Recover deleted files on windows 2008 file server

Posted by aniga on Server Fault See other posts from Server Fault or by aniga
Published on 2012-12-18T15:41:34Z Indexed on 2012/12/18 17:04 UTC
Read the original article Hit count: 172

We have recently been hit by a weird virus which made all files and folders a system files/folders and also it hid all files and folders par some weird ones it created including:

..exe porn.exe secret.exe password.exe

etc

We have managed to restore the files with attrib command to unhide and unmark them as system files however we have noticed that we are missing some 4 to 5 folders of which (based on my luck) 2 of them are the two most important client we have.

I am not sure if these files were deleted by the worm/virus or by my colleagues who are not owning up to them but the files are now gone. Worst of all, we do not have any backup what so ever (Yes I know, we should not have done that but it is a lesson learned and since last night we have created two forms of backup systems one to external device and one on the cloud, but I doubt any of that will help us now)

We have 1 Windows 2008 File server and 4 client computers based on Windows 2007. I would be grateful if anyone can help us on how we can recover from this disaster which could potentially put us out of business.

© Server Fault or respective owner

Related posts about windows-server-2008

Related posts about data-recovery