Edion Gecos Posted February 10, 2020 Share Posted February 10, 2020 Please excuse if this is not the correct forum section to post the below. A friend recently moved some personal files like family photos, documents etc. from an old computer running Windows XP to a USB flash drive in order to later transfer them to a new computer, but when he actually inserted that USB into the new computer yesterday, he noticed that the data seems to be corrupted. We tried it on my machine as well and indeed all the folder and file names are made up of odd characters (see picture). The files are still on the disk, but can not be accessed or even renamed. (To make it worse, he did not copy but move the files and afterwards the harddisk on his old computer was automatically defragment via a screensaver option, thus overwriting the files with other stuff. It was not possible for me to recover them on the computer). My hunch is that he may have removed the USB from that old computer without probably unplugging it first - maybe even before the transfer of the files was completely finished - and therefore it corrupted the content somehow. Thus my question to the experts here: Is there a way/tool to make the data on the USB readable/accessible again? Any help is much appreciated! Link to comment Share on other sites More sharing options...
DLord Posted February 10, 2020 Share Posted February 10, 2020 2 hours ago, Edion Gecos said: he may have removed the USB from that old computer without probably unplugging it first - maybe even before the transfer of the files was completely finished From my personal experience I can assure you that would not result in this type of corruption. My best guess would be a virus/ransomware. Follow that path. Link to comment Share on other sites More sharing options...
mp68terr Posted February 10, 2020 Share Posted February 10, 2020 The combo testdisk/photorec (https://www.cgsecurity.org/wiki/TestDisk) saved me more than once; scan the device for known files. You can give it a try. Link to comment Share on other sites More sharing options...
Edion Gecos Posted February 12, 2020 Author Share Posted February 12, 2020 Thank you to DLord and mp68terr for their suggestion (and sorry for taking a while to give some feedback) To make sure there is no virus involved, I did scanned the USB drive with ESET Antivirus and it came up clean. (I also don't think it has to do with ransomware as the actual computer is not affected and nowhere does a "pay up" message appear.) Testdisk/Photorec seems to be a reputable program, but as the USB has not been formatted or the files on it deleted (the data is still there, but with gibberish name), there is no partition or file to be recovered here. It did only come up with about 10 older pictures but there is about 11 GB of data on the USB drive... I also tried the program "GetDataBack Pro" (I have a working serial), which on another forum was suggested as a possible solution for a similar kind of problem, but again only the same few picture could be found. After long searches, I read somewhere that this sort of gibberish naming of files and folders usually happens when a "modern" USB flash disk is plugged into an "old" PCs (Pentium IV or lower maybe). Some old USB controllers - those that were manufactured before >4-GB flash storage were developed - simply do not support USB drives larger than 2GB. Apparently, as a result, the files (or rather the file system?) get corrupted. I need to investigate more, but I think this might be the case here as well.... So no solution yet, thus further help is still appreciated. Link to comment Share on other sites More sharing options...
DLord Posted February 12, 2020 Share Posted February 12, 2020 Someone suggested the following in some other forum for a very similar problem (see attached pic). Hope this helps. "You can highlight the name of one of these files, then select a normal Windows text option such as Ariel. This should revert the text to a legible form." P.S. I heard "MiniTool Power Data Recovery" does a very good job, but have not tried it myself. Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.