0

I have an external hard disk , just connected to another system and when i connected to my own computer one of my folders which contain photos become hidden system files AND all folders in it rename to same name !?!? and my access is denied ( Screenshot )

enter image description here

I tried to change ownership but i can't

Any solution !?

12
  • @HackToHell So what , is there any way to get it back
    – echolab
    Mar 24, 2012 at 9:57
  • 2
    Scan the drive and open it in Linux and locate your files.
    – HackToHell
    Mar 24, 2012 at 10:08
  • @HackToHell sorry is there any way so i can run linux in windows , virtually i am not and expert , any linux already virtualized so i can run it in machine
    – echolab
    Mar 24, 2012 at 10:17
  • @HackToHell which version should i download Fedora , CentOS , Ubuntu , ...
    – echolab
    Mar 24, 2012 at 10:21
  • 1
    @echolab . Its not important which distributions you use. but ubuntu is good
    – Hamed
    Mar 24, 2012 at 11:15

2 Answers 2

1

There is a good chance the external drive is infected with malware that spreads using the AutoRun / AutoPlay functionality in Windows. Unfortunately there is usually a financial motive behind such malware - it can encrypt files on your system and then show you a message demanding payment for the restoration of your data - almost like a digital version of kidnapping. If your data is encrypted and you don't have a backup, the news is not good. If the malware is less sophisticated and all it has done is rename and change rights, there is still a chance of recovery, but you are going to need to find a VERY technically skilled (and patient) friend or company to assist you in recovering your data. You aren't going to learn these skills overnight if you don't already possess them.

The best option would be to entirely erase and reformat both your computer and your external drive, and restore from a clean backup. If you don't have a clean backup, you have probably lost your data permanently, I'm sorry to say.

7
  • 1
    It's easy to get the files back, you can skip permissions in Linux!
    – HackToHell
    Mar 24, 2012 at 12:44
  • @HackToHell - it may be easy for you - I don't think it will necessarily be easy for the OP based on their questions. I think it's best they find someone who knows how to do this for them.
    – Bork Blatt
    Mar 24, 2012 at 12:46
  • 1
    Holy paranoid much? Something has been hidden and renamed unexpectedly... IT MUST BE A VIRUS TARGETING ME FOR EXTORTION!!!! ;) Mar 24, 2012 at 17:49
  • @Bork Blatt nice infos thanks , i just recovered half of my files with a free recovery software , i am trying the linux option also , i can't format the whole thing it's 2 TB of data , and this happen to JPG files , i should never attached it to a computer which i don't know how up to date is it's anti virus/maleware application :(
    – echolab
    Mar 25, 2012 at 7:35
  • @techie007 because we all know files rename themselves and change permissions on their own... right?
    – steve
    Jun 25, 2012 at 20:03
1

It sounds like a result of malware.

To restore the files and folders on the external hard drive so that they are visible and accessible, open an elevated command prompt (type cmd into the search field on the Start Menu, press Ctrl+ShiftEnter and confirm the request).

Then type:

attrib -h -r -s /s /d X:\*.*

Note: Change X to be the drive letter of the external hard drive

The malware would have to be addressed with a program like MalwareBytes or Avast and check all drives on your system.

I see that you may be trying a recovery via Linux, but I figured a Windows option wouldn't hurt in the event someone else has something similar.

0

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .