Incaseformat virus in the computer? data lost? Teach you how to deal with it!

Recently, a worm virus called incaseformat broke out in many places. All the disks of the computer infected with the virus except the C drive will be emptied, and an empty file called incaseformat.log may be left behind.

According to analysis, the virus is at least an old virus from 2014. Only because the value of the IMSecsPerDay variable in the DateTimeToTimeStamp function in the delphi library used by the virus is wrong, causing the current time of the system converted by DecodeDate to calculate the error, the sample is regarded as an old virus, and the deletion is not triggered until January 13, 2021 Code logic of user files.

So how should we deal with the incaseformat virus?

First, if the computer has not been found to be infected with the virus, we can do this:

1. Do a good job of data backup;
2. Use anti-virus software such as 360 and Tinder to perform regular anti-virus;
3. Try not to use storage devices such as U disks on public computers, and always pay attention to virus-checking them;
4. Some unknown Try not to click on the URL link to prevent viruses;
5. If you want to install software, try to download genuine software from the official website, do not download and install unknown software at will;
6. Try not to set up a network shared directory;
7. Do not restart the computer at will.

If the computer has been infected with the virus, what should we do? Note the following two points:

1. Hurry up and anti-virus, anti-virus and anti-virus! There is no doubt that we need to use 360, Tinder and other software to perform a comprehensive anti-virus;
2. If you want to restore the lost data, do not make any changes to the disk! Avoid that the lost data is overwritten and cannot be recovered due to the new data being stored!

So how to perform data recovery? In fact, it is very simple. With the help of professional data recovery software, we can do it easily.

Easeus Data Recovery, as a powerful professional data recovery software, is suitable for more than 100 data loss scenarios, such as deletion, formatting, some virus infections, disk partitions becoming RAW, system crashes, etc., from desktop computers, laptops, etc. Quickly retrieve lost data from mobile hard drives, U disks, SD/TF cards and other Windows compatible devices. It supports the recovery of more than 1000 different types of files and is easy to operate. Even computer beginners can easily complete the recovery.

(For details, visit: https://www.easeus.com.cn/data-recovery-software/data-recovery-wizard.html .)

Specific recovery steps: Click to download software>>

Step 1. Scan.
Select the partition with lost data to scan.
Insert picture description here

Insert picture description here

Step 2. Preview.
Double-click to open the file or right-click the file and select "Preview" to view the contents of the file. (This step is very important to determine whether the file can be recovered)
Insert picture description here

Insert picture description here

Step 3. Recovery.
There is no problem with the preview, and you can check the required files to restore.
Insert picture description here

Through the above method, the data lost due to the incaseformat virus in the computer can be retrieved!

Guess you like

Origin blog.csdn.net/yiwokeji666/article/details/112985937