Over 1 million tech questions and answers.

How to recover damaged/corrupted files after virus attack

Q: How to recover damaged/corrupted files after virus attack

I have files (word,excel,jpeg etc) on SD Card which is attacked by a virus and all the files were made hidden by the virus. After cleaning the SD Card from virus and manually unhide the files, they are found to be damaged. How do I recover damaged/corrupted files (word,excel,jpeg etc) after virus attack?

Preferred Solution: How to recover damaged/corrupted files after virus attack

I recommend downloading and running DRP. It's a recovery tool that has been proven to recover files that most other programs have no luck with. I've even recovered files from freshly formatted or partitioned drives.

You can download it direct from this link http://goo.gl/v51TwD. (This link will automatically start a download of DRP that you can save to your computer.)

A: How to recover damaged/corrupted files after virus attack

I had the same thing happen to me before and i used a program called data recovery wizard pro, it recovered 95% of damaged and missing files but it cannot be installed onto the drive that u want to recover files from, there will be someone on here with more knowledge and maybe there might be a program on here for that? hope u get u files back.

Read other 1 answers

Hi All
I'm very glad to have found this site ; for all for sharing and helping.
Well please i'm faced to a malware that have crypted all files on my machine , any file word , excel or pdf is crypted as the picture below - Capture.JPG
I've installed Malwarebite , also kaspersky then i've formated my machine , but the files still corrupted. On internet i purchased office recovery also not give me my files as they were before.
Please help me 

A:How to recover files damaged by virus attack

Hello there,Did you saw any ransom note (instructions on how to recover your files) on your machine? What is their name? HELP_DECRYPT, DECRYPT_INSTRUCTION etc.?

Read other 8 answers


A:all Files corrupted after virus attack

Run the chkdsk /r command.

Read other 1 answers

How do you recover lost/damaged files from a damaged disk (external)?

I'm not sure if its just damaged or crammed way too full but it started when I plugged it into another computer at the front along with another hard drive which I've never done at that particular computer before but I thought it would be fine since I always plug in both at the back of my own computer.
At the other computer this disk disappeared and only the other one showed up. So I plugged out the other one and tried to make it show up. It didn't and when i plugged it out "Drive H:\ needs to be formatted" showed up" I just kept trying at all the usb ports to failure.
I tried to plug it in my computer and my laptop leading to the same result.

I'm talking about a "1TB FreeAgent GoFlex Seagate", image http://www.geek.com/wp-content/uploads/2010/06/seagate_goflex_review_05.jpg. I took the butt part out and installed it in my computer directly. I think that's when the chkdsk utility showed up after windows started. I let it run when it started up. it finally showed up! The files still worked. but it was still almost full so I bought a new hard drive to transfer the files to and then format the old one and start clean, or so to say.

I plugged in my new hard drive and tried to transfer some files. It transferred some, but others gave me a few errors in transferring. Then I tried to transfer it to my laptop. It can't transfer directly from one external ha... Read more

A:Recover lost/damaged files from damaged external disk?

Read other 16 answers

Where get effective a zip recovery software for corrupted archives? How to recover damaged ZIP files?

A:How to recover damaged ZIP files?

Sometimes faced with a situation where archiver refuses to unpack ZIP format tainted because of the internal structure. 
Similar trouble happens for a variety of reasons: the incorrect delivery by e-mail archive, incomplete (partial) file 
downloading from the Internet, copy data from corrupted media.
To repair a corrupt zip file you need a special zip repair tool, like
ZIP Recovery Toolbox. It read and extract files 
from archive on HDD. Later you can re-create archive again from a saved files.

Read other 19 answers

Windows XP

So I transfered about 250 pics and 10 vids from my camera to my computer, I put them in a seperate folder in MY PICTURES, about a month went by and I went to open them (to save them to a disc) and they wouldn't open. I had opened them numerous times before and there were still preview pics on the outside of the folder and those pics change if I rearrange the pics inside the folder. I searched for them with Picasa and my Computer Search, I looked in my Temp Internet folder and my temp folder. I did use a registery cleaner (Easy Cleaner) but I've used before with no problems. Also it is only a problem with the most recent pics, which where transfered from the camera...all my other pics were copied from a disc the computer.
While I was searching for them I found I could access previews of the pics in Microsoft Digital Image Editor but when I tried to open them they would give me a message saying "File Name to Short, File may have been damaged or corrupted". Also when I open the folder there are windows icon's where there were once pics and it gives the size and date last edited...all the last edited dates are the same and within one minute of each other.

Arggg, So to me that says they are here somewhere I just don't know how to bring them back.

Help Please

A:Damaged or Corrupted Pic and Vid files

Here's what I'm hoping happened. I'm going to say you don't have the show extensions for known filetypes checked in your folder options. I'm going to further say that somehow the extensions for your pictures in that folder where changed and now Windows does not recognize them as photos, or anything at all, but it knows something is there and so you still get the generic icon. I'm going to further speculate that the size reported for the files represented by the mysterious icons is roughly equivalent to the expected size of the individual photos and/or videos that have gone missing.

If none of the above is true you might be out of luck. So do you know what the extension of your photos was-is? I'll say they are .jpg for example, right click on one of the icons in the folder where you lost them and rename it to Myphoto.jpg and hit enter. Did it come back to life as a photo icon? If so, you're in business.

IF not, well you've searched already, searching some more is the only hope left I would think.

Good luck.

Read other 1 answers

Every time I start my computer now, none of the icons are on the desktop, the background it black, no programs or accessories are showing up on the start menu, and I'm getting a million dialogue boxes saying "Failed to save all the components for the file \System32\00002455. The file is corrupted or unreadable. This error may be cause by a PC Hardware problem." Is there a way to fix this and retrieve my files, or am I pretty much screwed?
I'm running on XP. I'd tell you further specifications, but my computer isn't letting me access that information.

The error messages read the same, except with different numbers, like 000066ed, 00007d3d, 0000385e, 0000217b, 00005eab, 00002d34, 000001a4, 00001321, 00000167, 00001f82, 0000613b, 00003e6d, 00000ce4, 00002e66, 00005d0c, 000029c3, 0000748e, 0000616d, 00002243, 00007a5d.
The numbers seem different every time. Every time I close the boxes, a bunch more pop up with the same message and different numbers.

Some other error messages are as follows:
"Critical error: Windows OS can't detect a free hard drive space. hard drive error"
"RAM memory reliability is extremely low. This problem may cause system failure"
"Hard drive clusters are partly damaged. Segment load failure"
"Critical Error: Hard drive critical error. Start a system diagnostics application to scan your hard drive for errors and performance problems."

A:Corrupted files/"damaged hard drive"

I'm having the exact same problem as you are.
Try this thread and it should help.
Can you access files through a usb?

Read other 1 answers

I have a DVD RW disc with photos burnt onto it.
When I open the file it shows all of the photo folders, along with default logo thumbnails as opposed to an actual thumbnail of the photo. When I click on properties of each photo it shows the size of the photo as well. But when I click to preview the photo it won't open and shows that the photo may be corrupted, damaged or unsupported.

I no longer have these photos on my hard drive, as may disc's before this one burned properly, so I deleted as I went.

DISC SIZE is 4.7GB, My files on it are 3.56GB


Read other answers

Recently I have had some big issues with my computer. The computer has gotten slow (especially in games and heavy softwares) and it has huge problems updating computer softwares and installing them. In many online games, my fps often drop under 10. Can outdated drivers cause this? I have tried to update my drivers (I have Intel Core I5 2500k and ATI HD Radeon 5700), but then the screen got all messed up so I had to do system restore.
I also feel like I have lost some administrational rights, since it often occur that I cant open folders "because I dont have the admin rights" and often have to manually open programs as an administrator.
When I install new programs, I often get error saying that the digital signatures could not be verified or that it is something wrong with the "integrity". I cant use the windows update, I get the 800B0001 error. I have tried running Microsoft FixIt, but then I also get an error saying that it could not be installed because there was something wrong with the intergrity.
I have scanned with antiviruses several times (AVG, Avast, Malwarebytes and Spybot S&D). I had some kind of PUP.Optional "adware" (I dont think its classified as adware). I have deleted it and all the files and registry keys with it. It seems that some of it may be left since I get redirected to "www.my-online-search.com" when I open new tabs in firefox.
I have tried running SFC /SCANNOW, where it found several damaged files but could not r... Read more

A:Huge problems with digital signatures/corrupted or damaged files etc. Help! :)

The best i can advise, try advanced systemcare.
do an advanced scan. check everything. 
also this may help
otherwise you can wait for someone else to respond

Read other 1 answers

Hey guys,

I did a virus scan on spybot search and destroy and AVG and managed to kill most of the damage but now the background is white and i cant access the desktop properties from the right click

But I noticed as soon as I log off my background that I tired to apply pops up

I just need to make sure that my computer is clean and advice on how to fix the damage made. Thanks you do a great job guys =].

A:Downstairs computer recovered from virus attack but windows is damaged


Read other 2 answers

so i had a hd go out on me. so i order a new 1.5 tb hd and install win 7 fresh on it. when i try to access my old hd it just states it has drive I with no info and ask to be formatted before used. i want to recover my old files off of it. I really need them.

A:i need to recover files from a corrupted hd

Zero Assumption Recovery (ZAR) might do it. If Windows will recognize the disk, which yours is, ZAR claims it can recover files off the disk. This includes deleted files. You can download it for free and try it out. It has a limitation of four folders it will recover until you purchase a license but that will give you chance to find out if the drive is recoverable. I've used it twice. Once on a camera module and once on a crashed disk. It worked pretty darn good and I was able to recover hundreds of photos and files. I think it paid for itself. On files that have had the index deleted or corrupted, it will assign the file a number id but that's better than loosing the file. It works from the inside out and walks the disk as it analyzes the data. It's worth a try.

Download critical data recovery software - computer data recovery with ZAR.

Read other 2 answers

While saving a microsort word document to memory stick using microsoft works the program started not responding and shutdown. The file i was trying to save it as was not created and the original file i was working on became corrupt and will not open. Would it be better to try and fix my corrupt file or would my I be able to recover the file I was saving too? What would be the best way of doing this?

To fix the corrupt file I have tried using Microsoft Text Recovery and that only returned 4000+ pages of code. The same thing happened while i previewed it in Docrepair. Are there any other ways of finding this file or is it completely lost.

Thanks for any help you can give me.


A:Corrupted Files, Fix or Recover?

the image on the flash drive is totally suspect and the last good doc was the original.

Try to recover it and SAVE AS another name.

Read other 3 answers

i had a malware attack -not sure i successfully removed it- and all files are corrupted, the trouble is that i didn't find any restore point saved, so is there any way to restore them.

A:How to recover my files after malware attack, without restore point

System Restore probably wouldn't be able to restore corrupted files themselves, may have to do a Factory Restore but check with Dell Support or any documentation you received about how to do that. If you made the Factory Restore set of discs when prompted during setup you can use them to put the computer back to its original/as-shipped condition. If the discs were not made you may be able to get them from Dell.
Support | Dell US

Read other 2 answers

Hi everyone!
Could someone inform software that are proven, can recover corrupted Office files.
Remembering that even using the Office 2013, could not correct them.
Grateful for the attention!

A:Corrupted files Office - How to recover them

Well...files which are corrupted are damaged...there is no guarantee or expectation that can undo that.
Typically, if the files are program or system files...the user can uninstall/reinstall the application or run the Windows tools which attempt to deal with file corruption.
If the files are data files used by a given program...IME, the only tool available that may work would be the chkdsk /r command.
Data-recovery software is pretty much designed to copy files which are otherwise inaccessible...it cannot repair corrupt/damaged files.  At best, it will copy those files to a new location.
I'm curious as to how you know that the files are damaged...and what type of files are they?

Read other 7 answers

I have xp SP3 and I just installed IE 8 RC1 after using IE 8 beta 2. Then I had a virus\worm that changed all my settings and deleted my system restore points.

I found a "old system backup" stored in Advanced System Optimiser that I was able to recover and use to get back up and working.

I have done multiple virus & malware scans and followed the threads on how to remove them, I believe my system is clean and all MS updates have been installed.

My system is 80- 90% restored but I have some programs on my desktop that no longer work because they were not installed at the time the backup was taken. All of the program files are still installed but I can't access the programs ( anti virus $ malware programs) useing the shortcuts or start menu.

I would just uninstall and reinstall but the programs don't show up in my Uninstaller.

I do have a recent back up saved to disk but I have recovered most of what I need without useing it. I am not sure how to restore just select Items with the backup.

What is the best way to get my programs working again.


A:How to recover programs after a virus attack

Depending on the program, you might be able to reinstall without uninstalling. That worked for me when I had a similar virus issue a while back.

Read other 1 answers

Hey guyz!
Due to a program failuer (partition magic) some of the data are corrupted and some are deleted. By using PC inspector i could get almost all of them back but still some are corrupted. for example some JPGs and WAVs which are so so important to me!
by any chance do you know any program which can revover CORRUPTED files rather than try to undelete them???

this topic helped me out a bit but no one had correct answer to my problem!

Ill appreciate your help.

A:DATA recovery! (recover corrupted files)


Read other 3 answers

i have a hard drive that suddenly went corupt. i didnt format it but did have to buy a new hard drive which i needed anyways for more storage and i reinstalled windows 7. when i pluged in the hard drive it comes up as a drive but asked to be formatted before in use. how can i recover my files off it. i have tried to use easeus data recovery wizard but it always stops and takes for every and wont complete. but i know my files are still on the drive.

Its is disk I

A:corrupted hard drive (trying to recover files)

Hello cbwhat, welcome to Seven Forums!

When the Hard Disk Drive is connected does it show up in Windows disk management and if so does it have a drive letter.

Read other 9 answers

On my family's oldest computer (a Dell Dimension 8200, running Windows XP), we have recently gotten an error message that reads as follows.

"WARNING: Dell?s Disk Monitoring System has detected that drive 0 on the primary EIDE controller is operating outside of normal specifications. It is advisable to immediately back up your data and replace your hard-disk drive by calling your support desk or Dell Computer Corporation.

Strike the F1 key to continue, F2 to run the setup utility."

Now, it says to back up the files immediately, but when I try and start up the computer, it takes forever but can get to the User Accounts screen (where you choose as whom you want to log in). When you select someone, it crashes and reboots. In my opinion, this computer is so out of date that we should just get rid of it, but my dad still thinks there are documents that he wants to save. I'm trying to just get the files off this machine and stored somewhere (on a different network computer or external hard drive on the network), but I can't access the files from anywhere.

I have the recovery console option or safe mode, but I have never used either of these, so I don't want to mess things up further. Any help would be appreciated!


(PS - If it really is a dud, just let me know?)

A:Recover files from (corrupted?) hard drive

Now I get a blue screen (Can't even get to login page!) that reads

*** STOP: 0x000000ED (0x822E5590,0xC000014F, 0x00000000, 0x00000000)"

I have no idea what any of this means!

Read other 7 answers


My Mom needs a paper of hers for another project. For whatever reason the file has become corrupt and no longer displays correctly. I downloaded a recovery program trial from officerecovery.org, but since it is a trial it deletes some of the text in the document and replaces the words with "demo". If anyone knows of a free program that can save this file, I would really appreciate it.


A:Any free programs to recover corrupted .WPS files?

Recuva (freeware) is often suggested here.


Hope this works?


Read other 1 answers

Any1 know of a way or if it is possable to recover files from a crrrupted hard dirve myself with an application or another way? I have many Digital photos on the hardrive and photoshop work. Any help tnx in advance.

Tnx, Bob

A:Corrupted Hard drive (recover files?)

Read other 7 answers

Hi, tfpu finger print protected many files.

i will try to explane as much as easy because its comlicated

- first problem : finger print sensor not connected
- reading forum , uninstalled tfpu software, then before reinstall tfpu soft i saw protected files are without icon
- i try to open before reinstalling, it was video file
- i choose bs player then it become all my files ( jpg, mp4,avi etc.. which are protected by tfpu become bs icon
- after i reinstall tfpu soft and i changed files open with tfpu
- now i try to open from protect to unprotect its coming error like : invalid file

how can i recover my files back?

best regards

Read other answers

Hi all, I was using an SD card in the built-in SD card slot on my laptop to store data files. Something happened that corrupted the SD card. Windows 7 still recognizes the SD card and I can see the files on the card, but I can't even copy the files off of it to save them, so that I can reformat the SD card to use it again. What would be the best approach to take for recovering these files? Are there any good user friendly programs out there, preferably free or open source, that I could use to try to recover these files? They are not vital files but they are important to me and I would like to recover them. Didn't know what was the best forum to use to post this in, so I chose General Discussion. Thanks, Steve

A:SD Card corrupted, any good software out there to recover my files?

The folks that make CCleaner also have a recovery program called Recurva which I've had some success with in similar situations.
You might give it a look.

Read other 9 answers

Still having issues with a Backup file that was created on XP-PRO. Icreated the backup to my D:\ as I was going to Re-format my C:\ in order to re-install my O/S. Once I was ready to recover that backup i got an error message that read"This file contains Unrecognized data and cannot be used". The only suitable way that I have found to recover these files is by paying upwards of $600.00 to a professional data recovery co. That is not at all a feasible option, so I have given up on recovering the entire backup file and am now simply focused on recovering specific files. Is there a program which allows me to "pick & choose" which files I want to recover from a corrupted backup file? I know it's a shot in the dark, but I am at my wit's end. Thanks for taking the time to read about my problem.

A:Recover SPECIFIC files only from a corrupted Backup file?

If that was possible, your problems would be over.

The backup will likely be a single file, with complex compression. Unlikely a file-by-file collation. Part of it will be a table of contents, which when uncompressed allows the file to be reconstructed to its many discrete files.

Unless you can actually open the file, I just cannot see how you could extract some discrete portions. The corruption is severe enough that the file structure is no longer recognised, so I simply can't envisage how you could take a section of the compressed code to extract anything, as its unlikely to be possible to determine what part of what file it is.

I wish you luck and hope someone has an answer, but doubt that it's going to be a runner.

Read other 2 answers


I have encountered this problem which is bugging me for days now.
I was just creating back ups of my files to a different location of my PC (diff. partition, to be exact), the usual copy and paste. After a few minutes, I got this error that says 123.xlsx cannot be copied because the file is missing. I decided to skip it and continue backing up other files. After copying, I tried to locate and open the 123.xlsx file. The file was there but upon opening and after entering the password, it says "The file is corrupt and cannot be opened." I have 3 files like this, all of which are password protected. So I'm assuming that the password protection of excel has something to do with it.

I have tried multiple excel recovery tools from google. Even the steps for recovering corrupted files from Microsoft website, none of them worked.

I'm using MS Excel 2013, windows 8.1 64 bit; if it helps.

Please, I'm desperate. The files are equal to months of work. ( I know, I know, i should back up my files more often.)

Best regards,

Read other answers

Hi. I'm new to the site. In need of help. While on the internet today, my computer froze up and seemed to restart itself on its own. When I logged in later, got window that took me to what I'm sure is bogus virus software program. When I go to the internet (Internet Explorer), keep getting a page take over stating "Insecure internet activity. Threat of virus attack." There are links to take you to the virus software program. Check my AVG free version 8.0 and all seemed to be fine. Haven't been running regular scans however. Googled around for fix and downloaded Super AntiSpyware. Ran a full scan, which found 85 or so threats, quarantined then removed them. Went to internet but still same message and small window pops up every 5 or so minutes. Closed internet browsers and deleted cookies, temp internet files, etc from the control panel. Looked some more and found May 28, 2008 post on this site from Daryl in Despair, with topic title "Insecure Internet Activity. Threat Of Virus Attack., Computer corrupt." Sounds like my problem.If someone could help me get my computer back, I would be extremely grateful. I tried inserting an image of screenshots below. Hope I did that right.

A:Insecure Internet Activity. Threat Of Virus Attack. Corrupted computer

Make sure you have the latest updates for Super Antispyware before running another scan after rebooting into "safe mode".Use MBAM if SAS has not removed the malware. It is possible that neither program will find and remove the malware. The reason is that the malware is constantly changing to hide from the security programs and the security programs are always playing catch up. Both SAS and MBAM update daily or more often. Link below has instructions for using MBAM.http://www.bleepingcomputer.com/forums/ind...st&p=944365Post back with the logs from the programs and for further instruction.

Read other 18 answers

Caught a virus and he hurt my documents including important halyards suffered in excel. Many had tried but failed.May I view xlsx files damaged by virus? Have you spec tool?

A:May I view xlsx files damaged by virus?

Welcome to the forum.

The repair of damaged files is problematic at best and often impossible. The best option is to restore these files from your backups. All files of any importance need at lest 1 backup copy why those of particular importance need at least 2 backup copies. This is your best assurance against data loss.

Read other 1 answers

We recently had a trojan attack while my daughter was running MSPublisher to collate images for her homework. The trojan and virus has been cleared, thanks to great help on another forum. But MSPublisher still won't work.

It knew that it had been shut down incorrectly (we had to turn the machine off at the wall), so it offered to try to recover the file my daughter was working on. But the recovery failed with a message that MSIEXEC could not start.

It also claims Windows is low on memory - it isn't

I tried MSPublisher again and got an error message about failing to start correctly last time. It asked to start in Safe mode.
I said Yes to start in Safe mode but it claimed Windows is low in memory again.

I cannot repair the installation from Add/Remove Programs.

I cannot remove the installation from Add/Remove Programs, or even through the original CD disks.

Other MSOffice programs work, but I think that the installation was broken by the the Trojan attack.

Should we remove manually and reinstall MSOffice from scratch? http://support.microsoft.com/kb/290301 describes how to remove MSOffice completely by hand. Do we do that?


A:MSPublisher damaged during Trojan Attack

You can remove and reinstall Office or repair the current installation. When you insert the original Office setup CD, the setup program will give you a "Repair" option. It will search for corrupt files and replace any that it finds.

Read other 6 answers

         Hello all:     We all know that It is hard to avoid the damages of OS, such as virus-attack or not properly installingcertain program.     I have been using wXP for many years. To recover the damaged OS was re-installing the backup file.In my wXP harddisk, there is always a FAT32 partition. When do the backup for the OS, booting the pc intoDOS and the FAT32 partition then use ghost to do the backup file.      Now we are using w10. People told me for w10 there is more advanced  method to recover the damaged OS. Ghost way has been sifted out. With the new way, you can chose to recover the OS to how many days/weeksago it was.    This method sounds good! But I don? know.   Could you please tell me your experience.

Read other answers

Initial Problem: Facebook alerted me via facebook.com/checkpoint I had some type of virus and prompted use THEIR spyware removal software "McAfee"My resolution: I chose to download Malwarebytes. Had trouble starting the program. When I clicked on it nothing happened. When I right-clicked on teh program to "Run As Administrator" again nothing happened. After getting frustrated I research on the net how to run in command prompt and I renamed the excutable from "mbam.exe" to "bmab.exe" and was able to run the file. Malwarebytes located the culprit to be 'funmoods' It asked to do a restart. Current Problem: Upon restart, I had a number of command prompt windows load up .. around 30 or so. While it seemed like Windows had loaded I went on to try to start Google Chrome and another command prompt opened up. I tried using ATTRIB -H *.* /S /D The command ran with access denied. I then tried ATTRIB -S -H *.* /S /D Nothing happened. After calling a friend to google this issue, it appears the virus may have hidden my files and folders. I cannot use/start any program without the command prompt popping up. I tried to download unhider.exe via 'Computer' window and using the url field and a browser does up. When I download the file, it saved to some location (I'm guessing downloads folder), then prompts me to RUN the file. When I click RUN.. another command prompt window comes up with the following C:\User... Read more

A:Restore Files After Virus Attack

Boot into safemode with networkingDownloadTDSSkillerLaunch it.Click on change parameters-Select TDLFS file systemClick on "Scan".Please post the LOG report(log file should be in your C drive) Do not change the default options on scan resultsDownloadaswMBRLaunch it, allow it to download latest Avast! virus definitionsClick the "Scan" button to start scan.After scan finishes,click on Save logPost the log results here.If you get crashes in normal mode,run it in safemode with networkingDownloadESET online scannerInstall itClick on START,it should download the virus definitionsWhen scan gets completed,click on LIST of found threatsExport the list to desktop,copy the contents of the text file in your reply

Read other 34 answers

I've been posting for ages now trying to sort out a malware trojan type thing http://www.bleepingcomputer.com/forums/ind...p;#entry1735654I've already paid a professional to fix it, but they didn't. All they did was a system restore..where vundo was hiding out!Now I can't launch any exe properly and my lightroom (very important as I'm a photographer) won't export at all. I get Win32 API error -2147221003 ("Application not found") when calling ShellExecuteExW from AgWorkspace.shellExecute now even if I clean my computer is my computer still buggered? I am concerned my windows has been damaged. Is there any point in waiting about for help?I don't have a windows disc as I gave in my old pc when I bought this one. They said they can transfer the licence or something.So I was never given a disc.Needless to say I am saving up for a mac...I've been so so careful and keep everything updated, don't download anything on here (I use a knackered old laptop for that).I hate wasting weeks on cleaning up malware attacks. If I ever got my hands on the people that make it..tia

A:Massive malware attack..is my Windows damaged?

Because you have this log posted, you should NOT make further changes to your computer (install/uninstall programs, use special fix tools, delete files, edit the registry, etc) unless advised by a HJT Team member, nor should you continue to ask for help elsewhere. Doing so can result in system changes which may not show it the log you already posted. Further, any modifications you make on your own may cause confusion for the helper assisting you and could complicate the malware removal process which would extend the time it takes to clean your computer.From this point on the HJT Team should be the only members that you take advice from, until they have verified your log as clean.Please be patient. It may take a while to get a response because the HJT Team members are very busy working logs posted before yours. They are volunteers who will help you out as soon as possible. Once you have made your post and are waiting, please DO NOT make another reply until it has been responded to by a member of the HJT Team. Generally the staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response there will be 1 reply. A team member, looking for a new log to work may assume another HJT Team member is already assisting you and not open the thread to respond.Good luck with your log.

Read other 3 answers

A friend brought over a hard drive from a damaged laptop. I put it in an enclosure and connected it to my computer. The drive spins up but is not recognized by Windows. Disk Management sees the partition and says it is not initialized, but when I tell it to initialize it, it says "the device is not ready".

MiniTool Power Data Recovery, in its Recover Partition function, simply does not see the drive.

Any ideas what else I might try?


A:Recover damaged partition

Try using EaseUS Partition Master and see if the program recognizes the device.
EaseUS Partition Master Home Edition - Official Website
EaseUS Partition Master Home Edition - CNET Download.com

Read other 9 answers

I have used so many tools to recover
but some tools are too slow like they want weeks and some get stuck

I need a tool to rcover the data it has memories pics...

Its ok if a lil portion cannot be recovered but atleast the ok portion

Should not get stuck because of bad sectors.

A:Recover data from damaged cd\dvd

Check out this page, it might help. It is good software.


Read other 9 answers

I've got a maxtor hd which the system currently does not recognize.
I've set it up as a slave drive hoping to check what info is on the drive. (BIOS set to auto.. but when the drive is attached .. and reboots.. the system craps out.)

It truly is defective and I've got a replacement (warranty) on the way from maxtor.

Is the any way of recovering the data off this HD?
(I'm probably SOL any way... But.. I know some data recover services exist and I want to know how they do it.)

Directions appreciated.

A:How to recover data from damaged HD??

Read other 6 answers

I just got the virus/trojan attack that starts with a popup similar to "Your computer has downloaded spyware!" and starts a fake spyware scan with a yellow/gray shield icon and replacing cpu background with a big blue and red spyware warning. McAfee and other programs started erroring so I just power button shut down the computer and tried a bunch of McAfee virus scans in regular and safe mode. Didn't remember or note all of the ones it would find except for it couldn't fix the C:\Windows\Fonts\Services.exe problem and I wasn't allowed to delete that file from my fonts folder. Also had McAfee popup warnings of Virtumonde and I believe McAfee & Spybot warnings of registry changes. Also a "Advertisement Services" in Add/Remove Programs that may have been related?? Kept trying to remove that program but kept getting errors and asked if I wanted to remove from the list until it did just Remove on the 6th or 7th attempt after each reboot. Kept mainly to starting in safe mode and about a minute after boot up McAfee shows protection problems that you can't just click the "Fix" button or it would say an error occured. I originally thought that may be an issue with safe mode but now I'm not so sure. I'd usually just go from that warning screen over to the full scan.

McAfee scans kept turning up trojans, sometimes a handful and somtimes a lot, 269 I think was the last one. Adaware was working but the last sca... Read more

A:virus/trojan attack - now .exe .com files blocked

Try thumb driving this over...Please download SmitfraudFixDouble-click SmitfraudFix.exeSelect option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).Please copy/paste the content of that report into your next reply.Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.http://www.beyondlogic.org/consulting/proc...processutil.htm

Read other 35 answers

dear all

I have been attacked by a virus where all my excel, word, music files have been encrypted. My restore also sates that it has been unable to complete. When I first turned my computer on I received a message saying all my files were encrypted and sent to the police and that I would have to send ?100 to get them unencrypted. I am not very computer literate so if there is a fix I would need to have clear simple detailed steps. I hope you can help as I desperately need a couple of my Excel files.

Thank you in advance


A:virus attack excel files encrypted


I have notified helpers about this. Someone will be with you soon.

Read other 3 answers

Over the weekend my home computer was infected with the XP Security 2012 virus. I tried to get rid of it and I finally decided with wasn't worth the hassle, I had all important files on 2 external hard drives well before the virus as after several scans on the computer and both external hard drives I unplugged the hard drives and factory restored the computer. When I bring everything back up and plug the externals in to transfer files there are no files shown on the externals (or if there are so much is "missing"). When you click on Properties it shows you that there IS data on the drives but I cannot see anything. I've tried everything I can think of and I'm about to pull my hair out. I did a Google search late last night and there was a forum that said go to the command prompt and and a cskdsk on the drive. I did this before calling it quits and going to bed and of course this morning the computer had to do updates shortly after so this morning I redid the cskdsk before leaving for work. I know the files are on the drive as my husband tried running a virus scan this morning and it scanned on the files, we just cannot see them.

Can someone give me some ideas on how I can see the files on this drive. I'm going insane trying to figure it out.

Thanks in advance!

A:Cannot view files after Security Virus attack

So I ran the cskdsk and it shows I do have files on the device like I thought. I went to show hidden items and they are there. Now how do I make them accessible again? They are all "greyed" or "faded" out. Is there a special process I need to do?

Read other 2 answers


I have to face a problem with my hard disk.My computer worked well yesterday and while I was using nero for copying one file to CD,my computer hanged.So I restarted it again.But windows xp cannot load and I got boot disk failure error.So,I tried to boot from CD.Windows setup CD start normally and it cannot continue after a while and I got this error stop:c0000221 unknown Hare Error/SystemRoot/System 32/ntdll.dll.I am sure that my CD is good.
So I restart my computer and checked my hard disk at bios setup.There,my drive is not detected.I have checked my jumper setting and cable setting, but, bios setup does not know my disk.I have checked my hard disk at another good computer ,but at this computer ,my drive is not detected.
I think that all my bios setup setting for my hard disk is correct .I have set my hard disk to auto at setup.I need to say one thing that I have heard strange noice from my disk when I restart my computer.I think that my drive is physically damage.Is it right or not?I would like to know that how can I test to my disk that it is damaged or not and how can I recover my data if it is physically damaged.

I really appreciate to your help.

Yin Minn Pa Pa

A:how can I recover data from damaged drive

Read other 7 answers

Whenever I connect my Hard-disk to laptop, my laptop slows down and am not able to open the hard-disk folder. Am not able to access my data in it. As soon as I disconnect the Hard disk, laptop gets back to normal. Can anyone please help with the issue ?

A:Recover Data from Damaged Harddisk

If it's physically damaged, nothing you can do it in your own. You need to consult it to a professional unless you have knowledge and experience on some DIY hard drive repair.

Read other 1 answers

I've been using TrueCrypt 7.0a to encrypt the partitions on my external and internal hard drives for quite some time now. In fact, because I had no other available space, I copied a disc iso to one such partition just last night.
This morning, however, when I try to mount and access that partition, Windows won't recognize the mounted partition, and when I run "repair filesystem" from within TrueCrypt -- the equivalent of running chkdsk from a command prompt, I get:

Corrupt master file table. Windows will attempt to recover
master file table from disk.

After a lengthy wait (it IS a 250GB partition), it returns the message I least want to hear:

Windows cannot recover master file table. CHKDSK aborted.

Can anyone advise me as to another way to try to recover/repair the MFT so that I can access my data?

A:Cannot recover damaged MFT on a TrueCrypt partition

Is the drive healthy? Have you gotten help on any Truecrypt related forums?

Read other 9 answers


I have an external drive that's been damaged. When I plug it into my computer, it recognizes it as "My Passport 259F". But it won't mount it. I can't really do anything with it except see that it's there.

I'm wondering if someone can help me troubleshoot this. Really, all I want to do is try to get the data off it. What can I try?

A:please help recover damaged hard drive

Read other 16 answers

im missing alot of files (such as rundll32.exe, notepad, wordpad, mspaint.exe etc.) on my windows folder.

NOTE: this happens after my computer got infected by Win32.Virut ( over 200 virus was found and healed by AVG) then after this it seems AVG delete most of it.

NOTE: I also have WinXP CD, I can also access the net

Is there anyway i can repair or reinstall all windows folder important files
without REFORMATTING my hardrive.

A:So many files missing in Windows folder after Virus attack.


I've removed your post. You classify yourself as a beginner and as such you should not be making suggestions like this.

Read other 2 answers

Hello Everyone,

I'm a newcomer to this forum. Before joining this forum, I made a google search regarding the problem I'm facing with my laptop and found some great solutions to similar problems. Few days back, I got a warning from Sophos anti-virus installed in my laptop concerning some virus/malware. I ran a full scan and opened the Quarantine manager where there were 10-12 viruses/malwares to be cleaned. Among them were Mal/Hiloti-D and Mal/FakeAV-EA. I cleaned all the items listed in the Quarantine manager. When I restarted my computer, I got the following message: "Could not load or run 'C:\users\Myname\Appdata\local\temp\csrss.exe' specified in the registry. Make sure the file exists on your computer or remove the reference to it in the registry." I opened all the Users folders and couldn't find any files there. All my valuable folders and files are gone. When I searched google to find solution for similar types of problem, I found one old post in this forum posted by Shingobunny on 08 December 2010 - 06:14 PM. It seems the problem is pretty much similar to me. So I follow some of the steps suggested by the administrator of this forum to Singobunny. Specifically, I've executed the following steps:

1. I downloaded the DDS, ran it and got the following log (No GMER log since I'm running 64-bit). Here is the DDS log

DDS (Ver_11-03-05.01) - NTFS_AMD64
Run by Hiron at 10:20:20.17 on 18/04/2011
Internet ... Read more

A:Virus/malware attack and all my user folders and files are gone

Hi HeeLiShaHi, and welcome to Bleeping Computer.Download OTL.exe by OldTimer to your Desktop.Close all windows and double click OTL.exe.In the "Custom Scans/Fixes" window (under the light green bar) paste the following in bold:

%systemroot%\*. /mp /s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs

Click Run Scan and let the program run uninterrupted.When the scan completes, it will open two Notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL. Post both logs in this thread.You may need to use two posts to get it all.

Read other 2 answers

I am a student in college and I left my vista disk in my storage. So I'm on summer break without it (big mistake). and so i was attacked by a virus and now i cannot update and all these pop-ups keep coming. i finally defeated the viruses but it took stuff with it. "system restore" didnt help because something is missing, cant update something is missing, etc.

please help how can i reload my system without a disk... is that even possible? please please help me!!!!

My System:
Vista Home Premium 32bit
AVG Anti-Virus Free

A:Missing A Bunch of System32 Files (Virus Attack)

Try running System Files - SFC Command, and maybe try running a full scan with one or some of these to see if there still maybe some infection left.

The home of Spybot-S&D!
SUPERAntiSpyware.com - Downloads

Read other 3 answers

i have avast anti virus installed and is being updated everyday.

C:\Documents and Settings\binnu\Local Settings\Temp
for now at the above specified locations temp folder is created,
in these folders same kind of files like wmsetup.dll,Perflib_Perfdata_12b4,~DF84AF.tmp,plugtmp,Perflib_Perfdata_7a0
etc are present and many more such kinds are getting created automatically.

In this folder gif files such as 1.gif,2.gif,down.gif etc are also getting created and they are being detected as infected files by avast!!

i'm performing recommended actions by avast i.e either i click on move to chest or delete them.
but again with in fifteen mins those files are again getting created and avast repeadtedly warns me.

so i tried manually removing all files in temp folder but as i delete they are created again more over some folders are not getting deleted and a message saying cannot delete,it is used by some other person or program message is displayed.

if i perform anti virus scan manually on temp folders no virus is detected..
At the beginning only C:\Documents and Settings\binnu\Local Settings\Temp folder was present but now another location is also infected...

I'm afraid if it spreads more so can you please help me...!!!

Read other answers

My computer has been hacked with some kind of encryption virus and most of the files are
encrypted with '.crypted' extension. Could anyone please suggest what needs to be done to remove
the virus. This attack happened after a couple of days of the "dllhost" virus attack, and when my
computer's wi-fi was left on for a couple of hours (dllhost was active and attracting more viruses only when I my internet connection was on). I have taken outside help to remove the "dllhost" virus but unfortunately they were not able to decrypt the files.
Any help or suggestions are appreciated.

Read other answers

My problem is that I cannot restore Show hidden files and folders setting:neither with standard Windows XP tools, nor with a showhiddenfiles.vbs script kindly provided by the members of this forum.My question is short: what can I do?Yet, the circumstances in which I came across this problem are sophisticated. So I have to beg a pardon for a long description of what happened. I'm 150% sure that a virus which attacked me recently has changed smth more than the registry entries of?Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Hidden?registry branch which is tweaked with an abovementioned VBS. Maybe, that the remnants of it reside outside the registry as well.Please, help me!DESCRIPTIONRecently my computer was infected with a virus from a removable flash. As soon as I accessed this device from My computer I noticed that:a separate window for this drive was opened (while my defaults are ?in the same window?)my custom icons which I set for each of different drives using an autorun.inf feature suddenly disappeared.A short glance at these drives through a DOS window of Norton Commander was enough to conclude that:my autorun.inf was replaced with the one which contained a code launching a xFoolAVP.com filexFoolAVP.com itself with SHRA attributes settled itself in a root of each of my drive (both physical and logical partitions)I immediately downloaded cureit.exe, a virus-cleaning utility from DrWeb. It defined it as an autoruner-type... Read more

A:Hidden Files/folders Cannot Be Restored After A Virus Attack

Hello, Although this isn't a direct answer to you question . Reformatting this PC may be the solution for 2 problems. The Hiiden Files and the fact that This Type malware may still be on your PC. From Your Post...A trial version of Norton Antivirus (file NAV081500_YHO.exe) did everything that DrWeb was not capable to do . Also, Norton defined my virus as Infostealer. I was very thankful to Norton for cleaning my HDD's, but? this problem with folders persisted. I still cannot set Windows to show me hidden files and folders.Backdoor Trojans, IRCBots and Infostealers are very dangerous because they provide a means of accessing a computer system that bypasses security mechanisms and steal sensitive information like passwords, personal and financial data which they send back to the hacker. Remote attackers use backdoor Trojans as part of an exploit to to gain unauthorized access to a computer and take control of it without your knowledge. Read the Danger: Remote Access TrojansAlthough the backdoor Trojan has been identified and may be removed, your PC has likely been compromised and there is no way to be sure the computer can ever be trusted again. It is dangerous and incorrect to assume that because the backdoor Trojan has been removed the computer is now secure. Many experts in the security community believe that once infected with this type of malware, the best course of action is to reformat and reinstall the OS. Please read "When should I re-format?" and "Reformatting the c... Read more

Read other 1 answers