update to below:
I have pinpointed the cause to a trojan horse called W32.Whiter.Trojan. The trojan is contracted through some Windows XP keygen. I didn't download an XP keygen so I am suspecting I downloaded the contaminated key gen labeled as something else or somebody that had grudge against me did it over the internet.
After the trojan horse has been installed, it does its payload when the system is rebooted. I didn't know that it got installed since I didn't run it, so by the time I realized it, it was too late.
The trojan truncated almost all files into 33byte file filled with binary zeroes and a few files waying "you did a piracy, you deserve it" and deleted it.
I discovered the above fact after using a recovery software called EasyRecovery Professional edition. All the files are completely trashed, but seeing that it was truncated by 33byte file, I am guessing the remaining portion remains unwritten. As far as the first 33bytes are concerned, with modern technology it should be possible to access the data one layer underneath it.
Hi everyone,
Today has been a extremely bad day for me. I was running Diskeeper defrag as I was watching TV. After watching the TV for a while, the defrag was done I decided to reboot. When I rebooted I got bunch of errors so I had to use the reset button. When the computer rebooted, it says invalid system disk. I booted up using a DOS boot up floppy to see what was going on. To my astonishment the volume info said basically my drive was 100% empty.
Not only was my system drive trashed, all my data partitions on a separate physical drive was completely trashed. All four partitions are accessible and all directories are intact, but files are gone just like when you use del *.* command on MS-DOS. I am suspecting hacking or virus action and since all the directories are intact I'd like to hope the files are just tagged as deleted and not actually been wiped out.
I only have the backup for the C partition which gets corrupted the most often. The data partitions are on a physically separate drive and I never thought this would happen so I don't have any back up.
On the data partitions I had considerable amount of files that has alot of sentimental values to me. The affected files includes all my chat ICQ logs from past three years, chatroom logs, family photo, my school papers, pics I took with friends in school, pics I took with my current and all previous S.O.'s and pretty much all my school papers and projects since eigth grade. I would be completely terrified to lose any of these files and I'd like to know if there is anything I can do about it.
The system was running Windows Me, connected to the internet at the time of the incident. The hard drives are configured as follow:
Quantum 7200RPM 40GB pri master holds C:\, system drive(20GB) ; E:\, temporary storage. The second drive is on a RAID controller of my onboard RAID controller and it is a Western Digital 40GB holding D:\, data partition 1(20GB); E:\data partition 2(20GB). All I know is that everything is lost
Any help would be appreciated.
Thank you,
Jer
Facebook
Twitter