It might very well have been a virus that did it, but it could have also
been an improper shutdown of the server due to a power outage.
I was performing some IT work for a non-profit who seemed to never have
money to upgrade their computers. I'm sure this is typical, and it's
probably also typical that the computers were the backbone to their
productivity. Nevertheless, the computers were neglected, as was the backup
protection.
Anyway, the power went out, and I'm guessing some server operation was
happening on the drive at the time (which was set up as a RAID1 through an
Adaptec ATA 1220A).
So, when I came back and tried to access the drives, the files showed up
fine (file names, size, date, folder names, etc.) but the data was screwy.
I'm not sure if it was the MFT that got screwed, or some other MS Server
drive table, but something went really bad.
If you have any ideas for a good hex editor, please let me know.
Ryan