There's no such thing as a stupid question, but they're the easiest to answer.


Windows 7 Windows 7
Search Search
Search for:
Tech Support Guy > > >

Strange virus, makes it look as if my files were deleted. Possible registry issue?


airwalkskate's Avatar
airwalkskate airwalkskate is offline
Member with 91 posts.
Join Date: Mar 2003
04-May-2011, 05:29 AM #1
Unhappy Strange virus, makes it look as if my files were deleted. Possible registry issue?
Yesterday I went to watch an episode of Pawn Stars on and after two pop ups came up on my pc, windows brought 2 viruses to my attention and I clicked resolve issue.

All of a sudden one of those fake anti-virus programs came up, I don't remember the exact name, but it was something along the lines of Advanced Anti-virus Cleaner. Anyways, it wiped everything out of my computer. I know some of these fake programs will make it impossible to open programs, so usually I'd go to safe mode and open Malwarebytes from there.

My computer looked empty, no programs on the desktop or start menu or my computer. So I went into safe mode and once again ALL my files were gone except for the fake anti-virus program located on the desktop. So I reset my computer through windows to earlier that morning around 5:00am. Once it finally restarted all my desktop items were back and my windows folders as well as my program files.

Although my computer looked fine, all my personal files were gone, or at least look like their gone. My documents folders with pictures, documents, music, videos are all gone. I think it's something with my registry. I was able to run Malwarebytes and it found 2 viruses which I removed. Still nothing. So I went to update Malwarebytes and at the end of the download it had an error and wouldn't let me, this has never happened before. I went to download the newest Malwarebytes from it's site and when it came time to install it, at the end of the installation it had an error. So I've been running my AVG but it's not finding any viruses, just errors in my registry. Is it possible my registry to my documents is bad? I know the files are still "on" my computer because in my torrent program they are still being seeded fine.

Please any help is most appreciated!!!!
azandz's Avatar
azandz azandz is offline
Member with 42 posts.
Join Date: May 2011
Location: NJ
04-May-2011, 06:49 AM #2
Unauthorized malware removal content removed.

Last edited by Cookiegal; 25-Jun-2011 at 08:25 AM..
redoak's Avatar
Computer Specs
Gone but never forgotten with 6,782 posts.
Join Date: Jun 2004
Location: West Glenville, Sch'dy Cty, NY
Experience: Intermediate
04-May-2011, 06:55 AM #3
"air- - - -": It would be best for you to click "Report" and request that your Thread be transferred to the "Security and HJT" Forum. The helpful folks there are kept very busy, so be patient waiting for a response.
dvk01's Avatar
dvk01   (Derek) dvk01 is offline dvk01 is authorized to help remove malware.
Moderator & Malware Removal Specialist with 46,101 posts.
Join Date: Dec 2002
Location: Loughton, Essex, UK
25-Jun-2011, 02:45 AM #4
unfortunately with this infection just following Saga lout's advice won't do a lot
this changes the file permissions so that only system can see the files, not user, so showing hidden and protected files doesn't reveal all of them
it is far better to post in Malware cleaning for help as every one of these is different & the latest verions of this horrible malware have a sentinel protector that unless dealt with first, re-activates the infection & re-hides & reverses any fixes as well as preventing many anti-malware tools from running
Derek Microsoft MVP/Windows - Security | Thespykiller | How to protect yourself and other Security Advice
Find out all about the European Wild Hedgehog, what you can do to save it from extinction Hedgehog Rescue
dvk01's Avatar
dvk01   (Derek) dvk01 is offline dvk01 is authorized to help remove malware.
Moderator & Malware Removal Specialist with 46,101 posts.
Join Date: Dec 2002
Location: Loughton, Essex, UK
25-Jun-2011, 02:49 AM #5

I have removed your advice about deleting newly created files, becasue it could potentially casue trouble for many users if they delete the wrong file & this infection is known to use file creation date spoofing so you can't rely on the date you noticed the infection being the date on the infected files
Cookiegal's Avatar
Administrator & Malware Removal Specialist with 98,394 posts.
Join Date: Aug 2003
25-Jun-2011, 08:34 AM #6
I have deleted many posts in this thread by others who say they have the same virus. Malware issues need to be handled by our qualified and authorized malware removal helpers so anyone with this issue should post in the Virus & Other Malware Removal Forum for personal assistance as we cannot help more than one person in a thread.

I'm closing this thread. If the original poster is going to reformat the machine then no further malware removal assistance is required. If they need help with the reformat then please start a new thread in the appropriate forum. Likewise, if they wish to pursue eradicating the malware then they are urged to start a new thread in the Virus & Other Malware Removal forum.
Microsoft MVP - Consumer Security
As Seen On

BBC, Reader's Digest, PC Magazine, Today Show, Money Magazine

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

deleted, files, registry, virus

Search Tech Support Guy

Find the solution to your
computer problem!

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
Thread Tools

You Are Using: Server ID
Trusted Website Back to the Top ↑

Content Relevant URLs by vBSEO 3.3.2