Posted 04 November 2011 - 07:20 PM
Hey, sorry if my info is a little vague, but I'm pretty ignorant to all this. Started my computer today to find all my desktop icons gone and a fake "system recovery" program telling me I had a variety of "critical errors." I've had viruses like this in the past, so I did what I did those times...rebooted in safe mode, ran rkill, then did a scan with malwarebytes. Malwarebytes removed 3 infected files. I restarted my computer to find that the "system recovery" program was gone, but so was almost every single file on my machine. Looking around online a bit, I noticed that other people who get this virus have similar issues, and that the files and folders are merely blocked or hidden. My external hard drive seems wiped, as I checked it on a clean computer and it was empty. The folders and files that have disappeared seem random...some folders lost a number of files but retained others. I have no start menu or accessory folder or anything...I can enter "my computer," which claims I have the same amount of free space as before the infection, but the vast majority of folders are empty. I still have ms office documents and some video files, and as far as I can tell that's all I have. At this very moment I'm doing a second full scan with malwarebytes, but I expect that won't do the trick. I didn't think to check how IE or firefox behaves, or if I even have them anymore, but will do so after the malwarebytes scan is finished.
So, I guess I'm just looking for some general help. Is it possible that my files were indeed deleted, while the computer thinks I have the same free space as before? Or is it more likely the files are merely hidden? And if they are hidden, does this mean the virus is still in my machine? And lastly, what exactly am I to do about this? Thanks.