Go Back   Technibble Forums > General Computers > Tech-to-Tech Computer Help

  Technibble Sponsor

Reply
 
Thread Tools Display Modes
  #1  
Old 11-30-2011, 05:49 PM
nXtGenPC nXtGenPC is offline
 
Join Date: Jul 2010
Posts: 208
nXtGenPC is an unknown quantity at this point
Default Help! Strange Problem

Ok so customer brings in Laptop that is asking for Windows Recovery Disk, he wants to be sure that all of the data is backed up before anything happens. So I pop the hard drive out, plug it in to my bench computer via SATA to USB adapter and it comes up fine, but the C Drive is suppresingly empty (showing like 99% Free Space) when I go to the User folder all I see is Administrator and Public, nothing showing that this guys user account was ever there. So now I am sitting here scratching my head wondering what is going on. Deff sounds like a virus but not sure how to fix this, I have seen virus' that do this, but never when it's slaved to another machine

Thanks
Reply With Quote
  #2  
Old 11-30-2011, 06:18 PM
Cadishead Computers's Avatar
Cadishead Computers Cadishead Computers is online now
Administrator
 
Join Date: Mar 2010
Location: Manchester UK
Posts: 3,943
Cadishead Computers is a jewel in the roughCadishead Computers is a jewel in the roughCadishead Computers is a jewel in the rough
Default

If it's possible to boot the laptop up, in what ever mode, run unhide.exe.

Failing that, how about Nicks DataGrab / Fabs4tech. Will they see anything on the drive?

I had a similar issue earlier this morning. All start menu items missing, no desktop icons, no my docs etc. After running unhide, (scan took about an hour), all icons are back, my docs etc, but now some of the start menu progs are showing aas (empty).
__________________
Hope this helps
Be Safe

Nige
Cadishead Computers
Reply With Quote
  #3  
Old 11-30-2011, 06:26 PM
nXtGenPC nXtGenPC is offline
 
Join Date: Jul 2010
Posts: 208
nXtGenPC is an unknown quantity at this point
Default

Yeah I ran unhide.exe on my bench computer on his drive/ no luck

Client is dropping off the power supply this afternoon so I will further test and post back
Reply With Quote
  #4  
Old 11-30-2011, 06:40 PM
Cadishead Computers's Avatar
Cadishead Computers Cadishead Computers is online now
Administrator
 
Join Date: Mar 2010
Location: Manchester UK
Posts: 3,943
Cadishead Computers is a jewel in the roughCadishead Computers is a jewel in the roughCadishead Computers is a jewel in the rough
Default

Whilst its slaved on the bench, could you not try datagrab or fabs?
__________________
Hope this helps
Be Safe

Nige
Cadishead Computers
Reply With Quote
  #5  
Old 11-30-2011, 06:50 PM
nXtGenPC nXtGenPC is offline
 
Join Date: Jul 2010
Posts: 208
nXtGenPC is an unknown quantity at this point
Default

Quote:
Originally Posted by Cadishead Computers View Post
Whilst its slaved on the bench, could you not try datagrab or fabs?
Good point, I'll try data grab now
Reply With Quote
  #6  
Old 11-30-2011, 07:10 PM
MobileTechie's Avatar
MobileTechie MobileTechie is online now
 
Join Date: Oct 2009
Location: UK
Posts: 4,254
MobileTechie has a spectacular aura aboutMobileTechie has a spectacular aura about
Default

Look at it under Linux to get a clear view of what is actually there and what might be hidden by Windows. If the folders are not there then they've been deleted by the user or something. Then you're into data recovery.
Reply With Quote
  #7  
Old 11-30-2011, 10:20 PM
ell ell is offline
 
Join Date: Oct 2008
Posts: 2,482
ell will become famous soon enough
Default

Quote:
Originally Posted by Cadishead Computers View Post
If it's possible to boot the laptop up, in what ever mode, run unhide.exe.

Failing that, how about Nicks DataGrab / Fabs4tech. Will they see anything on the drive?

I had a similar issue earlier this morning. All start menu items missing, no desktop icons, no my docs etc. After running unhide, (scan took about an hour), all icons are back, my docs etc, but now some of the start menu progs are showing aas (empty).
I'm seeing this alot lately, must be sure not to clean temp files before scanning, sometimes start menu, desktop shorts, etc are moved to smtmp folder, numbered 1-3. However my latest had those folders but empty. Or search for *.lnk
Reply With Quote
  #8  
Old 12-01-2011, 01:37 AM
red12049 red12049 is offline
 
Join Date: Aug 2009
Posts: 986
red12049 has a spectacular aura aboutred12049 has a spectacular aura about
Default

Quote:
Originally Posted by nXtGenPC View Post
Ok so customer brings in Laptop that is asking for Windows Recovery Disk, he wants to be sure that all of the data is backed up before anything happens. So I pop the hard drive out, plug it in to my bench computer via SATA to USB adapter and it comes up fine, but the C Drive is suppresingly empty (showing like 99% Free Space) when I go to the User folder all I see is Administrator and Public, nothing showing that this guys user account was ever there. So now I am sitting here scratching my head wondering what is going on. Deff sounds like a virus but not sure how to fix this, I have seen virus' that do this, but never when it's slaved to another machine

Thanks
Or maybe the client started a restore, and wiped out his own data...

Rick
Reply With Quote
  #9  
Old 12-01-2011, 02:59 AM
kevinjhaag kevinjhaag is offline
 
Join Date: Jan 2009
Location: Michigan
Posts: 505
kevinjhaag is on a distinguished road
Default Customer Trying To Be A Tech...Ooops!

Quote:
Originally Posted by red12049 View Post
Or maybe the client started a restore, and wiped out his own data...

Rick
^^^ +1...What he said.
Reply With Quote
  #10  
Old 12-01-2011, 03:00 AM
dgiles79's Avatar
dgiles79 dgiles79 is online now
 
Join Date: Oct 2010
Location: Newport News, VA
Posts: 481
dgiles79 is on a distinguished road
Default

Quote:
Originally Posted by red12049 View Post
Or maybe the client started a restore, and wiped out his own data...

Rick
This would be my guess too. Sounds like he started a restore himself and wiped his data. It's probably going to need data recovery performed on the drive.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 03:54 PM.


Powered by vBulletin®
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Technibble.com is based out of MELBOURNE, AUSTRALIA.