Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

file contents get zero

Feb 12, 2009 2:52PM PST

Hi,
I have a folder, and few files in it, two .rar and few .txt files, a few days back they were working fine, but yesterday when I try to open the .txt files were empty, and my .rar file is also get error, when I open with hexedit, their contents were all 00000 (zero?s), but the file size remains the same. It has my personal data. I am very confused, same thing happened a couple of years ago too. I have latest antivirus and spyware and there is no unknown process running, anybody could please help me? Why this happened?

Discussion is locked

- Collapse -
If it's really gone ...
Feb 12, 2009 4:19PM PST

it's overwritten and gone.

So all you have is your backup. But that should be good enough.

You didn't really tell, by the way, the details of your text files. Empty could mean: 0 bytes long, text replaced by spaces, text replaced by binary zero (like in your rar-file).

And what is the creation or modification date of these files? Changed to the date that whatever-it-was changed the contents? Or unchanged from when you last did it?
If unchanged, it's either an error in the error or the filesystem, causing random writes or errors with defrag, or some smart malware that knows how to circumvent changing the modify date while overwriting the files.
If changed, it's proven more or less that it's done by a program.

Kees

- Collapse -
more info
Feb 12, 2009 6:54PM PST

well,

all the files in the folder have Hex '00000000000000000000000000000000'
from start to finish including the .rar and .txt files. size of the files are same, like 6k and 20k, but its internal contents got zero'd.

well file were created on 1/5/09, modified on 1/6/09, and last accessed today.

thanks
Kami

- Collapse -
Then either this happened ...
Feb 12, 2009 10:35PM PST

via the regular filesystem on 6/1 or it's a smart virus or a hardware issue.
Are you sure you didn't 'erase' those files yourself with some erasing program?

It's uncommon for a text file to be modified, most editors just keep it, so the creation date is equal to the modification date. A rar-file might be added to (keeping the original creation date, changing the modification date), but it's unlike you did that to all rar-files, I think. Only you know, of course.

With 1 day before the original creation date and the corruption, your backup window was very small. So maybe you've lost the contents forever.

Kees

- Collapse -
However, ...
Feb 12, 2009 10:37PM PST

if you say they were fine a few days ago, you might still have an uncorrupted backup.

It's not clear what happened, and presumably it never will become clear. Sorry.

Kees

- Collapse -
files
Feb 13, 2009 2:48AM PST

Hi,
well the folder is in c:\my files\ and all the files 3 .txt and one .rar and one .exe file, they being get zerod, since my net is on 24 hours, is it possible some one remotely do that?

- Collapse -
It shouldn't be possible ...
Feb 13, 2009 2:50AM PST

if you didn't share that folder.

Kees