How to Get Data from a Computer with a Virus

Windows is a fine operating system (OS) that has many uses and is clearly the dominant OS on the computer market. Unfortunately, as many of us have experienced, it has also attracted a great many viruses and other corrupting software to it.

I have had the pleasure of helping out many friends that have had computers with viruses and other problems. Over time I have used many different ways to try to extract data and save one system or another. Through trial and error I have come up with certain procedures that have been very helpful.

Perhaps the most logical course of action when a system goes down is to first get the data off of there. Then, second, try to salvage the system. How does one extract data when a system is corrupt? Items that I have found to be particularly useful are a livecd and an external data storage device, namely a flash drive or an external cd burner. Let me explain.

The livecd has been around for many years, namely created in the Linux OS realm. Linux is a free operating system that has many different versions. Livecd versions of Linux are particularly helpful in this scenario. The livecd is an entire OS that is placed on a single cd. When the cd is placed in the computers cd-rom drive and the computer's bio's are set to start booting with the cd first (a very simple task if it isn't already set to do this), then the computer will run straight from the cd. The cd will run and display an entire OS without putting anything on the computer itself. Nothing is installed on the hard drive or saved.

The classic Linux livecd is Knoppix. Knoppix is a great livecd and is one I carry with me. Once I put this cd in, I can run the OS and check ALL the data on the hard drive without actually running the operating system on the hard drive. Many livecd's have anti-virus programs on them and can then be run to clear a virus or try to correct other problems. But, the first thing that I use the livecd for is to find the data, then select what external device to put the data on (either a flash drive plugged into a USB port or an external cd burner) and get the data off of the computer. This gives me the freedom to take my time and try various ways to salvage the OS on the hard drive, the one that has suffered the viral damage.

Windows is based on the NTFS file system. Occasionally (especially on older systems) Windows is based on the FAT file system. Linux, on the other hand, is based on the ext.2 or 3 file system. One good thing about Linux livecd's is that they can read ALL file systems. Although they cannot write on NTFS files, they can access them and are not typically limited by passwords.

However, there are NTFS based livecd's if one looks hard enough. Another livecd that I carry around is a product called BartPE. This livecd produces a Windows environment when it is booted. This allows the person using it to have read and write access on NTFS file systems.

Using livecd's and external data storage devices can be a very inexpensive way to retrieve data. Virtually all Linux livecd's are free. NTFS based livecd's must originate from a purchased Windows product, but are easy to create. External storage devices like flash drives and cd burners are extremely inexpensive, especially when they can salvage hundreds of dollars worth of computer equipment. In my opinion, these two items should be staples of every computer repair person's kit. Other computer repair ideas can be found here.