Switch to full style
Data recovery and disk repair questions and discussions related to old-fashioned SATA, SAS, SCSI, IDE, MFM hard drives - any type of storage device that has moving parts
Post a reply

Mr. Guddu Attack

May 12th, 2008, 7:39

Hi all,
Did you face ever the problem?
A worm deleted all files and folders at every drive. And then recreated folder again by using deleted folder name. Then at every folder a .TXT file left where written...

Just Kidding.

Sincerely yours,

Mr. Guddu
mr.guddu.bd@gmail.com


The file name is "Mr. Guddu.txt"

I recovered all files but recovered files are corrupted. Tried to repair using various fixing tools, no one work.
In this situation, what can I do?
Thank You
Rahad

Re: Mr. Guddu Attack

May 12th, 2008, 13:57

What's overwritten is gone. This is easily removable virus, but good antivirus software should have blocked it...

Re: Mr. Guddu Attack

May 12th, 2008, 16:07

All files are recovered with the existing size, existing name, existing extension. but problem is that files are encrypted.
I sent an email to mr.guddu.bd@gmail.com today. and waiting for his response(if he response)
Thank You

Re: Mr. Guddu Attack

May 12th, 2008, 16:12

The file contains technical specification of the worm "mr. guddu"
Attachments
Guddu Technical Specification.txt
(6.01 KiB) Downloaded 461 times

Re: Mr. Guddu Attack

May 12th, 2008, 16:47

rahad wrote:All files are recovered with the existing size, existing name, existing extension. but problem is that files are encrypted.
I sent an email to mr.guddu.bd@gmail.com today. and waiting for his response(if he response)
Thank You

Very cleverly! :)
Now he from you will ask money. That has infected you.

Classify a virus on bases of anti-virus programs and find a free-of-charge medicine.
Post a reply