HDD GURU FORUMS
http://forum.hddguru.com/

An odd request from a user.
http://forum.hddguru.com/viewtopic.php?f=10&t=34957
Page 1 of 1

Author:  hack3rcon [ February 8th, 2017, 3:12 ]
Post subject:  An odd request from a user.

Hello.
I have a 1TB external HDD with Seagate brand and user said me that he lost some of files and folders because of malware. When I open the HDD then I just see the shortcuts of his files and folders but not the real file and folders. What happened to them? Some malware, hidden folders and create an infected shortcuts and...We scanned HDD via an Antivirus and now it is cleaned but what happened to files and folders?

Thank you.

Author:  jeremyb [ February 8th, 2017, 3:23 ]
Post subject:  Re: An odd request from a user.

RansomeWare?

Author:  hack3rcon [ February 8th, 2017, 3:43 ]
Post subject:  Re: An odd request from a user.

jeremyb wrote:
RansomeWare?


I guess not. The RansomeWare encrypt files and folders but my problem is that just shortcut of files and folders exist not Encrypt version of them!!!

Author:  sourcerer [ February 8th, 2017, 8:23 ]
Post subject:  Re: An odd request from a user.

Where do the shortcuts point to?

Author:  hack3rcon [ February 8th, 2017, 8:40 ]
Post subject:  Re: An odd request from a user.

sourcerer wrote:
Where do the shortcuts point to?


They are 0 byte size.
But problem solved and no file deleted. In HDD, I just find some folders like "FOUND.000" and etc that files are there :)

Author:  labtech [ February 8th, 2017, 10:55 ]
Post subject:  Re: An odd request from a user.

Somebody ran chkdsk on the drive. Lucky the files are still good.

Author:  lcoughey [ February 8th, 2017, 11:02 ]
Post subject:  Re: An odd request from a user.

I wish Microsoft would delete chckdsk or, at the very least, make a backup/undo file of all changes made to the MFT.

Author:  labtech [ February 8th, 2017, 13:52 ]
Post subject:  Re: An odd request from a user.

lcoughey wrote:
I wish Microsoft would delete chckdsk or, at the very least, make a backup/undo file of all changes made to the MFT.

That would be the best thing ever.

Author:  scratchy [ February 13th, 2017, 12:55 ]
Post subject:  Re: An odd request from a user.

labtech wrote:
lcoughey wrote:
I wish Microsoft would delete chckdsk or, at the very least, make a backup/undo file of all changes made to the MFT.

That would be the best thing ever.


Agreed, ... and it could also do with having some kind of timeout followed by a warning when it is taking longer than expected to check a block.

Author:  hack3rcon [ February 13th, 2017, 23:28 ]
Post subject:  Re: An odd request from a user.

lcoughey wrote:
I wish Microsoft would delete chckdsk or, at the very least, make a backup/undo file of all changes made to the MFT.

It is not a good tool?

Author:  jermy [ February 13th, 2017, 23:51 ]
Post subject:  Re: An odd request from a user.

Definitely not

Author:  labtech [ February 14th, 2017, 11:56 ]
Post subject:  Re: An odd request from a user.

hack3rcon wrote:
lcoughey wrote:
I wish Microsoft would delete chckdsk or, at the very least, make a backup/undo file of all changes made to the MFT.

It is not a good tool?

In general, for its real purpose, yes. However, people mistakenly use it in the wrong circumstances, where it causes more or complete file damage. It is effective in certain conditions only. As far as data recovery goes, not recommended, ever.

Page 1 of 1 All times are UTC - 5 hours [ DST ]
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
http://www.phpbb.com/