This article is a summary of practical experience, a detailed account of the problems that may be encountered, and give the solution. In this paper, for the U disk after the virus in the file explorer U disk capacity has occupied, and open the file shows that the situation of data recovery.
current situation
After inserting the USB flash drive into the computer, the antivirus software reported that the original files and folders were hidden, and a large number of .exe (executable) files disguised as folders with the same name appeared. Using DiskGenius to query, the original files on the USB flash drive still exist, but the file attributes are marked as H (Hide) S (System), so they cannot be displayed directly in File Explorer.
Solution Ideas and Methods
Make sure that the "AutoPlay" function of your computer is turned off before performing the following operations to avoid endangering the equipment.
1. Remove viruses from the USB flash drive, by running antivirus software to scan the USB flash drive and remove potential viruses.
2. Try to run a command prompt as administrator and execute the following command to recover the file:
Note: You can press "Windows Button + R" to open the Run window, type "cmd", and then press "Ctrl + Shift + Enter" to open the Command Prompt as administrator. to open the Command Prompt as administrator.Before running, you need to replace the "X" in the command with the drive letter of the USB flash drive, such as "F" in this case.When finished, press "Enter" to run.
attrib -s -h /s /d X:\*. *In addition to using the command prompt, it is also possible to operate with the help of UltraFileExternal, which has a graphical interface.
With UltraFileExternal, you can first click "Folders" (① above) to select the folder you want to change the permissions, then click "File Properties" button (② above) to make the checkboxes in the area ③ white, and uncheck all the boxes. Select the folder you want to change the permissions to. Select "Manipulate Files and Folders" in the ④ combo box and click "Start".
If the USB flash drive files resume normal display after this step is completed, then congratulations, the USB flash drive data is successfully recovered. Otherwise, please continue to read below.
In this case, running the attrib command encountered theinsufficient authorityIf the problem is caused by a virus file that has not been completely deleted, the file can be extracted directly by DiskGenius.
After opening the software, find and click on the left side of the disk drive you need to extract files (Figure 1 below), and then click the "Browse Files" tab above (Figure 2 below), you can display all the files on the USB flash drive. At this point, we found that the file attribute is HS.
Select the file you want to extract in the following area (you can hold down "Ctrl" to select more than one, as shown in the following figure ①), and then right-click, click "Copy to Specified Folder" (as shown in the following figure ②).
In the pop-up window, select the location where the extracted files are stored.Be careful not to put it on the USB flash drive being operated..
Keep the following options as default, or adjust them according to your needs, click "OK" button to start extraction. During the extraction process, pay attention to the possible error message pop-up windows.
Wait patiently, when the file extraction is finished, you can click the "Open Folder" button to quickly access the location of the extracted files, or click the "Finish" button to exit the wizard.
Problems likely to be encountered
If the file cannot be displayed in the folder after extracting the file via DiskGenius, you can use UltraFileExternal or attrib command to operate on the file to recover it.
postscript
Data is priceless, proceed with caution!
