Solved

magical disappearing documents

Posted on 2011-03-07
7
324 Views
Last Modified: 2012-05-11
We have our personal folders default to the network drive instead of the local drive.  Our user has been working for two weeks on various documents.  
After lunch all of a sudden, no documents are populated in the folder.
Furthermore, no documents are on the backup tape.

Now we are wondering:
1 What could cause a documents folder to initialized to default settings?
2 What would allow the user to reboot many times in the past, and then have this change after another normal reboot?  
3 This documents did exist, do you know of any low-level file searches that will not be broken by permission settings?
0
Comment
Question by:jn2112
  • 4
  • 3
7 Comments
 
LVL 3

Expert Comment

by:lloydclinton
ID: 35063090
Many of the times offline files will kick in when you configure document redirection.  I have seen it turn on without asking.  Check the following directories:

C:\ Documents and Settings\<username>\Application Data\Microsoft

C:\ Documents and Settings\<username>\Local Settings\Temp
0
 
LVL 3

Expert Comment

by:lloydclinton
ID: 35063208
if that doesn't work:

The offline files are cashed in directories located
"%systemroot"/CSC/% these directories are labeled d1,d2,d3, .... You can
locate the your file by the files data/time stamp and size. If you copy
the file to a temporary location and rename it to the name and extension
needed you will be able to open it
0
 

Author Comment

by:jn2112
ID: 35069633
i did try both
this is a windows 7 os
i did find the win 7 equivalent pathing of the above

at the end of the rabbit trail, i did manage to locate the proper locations.  the folders where empty except for the dummy documents we put in for testing purposes
0
Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 
LVL 3

Expert Comment

by:lloydclinton
ID: 35071722
Not good!  Check the servers again to be sure and maybe try a recovery piece of software like Recuva (http://www.recuva.com) on the machine.
0
 

Author Comment

by:jn2112
ID: 35088268
We never could find those objects.  

I was able to prove the backup software is including that pc.  
I like your input, those are good tries, but we never did find those docs.

the recuva did not find them either.

if you have another ideas or tricks, we will try them.
At this point the end user has moved on and started recreating their stuff.
0
 
LVL 3

Accepted Solution

by:
lloydclinton earned 500 total points
ID: 35088285
Sorry to hear that it has come to this.  I can't think of anything else that may be helpful here and for expediency it may be best that the documents are recreated.
0
 

Author Closing Comment

by:jn2112
ID: 35088587
good input
we never could get what we are looking 4
im not sure anyone could
0

Featured Post

Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

Join & Write a Comment

Suggested Solutions

When you upgrade from Windows 8 to 8.1 or to Windows 10 or if you are like me you are on the Insider Program you may find yourself with many 450MB recovery partitions.  With a traditional disk that may not be a problem but with relatively smaller SS…
Citrix XenApp, Internet Explorer 11 set to Enterprise Mode and using central hosted sites.xml file.
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now