User avatar
pclab
Forum Moderator
Posts: 1803
Joined: Tue Jan 13, 2015 4:55 pm
Contact: Website Facebook

Zero size files

Wed Nov 13, 2019 7:55 am

Hi Guys

I'm working on a drive here (a WD USB), that the issue is some reading problems on head 3.
After mapping the files/folders with Data Extractor, I imaged everything without any major problems.
But when analyzing the results, I can see that many files have 0 size.... These files didn't gave me any problems imaging...
Do you have any ideas??

Thanks
Attachments
No-size3.jpg
No-size1.jpg
No-size2.jpg
www.pclab.com.pt
facebook.com/PCLAB.Assistencia.Tecnica

User avatar
lcoughey
Forum Moderator
Posts: 663
Joined: Mon Jan 12, 2015 12:46 pm
Location: Ontario, Canada
Contact: Website Facebook Twitter Google+

Zero size files

Wed Nov 13, 2019 8:15 am

I recently encountered a NAS recovery where ransomware from a workstation, edited files and wrote them back with no data before deleting them. Is it possible to be the case for this? Though, it is odd that the dates showing are quite old.

User avatar
pclab
Forum Moderator
Posts: 1803
Joined: Tue Jan 13, 2015 4:55 pm
Contact: Website Facebook

Zero size files

Wed Nov 13, 2019 8:55 am

HI Luke

I don't think that was the problem. The client's problem was that the drive was not being recognized (because of that problematic head 3)...
www.pclab.com.pt
facebook.com/PCLAB.Assistencia.Tecnica

User avatar
Jared
Forum Admin
Posts: 3933
Joined: Mon Jan 12, 2015 12:32 pm
Location: Providence, RI
Contact: Website Facebook Twitter Skype YouTube Google+

Zero size files

Wed Nov 13, 2019 11:55 am

I've seen this happen twice, where a ton of files were suddenly 0 byte size for no explainable reason. But, I think both of those cases were fully functioning drives and some poorly coded program just went haywire on the filesystem.

I think both cases were resolved by just scanning the drive in multiple DR software until one found the correct sizes. Give UFSExplorer a try first, I think that's the one that helped my cases.

User avatar
pclab
Forum Moderator
Posts: 1803
Joined: Tue Jan 13, 2015 4:55 pm
Contact: Website Facebook

Zero size files

Wed Nov 13, 2019 12:39 pm

So, an update.
After calling the client, she said that particular folder was already copied from another bad HDD, so probably it was not well copied.
The data she wanted (and that it's OK), are the photos.
So, case closed :mrgreen:
www.pclab.com.pt
facebook.com/PCLAB.Assistencia.Tecnica

Pende
Data Recovery Noob
Posts: 6
Joined: Mon Jul 27, 2020 1:21 am

Zero size files

Thu Feb 04, 2021 12:30 pm

hello I have a similar problem in windows, a client came to me with his head damaged disk, when he changed the head and took out his information I was surprised that his files have an .mzlq extension, I would like to know if someone knows how to view his documents , thanks
Attachments
mz.jpg

User avatar
pclab
Forum Moderator
Posts: 1803
Joined: Tue Jan 13, 2015 4:55 pm
Contact: Website Facebook

Zero size files

Thu Feb 04, 2021 6:04 pm

Those are encrypted files with ransomware.
Try this: https://malwarewarrior.com/how-to-remov ... zlq-files/
www.pclab.com.pt
facebook.com/PCLAB.Assistencia.Tecnica

Pende
Data Recovery Noob
Posts: 6
Joined: Mon Jul 27, 2020 1:21 am

Zero size files

Sat Feb 06, 2021 9:50 am

Hello, I did not come out with those tutorials, and I tried with several forums and nothing in case I attached 2 files maybe they can do it, thanks

https://drive.google.com/drive/folders/ ... sp=sharing

User avatar
pclab
Forum Moderator
Posts: 1803
Joined: Tue Jan 13, 2015 4:55 pm
Contact: Website Facebook

Zero size files

Mon Feb 08, 2021 3:44 am

You don't have a txt file with the ransom demands?
Post it here, or go here: https://id-ransomware.malwarehunterteam.com/ and see if there's a decrypt tool available.
www.pclab.com.pt
facebook.com/PCLAB.Assistencia.Tecnica

Pende
Data Recovery Noob
Posts: 6
Joined: Mon Jul 27, 2020 1:21 am

Zero size files

Tue Feb 09, 2021 11:21 pm

hello not , The hard drive is damaged and only the image and video files have been recovered

Return to “Logical Data Recovery & Data Recovery Software”

Who is online

Users browsing this forum: No registered users and 1 guest