-
×InformationNeed Windows 11 help?Check documents on compatibility, FAQs, upgrade information and available fixes.
Windows 11 Support Center. -
-
×InformationNeed Windows 11 help?Check documents on compatibility, FAQs, upgrade information and available fixes.
Windows 11 Support Center. -
- HP Community
- Notebooks
- Notebook Operating System and Recovery
- Re: If i got massively virused from a time....will using rec...

Create an account on the HP Community to personalize your profile and ask a question
05-18-2017 12:12 PM
I will back up all media to an external for later check on updated antivirus after recovery...
How can i make factory or recover system files to point zero...
All i want is a sure os empty of viruses.
May the recovery partition include virsus?
What is the best method please help.
Solved! Go to Solution.
Accepted Solutions
05-18-2017 12:24 PM - edited 05-18-2017 12:26 PM
I don't know what "massively virused" means but there is no reason in principle the infection could not spread to the recovery partition, not to mention you could have a rootkit that would survive a factory recovery. The only sure safe way to restore after such an attack is to run a rootkit killer which clears everything out of the boot sector
https://www.sophos.com/en-us/products/free-tools/sophos-anti-rootkit.aspx
and then run a full low level format (zero fill) on the drive
and then a clean install of Windows or recovery from an HP recovery disk that was made before the computer was infected or is an HP factory branded recovery disk. This should provide near military-grade security from propogation of the infection to a new installation.
And I would run multiple antivirus and malware scans on that backed up data before putting it back on my new clean system.
If this is "the Answer" please click "Accept as Solution" to help others find it.
05-18-2017 12:24 PM - edited 05-18-2017 12:26 PM
I don't know what "massively virused" means but there is no reason in principle the infection could not spread to the recovery partition, not to mention you could have a rootkit that would survive a factory recovery. The only sure safe way to restore after such an attack is to run a rootkit killer which clears everything out of the boot sector
https://www.sophos.com/en-us/products/free-tools/sophos-anti-rootkit.aspx
and then run a full low level format (zero fill) on the drive
and then a clean install of Windows or recovery from an HP recovery disk that was made before the computer was infected or is an HP factory branded recovery disk. This should provide near military-grade security from propogation of the infection to a new installation.
And I would run multiple antivirus and malware scans on that backed up data before putting it back on my new clean system.
If this is "the Answer" please click "Accept as Solution" to help others find it.
05-18-2017 12:34 PM
Then you takes your chances. The computer nags you to make those backup and recovery DVDs for quite a while after the laptop is new. Most people don't or make them then lose them. This is one of those cases when you really need them. HP no longer has Windows 7 recovery disks available.
05-18-2017 12:40 PM
You never learn by the easy way...
If i remove the hdd after emptying the c drive...
Connect it external to another laptop with updated antivirus and run the toolkit also on it...
Do you think that will work?
Or dnt knw maybe install linux to a flash and boot from it and thus running those from it tho i think this method is useless since the antivirus will be downloaded on that drive which may be infected too...
05-18-2017 01:31 PM
Your ideas are actually pretty good but I think the rootkit scanner has to be run from the drive it is scanning. There are Linux tools which will do a complete zero fill on an external hard drive. In fact dban is itself a Linux program I think.
A complete zero fill will get rid of a rootkit so yes you can do it on the drive when connected externally to a different computer.