Windows Forum

Ask something
Discussion Locked

Is there data after January 6th?

0 helpful
7 replies

by lonesome

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

The WIn32.Klez.E Question.

I have a client that was "wiped out" by the Klez. They call me on January 7th and said their machine would not boot. After way to long I discovered Klez was the problem and all of their files had been overwritten.
Question: Is there no hope? Does the virus overwrite the whole file or just the header? They are desperate. There are many irreplaceable documents and data files on the drive. Please no preaching to the choir. But some good info, or where to find it, would be greatly appreciated .

7 replies

by Brien Posey

Yes, there is hope. Don't waste your time on Symantec though. There's a new product called ViRobot Expert from Global hauri that can disinfect damaged files completely and return them to working order. The product isn't available in the United States yet, but will be available at www.hauriusa.net in a matter of days.

by lonesome

I appreciate the help. It is after the damage has been done that I need help with. All of their files and I mean ALL have been over written. Again I ask my question, did the SOB of a virus over-write the complete file or just the header?

I will watch with great anticipation for the ViRobot Expert from Global hauri but I have a feeling it is not going to apply to post January 6th damaged but we can always hope.

by nettek

I would contact a data recovery service (do a Google search). It could cost anywhere from a few hundred to a few thousand. However, if their data is truly irreplaceable, and they are truly desperate, they will go for it.

Also, now would be a good time to sell them a backup system.

by lonesome

I asked for no preaching.
The questions I am asking of Technical minded persons is - Did the virus over-write the complete file or just the header? If you don't know than the question is not being asked of you. Salespersons and HR types need not respond. Thank you.

by nettek

I bet you were named Mr. Personality in school. I must be a pretty computer-savvy HR person to have 58,000 tech points. You asked if there was hope. Well, a**hole, I gave you hope in regards to data recovery.

You want to know about KLEZ? First, there are six different types of KLEZ that do six different things. Some do not do anything to files at all. There is one type that does overwrite files. No, it does not simply overwrite a header, it actually replaces the content of files with gibberish.

However, often times KLEZ makes a copy of the file it overwrites, renames it, and moves it. For example, a file called something.doc might be renamed something.doc.rar, and then moved to a different folder.

I figured a real tech person could have easily found all this out on numerous web sites.

by lonesome

Thank you! That is the kind of facts I need and was asking for. Sorry I got under your skin but I need info. If someone could steer me toward these numerous web sites that go into more detail about the damaged KLEZ can cause I would be appreciative. My limited technical skills seem to preclude me from finding them on my own.
Also I would direct NetTek to the first part for the USE OF ONLINE FORUMS section under the TERMS AND CONDITIONS OF USE for this web site. Also to the TechRepublic discussion and Technical Q&A guidelines ? ?avoid "obscene" language ?use moderation and good judgement?

This discussion is closed to new replies.