[mcnugget]

Hi guys,

I have been called out to a couple of jobs in the last few days in which the users data seems to have dissapeared and the desktop reverted to a blank/default destop, as in the clean destop of a new user account. on both occasions all items/data seemed to have been removed inc programs ect but strangely the reclycle bin was still there with old deleted items still in it.

Upon looking into it, the profile has been replaced by a new one stored in the sys32 folder, the origional profile is still intact within the docs & settings area. This was both on XP, both had full norton system protection s/w. Moving the data back prob would have worked but did an OS reinstall to be safe.

Has anyone else come accross this over the last week or two or is it just a wierdy that popped up

[lunarlander]

You could check if Norton was still actively protecting the PCs by trying to download the Eicar test virus.