Lost Everything and have to hand in IT coursework tomorrow...HELP

loobyloo2

As it says in the title... daughter was on her laptop, said a box popped up scanning her computer, she had never seen it before, clicked to close, and everything on the computer has been deleted.
She is in tears, I am hoping someone here can help me... she has to hand in her GCSE ICT coursework tomorrow as it is the last date to be handed in, and it was ALL on her laptop, not backed up.
Anyone please... and I really mean EVERYTHING on the laptop has gone.
Thanks

The_Grandmaster

Try http://www.piriform.com/recuva if the document? has been deleted. Does that work? MAKE BACKUP COPIES IF FOUND!

If the computer has malware:
Download Malwarebytes Anti-Malware 1.50 - FileHippo.com
and Install. Click UPDATE then CHECK FOR UPDATES. Then run a quick scan and delete everything found. Post log here.

Click UPDATE then CHECK FOR UPDATES then run a FULL SCAN. Delete everything found. Post log here.

I hope the coursework turns up.

Can you also elaborate what you mean by EVERYTHING is gone too?

loobyloo2

Hi Thanks, but I haven't a clue about computers myself, so need a bit of a hand if possible. not techie at all.
What should I do first? Then how do I post it all on here? Thanks.
Everything means it is a completely clean computer, nothing on it at all, only the recycle bin icon is showing on the home page, all files photos eveything..gone

stilltheone

1. Press the Windows logo key; whilst holding it down press R.
2. Type control folders into the opened window, and then click OK.
3. Click the View tab, and then click Show hidden files, folders and drives.
4. Clear the Hide protected operating system files (Recommended) check box, and then click OK.

RussJK

The first thing is to know that nothing has been deleted - it sounds like it was a rogue antivirus program she saw, and it has just set it to hidden which is quite common. Please don't panic, and don't do anything you can't undo. The LAST step will be to unhide all the files, so don't judge success by whether or not you can see them yet.

1. Download and run a QUICK SCAN with Malwarebytes:
https://www.malwarebytes.org/mbam-download.php
2. If Malwarebytes doesn't run, then try renaming it (this is common)
3. If it still doesn't run, try running Rkill to disable the malware (again, very common)
http://www.bleepingcomputer.com/download/anti-virus/rkill
4. If that doesn't help, then run HitmanPro and do a scan, clean anything it finds
http://www.surfright.nl/en/hitmanpro
5. If Hitmanpro doesn't load up, then try holding down LEFT SHIFT and then double click on the file.

If you still aren't having any luck, then try running a Antivirus Rescue disk. You'll have to burn it from your working computer, and follow the guide on this page:
https://forums.moneysavingexpert.com/discussion/comment/41653210#Comment_41653210

I need to get going, but others will help you through this. Ask any questions you need. The worst thing will be to wipe the computer or do a factory restore. Remember, all the files will still be there.

??. After you have cleaned the infection, then just run Unhide to show the files again:
http://download.bleepingcomputer.com/grinler/unhide.exe

asbokid

Post the coursework questions, and we will guide your daughter to the answers!!

loobyloo2

Which one of these options above should I do???
Scared to start in case I mess it up even more, and feeling sick

stilltheone

Begin with mine in post #4 and copy off her important data.

loobyloo2

asbokid wrote: »

Post the coursework questions, and we will guide your daughter to the answers!!

Huh, I wish it was that easy, it is two years worth of work, she just recently redid it all to try and improve her grade

closed

malwarebytes if it will let you

stilltheone

RussJK wrote: »

The first thing is to know that nothing has been deleted - it sounds like it was a rogue antivirus program she saw, and it has just set it to hidden which is quite common. Please don't panic, and don't do anything you can't undo. The LAST step will be to unhide all the files, so don't judge success by whether or not you can see them yet.

1. Download and run a QUICK SCAN with Malwarebytes:
http://data.mbamupdates.com/tools/mbam-rules.exe
2. If Malwarebytes doesn't run, then try renaming it (this is common)
3. If it still doesn't run, try running Rkill to disable the malware (again, very common)
http://www.bleepingcomputer.com/download/anti-virus/rkill
4. If that doesn't help, then run HitmanPro and do a scan, clean anything it finds
http://www.surfright.nl/en/hitmanpro
5. If Hitmanpro doesn't load up, then try holding down LEFT SHIFT and then double click on the file.

If you still aren't having any luck, then try running a Antivirus Rescue disk. You'll have to burn it from your working computer, and follow the guide on this page:
https://forums.moneysavingexpert.com/discussion/comment/41653210#Comment_41653210

I need to get going, but others will help you through this. Ask any questions you need. The worst thing will be to wipe the computer or do a factory restore. Remember, all the files will still be there.

??. After you have cleaned the infection, then just run Unhide to show the files again:
http://download.bleepingcomputer.com/grinler/unhide.exe

Is number one in your list Malwarebytes AntiMalware or just the offline rules update?