Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

All files are corrupt.


  • Please log in to reply
4 replies to this topic

#1 drroywy

drroywy

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:10:51 AM

Posted 03 January 2016 - 09:07 PM

My friend uses Windows 7.  She has an 8GB generic USB flash drive formatted MS-DOS Fat32 with around 4GB of Word (.doc and .docx) and PDF (.pdf) files on it.  The drive mounts fine.  All of the files look OK.  They can be copied, renamed, etc.  But every single file, whether opened from the original flash drive or from a hard drive they've been copied to, says it is corrupt and cannot be opened.  I've tried opening from the flash drive and from a hard drive copy using Win 7 Pro, Win 10 Pro, OS X Yosemite and OS X El Capitan, with various versions of Microsoft Office, OpenOffice, Adobe Reader, and Adobe Acrobat.  Any thoughts?



BC AdBot (Login to Remove)

 


#2 Demonslay335

Demonslay335

    Ransomware Hunter


  • Security Colleague
  • 3,527 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:12:51 PM

Posted 03 January 2016 - 09:56 PM

There are several possibilities as to the corruption. In lieu of all the ransomwares going around, that can be possible. I would check for any ransom notes or suspicious behavior on her computer - has she had any issues with files ON the computer?

 

Otherwise, if we can rule that out, there is always the chance of the flash drive having failed, causing corruption of files.

 

I would suggest trying recovery software such as Recuva to maybe see about any "former versions", or file repair tools (I don't recall the name of a reputable one specifically).

 

You can also try opening one of the .doc(x) files in Notepad - see if you can see some English in there somewhere, the rest is just formatting garbage (sometimes there is XML). I've also had some success in opening a PDF or Word document with 7Zip - seems bizarre, but a lot of files can be opened with it since they basically "archive" some assets in them.

 

If you are willing to upload a file to a third-party site for us to access, someone may be able to help you further.


Edited by Demonslay335, 03 January 2016 - 09:57 PM.

logo-25.pngID Ransomware - Identify What Ransomware Encrypted Your Files [Support Topic]

ransomnotecleaner-25.png RansomNoteCleaner - Remove Ransom Notes Left Behind [Support Topic]

cryptosearch-25.pngCryptoSearch - Find Files Encrypted by Ransomware [Support Topic]

If I have helped you and you wish to support my ransomware fighting, you may support me here.


#3 drroywy

drroywy
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:10:51 AM

Posted 04 January 2016 - 10:51 AM

Both her computer and the flash drive are malware free, so ransomware is not involved here.  None of the files on the computer have any issues.

 

I agree that this appears to be corruption of the flash drive itself.  I've just never seen anything like this where the drive mounts as expected, files display as expected, but EVERY file states that it's corrupt when you try to open it.

 

By the way, none of the "standard" solutions for retrieving data from a corrupt file work.

 

I appreciate the suggestion to try and use recovery software.  It will be interesting to see if a "recovered" file opens correctly or not.  I'll try that after work this evening.

 

I'll check with my friend and see if she is OK with "sharing" her files or not.

 

Thanks for the reply.



#4 drroywy

drroywy
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:10:51 AM

Posted 04 January 2016 - 03:11 PM

Just as a test, I created a new Word document and saved it directly to the flash drive.  It opens fine.  I copied a Word document to the flash drive.  It works fine.

 

But all of the pre-existing documents say they are corrupted.

 

I'm still planning on trying the recovery software this evening but this is so odd.  And, sadly, these are the the ONLY copies of these docs that my friend has.  There are no copies or backups.



#5 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:01:51 PM

Posted 05 January 2016 - 09:49 AM

If all the documents are corrupted - then it's less likely that they are all corrupted than there being a corruption of the MFT (Master File Table)

USB drives can survive many removals without using the Safe Removal protocol - but it just takes one during a disk write to screw things up.

The suggestion to use Recuva is probably the best thing.  If it doesn't work, then try some of the results of this Google search:  https://www.google.com/search?q=corrupted+master+file+table&ie=utf-8&oe=utf-8


My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users