lost all my data!!!!!!!

[Cochise]

Yes, that's the main lesson, but...
I haven't yet understood what's really happened. The drive failed exactly while I was exposed.
It's difficult to believe it's just a coincidence.
OK, I shouldn't have never been exposed, but...
I handled several HDDs year after year since 1995; It's unlikely I've done something coarsely wrong.
If I've done something wrong I'm still not aware about it.
I opened the chassis, inserted the 500GB unit, disconnected the power line from the 320GB unit and connected it to the new one cause the arrangement of the drives required this ( of course the machine was power off ), I connected another power plug to the 320GB unit and plugged the new drive with a SATA cable; then I closed the chassis and went to boot up.

Sorry, but what the fuck???
The machine was working fine before....



About the controller board: I guess it's useless to try to ask Seagate for a spare controller, or not?

[astroman]

makes no sense, here the drive is just 49 Euro - it's one of our largest online shops
you can still use it after recovery.

cheers, Tom

[braincell]

I have two of those. It was the same price.

[braincell]

Somethng strange here. When I click reply to this thread (and only this thread) I get this message from Haute Secure:

tiscali.it

Content from tiscali.it has been blocked because it may harm your computer. Haute Secure has found URLs on this site that resulted in attacks against unsuspecting users.


I'm thinking it is in the link astro posted but I don't get that message when I clicked the link. Anyone know what is going on?

[Cochise]

Tiscali.it is my ISP. I uploaded there the bouncing smilie linked in a previous post from mine.
I really don't know what's wrong with that... Is it infected????

Since some days I'm receiving alerts from my AV about this: MS02-039_SQL_SERVER_RESOLUTION_EXPLOIT

Trend Micro says about:
"This detection is not a detection for the vulnerability of your machine. If you got this warning, it is an indication that a malicious piece of code passed through your network or your machine, but was detected by Trend Micro as MS02-039_SQL_SERVER_RESOLUTION_EXPLOIT."

My PC-Cillin ain't updated, though...

[braincell]

Oh no it's bad. Did you remove it? I'm still getting the message. I think your ISP is infected with a virus. You should call them. MAybe they don't know about it.

[Cochise]

In my post about the data retrieving I wrote the cluster number where the FAT was found.
You should think this is kind of excessive details wealth, but that number has been imprinted in my brain:

When I retrieved the data, I launched the search and stayed in front of the screen for a long while. At around 1/3 of the scanning, the software pointed out that another logic drive was found. Wow!
But I wasn't sure yet my data were there and in good conditions.
I noted down the sector number and went out for a snack and a cigarette, waiting for the end of the scanning.
When I came back I was beside myself.
The screen was black; the system had gone in standby mode (I never tweaked the OS in my 2nd machine).
I took the mouse, then the user login screen appeared.
When I selected my account, a password field appeared. Password? I never set any password! I just want my data back now!
But leaving blank the field, the access was denied, denied and denied. And I was seriously tempted to take the hammer.

I had to shut down, boot up and rescan; I was lucky since my 6xt sense made me wrote down the sector number, and Drive Rescue has settings for initial and end sector when the scan begin.

I had to type that number several times cause Drive Rescue crashed several times, and every time the FAT had been re-found in order to access the data again...

[Cochise]

Oh no it's bad. Did you remove it? I'm still getting the message. I think your ISP is infected with a virus. You should call them. MAybe they don't know about it.

It's removed now.
I'll call them tomorrow. Unluckily isn't that easy to contact them through their call center.
Maybe better I send them an e-mail..

[braincell]

And the message is gone now. I hope nobody got infected from this. I had Firefox open to your last post and I noticed it just bombed after you removed it. Haute Secure is great! It clearly was from your emoticon.

I know what you mean about calling but I usually find that most emails to a company go right to the trash. People don't take emails as seriously as the phone for some reason. If a famous blogger posts about it they would pay attention though .

Recently I complained to my web host about the help section not including something important and my support said "I told them but they wouldn't listen to me!" That was funny. I guess nobody listens to anybody these days.

[Cochise]

makes no sense, here the drive is just 49 Euro - it's one of our largest online shops
you can still use it after recovery.

cheers, Tom

Yaeh, the price is almost that here too...

[Cochise]

... I hope nobody got infected from this... .

If my un-updated AV warns about it, it must be kind of an old threat.
Any AV should block it.... I hope...

[astroman]

...I had Firefox open to your last post and I noticed it just bombed after you removed it. Haute Secure is great! It clearly was from your emoticon...

don't be foolish - this was a network exploit directed against SQL Server 2000, anyone running this on his or her private box ?
It's kind of a poisened network packet that makes the server hickup and it's main purpose is to disturb it's regular operation.
the administrators at Tiscali for sure know their job better than you understand your own private network
no need to call them - they deal with hundreds of such attempts every day

cheers, Tom

[braincell]

We'll, if this is on their server then they are not doing their job and they should be reprimanded for sloppy and disgraceful management of their servers. This is the first exploit of this type I have seen on this site. Tiscali are horrible administrators.

I happen to run MySQL (fortunately not here), as do many many people. You don't have to be an expert administrator to know that exploits are bad. If this was on my machine, I would delete it.

[Cochise]

I'm starting to think they are anyway careless or... lazybones? at Tiscali, since are several days by then the warning flashes on my screen. But I didn't have yet pointed it out to them myself ( I'm gonna do ), so... .

I was thinking the threat was concerning internet accounts only, not the whole content from their site...
For sure I'm having a sorry figure cause of them.

I wish I should had been less lazybones; removing all the data shit from the disk full and backing up the latest hot data when it was time to do so, i should have completely solved the issue, now.
Though it was pure luck I've found the data still on that disk: I interrupted a low level formatting at almost 3 min. from the start, cause there was no more time: I'd to bring the unit to my brother within the next hour...
Don't know if I was really lazybones, however, or if it was kind of a mistake in planning the priorities...
For sure data management is boring to me

[Cochise]

Afaik recovery softwares take lot of time since they read raw data written on the LBA blocks without using any initial address. Since the software 'knows' the rules of the file system, it can rebuild files and directories structure even if allocation tables and their copies are damaged.

The second assertion above is most probably wrong.
Without any suitable FAT, is most likely that recovery softwares can just try to rebuild widely spread file types.

[braincell]

I just went to download some csound software from a tiscali site and haute secure totally blocked all access to that url. This rarely happens (usually it just blocks offending cookies). That makes me think there are some really evil things on that ISP.

[Cochise]

Just warned them about.

I've done it by e-mail, cause I've found out my contract with them provides I call a non charge free number in order to obtain kind of support not related to physical connection faults.

[braincell]

That is bad.

http://www.toucansucks.org.uk/saga.html

[Cochise]

I definitely suspect rival companies infest their severs.
Their service is pretty fair after all. Consider this is the third ISP I change.. I had the same kind of problem with Libero. They solved it once I pointed it out to them.
I'm looking forward too see how it will go with Tiscali, now.

Don't be so afraid for that however. Imagine if I was a programmer having my compiler infested
The most of the hacker/crackers that had big legal troubles do work now for the police and for the government though...

As well as for their diverted branches, I guess

[Cochise]

I'm going to make some backup on DVDs.
Sorry, I don't remember at the moment... How many years do optical supports are regarded reliable?
And HDDs?