BleepingComputer.com: Lost System Tools and other files

Please help. I have lost my system Tools and many other files/programs. I followed the fix outlined here and was able to get my computer back operating. However, I am missing files and folders and system tools. I have used the unhide fix and have now tried the System Look as given to Natterjack by Broni. I have the systemlook results folder, but do not know how to proceed any further. I do not know how to find the folders to copy and paste the contents into the proper folders. That is assuming the data is still here. Thanks in advance for your assistance.

Referenced topic by Natterjack, http://www.bleepingcomputer.com/forums/topic400672.html/page__p__2270042#entry2270042 .

Louis

Post System Look log and we'll see what you got there.

Thanks for getting back to my post.

Here is my Notepad:

SystemLook 04.09.10 by jpshortstuff
Log created at 15:30 on 01/06/2011 by GERALD A SHUBA
Administrator - Elevation successful

========== dir ==========

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp - Parameters: "/s"

---Files---
None found.

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1 d------ [13:26 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs d------ [13:26 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\1stWORKS Corporation d------ [13:26 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\1stWORKS Corporation\hotComm CL d------ [13:26 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\Accessories d------ [13:26 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\Accessories\Communications d------ [13:26 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\Accessories\Communications\Fax d------ [13:26 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\Accessories\Entertainment d------ [13:27 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\Accessories\Microsoft Interactive Training d------ [13:27 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\Accessories\System Tools d------ [13:27 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\ACT! 6 d------ [13:28 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\Administrative Tools d------ [13:28 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\BlackBerry d------ [13:28 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\Compaq d------ [13:28 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\Games d------ [13:28 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\Hewlett-Packard d------ [13:29 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\Hewlett-Packard\hp deskjet 5100 series d------ [13:29 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\Hewlett-Packard\HP Officejet 6100 Series d------ [13:29 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\Hewlett-Packard\hp print screen d------ [13:30 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\Hewlett-Packard\Memories Disc d------ [13:30 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\HP d------ [13:30 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\InterVideo WinDVD d------ [13:30 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\MetaTrader NordFX d------ [13:30 05/05/2011]

I am afraid I am missing a lot of files.

Also, I do not know how to get to them to copy and paste as in the instructions given to Natterjack.

Thanks for all of your help.

The above log looks incomplete.
Can you repost it, or re-run the tool and post new log?

Thanks again for your help. Here is the rerun:

SystemLook 04.09.10 by jpshortstuff
Log created at 09:29 on 03/06/2011 by GERALD A SHUBA
Administrator - Elevation successful

========== dir ==========

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp - Parameters: "/s"

---Files---
None found.

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1 d------ [13:26 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs d------ [13:26 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\1stWORKS Corporation d------ [13:26 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\1stWORKS Corporation\hotComm CL d------ [13:26 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\Accessories d------ [13:26 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\Accessories\Communications d------ [13:26 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\Accessories\Communications\Fax d------ [13:26 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\Accessories\Entertainment d------ [13:27 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\Accessories\Microsoft Interactive Training d------ [13:27 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\Accessories\System Tools d------ [13:27 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\ACT! 6 d------ [13:28 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\Administrative Tools d------ [13:28 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\BlackBerry d------ [13:28 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\Compaq d------ [13:28 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\Games d------ [13:28 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\Hewlett-Packard d------ [13:29 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\Hewlett-Packard\hp deskjet 5100 series d------ [13:29 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\Hewlett-Packard\HP Officejet 6100 Series d------ [13:29 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\Hewlett-Packard\hp print screen d------ [13:30 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\Hewlett-Packard\Memories Disc d------ [13:30 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\HP d------ [13:30 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\InterVideo WinDVD d------ [13:30 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\MetaTrader NordFX d------ [13:30 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\Microsoft Mouse d------ [13:30 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\Microsoft Office Tools d------ [13:30 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\Microsoft Silverlight d------ [13:31 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\NetWaiting d------ [13:31 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\NinjaTrader 6.5 d------ [13:31 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\Real d------ [13:32 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\Real\RealPlayer d------ [13:32 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\Sprint d------ [13:32 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\Sprint\Pantech d------ [13:32 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\Programs\Startup d------ [13:33 05/05/2011]
officejet 6100.lnk --a---- 779 bytes [00:47 27/05/2011] [14:24 06/02/2009]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\2 d------ [13:34 05/05/2011]

C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\4 d------ [13:33 05/05/2011]

-= EOF =-

Go Start>Run, type in:
cmd
Click OK.

Command Prompt window will open.

Copy (CTRL+C) command:

xcopy C:\DOCUME~1\GERALD~1\LOCALS~1\Temp\smtmp\1\* C:\Documents and Settings\All Users\Start Menu /s

Right click inside Command Prompt window and click "Paste".
Press Enter.

You should see number of files being copied.

Let me know, if it worked.

Broni, sorry, but, my files are still empty. While I saw a number of files being copied, I did not see the number of files actually copied. Can this be run again? I did try a reboot, but, nothing appeared. Once again, thanks for your efforts.

Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2
64-bit users go HERE

• Double-click SystemLook.exe to run it.
  
• Vista\Win 7 users:: Right click on SystemLook.exe, click Run As Administrator
  
• Copy the content of the following box into the main textfield:
  

  :dir
  C:\Documents and Settings\All Users\Start Menu
  

  
  
  
• Click the Look button to start the scan.
  
• When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.

Note: The log can also be found on your Desktop entitled SystemLook.txt

Broni, now I am worried:

SystemLook 04.09.10 by jpshortstuff
Log created at 13:59 on 05/06/2011 by GERALD A SHUBA
Administrator - Elevation successful

========== dir ==========

C:\Documents and Setting\All Users\Start Menu - Unable to find folder.

-= EOF =-

OK, re-run System Look with this script:

:dir
C:\Documents and Settings\All Users

Broni, at least something showed:

SystemLook 04.09.10 by jpshortstuff
Log created at 14:34 on 05/06/2011 by GERALD A SHUBA
Administrator - Elevation successful

========== dir ==========

C:\Documents and Settings\All Users - Parameters: "(none)"

---Files---
NTUSER.DAT --a---- 262144 bytes [21:20 07/12/2003] [21:20 07/12/2003]
NTUSER.DAT.LOG --a---- 1024 bytes [21:20 07/12/2003] [22:28 24/05/2011]

---Folders---
Application Data dr----- [20:39 25/08/2001]
Desktop d------ [20:39 25/08/2001]
Documents dr----- [20:39 25/08/2001]
DRM d--hs-- [20:39 25/08/2001]
Favorites d------ [20:39 25/08/2001]
Start Menu dr----- [20:39 25/08/2001]
Templates d------ [20:39 25/08/2001]

-= EOF =-

Open command prompt again (Start>Run>cmd>OK) and type this in:

attrib -r "C:\Documents and Setting\All Users\Start Menu"

Press Enter.

Re-run System Look with the same script as in my reply #11.

Broni,

SystemLook 04.09.10 by jpshortstuff
Log created at 14:46 on 05/06/2011 by GERALD A SHUBA
Administrator - Elevation successful

========== dir ==========

C:\Documents and Settings\All Users - Parameters: "(none)"

---Files---
NTUSER.DAT --a---- 262144 bytes [21:20 07/12/2003] [21:20 07/12/2003]
NTUSER.DAT.LOG --a---- 1024 bytes [21:20 07/12/2003] [22:28 24/05/2011]

---Folders---
Application Data dr----- [20:39 25/08/2001]
Desktop d------ [20:39 25/08/2001]
Documents dr----- [20:39 25/08/2001]
DRM d--hs-- [20:39 25/08/2001]
Favorites d------ [20:39 25/08/2001]
Start Menu dr----- [20:39 25/08/2001]
Templates d------ [20:39 25/08/2001]

-= EOF =-

Thnaks again

Open Windows Explorer.
Navigate to:
C:\Documents and Settings\All Users
Right click on "All Users" folder, then New>Folder.
Name that new folder Start Menu.

Re-run System Look with the same script as in my reply #11.