+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Malware, Rat, and Virus Removal (https://hackforums.net/forumdisplay.php?fid=110)
+---- Thread: Backfire - Recover deleted files safely (/showthread.php?tid=5573250)
Backfire - Recover deleted files safely - Axion - Mar 12, 2017
About
- The program can retrieve deleted files without corrupting them (unless they already were).
- If the program was protected by something like Themida, after it's deleted it won't work anymore as Themdia will believe it has been tampered with.
Additional
- Do not spam buttons, it works without needing to do that.
- If it ever gets stuck, leave it, it's not actually stuck, it's because it sometimes doesn't have permission to step into some folders so it tries to anyway but will skip it eventually.
Downloads (Click to View)
Screenshot
![[Image: ejw7xta.png]](https://i.imgur.com/ejw7xta.png)
* - Soulmate～っ☆ - Mar 12, 2017
Why do you have so much neg rep for distributing infected links? Also, what makes this tool better than the one used to retrieve deleted files with Kali?
* - Axion - Mar 12, 2017
@Soulmate Because of some retards on the forum, you know, I released a crypter and it didn't work for them and they said it was a keylogger, I don't understand it myself.
And it's for people that don't know about the fact that you can do it with Kali (like me) or don't have Kali, isn't it obvious?
* - Cecilia - Mar 12, 2017
Why did you not share the sample with the community?
Why the huge process spawn list?
I'll take a look at it.
Very poor code, seems to only recover things from your recycling bin...
Requires admin access because it outputs to a static path...
Not sure about your entire progress bar or whatever it is called.
Still not sure whether it's got a backdoor in it somewhere, too many classes (user controls mainly).
I'd avoid it though, much better recovery options.
* - Soulmate～っ☆ - Mar 12, 2017
(Mar 12, 2017 01:39 PM)Axion Wrote: @Soulmate Because of some retards on the forum, you know, I released a crypter and it didn't work for them and they said it was a keylogger, I don't understand it myself.
And it's for people that don't know about the fact that you can do it with Kali (like me) or don't have Kali, isn't it obvious?
I would still rather go through the process of installing Kali than take the risk with this program, the post above me sums it up pretty well.
* - JoshuTee - Mar 12, 2017
I'm just posting to keep updated
* - .eXe - Mar 13, 2017
![[Image: n3jqpgx.png]](https://i.imgur.com/n3jqpgx.png)
No file recovery program should be detected.
![[Image: o5AUJ5M.png]](https://i.imgur.com/o5AUJ5M.png)
* - Axion - Mar 13, 2017
Yeah the report also says something about TCP/IP though the code never at any point communicates to the internet, also it is definitely programmed to multiply itself.
@LaPanthere Do you know any other methods? If you don't recover it from the recycle bin folder I have no idea where else you could get your deleted files from? Please tell me if you know I could make a much better one.
Also, the progress bar error is from the one that made the theme.
* - .eXe - Mar 13, 2017
(Mar 13, 2017 05:21 AM)Axion Wrote: Yeah the report also says something about TCP/IP though the code never at any point communicates to the internet, also it is definitely programmed to multiply itself.
@LaPanthere Do you know any other methods? If you don't recover it from the recycle bin folder I have no idea where else you could get your deleted files from? Please tell me if you know I could make a much better one.
Also, the progress bar error is from the one that made the theme.
Recovery programs search the "deleted" sectors of the hard drive.
If it's programmed to reproduce its self, it's dodgy. Why are you posting it here?