Restoring jpegs nuked by ILOVEYOU

Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Spuck

Thread Starter
Joined
Nov 6, 1999
Messages
7
Got a friend who had a bunch of digital camera pics of her baby on a hard drive upon which her little brother released a variant of the ILoveyou virus. Knowing that the files have been deleted and replaced with virus files, anyone got a best suggestion for what tool to use to try and restore what might be left of the original files?

Thanks for your help.
 
Joined
Dec 9, 2000
Messages
45,855
To my knowledge there is no way to restore most damaged media files affected by the loveletter worm (an exception may be mp3s) . I do strongly suggest, however, that steps be taken to disable the Windows Scripting Host which this and other similar (and even more dangerous) worms exploit.

http://www.sarc.com/avcenter/venc/data/win.script.hosting.html

http://www.symantec.com/avcenter/venc/data/vbs.loveletter.a.html

This worm sends itself to email addresses in the Microsoft Outlook address book and also spreads to Internet chatrooms using mIRC. This worm overwrites files on local and remote drives, including files with the extensions .vbs, .vbe, .js, .jse, .css, .wsh, .sct, .hta, .jpg, .jpeg, .wav, .txt, .gif, .doc, .htm, .html, .xls, .ini, .bat, .com, .avi, .qt, .mpg, .mpeg, .cpp, .c, .h, .swd, .psd, .wri, .mp3, and .mp2.

The contents of most of these files are replaced with the source code of the worm, destroying the original contents. The worm also appends the .vbs extension to each of these files. For example, image.jpg becomes image.jpg.vbs. However, files with .mp2 and .mp3 extensions are merely hidden and not destroyed. Norton SystemWorks users can recover these files if NProtect is running at the time of
 
Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Members online

Top