Lost Everything and have to hand in IT coursework tomorrow...HELP

loobyloo2

OK I am totally fuddled.
I did what was said in post 4, nothing else.

I am signed in on my account on her laptop, but we cannot access her user account, pop ups came up saying critical error with hard drive etc etc, but I cant copy and post as it wont let me go from one account to the other,
It is getting really confusing reading all this techie stuff, and I know you are all wanting to help, it,s just that I can't understand most of what is being said:o
so please advise on best option from previous posts.
Thanks

Lil306

loobyloo2 wrote: »

OK I am totally fuddled.
I did what was said in post 4, nothing else.

I am signed in on my account on her laptop, but we cannot access her user account, pop ups came up saying critical error with hard drive etc etc, but I cant copy and post as it wont let me go from one account to the other,
It is getting really confusing reading all this techie stuff, and I know you are all wanting to help, it,s just that I can't understand most of what is being said:o
so please advise on best option from previous posts.
Thanks

Is your account an administrator account? I'd offer to help out via logmein website and I'd look myself, but I'm due to start a 12 hour shift and leave house in 10 mins

If so, logon under your account
Navigate to my computer
Look in the c: or d: drives (for users or documents and settings)
Open the above folder up, find your daughters name
Open this up, open the folder called my documents

Did your daughter know where the work was stored, was it on her "desktop", her "my documents", etc?

debitcardmayhem

OK if you are on your account , open windows explorer and then look for my computer/ c drive/ Users/ then your daughters account see if you can see her files.

loobyloo2

Hi All

I am a user on the guest account, all my stuff is there files, documents etc.
Her account is the administrator account, this comes up, sorry cant copy and paste it.

Windows message

Windows has been unable to save all the data for the file.
[URL="file://\\System32\\496A8300"]\\System32\\496A8300[/URL].
The data has been lost. This error may be caused by a failure of your computer hardware.

Behind this box/message is another but once I click to close message just posted I lose the lot and it closes down, but somethinfg along the lines of

Windows
Hard Drive Error

Thanks

loobyloo2

debitcardmayhem wrote: »

OK if you are on your account , open windows explorer and then look for my computer/ c drive/ Users/ then your daughters account see if you can see her files.

Thanks, but not able to access her as she is administrater and I am guest

loobyloo2

Lil306 wrote: »

Is your account an administrator account? I'd offer to help out via logmein website and I'd look myself, but I'm due to start a 12 hour shift and leave house in 10 mins

If so, logon under your account
Navigate to my computer
Look in the c: or d: drives (for users or documents and settings)
Open the above folder up, find your daughters name
Open this up, open the folder called my documents

Did your daughter know where the work was stored, was it on her "desktop", her "my documents", etc?

Thanks so much for your offer. this is 4 GCSE's worth of work, by the time I've had a crash course with you all this evening it may be worth an extra one for me:p

fannyadams

I would take the computer to school and show it to the IT teacher. tell them what's happened and get them to fix it. They're teachers they've gotta have some kind of nous about 'puters surely...

hope you get it sorted. fingers crossed for you.
FA
x

The_Grandmaster

Sorry didn't realise you were on a different account to the one affected... not sure what to do to be honest at the moment but I have an eye on this board. Does your daughter remember any words at all that came up? Might help decide which is the culprit...
To others: malwarebytes can't scan other people's accounts can it despite being on the same harddrive?

RussJK

Piriform Recuva is a irrelevant as there is rogueware +/- a rootkit active. You'll struggle with recovering files while this is active.

Option 1
Here is a guide to the malware infecting the system, and steps to take to clean it. Just pick the version of Windows, e.g. if she has Windows 7, then click on the Windows 7 link:
http://www.bleepingcomputer.com/virus-removal/remove-windows-7-recovery (Windows 7)
http://www.bleepingcomputer.com/virus-removal/remove-windows-vista-recovery (Windows Vista)
http://www.bleepingcomputer.com/virus-removal/remove-windows-xp-recovery (Windows XP)


Option 2
The other way is to make a Dr Web recovery CD from a computer that isn't infected, then reboot the infected computer using that rescue CD. Using the Dr Web CD, you can copy all the coursework to a USB safely, and also run a very long (hours long) scan

http://www.freedrweb.com/livecd/?lng=en (download LiveCD)
http://www.freedrweb.com/livecd/how_it_works/ (Instructions for Nero Users to make it)
https://forums.moneysavingexpert.com/discussion/comment/41653210#Comment_41653210 (general instructions to make a boot disk and how to boot from one)

I'll come back later to see where you get up to.

The_Grandmaster

But RussJK - OP is on her own (guest) account. Will running whatever (RKILL, malwarebytes etc.) as a guest do anything to her daughter's administrator account?