I'm trying to determine if any software products will allow me to recover thousands of files. Some malware somehow corrupted the files by keeping the filenames the same, but they show as zero bytes in size. If they were simply deleted, I could undelete them, but they do exist, so it doesn't seem like I can do that. I'm not sure what was done to the raw data on disk or which clusters were changed to make the file appear as zero bytes. The damaged happened over an 18 minute period, but due to the number of affected files, I don't think it overwrote all the raw data, because I don't think it would have had time.
Does anyone have any ideas on where I should start and how I might determine if the file contents can still be found on the disk?
I've run the disks through various programs and can look at the hex of the files, but I'm not sure how to file the file chains, etc. Many of the files are images and videos, but some are text files that I know the contents of (since they are standard configuration files) that I could use to verify if the data is still there.
If this is the wrong forum, please direct me to the correct one.