Multiple hard drive corrupt files?

[smashguy37]

I've been working the past two days straight and haven't been on my desktop. This morning I noticed a program wouldn't open a project file. Then I realized it wouldn't open any and then I realized almost all of my files would not open. Even worse, I later discovered a SECOND hard drive was doing the same thing. Almost all files except .wav and .mp3 seem to be corrupt. Explorer shows the file sizes but refuses to open them.

One thing I have noticed is the Date Modified for all corrupt files shows this past Friday at 2pm. My girlfriend was home but didn't notice anything amiss with the computer. I have most of my files backed up on other hard drives but some of it was not up to date. Unfortunately, while some areas were covered by auto cloud backup, the cloud backed itself up a while after the failure and overwrote the good files with the corrupt files.

This is very bizarre and I've never had a failure like this...the fact two of my 4 internal drives went like that at the same time is scary.

I have a good recovery program I'm going to run but in the meantime does this sound familiar to anyone? I wasn't able to successfully Google anything. Is running recovery futile? Thanks.

 

[Hlsgsz]

Run crystaldiskinfo and post a picture of the results.

 

[smashguy37]

Run crystaldiskinfo and post a picture of the results.

I will do, thanks!

I have done more digging and this happened to all FOUR drives, not just two like I thought. Fortunately most is backed up but it's such a pain in the ass. Not every file seems to display this past Friday as a Date Modified timestamp, so it's nerve wracking.

It also seems to only have affected half of the files on a drive. My photo drive full of .jpg and .cr2 has over ten years worth of photos and it looks like it only ate half of them. Fortunately I have backup there too.

 

[Hlsgsz]

Run crystaldiskinfo and post a picture of the results.

I will do, thanks!

I have done more digging and this happened to all FOUR drives, not just two like I thought. Fortunately most is backed up but it's such a pain in the ass. Not every file seems to display this past Friday as a Date Modified timestamp, so it's nerve wracking.

It also seems to only have affected half of the files on a drive. My photo drive full of .jpg and .cr2 has over ten years worth of photos and it looks like it only ate half of them. Fortunately I have backup there too.

I need to see that picture, but i suspect that you are dealing wiht a virus. 2 or more drives failing at the same time is statistically very improbable.

 

[mbarnes86]

Hi

Corrupt files can be caused by bad memory when copy or saving or reading them

Test your ram with memtest86 or ramtest found on windows dvd

A malware , encryting or corruping virus may have hit your system.

A power surge or lighting strike could have hit your system

Try removing a hard drive and testing in another system
First test with western digital data life guard for windows or seagate equivalent

If ok run a viris scan
Then see if files can be read correctly

Regards
Mike Barnes

 

[smashguy37]

https://www.dropbox.com/s/vuih6vn89kx7ycz/drive%201.jpg?dl=0
https://www.dropbox.com/s/ik5htenym9zmd4e/drive%202.jpg?dl=0
https://www.dropbox.com/s/r13geptifrck2pp/drive%203.jpg?dl=0
https://www.dropbox.com/s/9lm7thbgw2ljsp2/drive%204.jpg?dl=0
https://www.dropbox.com/s/5sj7rmmhfm08xkq/drive%205.jpg?dl=0

 

[Hlsgsz]

Clearly, only your 3TB H: drive is starting to fail and even so, 4 pending sectors will definitely not corrupt half the files on the drive.
As i said, you are probably dealing wiht malware.
Scan your system with this: https://www.herdprotect.com/downloads.aspx

 

[smashguy37]

I believe it was viruses. Wow. I've dealt with a lot of malware but not like this. After a Windows update I was getting driver messages when booting up so I stupidly downloaded some stuff to update my drivers -- I think maybe that's where this came from. Probably explains why I kept seeing quick small DOS looking windows that scanned super fast and disappeared before I could read them.

Ransom.CryptoLocker
Trojan.Crypt.BRM
Trojan.Fileless>MTGen
Spyware.Boxaxxe
PUP.Optional.SlimCleaner.Plus
PUP.Optional.Solvusoft
Trojan.Miuref
PUP.Optional.ProtectHost
Backdoor.Bot.E
Spyware.Boaxxe.Gen

I removed them with Malwarebytes and rebooted and my computer said this was missing somewhere on my OS drive:

YTpack/pztwuxjk.dll

Is there anything else I should do? If this was in fact crypto ransom I never received any messages. Is it safe to assume these files got encrypted and I'm SOL? Is there anything else I should run? Should I burn it down and just reinstall the OS all over again?

I think the remaining files I can't restore aren't super important but if there is a chance of recovering them I'll try. The timestamp thing doesn't seem to apply to every corrupt file so now I'm afraid there are things corrupt I don't realize. Thanks for the help guys.

 

[Hlsgsz]

I believe it was viruses. Wow. I've dealt with a lot of malware but not like this. After a Windows update I was getting driver messages when booting up so I stupidly downloaded some stuff to update my drivers -- I think maybe that's where this came from. Probably explains why I kept seeing quick small DOS looking windows that scanned super fast and disappeared before I could read them.

Ransom.CryptoLocker
Trojan.Crypt.BRM
Trojan.Fileless>MTGen
Spyware.Boxaxxe
PUP.Optional.SlimCleaner.Plus
PUP.Optional.Solvusoft
Trojan.Miuref
PUP.Optional.ProtectHost
Backdoor.Bot.E
Spyware.Boaxxe.Gen

I removed them with Malwarebytes and rebooted and my computer said this was missing somewhere on my OS drive:

YTpack/pztwuxjk.dll

Is there anything else I should do? If this was in fact crypto ransom I never received any messages. Is it safe to assume these files got encrypted and I'm SOL? Is there anything else I should run? Should I burn it down and just reinstall the OS all over again?

I think the remaining files I can't restore aren't super important but if there is a chance of recovering them I'll try. The timestamp thing doesn't seem to apply to every corrupt file so now I'm afraid there are things corrupt I don't realize. Thanks for the help guys.

Malwarebytes may not sufice. Run the software i linked above to see if you still have some infections. Even if succesfully cleaned i still 100% recommend taht you wipe your SSD and do a fresh windows install with all your other drives disconnected. Then install a good AV(bitdefender free) and only after that's upto date reattach the other drives and re-scan them.

 

[smashguy37]

I believe it was viruses. Wow. I've dealt with a lot of malware but not like this. After a Windows update I was getting driver messages when booting up so I stupidly downloaded some stuff to update my drivers -- I think maybe that's where this came from. Probably explains why I kept seeing quick small DOS looking windows that scanned super fast and disappeared before I could read them.

Ransom.CryptoLocker
Trojan.Crypt.BRM
Trojan.Fileless>MTGen
Spyware.Boxaxxe
PUP.Optional.SlimCleaner.Plus
PUP.Optional.Solvusoft
Trojan.Miuref
PUP.Optional.ProtectHost
Backdoor.Bot.E
Spyware.Boaxxe.Gen

I removed them with Malwarebytes and rebooted and my computer said this was missing somewhere on my OS drive:

YTpack/pztwuxjk.dll

Is there anything else I should do? If this was in fact crypto ransom I never received any messages. Is it safe to assume these files got encrypted and I'm SOL? Is there anything else I should run? Should I burn it down and just reinstall the OS all over again?

I think the remaining files I can't restore aren't super important but if there is a chance of recovering them I'll try. The timestamp thing doesn't seem to apply to every corrupt file so now I'm afraid there are things corrupt I don't realize. Thanks for the help guys.

Malwarebytes may not sufice. Run the software i linked above to see if you still have some infections. Even if succesfully cleaned i still 100% recommend taht you wipe your SSD and do a fresh windows install with all your other drives disconnected. Then install a good AV(bitdefender free) and only after that's upto date reattach the other drives and re-scan them.

I was thinking of buying the Malwarebytes real time protection, or is bitdefender free sufficient?

 

[Hlsgsz]

I believe it was viruses. Wow. I've dealt with a lot of malware but not like this. After a Windows update I was getting driver messages when booting up so I stupidly downloaded some stuff to update my drivers -- I think maybe that's where this came from. Probably explains why I kept seeing quick small DOS looking windows that scanned super fast and disappeared before I could read them.

Ransom.CryptoLocker
Trojan.Crypt.BRM
Trojan.Fileless>MTGen
Spyware.Boxaxxe
PUP.Optional.SlimCleaner.Plus
PUP.Optional.Solvusoft
Trojan.Miuref
PUP.Optional.ProtectHost
Backdoor.Bot.E
Spyware.Boaxxe.Gen

I removed them with Malwarebytes and rebooted and my computer said this was missing somewhere on my OS drive:

YTpack/pztwuxjk.dll

Is there anything else I should do? If this was in fact crypto ransom I never received any messages. Is it safe to assume these files got encrypted and I'm SOL? Is there anything else I should run? Should I burn it down and just reinstall the OS all over again?

I think the remaining files I can't restore aren't super important but if there is a chance of recovering them I'll try. The timestamp thing doesn't seem to apply to every corrupt file so now I'm afraid there are things corrupt I don't realize. Thanks for the help guys.

Malwarebytes may not sufice. Run the software i linked above to see if you still have some infections. Even if succesfully cleaned i still 100% recommend taht you wipe your SSD and do a fresh windows install with all your other drives disconnected. Then install a good AV(bitdefender free) and only after that's upto date reattach the other drives and re-scan them.

I was thinking of buying the Malwarebytes real time protection, or is bitdefender free sufficient?

Viruses and so called malware are different beasts. MB deals preponderantly with the latter, so, actually an AV is required even if you are running MB. That being said, a MB license is very much merited, especially if other people use the computer as it's real time protection will not let you fill your pc with all sorts of crap, prevent visiting dangerous websites etc.