Tom's Guide | Tom's Hardware | Tom's Games
 |
 |
 |
I have got 8 GB USB Flash that my friend gave to me , that flash was infected with virus, we clean the virus , but when i plug the USB into PC , I see the Flash as letter I, but I can not see the files which are 7.5 GB in size (right click --> Properties),,,what should I in order to see those files,,,,,please see the result of the scan in the picture below
[code]http://img388.imageshack.us/my.php?image=clipboard01ed7.jpg[/code]
When AVG did sacn the name of files came like this : Found000,,,,etc
The files are probably corrupted now. On another note, are you sure a keylogger wasn't installed on your machine when you inserted the USB drive?
That's a new way to do it. If someone wanted to compromise a system, they could leave CDs or thumb drives throughout the place of business and wait for someone to put it in one of the PCs. It's called "Road Apple". That's when the victim comes to the exploit. The exploit isn't sent to the victim.
0 
>>are you sure a keylogger wasn't installed on your machine when you inserted the USB drive? <<
Yes I am sure it was not installed my Desktop.How can I be sure 100% that those files are corrupted ?
0
Did I understand you correctly that you can't see the files at all? Go to a command prompt and type I: press enter, then run dir/p and press enter. Does it list the files? What types of files were they and what did you use to try to open them so far?
0
When AVG did sacn the name of files came like this : Found000,,,,etc
Found.000 etc files & folders are impossible to recover. Read following thread.
http://www.computing.net/answers/wi...
i_Xp/VistaUser
0
>>Did I understand you correctly that you can't see the files at all? <<
Yes you did understand me correctly.>> type I: press enter, then run dir/p and press enter. Does <<
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.C:\Documents and Settings\ramadan>I:
I:\>dir/p
Volume in drive I has no label.
Volume Serial Number is 1181-AB1DDirectory of I:\
File Not Found
I:\>
0
According to that output there is nothing on that drive except an empty partition. The only other thing you can try is mount it on a Unix or Linux box. If you don't have one, you can try the Ultimate Boot CD or something similar.
As as said before, chances are that it's not recoverable.
0
They may be hidden and won't show in a DIR.
Try:
attrib /s i:\*.*
Files like foundxxx are usually chunks of files which 'got lost' on a corrupt drive. If anything gets recovered it will likely take many hours of gruelling work.
=====================================
If at first you don't succeed, you're about average.M2
0
>>According to that output there is nothing on that drive except an empty partition.<<
See the used size for the USB
http://img208.imageshack.us/my.php?...
0
>>attrib /s i:\*.*<<
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.C:\Documents and Settings\ramadan>I:
I:\>attrib /s i:\*.*
A I:\FOUND.000\FILE0000.CHK
A I:\FOUND.000\FILE0001.CHK
A I:\FOUND.000\FILE0002.CHK
A I:\FOUND.000\FILE0003.CHK
A I:\FOUND.000\FILE0004.CHK
!
!-------omitted
!
!
!
etc
0
Any idea how many files were there originaly?
=====================================
If at first you don't succeed, you're about average.M2
0
Try cd found.000 press enter
If it changes directories, run:
type file0000.chk | more press enter
0
>>type file0000.chk | more <<
I:\FOUND.000>type file0000.chk | more
.
"@^╊8╠8
A^⊕8..
"@^╊8╠8
A^⊕8
AA
d
-
A
w
ì
r
e
0
Real helpful. Probably beeped the speaker, too.
=====================================
If at first you don't succeed, you're about average.M2
0
That output means that the file was a binary and not just plain text. If you really want to continue to play with it, try to open it in other programs. The type command is the similar to opening it in Notepad.
0
You may have to reformat the usb inorder to even use it other eise it makes a nice key chain ;)
Things you don't want to hear your Network Administrator say:
1.Wow....that seemed fast.....
2.I cleaned up the root partition and now there's lots of free space.
3.What's this "any" key I'm
0  |
 |
 |
This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |
