All MDB Files corrupted, no change to Modified date.

[stonecipher]

Has anyone seen this? I'm talking hundreds of files at the same time j000123.mdb thru j000425.mdb all the modified/access dates are where they should be, months old.

looking into the file, the file is completely random data. same size date etc, but contents are destroyed.

All we can think of is virus activity.

[zmbd]

Most likely a Virus.
If the file is touched by Access via the OS-File system, then the mod/access dates would have been changed.

You need to isolate your network and get a heavy weight virus scanner running a "deep scan" of the drives.

Hopefully, your IT staff has the Backup Mantra as an earwig and will be able to recover your data.

[nutmegs]

This is what was the culprit for us.

http://www.bleepingcomputer.com/viru...re-information

[zmbd]

Thank You Nutmegs for posting back the solution you found. I truely hope the best for your data recovery efforts!

I have a friend that fell prey to this type of infection last year... we simply re-imaged the drive from backup and made sure that all of the Anti-virus/malware/firewalls were up to date. Turns out that someone found a back door in his enterprise proxy that allowed access to a "social" site which was the vector for the ransomeware infestation. (0~0)
Needless to state, he's upgraded to a new proxy-server.

As I noted in my origninal reply to OP, The corruption of a file in the manner noted is almost certainly caused by a virus. Any action taken under normal operating system methods will 99% of the time touch the file; thus, accessed and modified date stamps will be changed.

Even if we keep our personal and enterprise antivirus/malware software up to date, install firewalls, user restrictions, authentications, and try everything else under the sun including safe-computing, there is only one sure fire way to keep sensitive data safe: Backups, preferably multiple and at the server level whenever possible.