Search found 5 matches
- 01 Oct 2017, 22:16
- Forum: Partition Recovery
- Topic: We were hacked. All partitions gone
- Replies: 7
- Views: 3470
Re: We were hacked. All partitions gone
I should share some more information. These are .vmdk's on ESXi. There are .vmdks. The first one the hacker deleted filed within the partitions and I was able to get the data back. The second drive (.vmdk). no recovery program has been able to find any volumes/mfts. I exported the 40GB .vmdk and ...
- 01 Oct 2017, 09:22
- Forum: Partition Recovery
- Topic: We were hacked. All partitions gone
- Replies: 7
- Views: 3470
Re: We were hacked. All partitions gone
Ok. I set the type to 07. It's scanning for MFT. How did you know to do set to 0,23,33, the reason I ask is there are about 5 other drives with the same problem.
- 01 Oct 2017, 08:35
- Forum: Partition Recovery
- Topic: We were hacked. All partitions gone
- Replies: 7
- Views: 3470
Re: We were hacked. All partitions gone
It asks for:
Cylinder
Head
Sector
Cylinder
Head Sector
Type
Cylinder
Head
Sector
Cylinder
Head Sector
Type
- 01 Oct 2017, 08:34
- Forum: Partition Recovery
- Topic: We were hacked. All partitions gone
- Replies: 7
- Views: 3470
Re: We were hacked. All partitions gone
Hi!
Thank you for the reply. When I hit A for ADD there is
Cylinder, Head, Sector, etc. Is that what I say 0323
I'm not following.
Thank you for the reply. When I hit A for ADD there is
Cylinder, Head, Sector, etc. Is that what I say 0323
I'm not following.
- 01 Oct 2017, 03:32
- Forum: Partition Recovery
- Topic: We were hacked. All partitions gone
- Replies: 7
- Views: 3470
We were hacked. All partitions gone
We were hacked and they compromised a bunch of servers and workstations. If the server had a secondary drive, the drive is now 100% empty. 0 bytes used. We can't figure out what they did to the partition table/mft. Can you please look .
Sat Sep 30 22:18:45 2017
Command line: TestDisk
TestDisk 7 ...
Sat Sep 30 22:18:45 2017
Command line: TestDisk
TestDisk 7 ...