All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 12 posts ] 
Author Message
 Post subject: An odd request from a user.
PostPosted: February 8th, 2017, 3:12 
Offline

Joined: September 24th, 2014, 15:11
Posts: 107
Location: on the space
Hello.
I have a 1TB external HDD with Seagate brand and user said me that he lost some of files and folders because of malware. When I open the HDD then I just see the shortcuts of his files and folders but not the real file and folders. What happened to them? Some malware, hidden folders and create an infected shortcuts and...We scanned HDD via an Antivirus and now it is cleaned but what happened to files and folders?

Thank you.


Top
 Profile  
 
 Post subject: Re: An odd request from a user.
PostPosted: February 8th, 2017, 3:23 
Offline

Joined: July 30th, 2012, 3:37
Posts: 207
Location: Fairfield, CT USA
RansomeWare?

_________________
Recover My Flash Drive


Top
 Profile  
 
 Post subject: Re: An odd request from a user.
PostPosted: February 8th, 2017, 3:43 
Offline

Joined: September 24th, 2014, 15:11
Posts: 107
Location: on the space
jeremyb wrote:
RansomeWare?


I guess not. The RansomeWare encrypt files and folders but my problem is that just shortcut of files and folders exist not Encrypt version of them!!!


Top
 Profile  
 
 Post subject: Re: An odd request from a user.
PostPosted: February 8th, 2017, 8:23 
Offline

Joined: August 13th, 2016, 17:10
Posts: 42
Location: Vienna, Austria
Where do the shortcuts point to?


Top
 Profile  
 
 Post subject: Re: An odd request from a user.
PostPosted: February 8th, 2017, 8:40 
Offline

Joined: September 24th, 2014, 15:11
Posts: 107
Location: on the space
sourcerer wrote:
Where do the shortcuts point to?


They are 0 byte size.
But problem solved and no file deleted. In HDD, I just find some folders like "FOUND.000" and etc that files are there :)


Top
 Profile  
 
 Post subject: Re: An odd request from a user.
PostPosted: February 8th, 2017, 10:55 
Offline

Joined: August 18th, 2010, 17:35
Posts: 3057
Location: Massachusetts, USA
Somebody ran chkdsk on the drive. Lucky the files are still good.

_________________
Hard Drive and RAID Data Recovery Specialist in Massachusetts


Top
 Profile  
 
 Post subject: Re: An odd request from a user.
PostPosted: February 8th, 2017, 11:02 
Offline
User avatar

Joined: February 9th, 2009, 16:13
Posts: 1905
Location: Ontario, Canada
I wish Microsoft would delete chckdsk or, at the very least, make a backup/undo file of all changes made to the MFT.

_________________
Luke
RAID Data Recovery


Top
 Profile  
 
 Post subject: Re: An odd request from a user.
PostPosted: February 8th, 2017, 13:52 
Offline

Joined: August 18th, 2010, 17:35
Posts: 3057
Location: Massachusetts, USA
lcoughey wrote:
I wish Microsoft would delete chckdsk or, at the very least, make a backup/undo file of all changes made to the MFT.

That would be the best thing ever.

_________________
Hard Drive and RAID Data Recovery Specialist in Massachusetts


Top
 Profile  
 
 Post subject: Re: An odd request from a user.
PostPosted: February 13th, 2017, 12:55 
Offline
User avatar

Joined: August 9th, 2007, 8:40
Posts: 703
Location: United Kingdom
labtech wrote:
lcoughey wrote:
I wish Microsoft would delete chckdsk or, at the very least, make a backup/undo file of all changes made to the MFT.

That would be the best thing ever.


Agreed, ... and it could also do with having some kind of timeout followed by a warning when it is taking longer than expected to check a block.

_________________
<itch>
скратчи
If you can keep your head when all about you are losing theirs, you probably don't fully understand the situation. ... Mr Kipling


Top
 Profile  
 
 Post subject: Re: An odd request from a user.
PostPosted: February 13th, 2017, 23:28 
Offline

Joined: September 24th, 2014, 15:11
Posts: 107
Location: on the space
lcoughey wrote:
I wish Microsoft would delete chckdsk or, at the very least, make a backup/undo file of all changes made to the MFT.

It is not a good tool?


Top
 Profile  
 
 Post subject: Re: An odd request from a user.
PostPosted: February 13th, 2017, 23:51 
Offline

Joined: March 19th, 2015, 15:01
Posts: 1258
Location: isreal
Definitely not


Top
 Profile  
 
 Post subject: Re: An odd request from a user.
PostPosted: February 14th, 2017, 11:56 
Offline

Joined: August 18th, 2010, 17:35
Posts: 3057
Location: Massachusetts, USA
hack3rcon wrote:
lcoughey wrote:
I wish Microsoft would delete chckdsk or, at the very least, make a backup/undo file of all changes made to the MFT.

It is not a good tool?

In general, for its real purpose, yes. However, people mistakenly use it in the wrong circumstances, where it causes more or complete file damage. It is effective in certain conditions only. As far as data recovery goes, not recommended, ever.

_________________
Hard Drive and RAID Data Recovery Specialist in Massachusetts


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 12 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 4 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group