Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

A friend's machine has become infected with a virus which seems to have messed up his Windows 7 set up quite a bit. This computer only has one user. When he logs in all desktop icons are gone and all shortcuts under All Programs are missing (the folders are there but not any shortcuts to the program). The programs and files are still there as far as I can tell.

  1. I can start typing "itunes" in the Start Menu search box - the program will show up and run.

  2. The My Documents folder is empty even though there should be a number of Word documents and folders. The strange thing is that when I run WinDirStat under C:\Users\Ashley\Documents I can see all the missing folders and files but when I try to explore from there it is empty.

The situation is like I'm logged in as Ashley but Windows has reset all the basic settings, e.g. where the My Documents folder is.

At this stage I just want to reinstall Windows 7 but I first want to copy the My Documents folder to an external hard drive. Windows Exporer / My Computer won't let me see the files even though I know they are there after using WinDirStat. I thought I might be able to see them from a Command Prompt but that also shows an empty folder.

Does anyone have any ideas what software I can use or steps I can take to copy the files, or perhaps even some insight into what might have happened?

PS. the virus was detected by Windows Security Essentials (Norton missed it) and consequently deleted.

share|improve this question

migrated from serverfault.com May 17 '11 at 20:13

This question came from our site for system and network administrators.

4  
I'd say: Boot with a Linux Live CD and see what you can find. –  slhck May 17 '11 at 20:17
    
Norton's core strategy, like that of most other av's, is becoming outmoded. Linux is still the best anti-virus. –  Blomkvist May 17 '11 at 20:41

3 Answers 3

up vote 3 down vote accepted

Everything has been hidden. Go into folder view options, and show hidden files and folders, as well as system files.

share|improve this answer
    
thanks, that is all it was. I have copied the files to external hd and am now going to reinstall Windows 7 –  Derek Organ May 19 '11 at 23:06

It might be worth doing a system restore using a restore point from before the virus attack. I would think that would correct the missing shortcuts, etc.

share|improve this answer

The other answers are great but if you still can't see your files, you could try opening a Command Prompt and using the 'copy' command to backup your files.

You can do this with the following:

  1. Open a Command Prompt by typing cmd in the Start > Run box.
  2. Change to the directory you want to copy from:

    cd C:\Users\Ashley\Documents
    
  3. Type:

    copy *.* F:
    

    Replacing the letter F with whichever letter your external drive uses.

share|improve this answer

protected by Community Jun 14 '11 at 7:20

Thank you for your interest in this question. Because it has attracted low-quality answers, posting an answer now requires 10 reputation on this site.

Would you like to answer one of these unanswered questions instead?

Not the answer you're looking for? Browse other questions tagged or ask your own question.