Need help restoring lost data after nasty virus. Everything hidden.

[kdogg]

I got a nasty virus a few days ago and my MSE and Malwarebytes kept taking care of it but it kept coming back.

Finally my computer crashed and upon reboot, EVERYTHING was gone. By gone my computer would still boot but it was loading a default desktop with ALL my icons gone and when I would try to access my C: drive, it showed that it was completely empty. Looking in "My Computer" the space was still used though.

Next looking at my D: and E: drives (2TB and 3TB WDC's) I found the same issue. My Computer showed the amount of space I expected to see take and free was correct but when I would access them, they were empty like freshly formatted drives.

I fired up a command window and did the following:

attrib -h -r -s /s /d X:\*.*

X being the drive letter in question at the time. This seems to have restored MOST of my folders on my D: and E: drives. However something were still locked out with the following style errors:

Access denied - E:\<Folder Name Here>

Some of the stuff was restored, a ton was not.

Also, some of the folders that were unhidden STILL show as "access denied" when I try to enter/access them. I can get into them as I'm an "admin" on this system but I'm curious as to why I get this error?

How do I just reset all my permissions so it's like it should be if the drive was FRESH.

Thanks!

 

[kdogg]

*Update*

It just hit me... I needed to run the command window as "administrator" before executing the attrib commands to have it restore ALL the folders. OK! All my folders are now visible.

HOWEVER when I click on some of them, I still get access denied before going into them. I'd still like to know WHY that is. I can access them as I'm an admin but it still throws the error before opening them and I have to click continue.

Thanks!

 

[gregrocker]

Try this: Take Ownership Shortcut

Copy out your files to external HD now, then run Malwarebytes and AV scans again.

You'll likely need to wipe the HD to clean reinstall Win7 as it's hard to shake off all of the effects and often easier to get a perfect reinstall, backup an image so you only have to do it once.

Reinstalling Windows 7

 

[tman69]

what is/was the name of the 'nasty virus?--maybe it is actually 'nasty' malware--googling 'remove (name)' should allow you to find info on bleepingcomputer for malware removal.

also try downloading and running RKill and unhide

here is one example--with links to 'unhide' and 'RKill'

Remove Windows Recovery (Uninstall Guide)