Author Topic: Boot time scan deleted all my files!  (Read 38685 times)

0 Members and 1 Guest are viewing this topic.

Offline Jelika

  • Jr. Member
  • **
  • Posts: 32
Re: Boot time scan deleted all my files!
« Reply #30 on: August 25, 2012, 05:45:29 PM »
I can't see that line in the script. All you gave me is this:

netsvcs
%SYSTEMDRIVE%\*.exe
/md5start
services.*
explorer.exe
winlogon.exe
Userinit.exe
svchost.exe
qmgr.dll
/md5stop
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BITS /s
CREATERESTOREPOINT

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40627
  • Dragons by Sasha
    • Malware fixes
Re: Boot time scan deleted all my files!
« Reply #31 on: August 25, 2012, 06:10:19 PM »
See Post 28

Offline Jelika

  • Jr. Member
  • **
  • Posts: 32
Re: Boot time scan deleted all my files!
« Reply #32 on: August 25, 2012, 08:13:23 PM »
All done.
Log attached.
What's next?
Do I need to reboot? Because I still don't have any of my data.

Also, I must mention that the folder with my name does not have a folder named 'Start Menu' so I used C:\Documents and Settings\Default User\Start Menu instead. The other choices are Administrator, All Users, Linda (that's me), Local Service and Network service

Perhaps I used the wrong folder?
« Last Edit: August 25, 2012, 08:29:05 PM by Jelika »

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40627
  • Dragons by Sasha
    • Malware fixes
Re: Boot time scan deleted all my files!
« Reply #33 on: August 25, 2012, 09:06:50 PM »
Create an empty folder with your name

i.e.  C:\Documents and Settings\Linda\Start Menu

And then populate that one as previous...

Once done let me know what problems remain

Offline Jelika

  • Jr. Member
  • **
  • Posts: 32
Re: Boot time scan deleted all my files!
« Reply #34 on: August 25, 2012, 10:08:39 PM »
OK, re-did it right this time. What's missing are all my documents, images, music and videos as well as my Outlook folders, calendar, contact etc.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40627
  • Dragons by Sasha
    • Malware fixes
Re: Boot time scan deleted all my files!
« Reply #35 on: August 25, 2012, 11:33:15 PM »
Could you run RogueKiller one more time please and select  the shortcut fix

  • Next click on the ShortcutsFix   

  • The report has been created on the desktop.
Please post:    All RKreport.txt text files located on your desktop.

Offline Jelika

  • Jr. Member
  • **
  • Posts: 32
Re: Boot time scan deleted all my files!
« Reply #36 on: August 26, 2012, 12:03:21 AM »
Here we go

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40627
  • Dragons by Sasha
    • Malware fixes
Re: Boot time scan deleted all my files!
« Reply #37 on: August 26, 2012, 12:58:40 PM »
What are we missing now... Could you screenshot it

Offline Jelika

  • Jr. Member
  • **
  • Posts: 32
Re: Boot time scan deleted all my files!
« Reply #38 on: August 26, 2012, 01:24:21 PM »
What's missing are all my documents, images, music and videos as well as my Outlook folders, calendar, contact etc.
Previous step did not resolve my problem unfortunately.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40627
  • Dragons by Sasha
    • Malware fixes
Re: Boot time scan deleted all my files!
« Reply #39 on: August 26, 2012, 01:27:47 PM »
Is it the files themselves or just the shortcuts ?

Offline Jelika

  • Jr. Member
  • **
  • Posts: 32
Re: Boot time scan deleted all my files!
« Reply #40 on: August 26, 2012, 02:36:44 PM »
If I search some of the files individually I can find them and see the path for example C:\My Documents\My Pictures, but that folder does not exist on my computer anymore (seems to have been replaced by: C:\Documents and Settings\Administrator.N-2E4C3D3E87CC4\My Documents\My Pictures which is empty, so I guess the answer is the shortcuts?

Another thing weird I should mention. I just looked at the program shortcuts and found this file (see attachment)  that is not a program but a .ini file (which I converted to .txt in order to upload it  and the modification date is exactly the date I lost everything. Could this help you?
« Last Edit: August 26, 2012, 02:54:28 PM by Jelika »

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40627
  • Dragons by Sasha
    • Malware fixes
Re: Boot time scan deleted all my files!
« Reply #41 on: August 26, 2012, 02:58:40 PM »
The desktop ini is a system file which will be hidden later

Did you do this step on the affected login  ?


This next one will produce the necessary shortcut links which you can cut and paste into the start menu folder
Download the repair.vbs file to your destop
Run the repair.vbs
It will ask for a folder name call it recovery
The tool will let you know when it is finished
On the desktop will be a recovery folder 
Open the folder
Cut and Paste the links that you want to C:\documents and settings\your name\start menu






Offline Jelika

  • Jr. Member
  • **
  • Posts: 32
Re: Boot time scan deleted all my files!
« Reply #42 on: August 26, 2012, 03:07:41 PM »
Yes I did. I double checked all of the steps you gave me and did it in the correct order.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40627
  • Dragons by Sasha
    • Malware fixes
Re: Boot time scan deleted all my files!
« Reply #43 on: August 26, 2012, 05:36:52 PM »
Can you locate the folders in windows explorer, right click the folder and select send to... 
Then select desktop shortcut.

If that works then we will do the remainder manually...  However, if the files themselves are missing then we are to late to recover them

Offline Jelika

  • Jr. Member
  • **
  • Posts: 32
Re: Boot time scan deleted all my files!
« Reply #44 on: August 26, 2012, 06:08:00 PM »
I can locate some of them using the search function, but not the main ones like 'My Pictures' - 'My Documents' etc.
I do know that the date itself is still there because I can find it again using specific search but I have so many files and folders I wouldn't know were to begin. It seems as though I lost the file association. For example, if I start Dreamweaver it looks like a clean install and all the folders containing my files are no longer associated with the application etc.

I found this link with a bunch of file association fixes. Should I use it?
http://www.dougknox.com/xp/file_assoc.htm
« Last Edit: August 26, 2012, 06:10:29 PM by Jelika »