Root directory data overwrite recovery case caused by virus

Case:
Customers suspect that the virus in the U disk is now unable to open the U disk to read data.

Solution:
Using Winhex analysis, found that the root directory data was covered, the root directory file was lost, and the U disk attribute displayed that there was data, which should be caused by the virus as the user said.By searching for 2e2020, there are not many U disk folders. Copy the file directory items from other U disks, and re -map the directory relationship, and the data is restored.Data recovery 100%.