Windows 7 virus removed shortcuts and folder permisions

6

1

A friend's machine has become infected with a virus which seems to have messed up his Windows 7 set up quite a bit. This computer only has one user. When he logs in all desktop icons are gone and all shortcuts under All Programs are missing (the folders are there but not any shortcuts to the program). The programs and files are still there as far as I can tell.

  1. I can start typing "itunes" in the Start Menu search box - the program will show up and run.

  2. The My Documents folder is empty even though there should be a number of Word documents and folders. The strange thing is that when I run WinDirStat under C:\Users\Ashley\Documents I can see all the missing folders and files but when I try to explore from there it is empty.

The situation is like I'm logged in as Ashley but Windows has reset all the basic settings, e.g. where the My Documents folder is.

At this stage I just want to reinstall Windows 7 but I first want to copy the My Documents folder to an external hard drive. Windows Exporer / My Computer won't let me see the files even though I know they are there after using WinDirStat. I thought I might be able to see them from a Command Prompt but that also shows an empty folder.

Does anyone have any ideas what software I can use or steps I can take to copy the files, or perhaps even some insight into what might have happened?

PS. the virus was detected by Windows Security Essentials (Norton missed it) and consequently deleted.

Derek Organ

Posted 2011-05-17T20:11:23.160

Reputation: 195

4I'd say: Boot with a Linux Live CD and see what you can find. – slhck – 2011-05-17T20:17:48.007

Norton's core strategy, like that of most other av's, is becoming outmoded. Linux is still the best anti-virus. – Blomkvist – 2011-05-17T20:41:33.720

Answers

3

Everything has been hidden. Go into folder view options, and show hidden files and folders, as well as system files.

user76211

Posted 2011-05-17T20:11:23.160

Reputation:

thanks, that is all it was. I have copied the files to external hd and am now going to reinstall Windows 7 – Derek Organ – 2011-05-19T23:06:42.133

1

It might be worth doing a system restore using a restore point from before the virus attack. I would think that would correct the missing shortcuts, etc.

Zooks64

Posted 2011-05-17T20:11:23.160

Reputation: 1 938

0

The other answers are great but if you still can't see your files, you could try opening a Command Prompt and using the 'copy' command to backup your files.

You can do this with the following:

  1. Open a Command Prompt by typing cmd in the Start > Run box.
  2. Change to the directory you want to copy from:

    cd C:\Users\Ashley\Documents
    
  3. Type:

    copy *.* F:
    

    Replacing the letter F with whichever letter your external drive uses.

BlueMerlin

Posted 2011-05-17T20:11:23.160

Reputation: 66