Re: Ransomware corrupted MySQL database

[Rodney Overcash]

"bloopdymindedness, stupidity" is being kind. I don't understand either.

Now that I am on their server, I did find a folder called "backup" one level up from the database base directory last modified 12/03/2020. In it are subfolders "ecwmysqlbkpmanager" and "Logs". Also, a file with an extension of ".sql". It's a few months old. It's large. In MSSQL, an ext of SQL is a stored script. This looks like some data.

How do I determine the version of the MySQL install? I have been stopping and starting MySQL from the system components screen. It does not have a version showing there.

Some folders have only .frm and .ibd. Others have mostly .frm and .ibd with a third table file of no extension. There are some folders with mostly .frm, . ibd, and a few .MYI. and . MYD. There is a folder called "mysql" with .frm, .MYI and .MYD

It looks like all of these files have data, based on sizes.

I will look at other steps you mentioned tomorrow.

We need a MySQL expert willing to log on with me to help these people.