I just finished a recovery yesterday for a laptop where exactly the same happened. Customer recovered her data from windows.old and upon restarting the laptop, Windows seemed to do another process and when it finished starting up, her restored data was gone and there was a new windows.old with no user data in it. She had gone to BestBuy and another local DR firm, who both quoted ridiculous prices and/or failed to recover any data using ShadowCopy Explorer, Recuva, and who knows what else. There were a couple of remote support agents running when I started it up after the recovery, so at least two outfits had a go at it with a variety of tools and came up empty.
When I got the laptop, I immediately did a sector-sector clone using the DFL-DDP (not Windows), and then ran RestorerUltimate (R-Studio clone) but it couldn't find any of her data. So I then ran Active@ File Recovery Pro on it. It recovered most of her data, much of it into folders named using meta-data in the recovered files. Still had to delete some extraneous junk (Windows graphics, visited web page graphics, corrupted images, etc. but not too bad.
She originally said all she wanted was pictures and documents. When she picked it up, she asked where are my videos? So I did a supplementary scan of the clone drive and recovered the videos last night.
Edit: Just to clarify, RestorerUltimate couldn't find her data without doing a scan for RAW files. The RAW scan recovered lots of pictures and other files, but saved them in random-name folders. Active@ File Recovery found more files than RestorerUltimate and organized them better.