I'm facing a strange issue where I have a bunch of folders on a Windows server file share that are missing a lot of files. The only thing I found in these folders is a 0 byte .keep file. I've heard that .keep files are something related to Git, but that doesn't make much sense in this context. Does anyone have any idea what might be going on?
3 Answers
Have you looked at who owns the .keep files? Also, checking the creation and modification dates of those files and the folders could provide some clues.
It sounds like you might be dealing with some sort of ransomware attack. Have you checked if you can restore any of the missing files from your backups?
The owner of the .keep files is actually one of the users with access, not SYSTEM or anything like that. The dates are the same across all affected locations, but some folders are fine. It's odd.
Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures