Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Need help restoring lost data after nasty virus. Everything hidden.

07 Jan 2012   #1

Windows 7 Ultimate x64
Need help restoring lost data after nasty virus. Everything hidden.

I got a nasty virus a few days ago and my MSE and Malwarebytes kept taking care of it but it kept coming back.

Finally my computer crashed and upon reboot, EVERYTHING was gone. By gone my computer would still boot but it was loading a default desktop with ALL my icons gone and when I would try to access my C: drive, it showed that it was completely empty. Looking in "My Computer" the space was still used though.

Next looking at my D: and E: drives (2TB and 3TB WDC's) I found the same issue. My Computer showed the amount of space I expected to see take and free was correct but when I would access them, they were empty like freshly formatted drives.

I fired up a command window and did the following:

attrib -h -r -s /s /d X:\*.*

X being the drive letter in question at the time. This seems to have restored MOST of my folders on my D: and E: drives. However something were still locked out with the following style errors:

Access denied - E:\<Folder Name Here>

Some of the stuff was restored, a ton was not.

Also, some of the folders that were unhidden STILL show as "access denied" when I try to enter/access them. I can get into them as I'm an "admin" on this system but I'm curious as to why I get this error?

How do I just reset all my permissions so it's like it should be if the drive was FRESH.


My System SpecsSystem Spec
07 Jan 2012   #2

Windows 7 Ultimate x64


It just hit me... I needed to run the command window as "administrator" before executing the attrib commands to have it restore ALL the folders. OK! All my folders are now visible.

HOWEVER when I click on some of them, I still get access denied before going into them. I'd still like to know WHY that is. I can access them as I'm an admin but it still throws the error before opening them and I have to click continue.

My System SpecsSystem Spec
07 Jan 2012   #3
Microsoft MVP


Try this: Take Ownership Shortcut

Copy out your files to external HD now, then run Malwarebytes and AV scans again.

You'll likely need to wipe the HD to clean reinstall Win7 as it's hard to shake off all of the effects and often easier to get a perfect reinstall, backup an image so you only have to do it once.

Reinstalling Windows 7
My System SpecsSystem Spec

07 Jan 2012   #4

win7 ultimate 32bit

what is/was the name of the 'nasty virus?--maybe it is actually 'nasty' malware--googling 'remove (name)' should allow you to find info on bleepingcomputer for malware removal.

also try downloading and running RKill and unhide

here is one example--with links to 'unhide' and 'RKill'

Remove Windows Recovery (Uninstall Guide)
My System SpecsSystem Spec

 Need help restoring lost data after nasty virus. Everything hidden.

Thread Tools

Similar help and support threads
Thread Forum
lost 600gb of data by restoring a .spf image to wrong drive
Hi, I have a 1 tb hard drive in 2 partitions. a 679Gb partition and a 250 gb partition. i had about 600 gb of files on the 679 gb partition. i had a 513 mb .spf backup image created by shadow protect. i accidentally restored the 513 mb .spf image to the 679 gb partition and then the 600 gb of files...
General Discussion
Hidden Nasty
I have had a thread running for a few days now regarding this issue but I thought it pertinent to post this: This is a copy of a report I have just sent to PayPal: I appreciate that the problem is with my computer and not your organisation but this Phishing Trojan is targeting your site so it...
System Security
One Nasty Virus (Several Issues occuring)
Well, I've always considered myself as someone who would never have to ask for help, I've always had a great understanding of computers, however I am stumped as to where to go now. I cannot find any solutions or help on Google, so that's why I'm here now. I have a fairly odd virus that's been...
System Security
Hidden Win Updates are restoring on their own
Twice now I have had all the updates that I have hidden become unhidden and indicate by bubble message that "updates are ready to be downloaded and installed." Since these are mostly language packs they are NOT required for my system. Any idea why this has happened? This last time this...
Windows Updates & Activation
A Nasty Virus
I have a nasty virus, and I need some advice of what to do. First of all, it won't go away, I've scanned with malwarebytes, and like 5 different AV scanners. For this reason I'm thinking it was more of a physical prank then a virus. Basically my user account got turned into a guest. The...
System Security

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 11:37.
Twitter Facebook Google+