Solved

All my MS Word Document files reduced to zero bytes!!

Posted on 2004-04-30
12
2,080 Views
Last Modified: 2008-03-06
Hi,

I am having to deal with a great crises. I have lost all my documents overnight and now I am in a panic. All my MS document files have been reduced to zero byes!! All file names and the date of creation are intact but when I open the files, I don't find any data.

I envisage it is the work of a worm or virus. I used Stinger for detection but with no outcome. Can anyone tell me if I can retrieve back my files to readable format? How can I remove the virus? Where to find the tool?

Thanks in Advance,

Biplab :)
0
Comment
Question by:biplabid
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 6
12 Comments
 
LVL 49

Accepted Solution

by:
sunray_2003 earned 125 total points
ID: 10966068
Check these virus scanners

http://housecall.trendmicro.com/ 

http://security.symantec.com/

http://www.pandasoftware.com/activescan/com/activescan_principal.htm

http://www.pcpitstop.com/antivirus/default.asp 


Have you checked if only the Word documents are gone or other office application files aswell ?

Try this : http://www.officerecovery.com/

Post back
0
 
LVL 49

Expert Comment

by:sunray_2003
ID: 10966072
Is your solved ?
0
 

Author Comment

by:biplabid
ID: 10966077
only the word documents are gone. the other office applications are intact.

Thanks for the links. i will check out. By the way, is there any history of such problems?

Biplab.
0
How our DevOps Teams Maximize Uptime

Our Dev teams are like yours. They’re continually cranking out code for new features/bugs fixes, testing, deploying, responding to production monitoring events and more. It’s complex. So, we thought you’d like to see what’s working for us. Read the use case whitepaper.

 

Author Comment

by:biplabid
ID: 10966078
not yet. i am checking your links. let you know if any success.

Biplab.
0
 
LVL 49

Expert Comment

by:sunray_2003
ID: 10966079
Oh first of all you neednot have accepted my comment as answer. It should be done only after any expert solve your question.

I remember seeing history of such kind of problems where their music file get reduced to 0 bytes .. Not sure of any specific solution though.. Try this and post back
0
 

Author Comment

by:biplabid
ID: 10966091
hmmm...that was a mistake :). Yes..your comment not yet accepted (hahaha :D ). Just can you tell me if this deed is that of a virus or a MS bug?

Biplab :)
0
 
LVL 49

Expert Comment

by:sunray_2003
ID: 10966094
Have you checked for those viruses yet ?

tell you want you may want to take a backup of all those files and then reinstall office and then try to open them again

Try in opening them in safe mode aswell

have you looked and tried that office recovery ?    
0
 

Author Comment

by:biplabid
ID: 10966316
sad new sunray.. :(

everything tried but no success as yet. first i tried with the download fro "wordrecovery" from http://officerecovery.com. the utility can only recover corrupt word documents and cannot restore anything which is of zero bytes. i have backed up everything to a secure non-windows plateform. but the files are zero byte even there. i am in doubt now if I can recover my files. i even tried with reinstalling MS Office XP but in vain.

By the way, i am running all the latest critical patches issued by Microsoft till date, both for windows and MS Office.

anyway, it would have been of help if i would have known who/what the culprit is lest the problem does not occur again.

Biplab.
0
 

Author Comment

by:biplabid
ID: 10966457
some news update.

the main catch here is that by default, even if you create a document with out anything typed in it, you will always get a word file of either 20 kb or 24 kb (win XP/Win 2000) minimum. There is no chance that you create a 0 byte document with MS office. So i belive that it must be an active virus which must be doing this. I have created some test document on the infected system. But MS word is working normally with new documents. I  don't know how long will they last :)

I discovered some viruses in the PC like W32/Holer.gen@mm and W97M/Class@mm. But I don't have any information if these viruses can cause such harm, although they infect word documents.

There is also some activity of the latest Lovegate virus in my network. Can it be the work of this?

By the way, I have discovered that the "virus" is also infecting Excell files.

Biplab :)
0
 
LVL 49

Expert Comment

by:sunray_2003
ID: 10967519
Have you tried this ? Now that you have cleaned up the virus in your machine , try to transfer that document to a different windows machine and check if the same 0 bytes is reflected there .

First transfer the file to a different machine. Scan for virus . Try to open it there. If it opens then good. if it doesnot then probably you had lost the data. Also try this. Make a word document in that different machine and move it to your machine and check what is the result

I guess those viruses would have destroyed your data.

0
 
LVL 49

Expert Comment

by:sunray_2003
ID: 10967544
0
 

Author Comment

by:biplabid
ID: 10976954
hmmm...some viruses like "Minizip" and "ExploreZip" are known to do this.

I read it here http://www.fireav.com/virusinfo/library/minizip.htm

Sadly, no instance of this worm was found.
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

PREFACE The purpose of this guide is to explain how to manually move a SEP client to a different client group by performing steps on the client-side. These steps may prove particularly useful because they allow the client to move after it has alrea…
PREFACE The purpose of this guide is to provide information to successfully add specific IIS 7.0 role services for the Symantec Endpoint Protection Manager (SEPM) to function properly when installed on Windows 2008. AUDIENCE Information Technol…
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

696 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question