Solved

My windows 7 PC was hacked and someone installed the Linux OS

Posted on 2014-01-15
7
318 Views
Last Modified: 2014-01-16
Hi:

It appears that my desktop machine was somehow hacked last night.
It's a windows 7 machine.

I was working late last night. When I got up to work today, all that I saw
was the Linux Mint 16 desktop. I rebooted and it did not go through the
windows boot process.

A caveate here is that I did have the Linux Mint 16 iso in a folder on that machine.
In the last week, I was attempt to install a Linux VM through VirtualBox.

Was my entire windows data wiped out?
Trying to figure out how best to proceed here.


Thanks,
JohnB
0
Comment
Question by:jxbma
7 Comments
 
LVL 24

Expert Comment

by:aadih
Comment Utility
[In jest] A ghost, perhaps.  

Not even safe mode?

Do you see your files on the PC?
0
 
LVL 16

Expert Comment

by:Emmanuel Adebayo
Comment Utility
If you can log to the PC, check the boot.ini configuration and also you should see the windows direcory and you files on the hard disk.

You might just need to copy all your data if yu don't have the latest backup and reinstall Windows OS.

Regards
0
 
LVL 1

Author Comment

by:jxbma
Comment Utility
I don't see anything at all referencing windows in the boot up process.
This logs me directly into the Linux desktop.
In the Linux file browser, all I see is "Linux folders".

Attempting to boot into safe mode brought me to the GNU GRUB  startup screen.
0
Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

 
LVL 24

Expert Comment

by:aadih
Comment Utility
Could you post a screen shot of the file browser window showing the folders in the main drive?
0
 
LVL 1

Author Comment

by:jxbma
Comment Utility
Can't get to internet from the Linux Box through browser.
As near as I can tell it looks like a standard Linux system.
0
 
LVL 50

Expert Comment

by:jcimarron
Comment Utility
jxbma--
Are you saying you cannot get to any Windows files, commands, etc?  
Can you get to a Windows command prompt?  If so type msconfig.exe. Enter.  Now you should be at System Configuration Utility.  The Boot tab may allow you to choose to make Windows the Default operating system assuming Windows is still on the PC.

If no help, do you have a backup of the system?
0
 
LVL 47

Accepted Solution

by:
dbrunton earned 500 total points
Comment Utility
At this stage you need to take the hard disk out of your machine and attach it to another computer, via USB is satisfactory.  Just as long as your hard disk is not the first one to boot.

Boot the computer and use it's flle explorer to see if it can see any Windows file system on your disk.  If it can then pull all your data off it immediately.

If it can't then you are in trouble.  And I'll presume that this has happened.

In which case try GetDataBack http://www.runtime.org/data-recovery-software.htm  Get the NTFS version and make sure it is the demo one.  Install it on this computer and run it over your disk and see what it makes of it and whether it can recover any data.  If it can then pay the money for full functionality.

Also look at Active @ Partition Recovery software http://www.partition-recovery.com/  Again free to try.  If it sees stuff pay for full functionality.
0

Featured Post

Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

Users of Windows 10 Professional can disable automatic reboots using the policy editor. This tool is not included in the Windows home edition. But don't worry! Follow the instructions below to install (a Win7) policy editor on your Windows 10 Home e…
Recently, I read that Microsoft has analysed statistics for their security intelligence report. It revealed: still, the clear majority of windows users do their daily work as administrator. An administrative account is a burden, security-wise. My ar…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now