mutec1
asked on
User is missing files
User stated that her computer had some files on her desktop and that a message appeared that the computer was being accessed, the screen flashed then all the documents on her desktop disappeared.
Is this virus behavior is there some log that can be checked to see if someone accessed the computer.
Is there software that can recover missing files?
Is this virus behavior is there some log that can be checked to see if someone accessed the computer.
Is there software that can recover missing files?
Check the logs to start with but it sounds like someone was remotely connected to her computer. Check the security log and system log for evidence of what happened.
ASKER CERTIFIED SOLUTION
membership
Create a free account to see this answer
Signing up is free and takes 30 seconds. No credit card required.
a standalone system or connected to a domain?
have you tried checking under C:\Documents and Settings\her username\Desktop folder to check if you can the vanished files there?
if they are really gone, dont use the system anymore as there are chances that the deleted data will be over-written
take out the drive, slave it in anohter system for best results, and install GetDataBack on the other system for recovering the missing data
http://www.runtime.org/
have you tried checking under C:\Documents and Settings\her username\Desktop folder to check if you can the vanished files there?
if they are really gone, dont use the system anymore as there are chances that the deleted data will be over-written
take out the drive, slave it in anohter system for best results, and install GetDataBack on the other system for recovering the missing data
http://www.runtime.org/
If you can't find the files anywhere on the PC, the best solution would be as "SheharyaarSaahil" stated to take out the HDD so you don't overwrite the data and either try to recover your data yourself using a recovery tool as "FILE SCAVENGER" (This is what I use). Or take the disk to a shop and have them do it for you.
In any way you should really try to avoid using the disk as once the data is overwritten it will be gone for good.
Hope this helps.
In any way you should really try to avoid using the disk as once the data is overwritten it will be gone for good.
Hope this helps.
Next install and do a quick scan with Malwarebyte's anti-malware:
http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html
Reboot if requested. Post log of results.