Solved

EXE Files missing on OS Partition SBS 2008

Posted on 2010-11-19
15
363 Views
Last Modified: 2012-05-10
Hi

I have a customer running SBS 2008 64bit.
There are 3 partitions:
1.      “C Drive” contains OS and other installed programs
2.      “E Drive” contains Exchange
3.      “F Drive” contains all data folders as well as some programs installed there.
They have a 2nd machine running SBS 2003 as a SQL Server.

Last night at approximately 23H30 every exe file on the C Drive disappeared. No other files seem to be affected nor are any files missing in the other partitions. The SQL server and ±30 user pc’s are completely unaffected.
Restore from backup was unsuccessful as it did not see a MS installation. I am now reloading the server and will then restore from the backups.

My question is this: any ideas as to what may have caused this and what we can do to prevent a re-occurrence.
0
Comment
Question by:Deon-YCG
  • 9
  • 6
15 Comments
 
LVL 22

Expert Comment

by:Olaf De Ceuster
ID: 34176959
If nothing is affected it has to be an issue with what you are viewing or the explorer shell?
Just as a test can you: Start>Run in search bar> open run and type cmd. Does the command prompt come up?
Olaf
0
 
LVL 1

Author Comment

by:Deon-YCG
ID: 34177365
Hi

All cmd's seem to work correctly. CMD, ipconfig, eventvwr, services, gpedit, etc

But when you click on any icon, it says the file is miising, when checking the folders there are no exe files.
0
 
LVL 22

Expert Comment

by:Olaf De Ceuster
ID: 34177579
If you did the test using the run command... the system must have found the cmd.exe file to start the command. Meaning it has to be a visual thing.
Please confirm you used the run command?


Try the following:
Click Start > Run > Regedit
Registry Windows will open.
Navigate to the registry folder HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL
Double Click CheckedValue key and modify it to 1.
NOTE: Always back up your registry before editing anything in it.
Olaf
0
 
LVL 1

Author Comment

by:Deon-YCG
ID: 34178697
Harddrive clone is still running, has 17 hours to go. I will then look at the registry and get back to you.

I use CTRL-R to open run cmd
0
 
LVL 22

Expert Comment

by:Olaf De Ceuster
ID: 34178859
Ok Means all exe files are still there.
You just have all exe's hidden.
Regedit should fix that.
Olaf
0
 
LVL 1

Author Comment

by:Deon-YCG
ID: 34181393
Hi. Checked the registry. Everything is as it should be
0
 
LVL 1

Author Comment

by:Deon-YCG
ID: 34181398
Starting to re-install SBS now, have 24 hours in whitch to finish the server and have it delivered
0
Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

 
LVL 22

Expert Comment

by:Olaf De Ceuster
ID: 34182302
Good luck.
Sorry I couldn't be more help.
Olaf
0
 
LVL 1

Author Comment

by:Deon-YCG
ID: 34182868
Thanks for trying though. Had this happened during the week when more experts are online we might have found a solution

Re-installed SBS to "C" drive then ran restore successfully, customer will only lose 2 days of work. Unfortunately back happened at the time of the dissapearance of files so I am reluctant to try save the customer a day and then have to re-do the whole job.

Delivery in 16 hours
0
 
LVL 22

Expert Comment

by:Olaf De Ceuster
ID: 34182909
Heaps of time.
Love IT.
Good luck again.
Olaf
0
 
LVL 1

Author Comment

by:Deon-YCG
ID: 34182930
Thanks. I you love what you do, you will never work another day in your life. Can't remember when last I 'worked' for a living.
0
 
LVL 1

Author Comment

by:Deon-YCG
ID: 34182958
Sorry about that comment:

IF you love what you do, you will never work another day in your life
0
 
LVL 22

Expert Comment

by:Olaf De Ceuster
ID: 34184415
Hope you got it to work.
Sometimes these computers give us the sh... but when we get them working...it feels OK.
0
 
LVL 1

Accepted Solution

by:
Deon-YCG earned 0 total points
ID: 34185425
Reload and restore was successful. On my way to deliver
0
 
LVL 1

Author Closing Comment

by:Deon-YCG
ID: 34281139
Re-load was the only option
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I had a question today where the user wanted to know how to delete an SSL Certificate, so I thought that I would quickly add this How to! Article for your reference. WHY WOULD YOU WANT TO DELETE A CERTIFICATE? 1. If an incorrect certificate was …
Redirected folders in a windows domain can be quite useful for a number of reasons, one of them being that with redirected application data, you can give users more seamless experience when logging into different workstations.  For example, if a use…
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

914 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now