Recovering Files from an Infected HDD, a Memory Card or a USB Drive

Have you ever encountered a virus attack? If so, then you probably already have some experience and know how harmful malware can be. One of the possible consequences of the impact of such programs is the unexpected loss of files stored on your hard drive, memory card or USB-drive.

Recovering Files

For users who do not know how to recover the information damaged by a virus, such attacks can turn into a real catastrophe. However, it will no longer be a problem for you! In this article, we will look at two possible ways to recover infected files using CMD and professional third-party software.

Using CMD to recover files from damaged media

In case of loss of access to information that has been attacked by a virus , the first thing to do is to use the built in Windows CMD utility, since this method is free and easy to use.

Let’s see how it works. For the demonstration, we use Windows 8.1 operating system and an SD card.

  • 1) Connect the hard drive, memory card or USB-drive to the computer.
  • 2) Go to the start menu, type in the dialog box cmd and press Enter key. You can also use Run utility using the command Win + R shortcut . In the window that appears type cmd and press Enter key.
Quick Access tab

Type chkdsk E: /f command and press Enter key.

Replace E: the letter of the device on which you lost or deleted the files.

chkdsk command
The attrib command

Type Y and press Enter key.

Enter E: again and press Enter key (replace E with your drive letter).

Type attrib -h -r -s /s /d *.* and press Enter key.

The attrib command

At the end of these steps, WIndows will begin repairing the drive infected with malware. Usually the process takes one or two minutes. Please wait until it is complete.

Now you can open the contents of the drive or memory card to check the files. If the recovery process was successful, congratulations! If not, do not despair, below the second option described in detail.

Solution two. Using third-party software

In some cases, recovery using CMD may be helpless. And the only alternative solution could be to use third-party software specialized in working with data stored on damaged media.

Top of the line product to repair broken partitions and recover missing information

The Starus Partition Recovery application or its analogue with less functionality, Starus FAT Recovery, Starus NTFS Recovery, is designed to work with certain file systems – FAT and NTFS. The main software is able to interact with both. These applications are well suited for both home and office work, becoming a universal means of recovering information and logical partitions of hard drives.

Skip to the video
Recover Deleted Files and Repair Corrupted Partitions

Recover Deleted Files and Repair Corrupted Partitions

Use the following guide to restore the files you need:

1. Connect the external hard drive to the computer and run the file recovery program. In the Recovery Wizard that opens click Next and select the logical partition or physical drive you want to check.

File Recovery Wizard

2. Select the type of scan that best suits your needs.
Quick scan allows you to perform a quick check of the device. It should be remembered that the depth of such a test will be significantly less than with a full analysis. The second option will take more time, but the scan will find even the oldest data.

Selecting the type of analysis

3. Upon completion of the analysis, you will have the opportunity to carefully examine the detected data and export it to a safe place on the computer. To do this, select the necessary files, right-click on any of them, and click Restore button.

Method of saving recovered files

After completing the above steps, your documents will be completely safe and ready for further use. The programs for data recovery from a storage medium infected malware reviewed here can be downloaded and tested for free. All features, including previewing recovered files, are available in a trial version. The preview window makes it possible to make sure that a particular file is not damaged or overwritten and is subject to full recovery.

  • Evaluations:
  • 2
  • /
  • Rating:
Ruslan Yermolov

Ruslan Yermolov

Data recovery expert - providing practical advice on how to use simple tools to solve complex data recovery and data protection problems on today's storage devices. Education - Manager Economist, and since 2010 the creator of Starus Recovery, developer of the eponymous website, which provides users with a wide range of software for digital information recovery.

Author's page

FAQ

Read Our Frequent Questions

To restore the integrity of Windows system files after a virus attack, you can use the SFC console utility. And run the command SFC /scannow on the command line. To recover our user data, we can run the chkdsk system disk check as shown in this article. If it turns out to be ineffective, you need to resort to an effective data recovery program, such as Starus Partition Recovery.

The best option is to use the Starus Partition Recovery program, as shown in this article.

Windows needs to be reinstalled. And in the new operating system, start data recovery with the Starus Partition Recovery program. For a greater chance of data recovery, you can run Starus Partition Recovery in the WinPE environment from a bootable USB flash drive. And only then install a new Windows. If you wish, you can try to restore Windows in the WinPE environment - run Dr.Web CureIt! to remove viruses, then run SFC /scannow on the command line to restore the integrity of Windows files.

Comments (1)

  • Ruslan Yermolov
    Ruslan Yermolov 10.04.2023 06:11

    If you have any questions about how to restore files from an infected storage medium, leave them in the comments, we'll answer them!

Post Comment
User
Leave a reply
Your email address will not be published. Required fields are marked *

Similar articles

Similar articles about data recovery