Clean Reinstall Windows 10 Laptop

My other thread has gotten way too long. I am going to do a clean reinstall of windows 10 in my dell xps laptop since that is what everyone says to do to be on the safe side. I have windows 10 pro on this laptop.


I know how to clean reinstall windows 10 as I done this few days ago on a windows 10 home desktop that is a very old desktop computer. I have the file in the usb stick where I downloaded the file off of the new cheap windows laptop I bought. I have two machines right now that are clean, windows 10 desktop and a cheap windows 11 laptop I bought recently.


Now this dell xps laptop, its windows 10 pro. I also have bitlocker enabled on it and also a windows password. Does bitlocker need to be turned off? Now I want to copy/paste files from my compromised laptop to an external hard drive. People have said to do this, make sure your computer is in safe mode. I only have one usb stick that is big enough to store these files i want to transfer, its about 15gb of files at the most. But that usb is the same usb where i'm holding the windows boot file. So I cannot use this right? My other usb sticks are either too small or failing as they are old usb flash drive.

 

Now I do have a 1TB external hard drive and also another 250gb ssd from an old laptop that I took out. This ssd can be put in an 2.5' inch enclosure. The issue with both of these drives is... I do not know if they are fully clean. I believe the 250gb ssd is clean though as I remember wiping it clean with the format. But with the 1TB external hard drive, I remember deleting everything but don't remember formatting it. It still might have files. Also I did remember giving this to a repair shop a while back when he helped me copy files from a broken laptop years ago into this one. So there is risk to it possibly being infected right? So best thing is to connect the 250gb ssd with enclosure to my windows 10 desktop and then format it? This would take a long time? I had formatted a 64gb usb flash drive recently and it took around 4 hours. I know there is quick format but read that isn't as clean. Then after doing this, go to my compromised computer and make sure I go to safe mode. Then transfer all the files from the compromised laptop to the 250gb ssd with enclosure and remove it. Then do a clean reinstall of windows 10 with the usb? The thing is I use windows 10 pro... so just choose that right?



I did thought about logging into a gmail account of mine on the compromised computer... then transfer all those files to the cloud. But the risk of this would be me typing my password on this computer. But then I thought after I do this, I could immediately log out of the account. Then use one of my other clean computers and log into the email and then immediately change the password... so that way if I was compromised, well that person wouldn't have the time to do something to my files on the cloud since I just changed the password. Would that work or not? This way it wouldn't require me to need a usb/external hard drive right and thus save me a lot of time in formatting the external hard drive? But since this is to be done in safe mode, it won't work since it has no internet right? I will be doing this whole clean install early tomorrow.



Thank you.

 

Bitlocker needs to be turned off if your going to reinstall it blocks any install or changes. Is it not possible for you to use the OEM install files to restore Windows 10 to the computer? If this was custom Windows 10 then you need to get all the drivers downloaded and BIOS update if you redo the setup. I wouldn't spend the extra to have a ext. SSD you should put that into the Laptop instead. Also as you said copy your files/data you created so you can restore them back to the correct saved location if you reinstall those software that used the saved files to run again. But move any personal/data created onto a ext. device so you have them in safe keeping and can copy them back if needed. You don't need to be in SafeMode to reinstall stand mode to wipe clean the HDD or SSD and reinstall again is what you want to do for clean and fresh O/S to run correctly without issues. If you OS is OEM install you should have a partition for it or USB/DVD OEM install to restore it. This part you didn't tell us more info on this spec and if it came factory Windows 20 or not?

 

Don't make me tap the sign:

 

https://www.tenforums.com/installat...indows-10-potentially-compromised-laptop.html

Wondering how long before tenforums acts on the ban circumventing activity.
https://www.tenforums.com/members/paulyjustin.html

 

What is the problem with you two? I am wanting now to clean reinstall my machine and asking legitimate questions like do I need to turn off bitlocker and other issues like how do I make sure my external hard drive is not infected before I plug into the machine.


Do you enjoy people getting screwed over or something? I have very important stuff on my computer so I want to make sure I will do it right. I already bought a new cheap laptop and bought kaspersky total because of this issue. I would pay a lot of money right now if I know a way to confirm my laptop was not infected etc. Or the correct way to do this without bringing any possible malware to the new clean reinstall laptop. You guys have no idea how desperate I am in my situation if these things are erased or something goes wrong here. I been on this since last week and haven't had any much sleep because of this.

 

Okay bitlocker needs to be turned off. I do not know what you mean by using the OEM install files to restore windows ten on my computer. I have never ever updated BIOS. Reason being I heard it can brick your computer if something goes wrong and if you don't have to do it, don't do it. I have an extra ssd with me right now that I believe is formatted. It also has an enclosure which I can connect to.


How do i copy my files/data though without risking infection? Use the extra ssd with enclosure right? But do I need to make sure the ssd is malware free before I do anything? So connect it to my windows ten desktop which I did a clean reinstall already to check it and format it? Someone mentioned before I transfer my files from the compromised laptop to the ssd enclosure, I need to make sure it is in safe mode so it would be safer. So it isn't?


I know how to do a clean reinstall as I did this few days ago on a old windows ten desktop already. My issue is moving the files from my laptop to an external hard drive before this process safely or as safe as possible. This is my main issue here. Also someone else on another forum told me if I cannot even run windows offline scan... there is a very good chance I won't even be able to boot into safe mode. So what happens if I can't get into safe mode? Again I am asking this questions because I don't want to be doing this...and then be stuck on not knowing what to do.


My os is windows ten home originally I believe. But when I had issues when i first got the laptop, I went to a guy who took a look at it and paid him a good amount of money to reinstall my system and he installed a copy of window ten pro to it. I do see the product key for that windows ten pro license to it on my computer when i go to settings etc.


Again my situation is bit complicated because I have files I want to move and not sure if its infected... but also I have bitlocker... which most people probably do not have installed here.

 

You've been given the answers you need to solve this problem. If you haven't used that external HDD with a known or suspected infected machine, then you shouldn't have an issue.

If you're desperate, then listen to what people are telling you to do! A clean install of an OS isn't a difficult thing to manage.

Scan it after you've moved the files to the external drive. If the files are infected, then you'll need to follow the remediation steps offered by the antivirus. That means you might lose files, but you'll gain not having an infected system.

Copy that key to a piece of paper. You'll need it after you reinstall Windows.

No your situation isn't complicated. You're making it complicated. Bitlocker is seldom used and only requires that you turn it off before attempting a clean install.

 

Hi. The ssd with enclosure that I have, I am pretty certain I did a clean reformat on it earlier this year. So that should be safe. Buf if unsure, how should I make sure its clean? Use my windows ten desktop which is clean to look at it? Do I need to format it?


Then use kaspersky total on the windows ten desktop to scan it right?


Do I need to go into safe mode before I transfer the files?

 

You can scan it or reformat it. If you want to make absolutely sure, reformat it.

Scan it from any computer other than the compromised one.

The reason everyone is telling you to boot into safe mode is that the malware service will not start. Viruses often install themselves as a service on your machine so that the problem application gets started every time you turn on your computer. When you boot in safe mode, Windows only starts the basic services needed to run the OS. I've read through your posts and you've complained about how slow your laptop is in doing basic tasks. Booting into safe mode should help with those issues. It has nothing to do with not moving infected files and more to do with making it easier to move the files. You'll still need to scan them.

Also, and this is probably the most important thing, you need to change your online behavior or this problem will continue to happen. Yeah, I know, the last thing you want to hear is a bunch of strangers nag you about what you do with your time. However, this problem is avoidable and preventable based on how you handle yourself. On your other thread, I suggested using Linux and virtual machines which would create a setup that makes problems like this orders of magnitude smaller. If you're a gambler, there's likely no stopping you from continuing to do that. Which means you need to do something different to prevent being exploited while doing what it is you like to do.

 

Okay at the moment, I have to download kaspersky total in my windows ten desktop. I only have it downloaded on the maybe compromised laptop only at the moment. I know I can use it in like 5 total machines. But after scanning the ssd with enclosure... if it finds nothing... there is no point of format or quick format right? Because that would take a very long time even if it is empty? I had did a format of a usb flash drive that was 64gb on a clean computer... and it took almost 4 hours. Is that normal? So doing this on a 250gb ssd would take like 16 hours?


Okay if I boot it from safe mode, that means the computer is entire free of any malware? But I can't go online though right? Because if so, couldn't I log into my gmail account without worrying about keyloggers and then upload my files to the cloud that way to not have to use an external hard drive? Or would that not work? I already scanned kaspersky so many times the last few days on the laptop, it has found 0 threats. But the windows full scan is what has me confused. Again it shows no current threats. But you close the program. Then reopen it.. it shows 0 current threats but then like 10,000+ threats. I will post a screenshot of what I mean by this.


I am very careful on my dell xps laptop. Whenever I download any file, I check it on my chromebook and ask others before I go to the site and download the file. Again these poker clients I have downloaded, I downloaded them years ago so it has nothing to do with that. The thing is lot of people here are not familiar with these sites so they say its malware which is not true. Now if you download sketchy poker sites... that is different story. But I don't download that. Yea I heard about VM with windows and linux. I always considered this. But then I figure since I use chromebook to web browse, that isn't a big issue. I get what you mean with this. Well I play online poker on these sites. Just log in and play. I don't download random fishy stuff etc. Again my concern is me going to that one site... I believe it triggered it. Also I know even when I don't do windows scan by myself manually, many times it runs itself in the background and when done it says it did a full scan. And anything I check it, its almost always no current threats. But I don't know why it keep showing that 10,000+ threats thing each time.

 

@Drew1 , I'm going to only respond to your posts in the other thread going forward and I'll address everything over there.

 

I am doing the clean reinstall of windows 10 pro right now. I wrote down my windows 10 pro product key and also turned off bitlocker.


I am trying to go into safe mode now. What is the most simple way to do this? I see the methods mentioned online and many people said those methods don't work or a method that use to work, isn't working anymore. I don't want to get stuck and not sure what to do.


The method that I saw on youtube was click on start menu and click restart and hold shift until a screen shows up and then follow those instructions which seem simple in the video. But recent comments said it either doesn't work or they had other issues. Can someone tell me what method right now works for this? Again I am starting the clean reinstall process now as I this is the method I have to do before the transfer of files to usb.

 

We've got a couple of ways to reboot into safe mode. I'm going to give you the three I'm aware of.

Method 1 - Using the Settings Menu

1. Open Settings by pressing Windows Key + X, select "Settings" from the menu
   
2. From the settings menu, select "Windows Update"
3. From there, select "Advanced Options"
4. Select "Recovery"
5. Select "Advanced Startup"
6. Click "Restart Now"
7. Windows will reboot and restart in a recovery mode (the screen will be blue)
8. You should see four options, select "Troubleshoot"
9. Select "Advanced Option"
10. Select "Startup Settings"
11. Click "Restart"
12. Windows will present a list of several options, you want option 4. Press the number 4 or F4
13. Windows will restart in safe mode

Method 2 - Using MSConfig

1. Open MSConfig by pressing the Windows Key + R, type msconfig.exe and press enter
2. The MSConfig dialog will open, select the "Boot" tab
   
3. Check the "Safeboot" box and select "Minimal" as the sub option
4. Click Apply, then OK
   
5. You'll get a prompt to restart Windows, click "Restart"
6. Windows will restart in safe mode

Method 3 - Using Powershell

1. Open Powershell by pressing the Windows Key + X, then the A key
2. Type the following command:
   bcdedit /set {current} safeboot minimal
3. Press enter
4. Type the following command:
   shutdown /r and press enter
   
5. Windows will restart in safe mode

That should about cover it.

 

Thanks. Step 2 worked. I'm in safe mode right now.


I then plugged my usb stick with some old files that I am trying to delete before I use this same usb into the maybe compromised laptop to transfer the files. For some reason, when I just try to delete all my files on this usb it did not delete all of them. It deleted like half my files only on the usb.


I get this message


This disk is write protected.


Remove the write protection or use another disk.


Then it shows a ton of files that I did encrypt with axcrypt a while back. So how do I wipe this usb clean? Do I need to actually download axcrypt on the desktop right now and then enter the password and need to encrypt each one of these files or something? I can't imagine this being the case? Could I right click on this usb drive and click format and then it would wipe everything clean? I did not thought this would been an issue just deleting all the files on the usb until I ran into this problem.

 

I tried to right click it and format and it shows it is write protected.

 

https://www.diskpart.com/windows-10/the-disk-is-write-protected-windows-10-8523.html

Solution 1: remove disk write protection using CMD
1. Hit Windows Key + X on your keyboard, and select Command Prompt (Admin) from the menu.

2. Type diskpart and press Enter.

3. Type list disk and press Enter.

4. Type select disk #(ex: Disk 1) to select the disk which is write protected and press Enter.

5. Type attributes disk clear readonly to change the disk’s properties so that it is no longer read-only and press Enter.

6. Type exit and press Enter twice to exit Diskpart and Command Prompt continuously. Re-plug your USB flash drive to check if the write protection error is solved.



I followed step one here. I typed in command prompt and right clicked it to run as admin. That is the same as selecting command prompt (admin) right?


After I did these steps, it doesn't work still. Still shows write protected.

 

Use a different drive. The steps to get around that are involved.

 

What do you mean use another drive? I don't have an extra flash drive with me at the moment. The only ones I do are too small or it contains that windows ten installation which I do not want to put there.


My other ssd enclosure for some reason doesn't recognize so I'm using this usb flash drive.


So that means I can't delete these files from the usb flash drive? Again I never thought I would come into this issue, because well if you delete files on your usb flash drive, it should be simple. Then I run into this.

 

If you can't remove the write protection then you can't use the drive anyway. Time to head down to Target, Office Depot, Staples, or Best buy and get another drive.

 

There is a way to remove the write protection, but like I said, it's involved and isn't 100% guaranteed to work.

 

Okay thanks. Looks like I can't do this until a day later now then. I have no idea why I cannot delete the files off of the usb flash drive. Did it involve me having encrypting files in it? I had these files there for a long time already in this usb flash drive. Because it seems like the files that are not deleted are encrypted... but those that were deleted were not.


Axcrypt is the program that is needed to encrypt/decrypt it. If i were to download axcrypt on the desktop and decrypt all these files, then I assume that would work? Would require me to download axcrypt on the windows ten desktop and then type in my very long password into it.
Or is this issue something with the flash drive?

 

If the thumb drive is encrypted, you'll need to decrypt it, or format it before using it. Man, you don't do anything the easy way, lol. As info, I usually don't use encryption unless I have data that is only intended for a specific party or I'm moving data physically between two points and there's a chance that it might get lost. Other than those two reasons, I can't think of a good reason to use it.

 

The reason why I have those files encrypted is I wanted to encrypt most or all of my documents. The thing is i used axcrypt to encrypt many files on this usb. However, I did not encrypt the usb drive directly. Does that make sense? I am pretty certain I didn't use bitlocker to encrypt my usb flash drive.


Another thing I noticed. The files that are still there, many of them seem to start with the letter E and before. Thus that would mean I had a ton of encrypted files that did get deleted. Example if name of file was called bom, it is still there. But say its moon, then that file got deleted. So that means this isn't an axcrypt issue right? The other thing is this flash drive isn't that good condition because many times when I connect it to computer, few times it either doesn't detect it... or ask to repair it. But earlier i would click on repair and then it says cannot because its write protected.



I tried the command prompt method below of undoing the write and that didn't work.




Then I went to command prompt to try to clean and clean all ... im sure you know this method right? Someone suggested this and then I get this message


The diskpark has encountered an error. The request could not be performed because of an I/O device error

 

Do you still need those files?

 

I get it, they're financial records. If it's just you living at your place or with your significant other, encryption serves no purpose. Encryption is used when you believe there is a reasonable chance the drive might fall into the wrong hands.

 

You mean the files currently on that usb flash drive that I"m trying to delete? If so... no I do not. That is why I'm trying to delete the files or format the usb but it doesn't work.

 

It won't format even using diskpart?

 

I tried three different ways.


Solution 1: remove disk write protection using CMD
1. Hit Windows Key + X on your keyboard, and select Command Prompt (Admin) from the menu.

2. Type diskpart and press Enter.

3. Type list disk and press Enter.

4. Type select disk #(ex: Disk 1) to select the disk which is write protected and press Enter.

5. Type attributes disk clear readonly to change the disk’s properties so that it is no longer read-only and press Enter.

6. Type exit and press Enter twice to exit Diskpart and Command Prompt continuously. Re-plug your USB flash drive to check if the write protection error is solved.


When I did this above, still can't delete the files nor format it because it shows write protected.



Second Method

Here's How:

1 Open either an elevated command prompt or a command prompt at boot for what you want to use.


You will not be able to run the clean or clean all command on the disk that Windows is installed on unless you do so in a command prompt at boot.


2 Type the diskpart command into the command prompt, and press Enter. (see screenshots below step 5)

3 Type the list disk command into the command prompt, and press Enter.

4 Type the command below into the command prompt, and press Enter.

select disk #

Substitute # in the command above with the actual disk number (ex: "3") of the disk you want to clean.

For example: select disk 3


5 Type the clean or clean all command you want to use into the command prompt, and press Enter.

The clean command will finish quickly since it only marks the data on the disk as deleted.

The clean all command will take about an hour per 320 GB to finish running since it performs a secure erase.


I get message

The diskpark has encountered an error. The request could not be performed because of an I/O device error



Third Method

Someone else suggested me another method of this below.

Press your Windows Key and type Create and format hard disk partitions and then hit Enter

Disk Management opens.


Locate the USB flash drive in the bottom pane of Disk Managment, delete the volume, then recreate it and format it.



The issue here is when I right click the usb flash drive in the disk drive... the option to delete is greyed out. I'm sure you know this method I"m talking about?

 

Is this from your desktop?

 

Yes. Its from the desktop that I did a clean reinstall of windows ten earlier this week.

 

Hey gumwars, want your opinion on this as I spend all day trying to wipe/format this usb flash drive without success. I believe axcrypt is the reason for this and I don't even want to bother with it.


I am not going to bother with this usb stick. I am going to log into one of my emails and then upload my files that way. But surely that way isn't that safe right since well i have to enter my password to the email and then upload those files?


My plan is to upload those files on the cloud and then log out. Then use my windows ten desktop clean computer and then immediate change my password. Thoughts on that?


Also what about going into safe mode with internet and doing this? Would that be better? If so, the method is safe mode with networking right? I know the three ways to back it up is flash drive, external hard drive and the cloud.


The big issue is a lot of the files I'm copying on this maybe compromised laptop... to a usb... many of these files are also encrypted with axcrypt. I don't want to cause a headache where I go buy another usb stick tomorrow and then I can't even format these files on the same usb drive later on due to the same thing that I done with my older usb stick.


So would you say this is better idea then? And how do you boot it with safe mode with networking? Will it make any difference? Will do this as soon as I get your opinion on this. Can't believe I spent all day on this step when I thought this would take me at most ten minutes to delete everything off the usb flash drive.

 

There's another method I would try.

Press the Windows key + X and then the A key. This will open powershell again.

Type this command: Format-Volume -DriveLetter L -FileSystem NTFS

Except where I typed " L" you'll put the drive letter where your USB is located. SUPER IMPORTANT! Double check to make sure you put the USB drive letter in that command. Press enter. That should format it.

 

I actually think the usb flash drive is FAT and not NTFS though... does that matter?


I did what you posted and get message in red like this




Format-Volume : Cannot perform the requested operation when the drive is read only
Activity ID: ( Bunch of numbers and letters)
At line: 1 char: 1
-Format-Volume - DriveLetter D - Filesystem NTFS

CategoryInfo: Not Specified: (StorageWMI: ROOT/Microsoft/ ...age/MSFT_Volume) {Format-Volume}, CimException


FullyQualifiedErrorID: StorageWMI 43006, Format-Volume

 

Jeezus.
Spend $10 and go buy a new drive if you can't figure out how to flip the tiny toggle on that thing.

 

There is no tiny toggle on that usb flash drive. What you going to say about that now?


Why don't you read my posts carefully? I am going to transfer files from my maybe compromised laptop to the usb... where most of these files are also encrypted with axcrypt. So later on if I want to format this same usb, I might have the same issue again like with this old usb flash drive which has these issues.

 

https://www.google.com/search?client=firefox-b-1-d&q=read+only

I read, and better yet, I understand, and even more to the point.....I think.

BTW a 64 gig thumb drive is $10 anywhere you look....yet you spend all day on it ?
Yes, I think....apparently I solo that condition.

 

If the files on your laptop are also encrypted, there may be not much that can be done.

The file format doesn't matter. What does matter is that whatever form of encryption you used is preventing you from performing the format operation. I would not use safe mode with networking. That doesn't enable your WiFi module, only the LAN connection. Here's my last stab at fixing this. If this doesn't work, go buy another thumb drive tomorrow:

All of these commands are going to be from the CMD prompt opened as ADMIN. You do that by hitting the windows key, type CMD, right click on it and select Run as Administrator.

1. Type diskpart
2. Type list disk
3. Observe which disk is the USB drive
4. Type select disk (enter the number of the USB drive)
5. Type attributes disk clear readonly

If you get a message stating "Disk attributes cleared successfully" it worked and you can then type select disk (your USB drive) then clean.

If it throws an error, you can take the drive into your backyard and destroy it with a hammer. Let this be a lesson to not encrypt thumb drives.

 

just type format into search, disk manager will open and show all drives.
right click the usb drive and choose format.

easy and non convoluted

 

He tried that already. It throws errors. I think whatever encryption he used is preventing the drive from being formatted. Like, it's one of those methods that the only solution is to unencrypt it, or smash it with a hammer. I think even if he booted into a liveusb with Linux and tried Gparted it still wouldn't work. He's probably going to need to get a new thumb drive if using diskpart doesn't work. Either that or forget backing anything up and just reinstall Windows and go from scratch.

 

That's why I always tell people encryption is useless. A virus can still mess your system up, it only slow down performance and makes it very tricky to recover your own data if you ever had to format.

 

It shows


Microsoft Diskpart version 10.0.19041.964

Volume - Manipulate volume attributes
Dsk - Manipulate disk attributes

 

You are the one that cannot read. You say you read everything that I mentioned yet your solution is just click on the drives and format it like it was so simple. I already did that and it didn't work. And then gumwars had to correct you as usual. If you read the three methods I already did, you wouldn't even have made that post.

 

Drew, when you type "list disk" it will show a list of all disks present. The command "select disk" requires that you enter a disk number at the end of it. Example would be "select disk 1". You'll need to use whichever number was assigned to your USB when you use that command. Once you've done that, then enter the command "attributes disk clear readonly". If that works, you'll be able to format the USB drive. If it doesn't work, you can either reinstall the encryption software and unencrypt the drive or purchase a new thumb drive.

As @Spartan@HIDevolution pointed out, encryption is not worthwhile at our use level. There are valid cases for it, but most domestic applications rarely rise to the need. I've only had a need to use it one time. I've played with it to test performance and penetration, but never as a means to secure financial or personal documents. What you're going through right now is one of the reasons it doesn't really work out. It turns out to be more a pain in the butt than anything.

 

Hi. I already typed disk 5 and that is what is displayed. So that means it doesn't work right? I typed that attributes disk clear readonly and those are the lines displayed after it.


I went to delete and format the usb and still it won't let me due to write protect.


Well I use encryption... axcrypt because I want to encrypt my documents. Many of these could be financial documents so that is why I do that. I saw no harm in doing it so I thought why not.


But are you saying I cannot use safe mode with networking because wifi does not work? I did not know this. If it matters my desktop uses one of those usb wifi adapters i bought a while back for wifi.


The only way for me to decrypt all these files on my maybe compromised laptop... would be type in my axcrypt password on it... then decrypt every file. Would you suggest this? The issue with this however, is I will most likely have to open my password manager on it up. The reason? I tried to open up axcrypt on my windows ten desktop earlier and for some reason couldn't get into my axcrypt account on it. I was manually typing the password but not sure why it doesn't work.


Would you suggest going into safe mode and doing this or would that not work? Again, I do not want to type in my password for the password manager in normal mode... because if I have any malware or keylogger, well it could pick it up. But does safe mode protect you from this though or not? I mean keyloggers, malware, trojan etc.


But could I decrypt files while on safemode?

 

I also want to make sure this is not an issue. When I do the clean reinstall of windows ten later on, surely there won't be any issue with me having files encrypted by axcrypt right similar to like this issue?


I can't possibly see this ever being the case but just want to make sure. Because since this happened with the usb flash drive... this would never happen with a clean reinstall of windows right? And yes... I did turned off bitlocker. I read if you have bitlocker turned on, then clean reinstall wouldn't work.

 

Wait until tomorrow and buy a new thumb drive. That's my recommendation.

Sent from my SM-G998U1 using Tapatalk

 

Gumwars. The issue with this is with a new usb flash drive, I will be transferring encrypted files to it. Majority of those files will be encrypted with axcrypt. Then I risk having the same issue with the current usb flash drive I"m having where I might not be be to format it. Does that make sense?


But it is certainly not safe to go into safe mode... and type in my password manager password to get into it right? Then go and copy/paste my axcrypt password into it axcrypt while in safe mode? Because I would then be able to decrypt all my files in axcrypt this way.


Again since this happened, I have not entered my password manager password in the maybe compromised laptop nor enter my email passwords into it.

 

Also is there a chance based on this... that its possible I locked the usb flash drive with bitlocker and this is the cause? The thing is if you encrypt a usb flash drive with bitlocker, you would need to enter a password or pin to access files right? Because all the times I used this usb with my maybe compromised laptop ... before it was potentially compromised, I transferred files and opened files from it with no issue. I never recalled once having to type in a password or pin. So that means there is no way this flash drive could be encrypted with bitlocker right? I had already turned off bitlocker earlier today before I went to safe mode.

 

Are you sure you didn't encrypt the entire drive? That's the only reason I can see why you can't format the thumb drive. An encrypted file wouldn't prevent that.

I gotta ask this again. Do you really need these files? The fact you've encrypted them and uninstalled the software needed to unencrypt the files leads me to believe you haven't touched this stuff in a while. Because the level of effort we are putting into this doesn't make sense if you only use this laptop to play online poker. All of this back and forth over safe mode has been to perform one simple task; move your necessary files from the infected machine to portable storage in a way that reduces the chance of spreading whatever has compromised your laptop. I see necessary being your outlook.pst file and any personal information (like family photos, journal entries, projects, etc.) you don't have copies of. Outside of that, financial records are very likely maintained by your bank, meaning you don't need a local copy. So, last time, do you really need these files?

Good.

Depending on how old the drive is, it is possible that we have a coincidental hardware failure that just has really bad timing. The problem here is I'm not physically with you and don't know what you've done to your stuff. I know that as this conversation progresses, additional details keep surfacing that tell me you've messed with stuff that you didn't have full knowledge of what the outcome could be. Using bitlocker and file encryption on the same stuff?? Dude, are you worried the NSA or GRU is after your blotter or something? I used to hold a TS with the DoD and encryption is used when needed, and then under a protocol that ensures the people who need to use the information or hardware have the tools to recover it. Layers of encryption do nothing to help you when you can't get the information or use the hardware. You'd have an identical outcome if you took the same files and thumb drive, doused it with gasoline, and set it ablaze. Still can't get the files or use the thumb drive, but at least you know you need a new thumb drive.

If you need some files protected, use 7zip and password protect the archive. Move it to an external HDD every 60 days or something. Encrypting files with no process leaves you in this kind of situation; we have a need to do something but can't because of this encryption.

Drew, my recommendation stands, get another thumb drive or external HDD, back up the files you absolutely need, and then reinstall Windows.