[clavinova]

I have just had 3 securtiy alert messages from AVIRA,don't know if it would have any connection :
C:\users\XXXX\AppData\Local\Microsoft\...\b(1).js contains suspiscious code HEUR/HTML. malware, the same version b(2)
and detection pattern of the java script virus JS/Dldr.Iframe.BO
I'll open a new post for that.

[Rollin' Rog]

If the computer the doc was sent from was a Vista machine or you know the directory you saved the doc in on your machine -- you may be able to find a hidden version of it still.

These are created as part of the Volume Shadow Copy service. You just right click on the directory it was saved in and select Properties > Versions and you can see different dated versions of old files.

These remain even if you delete the files -- so they make a good recovery option (though a possible risk if you ever really wanted to remove all traces of a document).

[clavinova]

>RollinRog, the doc was created on another PC win XP. sent as attachment, opened and "saved as" on this Vista PC, WHen I searched for it I ticked the box for "include non-indexed, hidden and system files" but no result.

[Rollin' Rog]

When you choose to save the file -- do you not choose a specific download directory -- and then open it from that directory? Is it there one day and just gone the next?

[clavinova]

Good question RollinRog. The first time, it was my own doc. i remember having saved it as in a specific directory, several times under different version ending by 1, 2, 3 etc... i started working in the morning and after I finished my work around 5pm, i ran spybot left home, shut down the PC and when turned it on again in the evening, no trace of it.
This recent case, it was another user. He was aware of my sad experience, made sure to save as in a specific directory, and regularely saved. Unforunately, he doc disappeared.
I am not sure if the doc had appaeared at anytime on the list of doc of the directory to be honnest, I presume it did but can't be certain.
I hope I have answered the question.
I am now waiting for an avice concernion the detected malware HEUR/HTML.

[Rollin' Rog]

Well if you know the directory it was saved in you can right click on it and see if a copy of it was ever archived under "properties" > "previous" versions. I don't think these show up in searches of files hidden or otherwise.

If your malware post continues to go un answered for another day let me know and I will have someone look in on it.

I don't think you have a malware problem.

Have you quarantined the suspicious file and perhaps sent a copy for further analysis >>

http://www.avira.com/en/threats/sect...l.malware.html

[clavinova]

Hi Rollin'Rog, I have attached a picture of the first document lost and found few weeks later by google.
The second document, I have been told had been saved directly under "C:\. I don't know how I can get properties or version on the C directory ? On "documents" if I right click, I have "Document Properties" then General - Sharing - Security - Location - Customize. No "version".

[Rollin' Rog]

I honestly don't know what you are getting from Google there. Do you have a Google search indexer installed?

I don't know why you are not seeing a "previous version" tab on your folders -- unless you have System Restore turned off. I've given you an explanatory link in answer to your PM.