pc restore by mistake HELP!!!!

crystal9

macman wrote: »

If you did a Factory Restore, it would have given you a BIG warning that you would lose all your data-you couldn't have missed that. Which makes me think that you merely did a System Restore, which is reversible.
You are now going to back up all your recovered data immediately, aren't you?

hmm.....yes i am can you tell me what disc's i need to put into the laptop to keep backup on? i know that seems a dumb question but i really have no clue

Lifeforms

Okay, some what clearer now!

If you are having problems, and it's not quite sure what restore you did, could you back up the files you have found, and perform an actual real factory reset/restore and see if this solves all the connecting problems?

Do you have an external drive, or flashdisk to copy the important files over on to? this is also back up, at the very least burn them onto a cd to get them off, but be aware two individual copies elsewhere is a good idea, and CD's don't last a large amount of life time.

crystal9

Lifeforms wrote: »

Okay, some what clearer now!

If you are having problems, and it's not quite sure what restore you did, could you back up the files you have found, and perform an actual real factory reset/restore and see if this solves all the connecting problems?

Do you have an external drive, or flashdisk to copy the important files over on to? this is also back up, at the very least burn them onto a cd to get them off, but be aware two individual copies elsewhere is a good idea, and CD's don't last a large amount of life time.

hi, it was a system restore, i have now done it again chose the restore that i did on the 13/4/2013 so it is now back to basic again, have downloaded chrome still same error message and also downloaded highjack this so someone could possibly look at it but keep getting error on that to and can not run as administrator as option not showing up.

i have no external hard drive (was looking at buying one but cofused which is best) and nothing else to do back up on. as i have no files on laptop now should i do factory reset?

closed

see speedup sticky thread re hijackthis

system restore would/should not have touched your data at all, the photo's should be where they always were.

blank dvd's and/or portable usb hard drive, (ebuyer has a verbatim 500gB for £35, if you like racing red)

https://forums.moneysavingexpert.com/discussion/4285587

why do you have no files on the laptop, and where are the photo's now?

crystal9

closed wrote: »

see speedup sticky thread re hijackthis

system restore would/should not have touched your data at all, the photo's should be where they always were.

blank dvd's and/or portable usb hard drive, (ebuyer has a verbatim 500gB for £35, if you like racing red)

https://forums.moneysavingexpert.com/discussion/4285587

why do you have no files on the laptop, and where are the photo's now?

i have no files pictures etc as when i did what i did all pictures etc disappeared and the laptop was what it was like when we first got it about 3 years ago.

just done about 167 windows updates :eek:

thanks will take a look at ebuyer and buy one

crystal9

at last done highjack this

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:08:25, on 15/04/2013
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.8112.16476)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\system32\wuauclt.exe
C:\windows\system32\igfxsrvc.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Netintelligence Home\LiteClientAM.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Netintelligence Home\AMMon.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\windows\system32\igfxext.exe
C:\windows\system32\igfxsrvc.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\taskhost.exe
C:\Windows\SoftwareDistribution\Download\Install\wlsetup-all.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\MsiExec.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe
C:\Windows\system32\SearchFilterHost.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.nextgenerationlearning.org.uk/ourhomeaccess
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.nextgenerationlearning.org.uk/ourhomeaccess
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: txthlpBHO Class - {060235DC-6D84-47BD-95D7-A4EF5099A59D} - C:\PROGRA~1\TEXTHE~1\READAN~1\TE4470~1.DLL
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ba3HelperObj Class - {A17B153F-2267-4161-A165-73DCD6C31BEF} - C:\PROGRA~1\TEXTHE~1\READAN~1\ba3bho.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.8313.1002\swg.dll
O2 - BHO: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: @C:\Program Files\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll
O4 - HKLM\..\Run: [IgfxTray] C:\windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [NIHomeAM] "C:\Program Files\Netintelligence Home\LiteClientAM.exe"
O4 - HKLM\..\Run: [XMA] C:\Program Files\XMA Ltd\Licenses.exe
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Netintelligence Home Edition Client (NILiteClient) - Netintelligence Ltd - C:\Program Files\Netintelligence Home\LiteClient.exe
O23 - Service: Service Monitor (ServiceMonitor) - Unknown owner - C:\Windows\system32\srvmon.exe
--
End of file - 7003 bytes

Backbiter

crystal9 wrote: »

i have no files pictures etc as when i did what i did all pictures etc disappeared and the laptop was what it was like when we first got it about 3 years ago.

Hopefully they have just been moved to a hidden folder during the system restore. .

When you right-click on your C-drive in My Computer, and go to Properties, does it indicate that a lot of space is taken up? If it does, then there is a good chance your photos and all other files are still on the hard drive - you'll have to try and locate them. This could involve clicking a box to 'show hidden files' and 'take ownership of a folder'.
I can't remember how to do this, but a quick google should bring up step-by-step instructions. Or else someone will be along to help.

First thing is to right click the C-drive.

crystal9

when i right click on c drive its about just over half way full, there is also a recovery drive which is nearly full but when i clicked on it i had to gain ownership then it said it was empty.

i should be able to get pictures back by using recuvva which i did last night.

crystal9

KimJongUn wrote: »

Bit confusing all of this, seem you have a laptop and a PC and the PC has the problem.

First thing is why did you do the restore in the first place?

I am not sure what the restore did but it seems it put the PC back to what it was when you bought it, so you would have lost all your pictures etc. I mean presumably you have notice they were missing.

So using something which recovers lost files seem to be sensible (which is what you are doing/have done?).

I am wondering if the hard drive has problems? I mean did you do the recovery/restore because you noticed stuff was missing?

KimJongUn wrote: »

How big is you c: drive?
can you say what kind of PC is it and how old, what side are the drives?
does it have one drive or 2?
Or does it have one drive with 2 partitions on it? (a partition is when a drive is made to behave like 2 separate drives).
So a physical drive can can have 2 (or more) logical drives.

hi, I only have a laptop the c drive is 129GB and free space ATM is 53GB i only have 1 driver which is located on the right side. the laptop is a samsung R519 and is about 3 years old.

i am ok with getting pictures ack i think it's just so annoying that i can only use IE browser and not chrome or safari which we used before.

crystal9

KimJongUn wrote: »

Firstly not being able to use google chrome is a minor issue for you as far as I can see as you can access the internet.
But I found this:- well I can't post a link but it says net intelligence blocks chrome and you seem to have net intelligence from your hijack this log. However it seem chrome was working before that does not quite add up.

But chrome is a minor problem really as you can use IE, I would worry about that when you have recovered your data.

Regarding recovering data that should be the first priority, anything else you do (such as installing updates) may well over write lost data

yes your right net intelligence is on the laptop i did have that removed before so will try to remove it again now and will also do the checking for errors