Does anyone why files just randomly dissapear without a trace?
This has been going on for a while, I used to have a massive file of stock images (I do graphics for different websites and that) and that went missing, now I’ve gone through some of my music and several very rare albums have gone missing without a trace… I ran a system search but it it turned up absolutely nothing. I’ve also done the whole “show all hidden files” for the folder options. I’ve no idea how many files have gone missing that I haven’t noticed yet.
I also ran several scans for viruses and such, and it came back with that my system is clean. Also no one has been deleting stuff off this computer and I certainly wouldn’t delete anything valuable.
Currently using XP Pro, SP2.
You can only have 512 files in the disk root directory. The total number of files on the disk must be less than 65,534 files per folder for FAT32 or a maximum of 4,294,967,295 files per disk or folder for NTFS.
You can probably recover these files.
Recovering deleted files
http://www.aumha.org/a/recover.php
Drive Discovery 2.34 (free for 30 days)
http://www.download.com/Drive-Discovery/3004-2248_4-10641143.html?tag=tab_scr
Analyze the hard disk to see what files and data can be recovered. You can either recover or permanently delete recoverable files.
Recuva – File Recovery
http://www.recuva.com/
————————————————
You might have a disk error. I suspect your “Master File Table” that has the locations of all the files. Errors in the MFT would make files disappear.
Run “check disk” check both options and restart. (runs a long time)
Run disk Cleanup then disk Defragment.
http://www.microsoft.com/atwork/getstarted/speed.mspx
http://computer.howstuffworks.com/question578.htm
“Any time that a file is deleted on a hard drive, it is not erased. Instead, the tiny bit of information that points to the location of the file on the hard drive is erased. This pointer, along with other pointers for every folder and file on the hard drive, is saved in a section near the beginning of the hard drive and is used by the operating system to compile the directory tree structure. By erasing the pointer file, the actual file becomes invisible to the operating system. Eventually, the hard drive will write new data over the area where the old file is located.”
—————————————————————-
Now lets eliminate any malware that may be on your system.
Update your virus protection and run a full scan. If you find something that can not be removed repeat in safe mode with the internet line disconnected.
———————————————————
If you do not have spyware protection install:
AVG Antivirus 7.5 Free Edition
http://free.grisoft.com/freeweb.php/doc/avg-anti-virus-free/lng/us/tpl/v5
———————————————————
All: Install Windows Defender (full time spyware protection)
Perform a full scan.
http://www.microsoft.com/athome/security/spyware/software/default.mspx
———————————————————
Install the following five programs and run weekly or at least monthly. You need all five. They are not a substitute for full time spyware and virus protection.
Install and run now.
Ad-Aware SE Personal (update + full scan)
http://www.lavasoftusa.com/products/ad-aware_se_personal.php
Spybot Search & Destroy (update + immunize + scan)
Do not enable Tea Timer and SDHelper
After installation: update + scan + immunize
http://www.safer-networking.org/en/mirrors/index.html
SpywareBlaster: Update then open and click “enable all protection”.
http://www.javacoolsoftware.com/spywareblaster.html
SUPERAntiSpyware free version: (update + scan)
http://www.superantispyware.com/
CCleaner: Do not install toolbar and recycle bin options
Set to run when computer starts.
Removes tracking cookies, unneeded files
Place cookies you want to keep in the save list.
Do not run “Scan for Issues” (registry cleaner) unless you back up the registry first.
http://www.ccleaner.com/
Note if a scan detects a problem but is unable to remove, start the computer in safe mode with the internet line disconnected and run a full scan.
————————————————————-
Additional run this time and as needed.
Microsoft OneCare Live, run “full service scan”
Updates windows, virus and spyware scan, disk cleanup, disk fragmentation (if needed), backs up registry and then cleans registry, and checks for open firewall ports
http://onecare.live.com/site/en-us/default.htm
Malicious Software Removal Tool (run “full scan”)
http://www.microsoft.com/security/malwareremove/default.mspx
——————————————————-
Run this time
Install VX2 tool for Ad-Aware and run tool
http://www.lavasoftusa.com/support/securitycenter/vx2_cleaner.php
CWShredder: run
http://www.trendmicro.com/cwshredder/
———————————————————————-
Rootkit Removal Guide
http://safecomputing.umn.edu/guides/scan_unhackme.html
Rootkit revealer:
Close all programs first and then run.
Does not remove rootkits. Not all results will be malware! Google each item listed.
http://www.microsoft.com/technet/sysinternals/utilities/RootkitRevealer.mspx
Rootkit Removers (run any 2)
AVG Anti-Rootkit
http://www.grisoft.com/doc/products-avg-anti-rootkit-update-app-art/?ver=1.1.0.29
F-Secure BlackLight
http://www.f-secure.com/blacklight/
Sophos Anti-Rootkit
http://www.sophos.com/products/free-tools/sophos-anti-rootkit.html
———————————————————-
Online Free Scanners: Run Trend Micro and Panda Scan
Trend Micro: HouseCall Free Scan (removes what it finds)
http://housecall.trendmicro.com/
BitDefender Online Scanner http://www.bitdefender.com/scan8/ie.html
Kaspersky Labs Online Scanner http://www.kaspersky.com/virusscanner
McAfee http://us.mcafee.com/root/mfs/default.asp?affid=294
Panda ActiveScan Free Online Scanner http://www.pandasoftware.com/products/activescan?
Symantic Online Scanner http://security.symantec.com/sscv6/ssc_eula.asp?langid=ie&venid=sym&plfid=23&pkj=ALUFRHYTINMHDKDCWLL&vc_scanstate=2
——————————————————-
Additional Information read:
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Overview
http://wiki.castlecops.com/Malware_Prevention:_Prevent_Re-infection
http://www.castlecops.com/f67-Hijackthis_Spyware_Viruses_Worms_Trojans_Oh_My.html
http://aumha.org/a/quickfix.htm
http://aumha.org/secure.htm
http://aumha.org/a/parasite.php
http://www.castlecops.com/t102301-Hijackthis_Guidelines_Read_Before_Posting.html
http://www.techsupportforum.com/security-center/hijackthis-log-help/15968-please-read-before-posting-
http://forum.aumha.org/viewtopic.php?t=4075&sid=901703d08c2ace31389ffef2d84b6607
A Jewish Violin by Virtuoso Patrick Chemla
Related posts: