Blackmal Attack Help

[GIKUYU]

Hi all,

I have 7 machine's that have been attacked by a BLACKMAL Virus which has changed the sizes of all files (documents) in My Docuements into 1 kb in size
when i open them all are empty WITH THIS ERROR WRITTEN ON THE WORD DOCUMENT:

DATA Error [47 0F 94 93 F4 K5]


the documents are quite critical in some of the machine's.

1. WHICH TOOL CAN REPAIR THIS FILES BACK TO THEIR ORIGINAL SIZE AND RESTORE ALL THE INFORMATION CONTAINED IN EACH.

2. WHATS THE BEST TOOL TO SAFGUARD AGAINST THIS ATTACK AGAIN?

Your kind assistance is appreciated.

regards.

[GDH]

There is a lot of information on the web from the major antivirus companies about the BLACKMAL Virus. Put "BLACKMAL Virus" into google and you will find a lot of informaiton.

It seems that this virus has a destructive payload and deletes files. I have not found any information about it leaving 1kb files, but this may be the case.

Before you attempt recovery, I would suggest that you download and use a Blackmal virus removal tool (there is one at symantec). Also update your virus scanner and try and make sure that you system is clean.

To get your files back, download and run Recover My Files from www.recovermyfiles.com. I suggest you run a "Complete File Search" for specific file types. In the results screen, click on the files found to preview their content to make sure you are getting back your missing files. When you save the files, make sure you scan them again to ensure that they are virus free.

Please let me know how this goes. The virus may have done some other tricky things with the file size which may require a different type of search technique.