Virus wiped C:\ just now - Urgent help

nRiTeCh

nRiTeCh

Level N
I was using my pc, winxp sp3 without any antivirus since past 8-10 months as i was very cautious with whatever i download or execute. But today just 15mins back i downloaded an exe file from youtube link for a program and after execution immediately windows gave me file protection error, my desktop data vanished in fraction of secs, task-manager got disabled and what not. Even i wasnt able to restart/logoff/shutdown and had to do it manually via cabinet.
Then i logged into win 7 which is protected by eset and found that my 23gb of data went for a toss...out of 30gb...omg omg..wtf???..:(:crybaby::1ign22: when i peeped into that drive there was just windows folder with some basic files/folders, no program files, no root bootup files and only the last user folder under Documents and Settings and rest all user accounts were lost inl program files... moreover the drive size usage space showed 436mb in place of 22gb of data...:crybaby:
My mistake i agree i didnt install antivirus but surprisingly that file was on the desktop and i scanned it via eset and it came out clean...wtf??:nf02:

I checked for other drives on same physical disk and rest, and thankfully all were saved by my instant hard rebooting...i guess so.:unsure:

But now what about my C:\ data??? The OS was running since past 1.5 yrs and it had all data since year 2011...m in very panic situation guys... i dont mind getting lost other partitions data but C drive is something very extreme painful..i lost my, dads and bros mozilla bookmarks which were ran over 1000s divided into 3 a/c..me/my bro and my dad... and yes our digicam and cellphone photos, backups, imp. office files, vm ware workstation images..and many much more....:scared14:

Right now i'm trying to recover data using Stellar Phoenix... but its way too slow still guys can that data be recovered as it is virus wiped and this is first time a virus has wiped data on my pc in my entire 12yrs usage....rest it was human error for data lost and it was 99% recoverable...

So suggest any trustworthy free/paid rock solid tool which can restore fully previous state of data or recover my C:\ drive the way it was.... most imp things to recover---all user accounts Desktops/ My documents incl. Downloads folder of IDM/ mozilla bookmarks/ some folders from program files...

Thanks in advance......

Update: scanned using stellar and recovered 87gb of data and now it is reading cluster out of total 2017792 and it may more than 4 hrs.

What i wanted was the previous harddisk data state which was just deleted by virus today and not all of the 3 yrs back data .. now again its going to be xtreme tough for me to sort the data even if it found...esp with mozilla... :(
 
I used get data back, stellar and Recover My Files but sadly all of they did show my xp accounts but as total empty folder with no sub-files or folders inside. I guess i lost my precious data. :( Same with my other accounts too.... Such scenario never ever occurred even after i lost the whole physical drive after loosing partitions and formatting it and still i recovered my 99% data. But this time....:crybaby:

I dont know what kind of shit was that file about. Nor it was virus nor anything...

axeman: Can R studio recover files from fat32??? my xp was on fat32.
 
Well, use R Studio and other programs and see. IMO, you should not have downloaded the file and run it. However, blaming mozilla is pretty much useless.
 
You also try photorec software that comes with testdisk.
Have used it a lot of times on my SD card and pendrivs and once on a hard drive
 
Its now clear....yesterday i actually got attacked by the dns virus currently ongoing..as i downloaded the same file today and it dint do anything wrong this time. ;)

and finally recovered my data by EASEUS Data Recovery...though most of the data recovered was corrupt incl. rar and self-extracting archives.
So any tool to fix them???
 
did you try r studio? it does ntfs fat32 and fat, it should be able to get you what you need. also, look for a sw called sandboxie, it creates a sandbox in your system to run files that you may suspect to be malicious.
 
Try booting with Windows VISTA or 7 bootable CD and get into recovery mode > command prompt...

Sometimes your files may be hidden by the malware/virus or whatever it is. If you cant find the files even by dir /a then i am sorry. You will have to resort to recovery applications as others pointed out...

Do remember ,Always it is safe to have an AV installed particularly if there is web facility....
 
Back
Top