How to collect my data from a disk that I suspect to contain a malware

I have experience several crashes the last 72 hours and I have to buy a new hard drive that I am using as an external drive to work from as a startup disk.
Once I install all my software back, how can I collect my data from a hard drive that I am suspecting to contain a malware. I previously use Bitdefender for mac and because I do not know which software is causing the problem, I just install Clamxav.
Please advise.

BitDefender was likely causing the problem.
Just plug it in and transfer the data. You'd have to install the malware for it to affect your Mac, but XProtect blocks all known malware from installing.

Similar Messages

How do I retrieve data from a HD that cannot be repaired with utility disk?

Hi,
I have a macbook pro 15 inch mid 2010. It has 4gb of ram and 500gb of storage. I recently upgraded to Mavericks OSX10.9,4.
First of all, when turning on my mac the screen just loads forever, hence it does not pick up the HD. It also displayed the circle with a line through icon once.
Upon noticing this, I tried to repair the disk but it said it was unable to. The other disks are ok but the MAC HD says it stopped repairing when I attempted to repair it.
Using single user mode (command + s): I tried this, but it continued to says the same i/o error code:
disk0s2: i/o error.n
0 [level 3] [facility com.apple.system.fs] [errtype IO] [IOType Read] [PBlkNum 57547320] [LBlkNum 67604]
0 [level 3] [facility com.apple.system.fs] [DevNode root_device] {mountPt /] [Path /private/var/db/dyld/dyld_shared_cache_x86_64]
And it kept going and going.
I'm afraid to try anything else. I have no Mac back up in time machine (I know) but I have an external. Is it possible to retrieve the data by wiping the external and using the utility disk to transfer to HD to the external? Is that what people call cloning? Is this physical damage/can i still recover the data/use it and section off the damaged parts and use the spare space?
Help would be appreciated!

i/o errors generally mean that a part of the disk cannot be read. That can prevent the disk mounting or prevent the entire disk being read after the error.
Disk Utility is not great at addressing issues like this & data recovery specialists are the safest (and most expensive) option for recovering data from a disk in this state.
As others have said it's critical to avoid any use of the disk since if it's a mechanical fault it could seize or finally give up functioning.
If you are intent on recovering 'on your own & on the cheap' you could look at ddrescue – it clones a disk by copying the data stream whilst ignoring errors from the source disk, the data on the second disk could be 'repairable' with additional tools.
http://www.gnu.org/software/ddrescue/ddrescue.html
TestDisk & Photorec are also good when used for the right fault.
http://www.cgsecurity.org
These are all *nix tools & require competence at the command line! Just installing can be too much for some non technical users.
You also need lots of spare disks to move data onto to run the tools.
Kappy, is CNET Downloads really a good recommendation? They have a habit of bundling other junk with third party app installers. Go straight to the vendors site would be my advice (using 'https' where available).

How can collect the data from laptop sound card and serial port at the same time?

I'm working on a project, I need to collect the data from laptop sound card, and also from serial port at the same time.
The attachments are my VIs for sound card and serial port communication, I'm wondering that can I combine these two VIs together? Or can I run these two VI at the same time?
Thank you!
Attachments:
AC_Radar_Receive.vi ‏46 KB
RadarAudioPlug.vi ‏774 KB

A smarter way is just to put all your code in the same VI.
Two parallel loops if rates are different.
Attachments:
RadarAudioPlug.vi ‏450 KB

How to recover lost data from a mac that was erased and locked using findmyiphone app

Hi,
My macbook pro was locked and erased using find my iphone app then it was recovered. I entered my pin and unlocked it. I then have the option to reinstall the OS on a new hard drive or my old one (which is blocked).
What do I do if i want to recover all of my old data?

Alas the answer is : NO
If you have an external HD, you may try tun run a recovery tool instlled on this external device searching for keystring "index.xml"
With a bit of luck, it will retrieve an old copy of your document.
I hope that this time you will understand that working the way you did is playing with matches.
Whe you work on a document already saved once, duplicate the document before opening it and check that both copies are OK.
This way you will have at least a copy containg the datas from the 25 first day.
During the working session, don't save with the name of the opened doc, save vert ten minutes with different names.
Doing that you will recover at least the copy which you opened.
Yvan KOENIG (VALLAURIS, France) jeudi 10 janvier 2011 21:27:19
iMac 21”5, i7, 2.8 GHz, 4 Gbytes, 1 Tbytes, mac OS X 10.6.8 and 10.7.2
My iDisk is : <http://public.me.com/koenigyvan>
Please : Search for questions similar to your own before submitting them to the community

How to read the data from a column that is in clob data type (but XMLdata)

Hi ,
I have a table XYZ which has a column RESPONSE_XML in clob datatype format.we can convert it to XMLTYPE(RESPONSE_XML) to read the data in XML format.
Now this is the DynamicXML schema file. Here I want to see all the COMMONNAME, ResourceDescribedby_VALUE into column_A, ResourceDescribedby_ResourceSpecCharacteristic_Name tags into column_B
How can I do that .. any suggestions please ..
Here is a sample XML:
<?xml version="1.0" encoding="WINDOWS-1252" ?>
_- <soap:Body>
- <SearchResourceResponse xmlns="http://www.google.com/google.xsd">
- <MessageElements xmlns:tns="http://www.www.google.com/google.xsd" xmlns="">
<MessageStatus>SUCCESS</MessageStatus>
- <MessageAddressing>
<from>gmail</from>
<to>Gmail SOAPTester</to>
<messageId>1234</messageId>
<action>SearchResource</action>
<transactionId>OR</transactionId>
<ServiceName>SearchResource</ServiceName>
<ServiceVersion>1.1</ServiceVersion>
</MessageAddressing>
</MessageElements>
-<SearchResponseDetails xmlns:tns="http://www.www.google.com/google.xsd" xmlns="">
- <SubNetwork>
- <Pipe xsi:type="icl:Trail" xmlns:icl="http://www.www.google.com/google.xsd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<CommonName>318-223-4675</CommonName>
<objectID>91535716980514105329</objectID>
<SourceSystem>MARS</SourceSystem>
- *<ResourceDescribedBy> <value>RDSSLA</value>* *<ResourceSpecCharacteristic> <name>*CentralOfficeCode</name>   </ResourceSpecCharacteristic>
</ResourceDescribedBy>
- <ResourceRelationship>
- <Resource xsi:type="icl:Trail">
- <ResourceDescribedBy> <value>001</value> - <ResourceSpecCharacteristic> <name>AssignLocationExternalFormat</name> </ResourceSpecCharacteristic>
</ResourceDescribedBy>
- <ResourceDescribedBy> <value>001</value> - <ResourceSpecCharacteristic> <name>PairVerticalExternalFormat</name> </ResourceSpecCharacteristic>
</ResourceDescribedBy>
- <ResourceDescribedBy> <value>001</value> - <ResourceSpecCharacteristic> <name>PairVerticalInternalFormat</name> </ResourceSpecCharacteristic>
</ResourceDescribedBy>
- <ResourceDescribedBy> <value>+</value> - <ResourceSpecCharacteristic> <name>PairVerticalSign</name> </ResourceSpecCharacteristic>
</ResourceDescribedBy>
- <ResourceDescribedBy> <value>RDSSLA</value> - <ResourceSpecCharacteristic> <name>CentralOfficeCode</name> </ResourceSpecCharacteristic>
</ResourceDescribedBy>
- <ResourceDescribedBy> <value>B</value>- <ResourceSpecCharacteristic> <name>EntityType</name> </ResourceSpecCharacteristic>
</ResourceDescribedBy>
- <ResourceType>FeederCircuit</ResourceType>
- <LogicalPhysicalResource>
- <PhysicalResource xsi:type="icl:PhysicalConnector">
<usageState>S</usageState>
- <ResourceDescribedBy> <value>25.392</value> - <ResourceSpecCharacteristic> <name>CableLength</name> </ResourceSpecCharacteristic>
</ResourceDescribedBy>
</PhysicalResource>
</LogicalPhysicalResource>
- <TerminationPoint xsi:type="icl:TrailTerminationPoint">
<CommonName>1000/34A</CommonName>
- </Resource>
</ResourceRelationship>
<lrStatus>W</lrStatus>
</Pipe>
</SubNetwork>
</SearchResponseDetails>

you don't appear to have posted valid XML, so I can't reproduce using your example, but you will need to look at something like this:
select xtab.common_name
from your_table yt
      ,xmltable('/SearchResourceResponse'
          passing xmltype(yt.response_xml)
          columns
              common_name varchar2(20) path 'SearchResponseDetails/CommonName'
      ) xtab
;

I connect my pendrive to macbook pro but it cannot detect and my important data is there in my pen drive so how can i collect this data from my pendrive?

i connect my externalpendrive to macbook pro but it cannot detect and my important data is there in my pen drive so how can i collect this data from my pendrive?

make sure that in your finder preferences you have it checked to show external drives on the desktop and in the sidebar of finder
you find these preferences by selecting the finder icon (blue square on the dock w/ smiley face on it) then click on the work "finder" at top left corner of computer screen then click on preferences then general and put check next to show these items on the desktop and put check next to external drives
now you should see it on the desktop if you still can't open the drive or access it, it may be in format the mac can't read or write to so that could be an issue.

How do i erase data from start up disk to make room for the os x maverick

how do i erase data from "the start up disk" to create room for the os x maverick

Freeing Up Space on The Hard Drive
1. See Lion/Mountain Lion/Mavericks' Storage Display.
2. You can remove data from your Home folder except for the /Home/Library/ folder.
3. Visit The XLab FAQs and read the FAQ on freeing up space on your hard drive.
4. Also see Freeing space on your Mac OS X startup disk.
5. See Where did my Disk Space go?.
6. See The Storage Display.
You must Empty the Trash in order to recover the space they occupied on the hard drive.
You should consider replacing the drive with a larger one. Check out OWC for drives, tutorials, and toolkits.
Try using OmniDiskSweeper 1.8 or GrandPerspective to search your drive for large files and where they are located.

How do i transfer data from one internal tabe to another.

Hi All,
         How do i transfer data from one internal tabe to another.
         Can i do it ebven if he tables are different in structure.
Please Advice.
Thanks in advance.

Hi Saket Tiwari,
I hope the earlier post by kashyap is good enough an answer. anywas in addition to it let me give a detailed
explanation of how you can populate an internal table.
1) Append data line by line.
     Syntax : APPEND [<wa> TO / INITIAL LINE TO] <itab>.
this appends new line to internal table <itab>.
2) Using COLLECT statement.
             COLLECT is another form of statement used for populating the internal tables. Generally COLLECT is used while inserting lines into an internal table with unique standard key. The syntax for COLLECT statement is as shown
     Syntax : COLLECT [<wa> INTO] <itab>.
3) Using INSERT statement
     Syntax INSERT [<wa> INTO / INITIAL LINE INTO] <itab> [index <idx>].
INSERT statement adds a line/work area to the internal table. You can specify the position at which the new line is to be added by using the INDEX clause with the INSERT statement.
Now coming to your request..
To append part or all of an internal table
     Syntax
              APPEND LINES OF <itab1> [FROM <n1>] [TO <n2>] TO <itab2>.
*     Note:
Without the FROM and TO options, this statement appends the entire table <itab1> to <itab2>.*
b) To insert part or all of an internal table into another internal table
     Syntax
          INSERT LINES OF <itab1> [FROM <n1>] [TO <n2>]
          INTO <itab2> [INDEX <idx>].
c) Using Move statement.
To copy entire contents of one table into another in one execution
     Syntax MOVE <itab1> To <itab2>.
               OR
          <itab1> = <itab2>.
but u hav to be careful because he contents of itab2 will eb overwritten on the execution of this statement.
These copy the contents of ITAB1 to ITAB2. Incase of internal tables with header line we have to use [] inorder to distinguish from work area. So, to copy contents of internal tables with header line the syntax becomes,
ITAB1[] = ITAB2[].
Coming to the letter part of your question, Yes, we can copy values between tables having different structures.
for this we use
                            MOVE-CORRESPONDING <itab1> TO <itab2>
    this executes the statement for their header lines. Searches for the sub-fields which occur both in itab1 and itab2 and then generates, for all relevant field pairs which correspond to the
        sub-fields ni , statements of the form MOVE itab1-ni TO itab2-ni. The other fields remain unchanged.
I hope the information provided has been of your help.
Reward if useful.
Regards,
Jose

How to recover data from failed drive that's part of mirrored raid

Hi Guys,
hope to get help from someone knowledgeable out there. I have a macpro and recently experienced a failed drive. I set up that failed drive as part of a mirrored raid, this set is not my primary drive and so my computer is stilling up and running but now am wondering how I access the data from the mirrored drive. Should the mirrored drive automatically mount on my desktop whereby I would be able to access the files? This is my first drive failure and I was under the impression having a mirror would duplicate my data and allow me to access it in situations like this. I'm a bit of novice in this area and not sure if the data is truly on the "mirror" or if there are things I need to do.
I launched disk utility and was able to see the mirrored drive and I selected "mount" drive but it would not mount; I then selected "verify" and got "unrecognizeable filesystem" Is this normal? Am I suppose do something to get access to the mirrored drive? Do I install a new drive in place of the failed drive and expect the raid to rebuild automatically whereby I then see the data?
Your help is much appreciated.

Even with a mirror, you still need a backup.
Along with Disk Utility, you still need 3rd party (TechTool Pro 5, Disk Warrior 4.1.1+).
And if you like to use RAID and esp mirror RAID, consider
http://www.softraid.com which is a step above (the pdf guide, manual you can download and they have a demo, so worth the read). SoftRAID can also import/convert an Apple RAID to its own format which has been known to recover drives and data.

How can i store data from a pc to TC

how can I backup data from a PC to TC

Get a suitable backup software..
Windows backup is of course useless. But you should already know that. It will not work on any version less than pro anyway.. due to MS deciding people with home versions should never use networks. ???
That is why there is one million and one third party backup software that do work with network drives. Look up reviews of what works well. for the price you want to pay and get it.. Drive Image was a popular one. I must have a copy somewhere I bought .. then changed to Mac..
There are plenty of free ones.. I do use macrium reflect.. does disk image only unless you pay the license.. but works super well.. particular for restore.. which people kind of forget.. the value of backup is how well does it restore.
Use ethernet if possible.
Note that mixing TM and data on the TC is not necessarily a great idea if you are also running Macs.

How can I migrate data from an old MBA to a new one without having access to the screen of the old one? The screen of the old MBA is damaged !

How can I migrate data from an old MBA to a new one without having access to the screen of the old one? The screen of the old MBA is damaged !

If your "older" MBA has a Thunderbolt port then it isn't that old. See Target Disk Mode about how it's used. Note that without a monitor you won't be able to tell from the screen when it has fully started, and if it succeeded in starting in TDM. If it did, then the hard drive should appear on the Desktop of your new computer. You can then access it to transfer your files. You can even use Migration Assistant or any backup utility to transfer data. Just don't try to transfer system files.

Raw Read Error Rate, Errors occurred while reading raw data from a disk

hi
when I turn my pavilion dv6 2170ee computer on screen shows below error.
system diognostics (F2) does not any work
and when my windows7 comming up this error was shown.
I install Hard Disk Sentinel software and this program shows below:
Failure Predicted - Attribute: 1 Raw Read Error Rate, Errors occurred while reading raw data from a disk. Indicate problem with the disk surface or the read/write heads.
There are 28 weak sectors found on the disk surface. They may be remapped any time in the later use of the disk.
26848 errors occured during data transfer. This may indicate problem of the device or with data/power cables. It is recommended to examine and replace the cables if possible.
Replace hard disk immediately.
how can I fix it?
may drive format (Fdisk) and renewing windows can fix it?
tanx and regards
Mohammad

Hello mohkhosh,
I see that you're getting an error indicating possible hard driver failure, that you have this message from 3 different sources. I will try to help you with this.
After reviewing everything you're looking at needing to replace the hard drive. I would suggest contacting support to see what they can do for you.
HP Technical Support, North America 1-800-474-6836. For all other regions click here.
Thank you for posting on the HP Forums.
I worked on behalf of HP.

How do I recover data from my dead hard drive?

How do I recover data from my dead hard drive?

Is it dead or corrupt? There are recovery programs out there, however if your HD is head, paying pros to do data recovery is VERY costly. Some have removed the platters and installed them in likewise drives that dont have head crashes, but torque tolerances are tight, and doing it right is a bit advanced and tricky for most. Ive done HD disk swaps 4 times and had success 3 of the 4 times. It requires cannibalizing another working HD. In the future remember the golden rule, 2 copies is 1, and one is NONE.
Its likely you could find a local computer repair station that can do it for you cheaply. HD dont really "die", they have fried SATA bus, or crashed HEADS........the platters DO demagnatize over long time due to heat and degauss of the data (poor storage, etc).........but in specific, a HARD DRIVE DOESNT DIE ,.........only the flying head mechanisms that read and write the data, and SATA / bus that feeds the data DIES,.......but the data (unless corrupt or magnetically corrupted) is THERE

Remove or free data from the disk space

Hi All,
How to remove or free data from the disk space. Considering most of the data in the directories are junk.
Is there any T-code from the appliaction layer or we have to do at operating system or database level.
Regards,
Jitender

Hi,
As far as i know we canot delete data from data files.But i think u can shrink the file.
But not suggestable.You can delete the juck or old data in the usr/trans/log/files.
Also delete the files in usr/sap/trans/eps/in.
Regards,
Vamshi.

How's to select data from structure data object?

Dear Guru,
If my data is kept in structure data object (not a table type). How can I select data from that kind of data object. Thank you.
Cheers,

Hi,
Data cannot be stored in structure.
Structure is just like a view , so its a medium with which you can create a view relevant to your needs.
The fields that we need together , we put in a structure.
Structure is a medium where we collect all our relevant fields.
we can include the structure in internal table so that we can actually store data , process data and retrieve data.
hope this helps.
thanx,
dhanashri.

How to collect my data from a disk that I suspect to contain a malware

Similar Messages

Maybe you are looking for