Jump to content

Recommended Posts

Posted

Hello

How to Repair the Documents that is damaged by W32.Chir.B@mm worm. As W32.Chir.B@mm attempts to overwrite the first 4660 bytes of files that have .adc, r.db, .doc, and .xls extensions in all folders and subfolders.

I have to Recover Data that is infected by W32.Chir.

Anybody share a solution or any Idea in Mind.

Waiting for the Reply.....

Regards


Posted

There are programs that "may" be able to do that.

They are all commercial, here are a few links:

http://www.officerecovery.com/excel/

http://www.excelfix.com/

http://www.excel-recovery.net/

There is also an almost real-time service.

http://www.excel-rescue.com/whatrecover/index.php

The amount and accuracy of the recovery usually depends on the contents of the original sheet.

4660 bytes is a lot of overwritten data, it is possible that original names of the sheets inside of the workbook and contents of the first few top left cells have been overwritten, BUT IF the file has AT LEAST the first few top left cells somehow formatted differently from standard (i.e. for example as BOLD, TEXT, another FONT or FONT SIZE, etc.) or has many sheets, probably the entire content can be recovered.

Depending on your skills and on importance of the data you lost, you might also want to consider either trying some tests with a Hex Editor or ask to a Professional Consultant.

jaclaz

Posted (edited)

Already Tried.....

Office Recovery From

http://www.officerecovery.com/excel/

. But No Recovery.

Also Tried Advance Word Repair and Advance Excel Repair, Still no success.

Still Searching For More Solutions. I know I can't Recover the First 4660 Bytes but atleast the Rest of the documents.

Regards

Faisal

Edited by Faisal
Posted

I remember using once Excelfix and it did a very good job, but cannot say if it would work on your infected files.

I would try taking the first 4660 bytes from an old copy of the same file (I hope you have a copy or a backup of at least ONE file!) and paste it in the infected file, then try using recovery programs.

It might work, or it might not.

Getting most of the text, maybe NOT the formatting, from an average WORD file should not be difficult using the same method.

jaclaz

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...