All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 3 posts ] 
Author Message
 Post subject: Recover zero sized files (malware)
PostPosted: September 24th, 2016, 11:34 
Offline

Joined: September 24th, 2016, 11:26
Posts: 1
Location: United States
Hello,

I'm trying to determine if any software products will allow me to recover thousands of files. Some malware somehow corrupted the files by keeping the filenames the same, but they show as zero bytes in size. If they were simply deleted, I could undelete them, but they do exist, so it doesn't seem like I can do that. I'm not sure what was done to the raw data on disk or which clusters were changed to make the file appear as zero bytes. The damaged happened over an 18 minute period, but due to the number of affected files, I don't think it overwrote all the raw data, because I don't think it would have had time.

Does anyone have any ideas on where I should start and how I might determine if the file contents can still be found on the disk?

I've run the disks through various programs and can look at the hex of the files, but I'm not sure how to file the file chains, etc. Many of the files are images and videos, but some are text files that I know the contents of (since they are standard configuration files) that I could use to verify if the data is still there.

If this is the wrong forum, please direct me to the correct one.

Thanks,
David


Top
 Profile  
 
 Post subject: Re: Recover zero sized files (malware)
PostPosted: December 7th, 2017, 8:35 
Offline

Joined: November 22nd, 2017, 21:47
Posts: 309
Location: France
Hello,
It's strange that you did not get any help. I hope that you've successfully solved this problem since then !
Otherwise, this topic covered a similar case :
viewtopic.php?f=10&t=34957
Apparently, running CHKDSK solved the problem in that particular case, but it should be used with great caution, as it's been said and repeated in that topic. Doing a full clone before proceeding is a wise safety measure.
I didn't quite understand what you meant when you wrote that you could “look at the hex of the files” using “various programs” (which ones ?), yet could not actually recover the files.


Top
 Profile  
 
 Post subject: Re: Recover zero sized files (malware)
PostPosted: December 16th, 2017, 18:27 
Offline
User avatar

Joined: August 9th, 2007, 8:40
Posts: 789
Location: United Kingdom
In windows, try shadow copies

_________________
If you can keep your head when all about you are losing theirs, you probably don't fully understand the situation. ... Mr Kipling

https://www.mjm.co.uk/


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 3 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 3 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group