Chicog Posted August 6, 2016 Share Posted August 6, 2016 Any of you who have recently downloaded Classic Shell need to be aware that some of their download sites were compromised, and the original files replaced with a malicious version that overwrites the MBR and possibly more. There is a complete thread about it here. http://www.classicshell.net/forum/viewtopic.php?f=12&t=6434 It is recoverable: Quote Hey all, to those affected by the malware, I just fixed my partition table on my compromised drive using this software:http://www.cgsecurity.org/wiki/TestDisk Restored my partition table completely with no issues. Did a quick scan and then added the found partition back and wrote it to disk. You will definitely want to rewrite the hard drive's MBR code with the Windows MBR code though. http://www.thewindowsclub.com/repair-ma ... br-windows Link to comment Share on other sites More sharing options...
JetsetBkk Posted August 8, 2016 Share Posted August 8, 2016 Damn! That was close. I just added Classic Shell to a new WIN10 install on a machine I put together last week. But, fortunately, I got it from ClassicShell.net/downloads. Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now