NEW WORM??!

[hinder]

i got some sort of worm, it erased a folder from the windows directory, but the files that were in the folder are still on the harddrive, i can tell because theyre still taking up room. Is there any way to recover the files?

 

[ddwbi0]

recycle bin?

 

[hinder]

The worm removed the folder. Its not in the recycle bin, it has completely disappeared. It doesnt show up in the file directory in Windows Explorer or in DOS. Its like removing the pointer from a stack position, but the info is still there, theres just nothing pointing at it.

 

[CTho9305]

... run scandisk. Never heard of such a worm. How do you know the info is still there? Are you referring to the file deletion method where just the FAT entry is removed but the data isn't wiped, or something else?

 

[Jolt2]

You could try a program called "Lost and Found". This only works with FAT file systems. Also, could someone have changed the folder attributes to hidden? Do you have Explorer set to "show hidden files and folders"?

 

[hinder]

I don't know for sure if it is a virus or a worm, but I didnt personally delete the folder and it is gone. It didnt get picked up by Norton Antivirus, which is why I thought it may be new. I have all hidden and protected folders showing and I still cant find it. I can tell the files are still there because there were no other folders on this drive and the drive shows over 9GB being used. Also, I'm running XP Pro with NTFS. PLEASE HELP!!

 

[Jolt2]

You can go to Recover deleted files...Free preview and download their trail version. This is what it said at their site:

"Preview recovered files
before you decide to purchase!

The trial version is fully functional and will allow you to view recovered documents and graphics, meaning that you don't need to waste your time and money wondering if your files will come back. If you can see them using the trial version, then you can bring them back quickly and easily."

This way you can see if the files are really there and could be recoved. It's worth a try.

 

[mitso]

A friend is having eratic behaviour with her computer.
She can always sign on the internet- msn8 by phone line
but then the eratic behaviour begins. A site will sometime
ask for her username and password, and other times it
connects without asking. She always clicks - save them.

When checking her computer, I found the "add/remove programs"
screen was completly blank. Iknow it was there because I
installed win2k on the computer.

Could it be the same worm, if it is a worm.

 

[deadseasquirrel]

If you're already using Norton Antivirus, you should try Norton Utilities as well. It has some good programs in the package, including Norton Protected Recycle Bin. It easily allows you to recover deleted files. Just yesterday, my 6 y/o son was playing Jedi Knight 2 on his system and wanted to delete some old saved games. He accidentally deleted his current saved game (and when it's deleted in-game, the files don't just appear in the trash bin)! He started freaking out like I'm sure I've done a number of times when realizing I've tossed something I needed. I recovered the deleted saves very easily with Norton, and he learned an important lesson.