How do I find what files were deleted?

[homeinn]

My wifes computer packed in so I removed her hard drive and connected it as a second hard drive in my machine. I rebooted and left the room for a minute. When I returned the screen was scrolling in what I'll call dos mode and stating "critical error deleting file. I pulled the plug in panic before I saw what was being deleted and from what drive. I removed the second drive and rebooted no problem. Is there a log that shows what files were being deleted?

 

[Ztruker]

Depends on what was deleting the file. If it was your anti-virus then there may be a record. Otherwise, probbably not.

 

[Layback Bear]

In your working computer is their anything in the Recycle Bin that might of come from you add in drive. I don't understand how a dos looking mode scan would start without a command being given using something like cmd prompt or Power Shell. No anti virus program that I have ever use ever give me a appearance like a dos screen.

 

[mitchell65]

My wifes computer packed in so I removed her hard drive and connected it as a second hard drive in my machine. I rebooted and left the room for a minute. When I returned the screen was scrolling in what I'll call dos mode and stating "critical error deleting file. I pulled the plug in panic before I saw what was being deleted and from what drive. I removed the second drive and rebooted no problem. Is there a log that shows what files were being deleted?

So long as you haven't tried to save anything else to that drive you could try Recuver to see what that finds, worth a try I should think

 

[homeinn]

Thanks to all

Nothing in the recycle. Only thing I could think of was a virus on the old hard drive. That may be why the old comp no longer starts.

 

[karlsnooks]

homeinn,

On a good machine, put WDO on a USB stick.
Reconnect the old drive to your good machine.

Boot up from the USB stick.
When that initial quick scan finishes, then run a custom scan choosing ALL drives on the good disk and on the bad disk.

This full, custom scan is going to take several hours. When you get ready to retire, boot from that usb stick, run the quick scan, start the full custom scan and go to bed.

When you wake up, you can put the old drive back into her machine and boot the machine up safely at least.

Only after your drives have a clean bill of health should any restore operations be tried.

HOW TO USE MICROSOFT'S OFFLINE MALWARE REMOVER
Windows Defender Offline
· performs an offline scan of an infected PC to remove viruses, rootkits and other advanced malware.
· is a free standalone, bootable malware and virus remover from Microsoft.

Download Windows Defender Offline (about 785 kB)
You will have the choice of downloading the 32bit version (x86) or the 64 bit version (x64).
The link will help you determine whether you are running a 32 bit version or 64 bit version of Windows

NOTE!! You can download and prepare a 32 bit version using a 64 bit version of Windows
NOTE!! You can download and prepare a 64 bit version using a 32bit version of Windows.

You run the 32 bit version on a 32 bit version of Windows.
You run the 64 bit version on a 64 bit version of Windows.

The 32 bit download file name is: mssstool32.exe
The 64 bit download file name is: mssstool64.exe

For the curious, this program was originally name Microsoft Standalone System Sweeper.


INSTALLATION:
· Requires an Internet Connection.
· Insert 512 mB or larger USB stick into a usb port.
· Run the downloaded program--mssstool64.exe or mssstool32.exe
· NEXT button
· Choose the option On a USB flash drive that is not password protected
· NEXT button
· NEXT button
.
The install program will:
· format the usb stick using the NTFS format.
· download less than 230 mB.
· name the USB stick WDO_Media32 or WDO_Media64
· use less than 300 mB.

How to UPDATE the Windows Defender Offline USB stick:
· reinsert the usb stick
· run the installation program, mssstool64.exe or mssstool32.exe, again.
· the update will download less than 65 mB.

Since the malware database is sometimes updated several times in a day, always update before running.

PERFORM AN OFFLINE SCAN
Bootup your computer from the USB stick
Windows Defender Offline will automatically perform a quick scan.
After the quick scan finishes, Choose Full Scan
Select all of your drives

The initial, full scan can easily take several hours, but
Remember, your computer is being very thoroughly checked for all types of malware.