Got a Toshiba C660-U25 laptop from a customer infected with the KLPD / Police / Ukash virus. Easy to fix ... right? No
Troubleshoot: Trial & Error
Customer attempted to restore a previous version of Windows himself, and than after 90 minutes of waiting (which is indeed too long) aborted the process. Result: totally messed up Windows (both F8 and F5 not working) and Windows constantly booting into DART mode.
Toshiba Harddisk Recovery
Not accessible from F8, and strange errors from at the command line while trying to run Toshiba HDD Recovery from within custom DART mode (by Toshiba). Toshiba Recovery failed too.
And no Toshiba Recovery disks So ... onto ...
Windows Manual Reinstall
Works of course, but Win7 64-bit OA Windows serial key is not working with my Win7 OEM installation disc ... that's a problem. Also while reinstalling ... it messed up the system partition of Toshiba, and without that particular partition the "Toshiba Recovery Media Creator" will not work either ... *sigh* wonderful. And recovery disks cost 36EUR.
D: drive contains images ...
of about 900MB each. Smells like a spanned recovery image. But swm files? Never heard of them!
What are SWM files?
. swm-files are splited wim-files, the Microsoft format for image files.
Can be unpacked with 7zip. However ... that won't install them. Different procedure for that!
Creating a WIM file
I followed the 2-stage process. There's also a solution to do everything in 1 command line, but I felt more comfortable using this particular solution (after backing up the files to an USB harddrive).
I was already in Windows trial modus, so I first decided to create the WIM file. To get started you need the tool 'imagex' which was hidden in ODDfiles/Tools. And then open up a command console (run as administrator) and execute "imagex /ref 10739XSP*.swm /export 10739XSP.swm 2 boot.wim"
That created a 11.5GB wim file.
Booting into Windows Recovery console
executed "imagex /apply boot.wim 1 d:"
d: in this case being the windows drive. Rebooted the system. Took too long. Booted into recovery console again, and ran "bootrec.exe /fixmbr" and now again seeing "setup is starting services". Hmz ... might need a clean install.
Sources used to compile this article
- F*CK !!! public_html/megla.txt – “hacked by megla akash from Team_CC” – TROUBLESHOOT - Saturday March 17th, 2018
- [NL] 7 redenen waarom ‘Bitcoin Mining’ via je Chrome Browser totaal kansloos is … - Friday March 16th, 2018
- My Virtual Office Space: *FEAST* Mode 2018 Update with Enterprise Graded Gear - Thursday March 1st, 2018
- My Projects Progress (ToDo List and Changelog): January 2018 - Tuesday January 2nd, 2018
- How to Prime Your Brain for Success While Washing Your Teeth - Saturday December 23rd, 2017
- John McAfee LIVE & Uncensored! Talking about lifehacking and CryptoCurrency (including Top 3 Privacy Coins for 2018) - Tuesday December 19th, 2017
- [NL] CryptoCurrency Uitdager Gezocht - Sunday December 17th, 2017
- [NL] Ben je ook failliet door een Bitcoin Opportunity Scam ? - Tuesday December 5th, 2017
- Rhyker’s Quick Benchmark Test Results of FREE WordPress Caching Plugins - Thursday November 2nd, 2017
- MoneyMakerGroup.com and TalkGold.com offline / got hacked, and not coming back ? - Tuesday September 19th, 2017
- Webmaster @ BestStiforpTeam.com
- Supporter @ AFP forum
Communities I have been 'hanging out' regularly over the past two decades.
- forum.VestaCP.com since 2016
- WordPress.org since 2015-12
- Warrior Forum since 2013-07
- forum.OSXLatitude.com since 2011-08
- Envato (i.e. CodeCanyon) since 2011-08
- TripAdvisor since 2010-09
- HardWare.info since 2003-08
- SynthForum.NL since 2001-11
- gathering.tweakers.net since 2000-11
picture coming soon!
Note: links go to my profile on those respective sites. Connect with me if you like.