Jump to content

Welcome to Beyond Windows 9 - Portal to the Future
Register now to gain access to all of our features. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more. If you already have an account, login here - otherwise create an account for free today!


Photo

Hijacked Harddrive

Drives Hijackers Computer repair

  • Please log in to reply
12 replies to this topic

#1
Clarence54

Clarence54

    Newbie

  • Members
  • 5 posts

 I have a friends computer that needed to be formatted and a new OS installed. One problem though, I cannot access a portion of the hard drive behind a partition labeled drive "Q". Access is denied no matter what. I have tried everyway I can think of and every "backdoor" I know about and nothing! Whatever it is has made it impossible to run Malwarebytes or CCleaner. MSE says the thing is clean. I removed two trojans with MSE but the problem persists. I have tried to run anti virus etc. but whatever it is won't let me. Should I put it out of it's misery or is there hope??? :banghead: Put your heads together, Has anyone ever encountered this phenomenon?? :3some:


  • Snuffy, frenchie and roady like this

#2
earthmaan1

earthmaan1

    Sr Member

  • BeyondWindows9 Lover
  • 107 posts

Have you just tried to write zero's and one's to the drive,,, also the Q partition may have a flag set to read only and a partition manager like

EaseUSPartition Master Free 11.0 should let you change the settings on Q
  • dave, Tetley, frenchie and 2 others like this

QepvPzNs.png

Earthmaan1 or EM1


#3
Dahaka

Dahaka

    Backup & HDD Tools Moderator

  • Moderator
  • 3,750 posts

Have you tried accessing it from Windows only?

 

1. It may be a Restoring-OEM partition.

 

2. From Windows some partitions may be hard to access - you may need a bootable tool that can be obtained from Aomei Partition Assistant - in it you have the option to make a bootable CD.

 

3. It may be a partition containing bad HDD sectors - but that implies physical defects - which would normally be easily spotted. 


  • dave, cognizione, Tetley and 4 others like this

#4
volvo

volvo

    Hero Member

  • Global Moderator
  • 1,371 posts

you need to format with a tool that does not read the drive content known as a low level format one well know is Active@ KillDisk free from here http://www.killdisk.com/wiper.htm

remember this will destroy all data on the drive and that data will not be recoverable you will then be able to install a new OS.

 

I would recommend becoming a BW9 VIP as all this information and more is available plus access to our top experts for all manner of information and help.

 

http://www.beyondwin...-subscriptions/


  • dave, cognizione, Tetley and 4 others like this

2cde6h5_zps6c93c367.png


#5
Clarence54

Clarence54

    Newbie

  • Members
  • 5 posts

Thanks guys. I have to go pull some weeds but I will let you know what happens. I have been messing with these things for a while and have never had a drive that I could not access. TTFN.


  • Snuffy, dave, Tetley and 3 others like this

#6
chenzen666

chenzen666

    BW9 STAFF

  • The Specialists
  • 869 posts

just a thought try RKILL from beeping computer then try to access it form windows


  • Snuffy, roady and earthmaan1 like this

1zpns61.png


#7
sjprg

sjprg

    GFX & Images Related Software Expert

  • Global Moderator
  • 1,810 posts
select control panel from ALL APPs-WINDOWS SYSTEM
RUN AS ADMINISTRATOR
type "DISKPART" at the command line.
type "help" follow instructions.
  • Snuffy, dave, roady and 1 other like this

Posted Image
Paul


#8
roady

roady

    General Help

  • Global Moderator
  • 3,198 posts

All roads lead to Rome..... :mrgreen:

If you have permission to wipe his drive,run a bootcd with a partition manager  and delete every partition of that drive,then the full capacity of your drive becomes 'unallocated space' and you can either format and partiton it with that bootcd,or install windows 1st on the full disk and either keep it that way,or resize and partition it afterwards to your preferations......


  • Snuffy, dave, cognizione and 3 others like this

nda92u.png

 

   Motto of the Malinois Shepherd : 'Semper fi.'till my death does us part.'


#9
hacktrix2006

hacktrix2006

    Hero Member

  • BW9 Donator +
  • 667 posts

Partition Labeled Q is normally a Office Click2Run Partition which is hidden normally it is also normally a Mounted Image file rather then a Partition on the hard disk.

 

 

So once you Wipe the Windows install it will wipe the Partition Image Labelled Q.


  • Snuffy, Maxed and roady like this

lhrPKEph.png
 
My Current Gaming System


MSI GT72 6QD: Intel i7 6700HQ, 32GB DDR4, 256GB Samsung nVME SM951, 2x 1TB SanDisk X400 M.2, 1TB Hitachi HDD, 1TB Seagate HDD @7200RPM, nVidia GTX970M 6GB, Realtek 898 ALC with Nahimic and Dynaudio Speakers. Windows 10 Home OEM:DM upgrade to Windows 10 Pro (Legit). 230w PSU.


#10
>CyberGhosT

>CyberGhosT

    Sr Member

  • BW9 Donator +
  • 467 posts

Roady said what I had planned on posting :)  and what I would use is Macrium reflect.

Hacktrix is right that usually denotes Click2Run, but i have never seen a "valid" C2Run cause this kind of access issue.

Let us know how you solve this please.

PeAcE


  • Tetley and roady like this

Bar_022017.png

"Before we work on artificial intelligence why don't we do something about natural stupidity?."- Steve Polyak


#11
masmasa

masmasa

    Sr Member

  • BW9 Donator +
  • 156 posts

maybe

you can tray this http://knowledge.sea...US/FAQ/005929en


  • Snuffy, dave, cognizione and 2 others like this

39QVKKuV.png


#12
dave

dave

    Senior Administrator

  • Administrators
  • 12,993 posts

Yes that would work masmasa, BUT you'd prolly have better results when running commands from your Windows installer DVD/USB from boot, in which case simply using the advanced options might simply allow you to delete the unwanted partitions altogether, since nothing is in use or protected by the OS.

 

Live Boot is the way to go to solve this as many have stated previously.

 

Note: that some OEM's firmware or BIOS will protect their recovery partitions & in that case you hafta connect the HDD/SSD to another computer via USB adapter or with SATA connectors, but usually those partitions aren't given a drive letter in Windows view, but may still be seen in Disk Management.


  • Snuffy, volvo, masmasa and 6 others like this

l8Ea9q8f.png

Sorry, my 3,384 images hosted with Dropbox will no longer show.


#13
ComputerDoctor

ComputerDoctor

    Hero Member

  • Global Moderator
  • 3,718 posts

Could it be part of the drive's firmware?  I came across a drive that created a CD/DVD drive to hold optional installation/apps software, I think it was an old Toshiba out of a USB external.  I have also seen LG CD/DVD drives with firmware that held a program that started every time the drive was accessed.

http://www.msfn.org/...s-removal-tool/


  • volvo likes this

1zbfi1f.jpg



0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users