Solved

EXE Files missing on OS Partition SBS 2008

Posted on 2010-11-19
15
360 Views
Last Modified: 2012-05-10
Hi

I have a customer running SBS 2008 64bit.
There are 3 partitions:
1.      “C Drive” contains OS and other installed programs
2.      “E Drive” contains Exchange
3.      “F Drive” contains all data folders as well as some programs installed there.
They have a 2nd machine running SBS 2003 as a SQL Server.

Last night at approximately 23H30 every exe file on the C Drive disappeared. No other files seem to be affected nor are any files missing in the other partitions. The SQL server and ±30 user pc’s are completely unaffected.
Restore from backup was unsuccessful as it did not see a MS installation. I am now reloading the server and will then restore from the backups.

My question is this: any ideas as to what may have caused this and what we can do to prevent a re-occurrence.
0
Comment
Question by:Deon-YCG
  • 9
  • 6
15 Comments
 
LVL 22

Expert Comment

by:Olaf De Ceuster
ID: 34176959
If nothing is affected it has to be an issue with what you are viewing or the explorer shell?
Just as a test can you: Start>Run in search bar> open run and type cmd. Does the command prompt come up?
Olaf
0
 
LVL 1

Author Comment

by:Deon-YCG
ID: 34177365
Hi

All cmd's seem to work correctly. CMD, ipconfig, eventvwr, services, gpedit, etc

But when you click on any icon, it says the file is miising, when checking the folders there are no exe files.
0
 
LVL 22

Expert Comment

by:Olaf De Ceuster
ID: 34177579
If you did the test using the run command... the system must have found the cmd.exe file to start the command. Meaning it has to be a visual thing.
Please confirm you used the run command?


Try the following:
Click Start > Run > Regedit
Registry Windows will open.
Navigate to the registry folder HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL
Double Click CheckedValue key and modify it to 1.
NOTE: Always back up your registry before editing anything in it.
Olaf
0
 
LVL 1

Author Comment

by:Deon-YCG
ID: 34178697
Harddrive clone is still running, has 17 hours to go. I will then look at the registry and get back to you.

I use CTRL-R to open run cmd
0
 
LVL 22

Expert Comment

by:Olaf De Ceuster
ID: 34178859
Ok Means all exe files are still there.
You just have all exe's hidden.
Regedit should fix that.
Olaf
0
 
LVL 1

Author Comment

by:Deon-YCG
ID: 34181393
Hi. Checked the registry. Everything is as it should be
0
 
LVL 1

Author Comment

by:Deon-YCG
ID: 34181398
Starting to re-install SBS now, have 24 hours in whitch to finish the server and have it delivered
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 
LVL 22

Expert Comment

by:Olaf De Ceuster
ID: 34182302
Good luck.
Sorry I couldn't be more help.
Olaf
0
 
LVL 1

Author Comment

by:Deon-YCG
ID: 34182868
Thanks for trying though. Had this happened during the week when more experts are online we might have found a solution

Re-installed SBS to "C" drive then ran restore successfully, customer will only lose 2 days of work. Unfortunately back happened at the time of the dissapearance of files so I am reluctant to try save the customer a day and then have to re-do the whole job.

Delivery in 16 hours
0
 
LVL 22

Expert Comment

by:Olaf De Ceuster
ID: 34182909
Heaps of time.
Love IT.
Good luck again.
Olaf
0
 
LVL 1

Author Comment

by:Deon-YCG
ID: 34182930
Thanks. I you love what you do, you will never work another day in your life. Can't remember when last I 'worked' for a living.
0
 
LVL 1

Author Comment

by:Deon-YCG
ID: 34182958
Sorry about that comment:

IF you love what you do, you will never work another day in your life
0
 
LVL 22

Expert Comment

by:Olaf De Ceuster
ID: 34184415
Hope you got it to work.
Sometimes these computers give us the sh... but when we get them working...it feels OK.
0
 
LVL 1

Accepted Solution

by:
Deon-YCG earned 0 total points
ID: 34185425
Reload and restore was successful. On my way to deliver
0
 
LVL 1

Author Closing Comment

by:Deon-YCG
ID: 34281139
Re-load was the only option
0

Featured Post

Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
Windows Update not working 12 72
Encryption of server 7 68
Restore DNS Record 5 48
cannot unmapped a network drive 10 53
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
A safe way to clean winsxs folder from your windows server 2008 R2 editions
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now