Jump to content

All Files deleted off windows pc


Recommended Posts

Hi all my files stored in 'documents' have disappeared

I ran RKill which said 'zero' (I think) and then Malwarebytes Anti Malware which listed 1637 PUPs 

Is there any chance of retrieving my lost files? I am not an advanced PC admin user 

Thanks in advance

 

Rkill 2.8.4 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2016 BleepingComputer.com
More Information about Rkill can be found at this link:
http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 10/04/2016 09:06:49 PM in x64 mode.
Windows Version: Windows 10 Home Single Language 

Checking for Windows services to stop:

 * No malware services found to stop.

Checking for processes to terminate:

 * No malware processes found to kill.

Checking Registry for malware related settings:

 * No issues found in the Registry.

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

 * Windows Defender Disabled

   [HKLM\SOFTWARE\Microsoft\Windows Defender]
   "DisableAntiSpyware" = dword:00000001

Checking Windows Service Integrity: 

 * gagp30kx [Missing Service]
 * IEEtwCollectorService [Missing Service]
 * IoQos [Missing Service]
 * nv_agp [Missing Service]
 * TimeBroker [Missing Service]
 * uagp35 [Missing Service]
 * uliagpkx [Missing Service]
 * WcsPlugInService [Missing Service]
 * wpcfltr [Missing Service]
 * WSService [Missing Service]
 * AppMgmt [Missing Service]
 * CSC [Missing Service]
 * CscService [Missing Service]
 * PeerDistSvc [Missing Service]

 * agp440 [Missing ImagePath]

 * AJRouter => %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted [Incorrect ImagePath]
 * WpnService => %systemroot%\system32\svchost.exe -k netsvcs [Incorrect ImagePath]

 * vmicrdv => %SystemRoot%\System32\icsvcext.dll [Incorrect ServiceDLL]
 * vmicvss => %SystemRoot%\System32\icsvcext.dll [Incorrect ServiceDLL]

Searching for Missing Digital Signatures: 

 * No issues found.

Checking HOSTS File: 

 * HOSTS file entries found: 

 
  0.0.0.1    mssplus.mcafee.com

Program finished at: 10/04/2016 09:07:37 PM
Execution time: 0 hours(s), 0 minute(s), and 48 seconds(s)
 

Link to post
Share on other sites

Quote

Hi all my files stored in 'documents' have disappeared

Are you saying Malwarebytes removed those files?  What type of files. Malwarebytes does not scan doc files

Files removed by malwarebytes can be restored from quarantine.

you may post the scan log here so experts can see what was detected

 

Link to post
Share on other sites

Thanks for your reply..just to confirm the sequence of events

  1. started laptop yesterday
  2. documents file empty, pictures empty ..all empty
  3. C: said 50GB used (which is about as much as I remember using) so , was it 'hidden' somewhere'?
  4. I googled a bit and found RKill and ran that..pasted above...says 0 detected ?
  5. The RKill website suggested yours which I then downloaded Malwarebytes and Scanned whole computer
  6. says 1637 detected..which are in quarantine, I haven't deleted' yet they are all PUP.Mindspark  (how do I show you this log of quarantined threats?)
  7. I then rebooted and when I logged in again EVEYTHING WAS BACK TO NORMAL.. ALL MY FILES AND PICTURES were on my C:
  8. I pretty happy, but I don't know how it all happened and how to prevent it happening again so before I pop the champagne for breakfast I want to make sure that my happiness is not short-lived :)

PS I have AVG free version downloaded which scans now and then and I think 'Ive seen Norton and something else on my PC but haven't taken much notice so cant remember the name.

You probably see this all the time, what do you think happened?  Is it miracle software that you have invented?

Link to post
Share on other sites

  • Root Admin

Program file folder settings can get cached and / or changed during the removal process. Typically a refresh of Explorer may help or as you've done a reboot.

To make sure all has been removed I would suggest following the advice from the topic here Available Assistance for Possibly Infected Computers and having one of the Experts assist you with looking into your issue.

 

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.