MultiDrive – free backup, clone & wipe disk utility from Atola Technology

Main » Forums home » Flash storage, SSD

All times are UTC - 5 hours [ DST ]



Post new topic Reply to topic  Page 1 of 1
  [ 12 posts ] 
  Print view Previous topic | Next topic 
Author Message
hack3rcon
 Post subject: An odd request from a user.
PostPosted: February 8th, 2017, 3:12 
Offline

Joined: September 24th, 2014, 15:11
Posts: 195
Location: on the space
Hello.
I have a 1TB external HDD with Seagate brand and user said me that he lost some of files and folders because of malware. When I open the HDD then I just see the shortcuts of his files and folders but not the real file and folders. What happened to them? Some malware, hidden folders and create an infected shortcuts and...We scanned HDD via an Antivirus and now it is cleaned but what happened to files and folders?

Thank you.
Top
 Profile  
 
jeremyb
 Post subject: Re: An odd request from a user.
PostPosted: February 8th, 2017, 3:23 
Offline

Joined: July 30th, 2012, 3:37
Posts: 314
Location: Fairfield, CT USA
RansomeWare?

_________________
Recover My Flash Drive
Top
 Profile  
 
hack3rcon
 Post subject: Re: An odd request from a user.
PostPosted: February 8th, 2017, 3:43 
Offline

Joined: September 24th, 2014, 15:11
Posts: 195
Location: on the space
jeremyb wrote:
RansomeWare?


I guess not. The RansomeWare encrypt files and folders but my problem is that just shortcut of files and folders exist not Encrypt version of them!!!
Top
 Profile  
 
sourcerer
 Post subject: Re: An odd request from a user.
PostPosted: February 8th, 2017, 8:23 
Offline

Joined: August 13th, 2016, 17:10
Posts: 205
Location: Vienna, Austria
Where do the shortcuts point to?
Top
 Profile  
 
hack3rcon
 Post subject: Re: An odd request from a user.
PostPosted: February 8th, 2017, 8:40 
Offline

Joined: September 24th, 2014, 15:11
Posts: 195
Location: on the space
sourcerer wrote:
Where do the shortcuts point to?


They are 0 byte size.
But problem solved and no file deleted. In HDD, I just find some folders like "FOUND.000" and etc that files are there :)
Top
 Profile  
 
labtech
 Post subject: Re: An odd request from a user.
PostPosted: February 8th, 2017, 10:55 
Offline

Joined: August 18th, 2010, 17:35
Posts: 3669
Location: Massachusetts, USA
Somebody ran chkdsk on the drive. Lucky the files are still good.

_________________
Hard Disk Drive (HDD), Solid State Drive (SSD, SATA, NVMe, etc), USB Flash Drive and RAID Data Recovery Specialist in Massachusetts
Top
 Profile  
 
lcoughey
 Post subject: Re: An odd request from a user.
PostPosted: February 8th, 2017, 11:02 
Offline
User avatar

Joined: February 9th, 2009, 16:13
Posts: 2575
Location: Ontario, Canada
I wish Microsoft would delete chckdsk or, at the very least, make a backup/undo file of all changes made to the MFT.

_________________
Luke
Recovery Force Data Recovery
Top
 Profile  
 
labtech
 Post subject: Re: An odd request from a user.
PostPosted: February 8th, 2017, 13:52 
Offline

Joined: August 18th, 2010, 17:35
Posts: 3669
Location: Massachusetts, USA
lcoughey wrote:
I wish Microsoft would delete chckdsk or, at the very least, make a backup/undo file of all changes made to the MFT.

That would be the best thing ever.

_________________
Hard Disk Drive (HDD), Solid State Drive (SSD, SATA, NVMe, etc), USB Flash Drive and RAID Data Recovery Specialist in Massachusetts
Top
 Profile  
 
scratchy
 Post subject: Re: An odd request from a user.
PostPosted: February 13th, 2017, 12:55 
Offline
User avatar

Joined: August 9th, 2007, 8:40
Posts: 791
Location: United Kingdom
labtech wrote:
lcoughey wrote:
I wish Microsoft would delete chckdsk or, at the very least, make a backup/undo file of all changes made to the MFT.

That would be the best thing ever.


Agreed, ... and it could also do with having some kind of timeout followed by a warning when it is taking longer than expected to check a block.

_________________
If you can keep your head when all about you are losing theirs, you probably don't fully understand the situation. ... Mr Kipling

https://www.mjm.co.uk/
Top
 Profile  
 
hack3rcon
 Post subject: Re: An odd request from a user.
PostPosted: February 13th, 2017, 23:28 
Offline

Joined: September 24th, 2014, 15:11
Posts: 195
Location: on the space
lcoughey wrote:
I wish Microsoft would delete chckdsk or, at the very least, make a backup/undo file of all changes made to the MFT.

It is not a good tool?
Top
 Profile  
 
jermy
 Post subject: Re: An odd request from a user.
PostPosted: February 13th, 2017, 23:51 
Offline

Joined: March 19th, 2015, 15:01
Posts: 1388
Location: isreal
Definitely not
Top
 Profile  
 
labtech
 Post subject: Re: An odd request from a user.
PostPosted: February 14th, 2017, 11:56 
Offline

Joined: August 18th, 2010, 17:35
Posts: 3669
Location: Massachusetts, USA
hack3rcon wrote:
lcoughey wrote:
I wish Microsoft would delete chckdsk or, at the very least, make a backup/undo file of all changes made to the MFT.

It is not a good tool?

In general, for its real purpose, yes. However, people mistakenly use it in the wrong circumstances, where it causes more or complete file damage. It is effective in certain conditions only. As far as data recovery goes, not recommended, ever.

_________________
Hard Disk Drive (HDD), Solid State Drive (SSD, SATA, NVMe, etc), USB Flash Drive and RAID Data Recovery Specialist in Massachusetts
Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  Page 1 of 1
  [ 12 posts ] 

Main » Forums home » Flash storage, SSD

All times are UTC - 5 hours [ DST ]

Who is online

Users browsing this forum: No registered users and 19 guests

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Switch to mobile style
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group