh installation of Windows Vista and putting which was my primary/master drive in the second bay, as the slave drive. Hoping that I may be able to access the now secondary/slave drive with the fresh Vista installation No luck... This drive shows total 298 GB which and still shows 210 free space. 88 GB are/were my Vista operating system and all other programs. How can I access and recover this drive. Only two items show up. The first item what looks like a registry string of number with an X86 folder and the second item is Bootsect.bak Bottom line, is there a way to access this drive so that I can at least save photos and other items or is my only option is to 'format'??
Thanks in advance for any advice. :o)

See More: Help with : Trojan Fake_rean virus locked up hard drive

Report •

#1
March 30, 2012 at 12:17:03

Report •

#2
March 30, 2012 at 13:23:48

Report •

#3
March 30, 2012 at 16:45:19
Thank you both for your fast replies :o) JohnW ...I just finished installing a new AVG on my new install of Vista and downloaded and ran MalwareBytes. I was surprised to see that MalwareBytes was able to read and scan the affected drive since there was no way I could get access to it. MalwareBytes found another trojan ( FakeAlert2012 ) in three files. they were quaranteed and deleted. I will check out the links you suggested to remove Fake Antiviruses and will post my results.
XPUser4Real ... thanks for your link to try and recover my files.. I remembered someone said to go to the 'Folder Options' in Control Panel and in View put a check to Show hidden files and folders. That worked ...I can now see my photos and what else is on the drive BUT in a faded ghost format. I will have to go to the links you both recommended and see if I can get something to help clean up the rest. I'll be out of the country for a week or so and will do my best to post back with my results as soon as possible.
Thanks again for the great feedback and taking time out to help . You guys are the best.
Jeannette xox

Report •

Related Solutions

#4
March 30, 2012 at 18:06:01
"I can now see my photos and what else is on the drive BUT in a faded ghost format"

Sounds like they have been marked as hidden but hopefuly will still be OK. You can block change them so that they are unhidden using the keyboard. We can explain further if needed.

Once they are all sorted out it would probably be best to set the system back to not show hidden files. Vista and Windows 7 have a knack of showing hidden desktop.ini files etc in normal working areas.

Always pop back and let us know the outcome - thanks


Report •

#5
April 7, 2012 at 07:08:30
I'm back for the follow up of my problem. JOHNW, thanks for the links..I went into the sites you suggested but with no luck to solve my problem. I've found my original hard drive that came with this laptop. It's a 30 Gb ...LOL... I know ... but with the original VISTA installation. I thought in booting up with the original, it may clear up the 'ghost' effect I have when opening the now ' slave' drive. No luck there either. since going to Folder Options and checking to Show Hidden Files, as mentioned above, I was able to see the drive then managed to 'copy' and make a backup of my Photos and documents to an external hard drive. In the external hard drive, they of course got copied with the ghost effect but at least, I have them. My plan now is to bring my laptop to an ITT tech. and have them reformat and install an upgrade to Windows 7 on the affected drive and start from scratch.
When clicking on my photos from the backup on the external drive, they do open up nice and clear. So I'm thinking that I may be able to resave them like the 'clear' image they opened with. DEREK, I tried blocking them all to see if there was an option to unlock the ghost image but I could not see the option. I know you mentioned that this is done on the keyboard but I have no idea where on the keyboard. xpUser4real, I kind of got scared off in trying something new for now, but I will try it now that I have a backup. :) All in all, I've taken up enough of your time and this problem and reply is getting too long for others to follow... so, I will say .. Thanks for the help in recovering and getting rid of the trojans with the advice of running AVG and MalwareBytes.... that, is what helped salvage my drive. Best to you.. Jeannette :o)

Report •

Ask Question