All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 2 posts ] 
Author Message
 Post subject: Mexican MlourdesHReloaded virus (need to recover data)
PostPosted: June 9th, 2004, 11:07 
Hi

I received today a 80gb ntfs hard disk with all files and folders names untoutched, except that all of them have now 476 bytes in size, and the following string:

"Virus MlourdesHReloaded II ha atakdo esta computadora"
"Virus 100% Méxicano, no es muy peligroso que digamos"
"Pero tu has sido el rival más débil ¡Adios!"
"Saludos a Ana Paty de Sinaloa y a Gedzac Labs"
"Espero y se hallan pasado una feliz Navidad y un próspero año nuevo"
"Feliz 2004 para todos"
"Para mayor información enviar un e-mail a tips@esmas.com"
"donde hablamos de computación en tu idioma"
""
"*-Dime solo esta vez, que has pensado... solo esta vez -*"

I've checked and only pc-cilin makes reference to it as PE_WINDANG.B

In the link:

http://uk.trendmicro-europe.com/enterpr ... B#Solution

It is said that this virus will overwrite all files on the volume.

I found no way to restore my client data. I've tried the "standard" ways: Easy recovery, Getdataback, Media Tools, FinalData, Winhex raw Recovery"

Only Finaldata was capable of after 8 hours of cluster scan, retrieve some documents .DOC and .JPG. The client was an architect and had a lot of .3DS and .DWG files.

Also google searches return no more than a few links

Anyone have experience with this malware? Any chances of retrieving the data back?

Thanks to all of you,

-BR-


Top
  
 
 Post subject:
PostPosted: June 9th, 2004, 17:46 
Offline

Joined: May 28th, 2004, 18:09
Posts: 1
Give a try to

http://www.recovermyfiles.com/index.html

:idea:


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 2 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 23 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group