Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 6 subscribers
  • Views 7045 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Recover deleted files

Laulorichter

Hi guys,

I had a problem with some foto-folders on my SD-card as they were only shown as .exe-files.

So i ran Sophos Anti-Virus and it detected the following threats: W32/Autorun-BDV and Mal/AutoInf-A.

After cleaning up the threats, however, everything on the SD card is gone. Is there a way to recover the deleted file and get rid of the malware in a different way?

Cheers

Laulo

:1014041


This thread was automatically locked due to age.
  • 0

    Hmmm, I can't see SAV deleting clean files - just infected files and completely malicious exes etc.

    The photos may be in the trash folder, maybe that's worth a try?  Using Terminal see if anything is in the .Trashes folder:

    1. Open Terminal from Spotlight (click the looking glass in the top right corner of the screen and type Terminal then select it).

    2. Change directory (cd) to the .Trashes folder on the card.  Example: cd /Volumes/SD/.Trashes/

    Tip: You can type /Vol and then press the Tab key to make it autocomplete the full folder name.

    3. Type 'ls' (without quotes) and look around -- maybe there are sub folders.

    Another way is to search the card for a filename of a photo (have to know a file name though).  For example I deleted a photo called 100_0115.JPG and I can find it with the following command in Terminal:

    find /Volumes/SD/ -iname "100_0115*"

    ...the * on the end wildercards the search to return anything starting 100_0115.  The command returns the following and hence I found my deleted file:

    /Volumes/SD//.Trashes/502/100_0115.JPG
    :1014043