Solved Lost User Profile/directory

[DavyB]

I have just realised that I have lost my original directory structure under my user name. Hence I cannot access my data through explorer.
I can still access some of it from applications or the Start Menu using recent files.
So the structure is there but does not show in Explorer.
If I type the structure in; such as C:\Users\Dave\Documents\Long Sutton Seniors Fixtures I can see the files in this folder but not the sub-folders.
I do have a structure of C:\Users\Dave\Documents with two default folders that are empty.
I tried to create a new folders called 'Long Sutton Seniors Fixtures'. I was told the folder already existed and did I want too merge the folders. On replying Yes the notice closed and the folder was not displayed in explorer.
Anybody got any idea how I can recover the data?

 

[writhziden]

Do the following in an http://www.sevenforums.com/tutorials/783-elevated-command-prompt.html

cd C:\Users\Dave\Documents
dir /a

If the directory you are looking for shows up, then do the following for each directory you want "restored":

attrib /s /d -h -s "<directory>"

For instance:

attrib /s /d -h -s "Long Sutton Seniors Fixtures"

 

[DavyB]

writhziden
Thanks for that suggestion. I have recovered the Long Sutton Seniors Fixtures Directory and now I have to recover another 43 directories before I start on the numerous sub-directories. Looks like it is going to be a boring weekend.
Thanks again

 

[karlsnooks]

Davy,
Of concern to me is: How did this happen?

If you have no explanation, then I suspect malware, in which case, I very strongly recommend the following:


HOW TO USE WINDOWS DEFENDER OFFLINE ON A USB STICK
Windows Defender Offline
• is a free standalone, bootable malware and virus remover from Microsoft.
• performs an offline scan of an infected PC to remove viruses, rootkits and other advanced malware.

Download Windows Defender Offline (about 764 kB)

You will have the choice of downloading the 32bit version (x86) or the 64 bit version (x64).
The link will help you determine whether you are running a 32 bit version or 64 bit version of Windows

NOTE!! You can download and prepare a 32 bit version using a 64 bit version of Windows
NOTE!! You can download and prepare a 64 bit version using a 32bit version of Windows.

You run the 32 bit version on a 32 bit version of Windows.
You run the 64 bit version on a 64 bit version of Windows.

The 32 bit download file name is: mssstool32.exe
The 64 bit download file name is: mssstool64.exe

For the curious, this program was originally name Microsoft Standalone System Sweeper.


INSTALLATION:
You will need an Internet Connection.
Insert 512 mB (Microsoft’s 256 mB is no longer accurate) or larger USB stick into a usb port.
Run the downloaded program--mssstool64.exe or mssstool32.exe
NEXT button
Choose the option On a USB flash drive that is not password protected
NEXT button
NEXT button
.
The install program will format the usb stick using the NTFS format.
The install program will download about 210 mB.
The install program will name the USB stick WDO_Media32 or WDO_Media64
The WDO_Media32 usb stick will have used space of 255 mB (268,140,544 bytes)
The WDO_Media64 usb stick will have used space of 282 mB (296,165,376 bytes)
You can expect the number of mB to increase as more malware appears.

UPDATE Windows Defender Offline USB stick:
• reinsert the usb stick
• run the installation program, mssstool64.exe or mssstool32.exe, again.
• the update will download about 66 mB (mssstool32.exe) and 68 mB (mssstool64.exe).

Since the malware database is sometimes updated several times in a day, always update before running.

PERFORM AN OFFLINE SCAN
Bootup your computer from the USB stick
Windows Defender Offline will automatically perform a quick scan.
After the quick scan finishes, Choose Full Scan
Select all of your drives

The initial, full scan can easily take several hours, but
Remember, your computer is being very thoroughly checked for all types of malware.

RESULTS OF THE SCAN
The results will be in 4 log files on your computer's disk in:
\Windows\Microsoft Antimalware\Support

Upload the four log files please.

 

[writhziden]

If they are all within your Documents folder:

cd C:\Users\Dave
attrib /s /d -h -s Documents

That should recover all directories inside the Documents folder.


Also, Karl is right. You really should find out why this is happening or it will continue to happen and you may have other issues crop up beyond this one.

 

[karlsnooks]

I just noticed that I've lost some formatting.

Am trying out Chrome, although I suspect other problems.

Consequently, the link for Windows Defender Offline, WDO, is in my signature.

 

[DavyB]

writhziden

I typed in attrib /s /d -h -s Dave because I could not see my directory under Users.
Dave now appears in the Users directory but I can only see the Documents and Long Sutton Seniors Fixtures directories as I also reset their attributes.
This does not seem to be resetting the attributes of the files and sub-directories.
I will follow Karls advice. I have McAfee security so I am a bit surprised if I have malware.
My thoughts were that a recent windows update had malfunctioned and was planning to undertake a restore.
However I have noticed that the Accessories folder in the START menu has also disappeared.

 

[DavyB]

Karlsnooks

Thanks for the advice which I shall look into.

 

[karlsnooks]

Definitely immediately check for malware using Windows Defender Offline, WDO, link in my signature.

McAffee (also known as muckaffe) doesn't enjoy a good reputation.

After running WDO, then uninstall McAfee and install MSE, Microsoft Security Esssentials, link in my signature.

http://service.mcafee.com/FAQDocument.aspx?id=TS100507

 

[DavyB]

Karl
Downloading WDO now. As it is 23.35 hours here I will most probably run this tomorrow.

 

[karlsnooks]

I understand, but be aware that, depending on the size of your disk, WDO can take up to half a day. Although, it's only an hour on my laptop which also has a SSD.

 

[DavyB]

Karlsnooks
Ran WDO with no problems found; so at least I am certain there is no Malware.
Will look to doing a restore back to the previouse version of Windows.

 

[writhziden]

WDO does not usually pick up the fakerean or fakeHDD malicious items. I usually recommend the Fakerean removal tool.

After running that, you may need to run unhide.

 

[karlsnooks]

I've never had it miss.

Perfect record.

I've known of people to turn around and reinfect themselves immediately.

Remember, WDO is an offline program WDO is NOT Windows Defender. WDO doesn't fire up Win 7 and examines boot sectors, in fact, everything for all known malware and viruses without the programs ever being aware that WDO is running.

 

[karlsnooks]

True, the default scan is a quick scan which is why my instructions call for a full and complete scan.

Quick scan is going to hit boot sector, system files, and other common hiding places.

 

[DavyB]

Karlsnooks
I ran a full scan over night approx 11 hours to complete. No problems found.

 

[karlsnooks]

Please post up the LOG files mentioned in the write-up.
thanks, karl

 

[DavyB]

writhziden
I have run the Fakerean removal tool followed by unhide.
All seems to be OK. I can now see my files plus the missing icons on the desktop.
Thanks very much

 

[DavyB]

Karlsnooks
How do I post the logs?
Note: the problem has been resolved using the Fakerean removal tool followed by unhide as recommended by writhziden.

 

[DavyB]

Karl

Here is a zip file of the logs.