All my files have been deleted :(

For everything that's not in any way related to PureBasic. General chat etc...
User avatar
blueznl
PureBasic Expert
PureBasic Expert
Posts: 6172
Joined: Sat May 17, 2003 11:31 am
Contact:

Post by blueznl »

josku_x wrote:I know it has bad sectors. I use Diskeeper Lite to defrag my hd, and I defrag it every week, and Diskeeper always says that there were sectors that it wasn't able to defrag. So I had always 10% red in my Hd.

EDIT: My kids aren't fault on everything, but they were fault that the computer got infected with viruses.
the moment errors are a regular event, you should IMMEDIATELY make a backup and get a new drive!

brrr


i backup to memory stick, to external hdd, to a second internal hdd, and now and again to dvd (in case lightning strikes) which i store at my parents place, and recently i took a hardcopy print of the entire harddisk and had it engraved in pure granite...

well, perhaps not the hardcopy thing, but the rest i do :-)
( PB6.00 LTS Win11 x64 Asrock AB350 Pro4 Ryzen 5 3600 32GB GTX1060 6GB - upgrade incoming...)
( The path to enlightenment and the PureBasic Survival Guide right here... )
josku_x
Addict
Addict
Posts: 997
Joined: Sat Sep 24, 2005 2:08 pm

Post by josku_x »

Thanks to all suggestions. I could remove the virus and now I can access the drive easily as a slave. Now it doesn't give the CRC error. Thank you very much!

THe only problem is that all text and document files have been scrapped up. So my PB sources look very odd.

Here's an example:

I had OpenConsole() in one of my sources, but when I open it now, PB shows le)snoCpen(Oo I don't know why it does this. I also tried to open the PB files in Notepad, same result. All my other documents as well (HTML pages, PHP sources) have been scrapped up. I don't know any reason to this. THe only explanation to this may be because of the restorator I used.

However, I got my drive accesible again, so thanks to everybody.
User avatar
Joakim Christiansen
Addict
Addict
Posts: 2452
Joined: Wed Dec 22, 2004 4:12 pm
Location: Norway
Contact:

Post by Joakim Christiansen »

THe only explanation to this may be because of the restorator I used.
Or the virus did this to fuck things up!
Inf0Byt3
PureBasic Fanatic
PureBasic Fanatic
Posts: 2236
Joined: Fri Dec 09, 2005 12:15 pm
Location: Elbonia

Post by Inf0Byt3 »

No, i think it's not the virus.
Name: Parite virus

Also known as: Pinfi, Pate, Win32.Parite.a, W32/Pate.a, W32.Pinfi, Win32.Pinfi.A, PE_PARITE.A, W32/Parite-A, Win32/Parite.A

Type: Memory-resident polymorphic file infector

Affects: EXE and SCR files on Windows 32-bit platforms

Discovered: October 15, 2001

Description: There are two viruses involved with a Parite infection. Parite.A drops Parite.B as a dll to the Windows Temp directory, designating a filename based on the current system time (at infection). The filename has the following format:

[3 letters][4 hex characters].tmp

Parite.A then invokes the INITIATE function within Parite.B, which then modifies the registry to point to itself:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\PINF

Parite.B then infects the EXPLORER.EXE process, allowing it to remain resident in memory, after which Parite.B proceeds to infect all EXE and SCR files found on local and shared network drives. These files will be infected with Parite.A.
I think the files are unrecoverable because you overwritten the sectors where they were stored :? .

[edit]
Oh yeah, try with FileScavanger - not free but it happened to me too and it worked with this one...
None are more hopelessly enslaved than those who falsely believe they are free. (Goethe)
josku_x
Addict
Addict
Posts: 997
Joined: Sat Sep 24, 2005 2:08 pm

Post by josku_x »

I tried FileScavanger, but I still got the same result. And the computer did not noly have the Parite virus, it had a backdoor and a trojan and 2 viruses if I remember correctly. However, the hd has very much bad sectors so I think I'll throw it away.
Post Reply