Over 1 million tech questions and answers.

After 'file_recovery' virus removal, system files lost 'system file' attribute

Q: After 'file_recovery' virus removal, system files lost 'system file' attribute

I removed the 'file_recovery' virus and got everything else back to normal using:


which included using unhide.exe, but now I think my system files are all showing, even though I have checked 'hide system files' and 'do not show hidden files'.

If I go to a place where I think there are supposed to be system files that are supposed to be hidden (like windows/system32) and show the 'attributes' column, they say 'A' (archive) is the only attribute.

Shouldn't they say 'S' (system) and 'H' (hidden)? If so, is there a way to put the 'system' and 'hidden' attributes back on the appropriate files (without doing it manually one by one because that would take forever and I wouldn't know which ones to do)?

I am running Windows Vista.

Thanks! unhide.exe really saved me!

Preferred Solution: After 'file_recovery' virus removal, system files lost 'system file' attribute

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: After 'file_recovery' virus removal, system files lost 'system file' attribute

That's not possible.May be you could ask for Grinler opinion herehttp://www.bleepingcomputer.com/forums/topic405109.htmlgood luck

Read other 1 answers

Due to some virus my some files got hidden with System Files properties.
After I select option "Show Hidden Files and Folders" my files are shown only if I uncheck the "Hide protected operating system files" in Folder Option.

So how can I change properties of My Files to cancel Hidden option???

how to make my files attributes normal from System files??

A:Change System File Hidden attribute to Normal File attribute

Click Start->Run
type cmd

attrib -S C:\1.txt

attrib is keyword to set attribute
-S if for to remove System Attribute

For more info:

Read other 1 answers

Ive got some issues, i d/l several viruses, i tried to clean them up but still having issues. At start up i get a microsoft message saying "userinit logon application" needs to close. I had an error message saying "windows cannot find c:\\windows\system32\rundll.exe" i googled it and beleive i fixed that. I am running avast, and I still get scanner message " network shield blocked access to malicious site dns:\\irc.zief.pl. also on start avast tells me I have a win32rootkit-gen virus, i try to delete it but it always comes back. The other virus is a win32.lksmas.ai which will not delete. I noticed that i cant open my wmp. i ran malware bytes and spybot.
I guess i need alot of help
thank you

Read other answers

Hi, I am brand-new at this. After reading almost everything I can find on your website about the System Restore virus which I had on Dell PC. Using a different PC to communicate, download programs, etc. Running Windows XP Home on infected PC. Had all the messages as described in your System Restore virus tutorial. I was not able to open my security program which is provided by my internet provider and has since that time become outdated, so if I can get my internet back, I can update it and/or possibly purchase a better security option. At first, my internet was still working. After finally getting the virus window to minimize, I got to my home page, but could not get anywhere really. Ran RKill, then TDSS Killer (before the major attach of System Restore, I had been having problems with Google searches, but had no idea that was also a virus issue), Super Antispyware, then ran Malwarebytes program, and finally the Unhide program. After all of this, no internet. Most files reappeared, but lots of them are empty. Went back to your website and read some more. Then backed up my data (C:\), disabled any CD emulation software with DeFogger, ran DDS tool and have attached logs, downloaded GMER, but was not able to run.

DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_26
Run by BYRON LUBER at 6:26:12 on 2011-11-18
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2046.1459 [GMT -6:00]
AV: Charter Security Suit... Read more

A:System Restore, no internet, missing files, file contents after removal

Hello , And to the Bleeping Computer Malware Removal Forum. My name is Elise and I'll be glad to help you with your computer problems.I will be working on your malware issues, this may or may not solve other issues you may have with your machine.Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.The cleaning process is not instant. Logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that happen. Please reply using the Add/Reply button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.Unfortunately, if I do not hear back from you within 5 days, I will be forced to close your topic. If you still need help after I have closed your topic, send me or a moderator a personal message with the address of the thread or feel free to create a new one.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. The topics you are tracking are shown here.-----------------------------------------------------------If you have since resolved the original problem you were having, we would appreciate you... Read more

Read other 70 answers

so I get home from being gone all weekend. computer pops up with the hdd thing and then tries to get me to scan so i immediately shut computer off knowing it cant be good.

I open in safe mode and came straight here followed what I could of the removal logs. Malwarebyte's is 7 days out of date but did find and took care of 32 issues after i got rkill and ran it but still wasn't able to upbate Malwarebytes. Also still see an icon on desktop called File_Recovery so I know it didnt get everything.

so posted up to see what the next step would be to do.

A:Need Help with File_Recovery Removal

Boot into safemode with networkingDownloadTDSSkillerLaunch it.Click on change parameters-Select TDLFS file systemClick on "Scan".Please post the LOG report(log file should be in your C drive) Do not change the default options on scan resultsDownloadaswMBRLaunch it, allow it to download latest Avast! virus definitionsClick the "Scan" button to start scan.After scan finishes,click on Save logPost the log results hereDownloadESET online scannerInstall itClick on START,it should download the virus definitionsWhen scan gets completed,click on LIST of found threatsExport the list to desktop,copy the contents of the text file in your reply

Read other 14 answers

There has to be a better way, right? It all started with GTA Online started crashing, so I had to start doing some system investigating and when I ran System File Checker there were numerous files that it was unable to repair.

I popped my Windows 8 CD in thinking I could just run the repair utility, but I couldn't find anything of the sort. Is that a thing of the past? It seems like in this day and age there has to be a better way than to compare your files with known working versions manually.

I looked through the System File Checker log and found these unresolved errors:

2015-05-18 22:44:19, Info CSI 00001214 [SR] Cannot repair member file [l:24{12}]"utc.app.json" of Microsoft-Windows-Unified-Telemetry-Client, Version = 6.3.9600.17807, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2015-05-18 22:44:19, Info CSI 00001216 [SR] Cannot repair member file [l:66{33}]"telemetry.ASM-WindowsDefault.json" of Microsoft-Windows-Unified-Telemetry-Client, Version = 6.3.9600.17807, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2015-05-18 22:44:20, Info CSI 00001218 [SR] Cannot repair member file [l:... Read more

A:Repairing system files manually from System File Checker

Have you tried running Dism /Online /Cleanup-Image /RestoreHealth with Adm Cmd Prompt.?

When SFC /Scannow corruptions are detected and some can't be repaired that is generally the next step.

Have you installed any Windows Updates lately? KB3022345 has caused file corruptions and crashed the DISM tools on many systems.

Read other 10 answers

I have run System File Checker (sfc) and it found many files that were corrupt and could not be repaired. My PC appears to be running fine - but I am anal about repairing anything that is wrong on my PC. The only suggestion I've received so far was to perform a Repair Install. That's very risky. Does anyone know of a sure fire way of repairing my corrupt files so that sfc /scannow can run again without a hitch? Thank you..................

A:How restore system files when System File Checker won't work

More about System File Checker
Use command prompt to get the log:

findstr /c:"[SR]" %windir%\Logs\CBS\CBS.log >"%userprofile%\Desktop\sfcdetails.txt"

Then follow the corrupted file's path and search for a known good copy of the files (Be careful!)
It is all mentioned the link...
If you are too lazy to read it here:

How to manually replace a corrupted system file with a known good copy of the file
After you determine which system file was corrupted and could not be repaired through the detail information in the Sfcdetails.txt file, find where the corrupted file located, and then manually replace the corrupted file with a known good copy of the file. To do this, follow these steps:

Note You may be able to get a known good copy of the system file from another computer that is running the same version of Windows with your computer. You may perform a System File Checker process on that computer to make sure the system file that you intend to copy is a good copy.
Take administrative ownership of the corrupted system file. To do this, at an elevated command prompt, copy and then paste (or type) the following command, and then press ENTER:
takeown /f Path_And_File_Name
Note The Path_And_File_Name placeholder represents the path and the file name of the corrupted file. For example, type takeown /f C:\windows\system32\jscript.dll.
Grant administrators full access to the corrupted system... Read more

Read other 9 answers

About a month ago I managed to get the infamous System Check virus on my computer. I was shocked that it happened, I was at the time doing a google image search.

Anyway I managed to remove the virus, unhide my files, and restore all my start menu shortcuts. During the removal process, I cleared all of my previous system restores as an extra precaution.

Lately I've been noticing that I have been running quite low on disk space for no known reason. After investigating I saw that my System Volume Information folder is quite large (15GB). Further investigating shows specifically the System Restore folder inside the System Volume Information folder is taking up most of the space. System restore is disabled, there shouldn't be anything in that folder.

It appears the virus attempted to copy the entire contents of my C drive and hide it in the system restore folder. Obviously there isn't enough space on my drive to have everything duplicated, but it did duplicate 15GB of data. I desperately need to reclaim this drive space but no matter what I do, I cannot clear the contents of this folder.

I've tried toggling system restore on and off (it's currently off).

I've tried running an elevated command prompt resizing shadowstorage.

I've tried taking ownership of the folder then simply deleting the files and folders, nothing happens. The files and folders remain where they were.

I've tried disk cleanup, it is unable to find any System Restores and thinks all the data is clean... Read more

A:Can't Clear System Restore Files. System Check Virus the Cause?

Try rebooting after each enabling and disabling of system restore. See if they get deleted. Is 15 GB within the top limit for your hard drive?

Read other 7 answers

I have recently bought a new laptop and it ran fine until I got comcast cable installed in my home. Up to that point everything worked smoothly and had no issues. In the last week however I have had several blue screens of death and random restarts. I have not been able to catch these and stop them (if i could at all) because i was not always at my pc. I have run AVG 2012 Free edition, including AVG PC Health and finally came down to this being the only thing it says that it cannot fix. At one point I even attempted to run a stinger(mcafee) and it resulted in a crash and several more crashes after that. While the crashes have gone away as of two days ago I am still experiencing my windows freezing up and at times (less now but still happening) my internet not being able to connect. At this point I am not sure if I just get a new hard drive and OS or if it can be fixed. This is the file that has come up and it's Russian to me.
AVG PC Tuneup (1/2/2012)
"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{FC17E0A7-EAA9-4902-92F8-C83B9FD02246}\DisplayIcon","Complex","Invalid uninstall entry."

So I guess at this point this noob geek stands back and lets the big dogs look at it yes?

OH, not sure if you need it but I am running windows 7 Premium, and as stated everything was fine until I connected hard wire to the modem I currently ... Read more

A:Connection lost, virus removal not catching one file

Welcome aboard Download Security Check from HERE, and save it to your Desktop. * Double-click SecurityCheck.exe * Follow the onscreen instructions inside of the black box. * A Notepad document should open automatically called checkup.txt; please post the contents of that document.=============================================================================Please download Farbar Service Scanner and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity CenterWindows UpdatePress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply.====================================================================================Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Users, Partitions and Memory sizeClick Go and post the result.=============================================================================Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop. * Double-click mbam-setup.exe and follow the prompts to install the program. * At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware,... Read more

Read other 1 answers

Hi ALl,

My sister was using the laptop browsing on websites and sunddenly the computer went off. Upon restart we could not access Internet Explorer button, the control panel, my computer and all system applications such as them were not visible on the start menu in the corner on the left hand side. All folders/files on the desktop were gone and an antivirus software kept coming up that was not known. I know a bit about computers and run AVG Free in safe mode and removed the anitvirus that was actually the virus itself in form of Trojan virus. This helped slightly but I still cannot see any files/folders that was previous to the virus. AVG now says the computer has no viruses but it is still not back to normal.

Any help will be much appreciated


A:Lost personal files/folders, system files unviewable etc.

Let's see, if we can recover your missing features.Download and run UnHideLet me know, if it worked.Then...Download Security Check from HERE, and save it to your Desktop. * Double-click SecurityCheck.exe * Follow the onscreen instructions inside of the black box. * A Notepad document should open automatically called checkup.txt; please post the contents of that document.=============================================================================Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply.====================================================================================Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result.=============================================================================Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop. * Double-click mbam-setup.exe and ... Read more

Read other 3 answers

Let me share the background quickly. I work at a school as Computer Applications Technology teacher. The students bring homework to school on their flashdrives, and though we have good antivirus software at school, the viruses on their home PC's will often do considerable damage to the data on their flashdrives.

One of the most common problems we have is some virus that sets the "system" attribute on all folders, effectively hiding them, and then creating shortcuts named after those folders, inviting people to double-click them, thereby effectively installing the virus locally (though our antivirus blocks it). So the problem is that those folders (with their homework) can only be revealed by going into "Folder Options" and selecting "Show hidden files and folders" and removing the option to "Hide protected operating system files". This is a big breach in security. So I usually have to change those settings, run the Attrib command in the command line to change all the folders, and then re-enable the settings. All of this takes up valuable time.

What I would like to know is, is there a way to give the attrib command once, thereby changing the attributes on all folders on a specific flashdrive? I played around with the /S /D and *.* settings, but couldn't accomplish anything. Any advice would be greatly appreciated!

Thank you!

A:How do I change system attribute for all folders using command prompt?

it works just fine here

assuming we are in root of the flash drive which holds some files and subfolder with some files with....
attrib +r +s +h /S /D will add these attributes:
-read only
-system file
-is hidden
-Processes matching files and all subfolders.
-Processes folders as well

now if you wanna remove attrubutes for all files in all folders on whole flashdrive do this:
attrib -r -s -h /S /D
this command will remove attrubutes for all files folders and subfolders:
-read only
-system file
-is hidden
-Processes matching files and all subfolders.
-Processes folders as well

it works as expected

you was probably typing something wrong

Read other 4 answers

Hi everybody,

Today I was trying to create a VirtualBox VM that had direct access to a partition which is the only one on its disk. This partition contains non-OS-specific data (including documents and music). The guest OS is Xubuntu and the host OS is Windows 7.

I succeeded in making the disk image for this configuration, only when I tried to write to it from Xubuntu it didn't save the changes (I couldn't see the changes in Windows 7 when I checked out that same partition). I investigated the problem and I found a solution on the internet: I needed to take the disk with the partition on it offline and then clear the "read only" attribute.

The solution involved using the DiskPart utility to perform those steps. I tried to take the disk offline (with Administrator access), but DiskPart gave the following error: "Disk attributes may not be changed on the current system disk or BIOS disk 0." This is strange since that disk isn't actually a system partition: it boots from C: which is where Windows itself is installed.

I ran Disk Manager, and it looked like this:

So it appears a tiny 100MB partition has been added to my second disk, which is the disk containing E: which I want to be able to access from within the VirtualBox VM.

So, I have the following questions:
Is that 100MB partition the reason it won't work?
If so, do I need this partition?
If so, is there a way to move it to my first disk without breaking my Windows installati... Read more

A:I can't take my non-system disk offline to remove its read-only attribute

Just set up E: as a shared folder in VirtualBox. You don't take anything offline, and i highly doubt the entire drive is "read only".


Read other 1 answers

wassssssssuuuuuuuup ppl... hope that the weekend went well...

Ok down to business, i kinda need support, a client has brought in his notebook, unfortunately for him he's file system is lost, on the c drive.

can ne 1 suggest something on how to get it back


A:Lost file system

Read other 12 answers

Hello, I did a windows system recovery on my Microsoft Windows XP media Center Edition 2005 Computer, and lost all my files after this recovery. The files are still in the computer, but I cannot find the files anywhere in the computer. Please help!! Thank You!!

A:Lost Files After Doing System Recovery...please Help!

Well the problem with system restore, it takes you back to that date. I do not believe it will edit those files or not. Might want to check your documents and settings.

To accomplish this go to:

c:\Documents and Settings\(Your user name here) \(users name) Documents (or sometimes just Documents).

Where are all the files your looking for used to be?

Read other 8 answers

I was perusing the internet, specifically baseball statistic sites.
All of a sudden, a box popped up that looked like a Window error message.
It said something like "Your hard drive has failed, reboot now.
I did not reboot.
I immediately performed a System Restore to 3 days ago.

When the computer restarted, I noticed that all of my files were gone from my desktop.
All of my programs and folders are there.
However, all folders are empty and all word/excel files that were on the desktop are gone.

I opened internet explorer and all of my favorites are gone as well.
All of my login names are still there and the saved passwords still work.

I did another system restore to 15 days ago, but the same relults.
I ran CCleaner and everything looks fine.

I would love to be able to get my files, songs, and pictures back.
It would also be convenient to get my internet favorites back.

Any suggestions???



Read other answers

I did system restore of my pc few times in order to undo an installation. I did not keep track of the contents of a folder in desktop all the while. After a couple of system restores I casually checked my folder in desktop and was horrified to all the folders and files deleted except the ones with exe files in them.

I undid the system restores but it still did not restore the files in the folder.

All the files under my documents are intact but files in the folder under desktop have all been deleted except for exe files.

There are procedures in the web to recover files lost due to system restore in windows xp but they do not apply for windows 7.pleasew help

A:Help files lost due to system restore

Try using back up and restore.
It sounds like you are talking about personal files, which should not have been touched.
If they were system files BackUp and Restore will not work.

Read other 9 answers

This is an odd one. After pulling the win7 HDD and doing virus and malware scans I copied my "tool box" folder over to the root. Tool box contains installable Ad-Aware, Malwarebytes, Spybot, and MS security Essientials as well as other tools. So I put the HDD back into its computer and boot win7 to safe mode with networking. When browsing to c:\ToolBox I noticed that tool box was the only folder showing...ah WTH I installed the apps and ran them. Found a few more things & removed. Restarted in normal mode and installed adaware and Security Essientials. AdAware ran fine but Security Essientials was taking forever to complete so I aborted.

Now I turned to my problem of not seeing any files on C even though My Computer showed that it had 50 gig on it. I just finished taking ownership of the C: and got messages that I could not take ownership of pagefile.sys and Hiberfil.sys so I KNOW there are files there...heck windows boots and there are no windows files on any of the hard drives or partitions!

Any ideas folks???

A:Lost all files from system drive?

Hello,I moved this from WIN7 to Am I Infected.This infection family will also hide all the files on your computer from being seen. To make your files visible again, please download the following program to your desktop:Unhide.exe Once the program has been downloaded, double-click on the Unhide.exe icon on your desktop and allow the program to run. This program will remove the +H, or hidden, attribute from all the files on your hard drives. If there are any files that were purposely hidden by you, you will need to hide them again after this tool is run.Next run Malwarebytes

Read other 3 answers

I'm trying to find a source to replace a few lost system files for Windows 98 which had to be deleted due to viral infection. The system still operates, but I'm sure the files are still of some importance and they don't appear to be anywhere on my Win98 cd. The missing files are as follows:


A:Lost Windows System .exe Files

Read other 6 answers

Dell XPS 8500  Windows 8 64 bit
I've had corrupt system files for ages. SFC Scannow has never been able to repair them and I don't have an ISO.  Just ran a scan and it's uglier than I've ever seen it.
In the past week PC performance has plummeted. Terribly slow, including internet. I contacted Dell to get a Win 8 install disk or ISO download. They said that they don't support Win 8 anymore and told me to upgrade. Call me crazy but I always thought that upgrading on top of a bad foundation was a really dumb idea.
I literally live on my PC and it feels like it's going to die on me. Does anyone know how I can get my hands on good copies of the corrupt files? 

A:Corrupt System Files - I'm Lost

Personally, I would backup your personal data, browser bookmarks, and any license files for purchased programs and do a clean install. If the computer was pre-installed with Windows 8 the key is in firmware and will activate again with the Windows 8.1 install once online. 
You can create a DVD or USB or Windows 8.1 using the Media Creation Tool. Select your version, home or pro.
Use the following guide on doing a clean install.
You should install 8.1 as Microsoft no longer supplies security updates for Windows 8.

Read other 11 answers

I understood that System Restore restored the settings to a previous state, but when I used it to stop my Win XP-home ed. computer from continually rebooting, it deleted a recently uploaded folder with jpegs. Is that normal?
Any way to retrieve that folder again, through the OS?
Bill Campa
Long Beach, CA

A:Used System Restore, Lost Pix Files

anything installed after the restore point will no longer be there
go back and undo the restore and try
tapping f8 when booting and choose
last known good configuration

Read other 1 answers

Inadvertently did system recovery instead of sty stem restore. Can find any of my pictures. Is there anyway to recover? Desperate. 7 years of family pictures 

Read other answers

hey i just did a system recovery, thinking it was a system restore, and now all my files are gone. i have a few programs, but other than that it seems as if i just bought the computer, it took me through the welcome speech and everything. i really want my files back, don't care as much about the programs because they are all replaceable, but i had thousands of music files that i really needed. PLEASE HELP ASAP

A:Lost all files in System recovery

Read other 11 answers

I did a non destructive system recover of Windows XP. Now all of "my documents" are missing. I know they are on the drive because the space being used by file is the same. Is there a way for me to recover them.

A:Lost files during system recovery

Here are a couple software programs,

I've had the best data recovery using Get Data Back (runtime software) just used it last month, when a customer did a system recovery without backing up their documents folder. However to see what data will be recovered is a free download, to actually recover the data you will need to buy a license $79.00 for NTFS, and 69.00 for FAT

Read other 2 answers


I recently performed a system restore on my Compaq Presario using the F10 System restore feature. Prior to doing this, there were two user accounts authorized for the computer. They were both wiped out during this process, however, I was able to recover the files from one of the users. Unfortunately, the document that I REALLY, REALLY need was stored under the other user and I cannot seem to find it. The user name is the same as one of the new users after the recovery. Does this have something to do with it? It is sooooooooooooooooooooooooooooooooooooooooooooooo important that I find these files. Is there anyway that this is possible?

Thanks so much!

A:LOST FILES After system recovery!!! PLEASE HELP!

i have exaclty the same issue. my HD shows that there is over 40gb being used and i know that most of it is in the user account which i can no longer access. in fact when i click on properties for the folder/user account it comes up as 0 bytes/empty. where have all my documents gone ?

Read other 1 answers

Please help. I have lost my system Tools and many other files/programs. I followed the fix outlined here and was able to get my computer back operating. However, I am missing files and folders and system tools. I have used the unhide fix and have now tried the System Look as given to Natterjack by Broni. I have the systemlook results folder, but do not know how to proceed any further. I do not know how to find the folders to copy and paste the contents into the proper folders. That is assuming the data is still here. Thanks in advance for your assistance.

A:Lost System Tools and other files

Referenced topic by Natterjack, http://www.bleepingcomputer.com/forums/topic400672.html/page__p__2270042#entry2270042 .


Read other 41 answers


about 2 years ago(late 2008), I inadvertently messed around with my computer and I think what I did was I reformatted the whole hard drive. I don't remember for sure if that is what I did since it was so long ago, but the screen went through what looks like the process of when you first install Windows on the computer. The following link is vaguely similar to what I went through at least in style: http://www.microcenter.com/images/em...tall_large.jpg

When all was said and done, my computer was back to what appeared to be factory condition, including on the desktop only My Computer, Recycle Bin shortcuts, etc. I felt like I completely wiped out all of my personal files. The weird part was when I used the search function and typed in folders I knew the names of like "Paris Trip photos 2007", the search function actually found the folder and said it was still located at 'desktop' even though nothing was actually on the desktop. To fix the problem I just dragged my Paris photos onto desktop from the search window and voila! I had recovered a lot of my personal files that way, only because I remembered the names of those folders.

However, there are still some folders with photos, music, papers, etc, that I still haven't been able to recover and can't figure out why I can't use the search function trick on them. I know they exist because when I go to
"C:\Documents and Settings\Compaq_Owner
there is a transparent hidden folder called "My Recent... Read more

A:Lost files after system reformat?

When you restored your computer, it created a new profile for you. If you go to C:\Documents and Settings\ you should see your old profile name listed. Open the folder and copy the Desktop, Favorites, and My Documents to your new profile name overwriting the empty files that a there now.

Read other 7 answers

I had a large number of files in the recycle bin which I did not want to permanently destroy so I moved them to an external hard drive. When I opened Quicken I could not my files so I decided to do a system restore but the files still did not show up. I finally did find the Quicken files in the recycle bin. Then I had another set of files that I could not find all of so I decided to undo the system restore. I got a message that it could not undo the restore because it could not find the original files. I then moved all of the files from the external hard drive back to the recycle bin. I was then able to undo the restore but still could not find all of the files. I have found earlier restore points like from a week ago and tried to restore to that date but while I have all of the Quicken data I still cannot find all of the other files that I had before.

I am sure this sounds confusing and it is but I would like to know what folders, extensions etc to look for that would contain the lost data or have I just lost it all permanently and there is no need to look for it. Thanks for your help.

A:System Restore and lost files

Read other 8 answers

how do i get back all my files all my itunes and pics and all setting i had before are gone how do i get them backplease help

A:lost all files when system reboot

have u tried a system restore?

Read other 2 answers

Hello, I have 4 hard disk drives in my system, 3 Seagate (2 320GB, 1TB) and 1 Western Digital (1 160GB). One of the drives (the 160gb) is running very hot constantly (60C on average) and is also labeled as a "System" drive in Disk Management because it was once my original boot drive years ago. I want to take this drive offline because I fear it will eventually die and leave me to unable access Windows 7 without mucking with something.

I want to remove that from the drive and put it on the Boot drive, which is one of the 320GB drives but I also want to make C: (my OS drive) disk 0 but it is disk 1. I cannot format H: (the 160gb WD) yet there is nothing else but an emaciated/gutted XP install with several files which I cannot remove at any cost.

What would I have to do to get myself in working order to my specifics?

A:Make boot drive disk 0 AND set system attribute, remove from H:

Hi Glaice

You could take a reading at the links below

Bootmgr - Move to C:\ with EasyBCD

Startup Repair

Startup Repair - Run 3 Separate Times

To make drive 1 to Drive 0 unplug all the hard drives but the one you want to be drive 0 and do a startup repair for it to be a boot drive.

Can you upload an image of your disk management

Link below will show you how

Disk Management - Post a Screen Capture Image

Read other 9 answers

My desktop was stucked with a blue screen saying “ registry cannot load the hive files”. After a lil bit research over internet I did recovery console, using windows xp cd that came with computer,
I perform these steps at the command prompt, type the following:
ren c:\windows\system32\config\software software.old copy
c:\windows\repair\software c:\windows\system32\config
My computer was fixed but now it didn’t have any user account, and some of my important data are not there, though I have some older data. What should I do to get those data back? Any help will be highly appreciated

A:File lost after system Recouncil

Hi mapusker,
Recuva is a free recovery programme that's often recommended here at TSG. Here: http://www.piriform.com/recuva

Hope this helps?


Read other 1 answers

I have a 1.8tb external hard drive that I defragged using Advance System Care's Smart Defrag 3.

I re-analyzed the drive to check the result as it completed overnight. The disc is still 21% fragmented.
I also analyzed the drive using CCleaner's Defraggler, which shows 27% fragmentation.
I ran Windows' own defrag which shows 0% fragmentation of this drive.

Question 1: According to Smart Defrag and Defraggler there are 4 fragmented files, all of which are System Images. So am I right in assuming that these files can not be defragged (and that I should have done all my cleaning up before I made the Images)?

I had deleted one of the fragmented files and used Advanced System Care's facility to shred all files in the recycle bin. But this file is still showing on the list of fragmented files so I think it was not actually deleted. I usually get a message if I am trying to delete something that is too big (this is around 70gb) but in this case I didn't.

I can see the file path in the results of the defrag analysis but I can't find the file through Search. I would really like to get rid of it given it is so big.

Question 2: how can I find and delete this file? Would using the Disc Clean utility do the job?

Question 3: I am likely to need to delete large System Image files in the future. What is the best way to do this without losing them in the ether like I did this time?

Thank you

A:Can I defrag System Image files and I lost one

What image software did you use to create the image file, you should be able to delete the backup from there.

Read other 10 answers

I was having problems with an error message...so i backed up my files, and proceeded to do a system recovery...hoping this would solve the problem. well...it didn't....so i was ok with it and inserted my flash drive to replace all the files i backed up....and they were gone!!! i must have not done it correctly....is there anyway to recover the files i lost?? i lost everything...pics, school work, and other very valuable documents. i am thinking they are somewhere still in this computer because when i did a system restore, two of the pics i used as user account pictures came up and also a screen saver that i had downloaded before the recovery. if anyone knows what i can do....PLEASE HELP ME!!!!!!!!!!!! I have to replace my hard drive (that's why i was getting the error message0....so once i do this...i know there is no hope.

A:[SOLVED] Lost files after system recovery....HELP!!!

Hi and welcome to TSF.
When you say a system recovery, do you mean a system restore? If so, your files shouldn't have been lost. Do you know the names of any of your files? If so, try using the Search facility to find out where they are.

Read other 10 answers

Can anyone please help... I need to retrieve lost files on my PC after a 'System Restore'. I heard this is possible, and if so what can I do?

I had a belated PC health check last week and as expected there was so much at fault with my PC. I opted for a 'System Restore' I however made it very clear that I would require a data transfer / back-up of my 'Microsoft Outlook (Office Pro 2007) personal folders' CONTAINING THOUSANDS OF EMAILS!! Unfortunately the tech who carried out this only backed up those for Outlook Express (which I no longer use, ans haven't in ages).

Can I hope to have these file found on the computer, and if so how?

Your help is much appreciated.


Read other answers

Hello. I see this post with a user that had the same problem as me.


Same thing. I did a non-destructive system recovery because I had viruses on my computer. My hard drive space is still around 80g like it was before the recovery. I see the my back up folder in the C drive. None of my important files are there. Since hard drive space is used I know they must be there somewhere. I have done a search for my missing files, or even for all files of certain types, my files aren't there. I see in the post above that the user fixed the problem, but to be honest I am having trouble understanding the post and how it was corrected. Can someone please simplify this for me and tell me what I need to do in order to restore my files??? PLEASE???

A:HELP!! Lost files after non-destructive system recovery

You can try the Recuva Recovery Program

Read other 6 answers

I did a system recovery that was supposed to safely restore my PC and not delete recent stuff. After, I had to re-install programs & eventually found almost everything except Outlook stuff. I thougt it was a problem w/my initial log-on title, but maybe not. Is there a way to find my Outlook msgs from pre-recovery? (That is--an easy to understand way to find?) Thanks very much!!

A:System Recovered-but lost old Outlook files

You can search for *.pst to find the files . . is that what you mean?

You would need to set the search to look in hidden files

Read other 2 answers


Running Vista as normal, until last night I started up the laptop, logged in, and then it froze, and nothing happened. This then kept happening. So I started up the laptop, constantly pressing F8 to get the the boot menu (I had read about this online). I then restored the laptop to a couple of days ago.

The laptop now works, however all the files I had, pictures, documents, everything I have ever made or done has vanished!

Please help, what can I do?

A:Vista system restore, lost all files, please help!

I know this doesn't help now but it should in the future. This is a classic example of why you need to have a backup of all important data. Data can be lost due to hard drive failure, malware, accidental or malicious file deletion, etc. It isn't a matter of if something like this will happen but when.

Some people keep 3 or more backup copies of important data and in different locations. Having no backups at all is asking for trouble.

There are utilities that will likely restore at least some of your data. Others can advise. But it is critical not to use the computer until you know how to proceed. Any files written to disk in the meantime will make data restoration more difficult or impossible.

Read other 1 answers

Im realy stuck. Today my HP pc messed up and i had to do a system recovery. I have done this before with no problems, but this time i lost all my files. The pc is like it was when i first bough it with all the original software. I have a d: recovery drive on the HP. I know my files cant be totaly wiped off the hard drive but i dont know how to recover them. I tried looking at system restore but all the previous restore poins were wiped off. Help please i am going mad!!

A:Help! System Recovery Pc And Lost All Files! Need To Recover!

System Restore and System Recovery are two different things.See this: http://www.bleepingcomputer.com/forums/t/48943/please-help/

Read other 6 answers

PLEASE HELP. I accidentally did a full system restore from the discs I had created for my pc running xp home, and everything on my computer seems to be gone now. There is one word document that i really really need. How can I get it back?? THANKS A TON IF THERE IS ANY WAY TO HELP!!!!!

A:Lost Data/files After System Restore

Hi micksurg, welcome to BC!

If you reformatted the drive, then things are going to be difficult. However it is possible that the file has simply been "misplaced" and is alive and well somewhere on your hard drive. Have you performed a search (Start->Search) for the file?

Read other 4 answers

i am trying to get all my files back all my pics and itunes and all my old settings are gone what do i do

A:i lost all my files when the system reboot happened help

Are you logged into the PC as the same user? Did this problem suddenly occur out of nowhere? Some more details are needed.


Read other 1 answers

Sorry for my bad English.
My PC with Windows XP SP3, became infected with the virus File_recovery. And no more pluck, (no boot). Use kaspersky live cd and detected (dev / rootkit.boost.sst.). Then do a chkdsk and repair the boot. When booting windows again file_recovery appeared again. Use the combofix program and AT destroyer. And windows File_recovery not reappeared. Then try using eset on line, but when trying to update the database, tells me I may need a proxy, but I have no proxy. Then try the mbam, but in full scan fails in Windows Font files. And I notice that IE is trying to open the pages, I see on the bottom bar. And you see a sign indicating that I am about to leave a secure page or something.

Best regards

A:File_recovery virus

DownloadTDSSkillerLaunch it.Click on change parameters-Select TDLFS file systemClick on "Scan".Please post the LOG report(log file should be in your C drive) Do not change the default options on scan resultsDownloadaswMBRLaunch it, allow it to download latest Avast! virus definitionsClick the "Scan" button to start scan.After scan finishes,click on Save logPost the log results here.If you get crashes in normal mode,run it in safemode with networkingDownloadESET online scannerInstall itClick on START,it should download the virus definitionsWhen scan gets completed,click on LIST of found threatsExport the list to desktop,copy the contents of the text file in your reply

Read other 17 answers

Well after running chkdsk on a laptop hard drive, the NTFS just disappeared and is now seen as an unknown partition. I'm clueless as to how this happened. Anyway, I was able to recover all the files off of it so everything is still there. Anyone know a problem that can restore or recover the file system without re-partitioning? I used a program I bought call Spinrite to check the HD for problems and it found none. So I'm thinking it may work fine if I can do this. Thanks.

A:Lost the NTFS file system some how, possible to restore?

Read other 8 answers

First of all, I am an MCSE, no need to get basic.

I am working on a Windows 2000 server, which has
ALL of the security on ALL of the files and folders set
to "Everyone Full Control." Aparently all are being set
by inheritance from the default root setting.

I am presuming that a virus has deleted all of the
explicit DACLs from all of the file system objects to
achieve this. (I'm not a programmer, but that seems
to be the only way to do this in W2K. In NT it was
common for a "newbie" to set a permission at the
root, click "change all directories and subdirectories,"
and have this calamity happen, but that is not the way
they do it anymore, in W2K.)

Back in the NT Days, there was a utility (I believe in the
Reskit) that could reset all of the default system
security settings, and I have used it a couple of times,
but I can't find it or a W2K version again.

I believe it would be possible to do this with an AD
GPO, but that looks like a nightmare that would live
on, long after the security settings job is done.

Anybody know what I am looking for and where to
look? (Please also reply to my direct email address)

Will Harper, MCSE (NT & W2K), CTT+
[email protected]

A:Replace lost permissions on W2K file system

I think this is what you are asking about.


Read other 1 answers

Hello all, Great webpage and thanks for the help!!!

My computer was recently infected by the Smart HDD virus/malware on my HP laptop using Windows 7. I followed the "Remove Smart Hdd (Uninstall Guide" from this site. One important note, I DID run a Temp file cleaner when the infection first happened, prior to finding this site telling me NOT TO!!

Summary I ran 1)Rkill, 2)TDSS rootkit, 3)Malwarebytes, 4)Un-hide.exe

After doing 1-4 above, my computer seems back to normal except I dont have the files under the start menu/all programs, all folders are empty (i.e. office suite, HP Help and Support.......). I was able to open a photo using microsoft picture editor,so it appears the programs are still loaded, just hidden from the folders?

I just downloaded SUPERantiSpyware and am currently running the scan.

Also, I still have a "Data_Recovery" icon on my desktop? When I view properties for this icon I get "C:\programData\Kra6Nn3Bfwgn2u.exe", and if I select any other tabs on from the properties box I get a popup that says "The name C:\programData\Kra6Nn3Bfwgn2u.exe specified target box is not valid"? Can I assume the file is gone and just delete this Icon??

Thanks again for your help!

A:Smart HDD removal-Missing system files

Right click on your startmenu-propertiesCheck markstore and display recently opened programsstore and display recently itemsClick on customizeClick on Use default settings at the bottomNow go toc:\ProgramData\Microsoft\Windowsright click on startmenu folder,click on restore previous versionsNow select a snapshot before you were infected by the rogue,click on restoreYou should get back the startmenu programs"The name C:\programData\Kra6Nn3Bfwgn2u.exe specified target box is not valid"? Can I assume the file is gone and just delete this Icon??Yes,delete the icon and delete the FOLDER toogood luck

Read other 9 answers

I appreciate the replies to my first post, but still am not getting the "hang" of successfully backing up only the critical system, driver, and (complete) program data files before securely erasing my entire hard disk drive with both Windows 7 Home Premium 64-bit and Linux Mint on two separate partitions/volumes (?). For regular documents like Word files, Excel spreadsheets, .PDF documents, text documents in Notepad/WordPad/Notepad ++, and photos, is it correct that I can just back them up without any special precautions to a DVD +R data disc or my flash drive? What I am most concerned about is that I have stated that I don't have a separate Windows 7 install disc OR key any more. Therefore, if I securely erase the entire hard drive (both the 144 GB Volume with the Linux OS/files on it and the 350 GB Volume with Windows 7 and all the associated files on it) I will lose everything! All attempts via the Control Panel and the Back Up and Restore window to either burn an .img or repair disc have failed. That is one of the best signs I have that my PC's registry and hdd is far too badly corrupted. The only thing I think that makes sense to me and I could try to understand is how to go into Window's Back Up and Restore window's settings and try to back up my Win program application files that way. Is this possible? I know I will have to buy another copy of Win 7/8 from MS if I choose to reinstall a "fresh" Windows OS again.

A:Still Lost and Confused On Backing Up System and Programs Files

1. For backups you will need an external disk - DVDs or flash drives are no good choice
2. Why do you want to secure erase the disk - what sense does that make. Secure erase is for SSDs (mainly).
3. Periodic backups of your system is a good thing. Use free Macrium and make images - maybe once per week.

Imaging with free Macrium

4. If you image the OS and data partitions, you need not seperately backup your user data.
5. How come you have no Windows key. Isn't there one on the COA sticker.
6. If you image your system, you image the whole partition. You cannot backup parts of the OS - at least that makes no sense.
7. If your system is too corrupted, you need to reinstall. but for that you need an OS key.

Clean Reinstall - Factory OEM Windows 7

Read other 2 answers

My computer is a Dell Dimension 4500S, 1.80 Ghz processor, 20GB hard drive, 256MB SDRAM. I use the operating system Windows XP Home Edition SP3.

On July 22nd, I rebooted and I loss the ability to do a number of system functions, such as:

USER ACCOUNTS Lost all the User Accounts entries, Not allowed to create any new User Accounts.

SERVICES Not allowed to make any changes in starting, stopping, enabling, disabling. I can view the status of the services.

PRINTER Cannot Print at all!! The Printer Spooler service cannot be started.

SOUND No Sound or audio at all! The service that enables this, indicates NO DEVICE!

NETWORK CONNECTION This window does not show previously created Network Connections. Cannot create, modify, or delete anything in this service.
I am unable to enable this service or start it.
NETWORK CREATION Cannot create any networks. No function works in this service. Unable to enable this service.

Prior to rebooting my system, I ran a Registry Repair program and then everything disappeared. I suspect that my Registry is really messed up and I need help from my new geek friends. From what I understand may be the problem after I ran the Registry Scan. I lost all control of the User Accounts, so I do not have the ability to run services of the above system functions. ... Read more

A:Lost of system files, configuration, Services, & control!!!

Can you access the System Restore from start menu / all programs / accessories / system tools / System restore. If you have previous system restore points, you can restore from them.?

Read other 2 answers

Hello! Thank you very much to Grinler and this site for saving me time and money by posting on the System Fix Virus. The link to those instructions: http://www.bleepingcomputer.com/virus-removal/remove-system-fix

This is the first time I have been to this site. I am very grateful and felt compelled to make an addition to the instructions of a work-around I stumbled upon while try to fix my Windows XP that was not mentioned in the instructions. If it can help someone else, then I've done my part.

The problem I was having was I couldn't see anything so just getting started with these instructions wasn't working. Couldn't use Internet Explorer, couldn't see My Computer, etc. All files were hidden. Since I am a novice, I decided to try safe mode because I had seen other articles talking about starting in safe mode. When I started in safe mode, I was able to use an administrator account (that I didn't even know existed) to see a thumb drive that I had put all of the programs you would need to use to remove this cr*p I had dl'ed from my good computer. I was able to go through the entire process and it seemed to work, but when I restarted without safe mode, the virus was still there and my files were still hidden (some had returned but all files were empty).

Since I found that random administrator account in safe mode, I hit the start button and right clicked to open up all user accounts. I had done this before to view my son's a... Read more

A:System Fix Virus Removal

Thanks for the kind words and sharing your experience with Grinler's removal guide. He does work very hard to get these guides posted in a timely manner with step by step instructions.If there are no more problems or signs of infection, you should Create a New Restore Point to prevent possible reinfection from an old one. Some of the malware you picked up could have been backed up, renamed and saved in System Restore. Since this is a protected directory your tools cannot access to delete these files, they sometimes can reinfect your system if you accidentally use an old restore point. Setting a new restore point AFTER cleaning your system will help prevent this and enable your computer to "roll-back" to a clean working state.The easiest and safest way to do this is:Go to > Programs > Accessories > System Tools and click "System Restore".Choose the radio button marked "Create a Restore Point" on the first screen then click "Next". Give the R.P. a name, then click "Create". The new point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore.Then use Disk Cleanup to remove all but the most recently created Restore Point.Go to > Run... and type: CleanmgrClick "Ok". Disk Cleanup will scan your files for several minutes, then open.Click the "More Options" tab, then click the "Clean up" button under System Rest... Read more

Read other 2 answers