HELP! Where did my desktop icon, music, pictures, and videos go?

By macwhallup ·
Ok so i was on the internet an i started getting trojan viruses an little bubbles kept poppin up saying how i could possibly loose my personal stuff if i dont get the virus in time...well..guess i didnt get it in time. so i downloaded uhm.. malware? an it cleaned everything up nice worked great...but it left my desktop blank i cant find my music but i got my itunes music still ALL my photos are gone my movies videos most of my stuff..gone but get this..i went to go put the itunes icon back on the desktop an some other icons i had on there before i droped it on the desktop an it says move an copy? copy an overwrite. like the icons are there but invisible. i still got my start menu still but its empty like under all programs all gone i dont get it i mean i dint back nothing up on my hard drive..i dont think idk someone PLEASE help me out it would be so appriciative

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Answers

Collapse -

Well you are correct you defiantly do have an Infection of some kind

by OH Smeg Moderator In reply to HELP! Where did my deskto ...

As to how you get rid of it that's a different story.

You first have to find out what you have infected your computer with before you can take steps to Exterminate it.

Try scanning your computer in Safe Mode with your Installed AV product that may revel something. As you have some form of Windows to load Safe Mode all you have to do is Press and Hold down the F8 Key when the BIOS Screen appears till you get a White on Black Screen and then use the Arrow Keys on the Keyboard to highlight Safe Mode and then press Enter.

If that doesn't work you can try using Malware Bytes which you can download and use free from here

Both of the above may not be able to clean the system depending on what it is you have infected the computer with but at the very least they should tell you what the name of the infection is if nothing else then you can goggle a possible cure.


Collapse -

Reponse To Answer

by Galeazzo In reply to Well you are correct you ...

A very good and informative article indeed . It helps me a lot to enhance my knowledge, I really like the way the writer presented his views.
<a href="">donna cerca uomo</a> ; Very good article from the article you increase the value of information has brought me great help.
<a href="">fuoristrada usati</a> ; thanks very much
<a href="">suv usati</a> . bye

Collapse -

Yeah, you downloaded malware, no doubt.

by seanferd In reply to HELP! Where did my deskto ...

Those bubbles popping up were part of the attack to get you to install the trojan. <b>Never click anywhere on those popups unless you know they belong to your AV or Windows or another security app you have installed.</b> Just close the browser. If it won't close, kill the process, and/or unplug your network cable - whatever you can do the quickest. You can also try a hard shutdown when you first see a popup, but best not if it has already been any length of time, as a reboot can then finish installing malware rootkits. Better to scan first in that case.

Now, maybe your files are trashed, or maybe everything is just hidden. You can try cleaning the system from Safe Mode after turning off System Restore with . You probably want to have a go with a rootkit scanner like Rootkit Revealer, and AutoRuns can help you see anything wrong in startup entries .

Check your Desktop - right click it → Arrange Icons By → Show Desktop Icons. If that fixes one symptom, this may not be too bad.

But your best bet is just to get your files off the drive, then nuke and pave. So, get something to which you can copy your files - another drive, or an external drive housing to connect your drive to another machine.

Then you want to look for your files with the OS offline, if the malware couldn't be removed, or if stuff is still broken or hidden. So, boot the machine from a Live CD. You can go for one just to look for the files, or you can try one with recovery tools or AV. But to save your files, you definitely need one that can read your disk and move files to another. Knoppix works well for this, giving you a GUI file manager.


Once you have recovered your files, wipe the drive (not the recovery partition, if your system vendor provided one) with then reinstall Windows via whatever method you have - CD/DVD or recovery partition.

Collapse -

Fellas, he's trying to say that he downloaded some kind of AM

by AnsuGisalas In reply to HELP! Where did my deskto ...

Perhaps even Malwarebytes Antimalware...
As I read it, he's complaining that he lost files in the cleanup.

Of course, it actually sounds like he got a fake AV attack, and followed its "advice". So he could have a rootkit by now.

Collapse -

Reponse To Answer

by seanferd In reply to Fellas, he's trying to sa ...

Which is why I'm suggesting a solution for finding the files, if they exist. Probably too much stuff is broken to fix manually, but that is why I suggest the desktop icon fix to test.

For such a potentially destructive bit of malware, I wouldn't trust the system until it is rebuilt, though.

Collapse -


by macwhallup In reply to HELP! Where did my deskto ...

your right im not sure what i can do i set my icons back up i dont care if i cant get my songs or movies back but my pictures an videos i would love to have back..i knew i should of backed something up

Collapse -

Reponse To Answer

by AnsuGisalas In reply to @seanferd

The popups you got were most likely part of the attack, can you describe what exactly you installed?

Collapse -

recommendation - agree with seanferd

by markp24 In reply to HELP! Where did my deskto ...

Hi, I am in agreement with Seanferd,
I suggest you boot from a Live CD (ubcd4win, or Live linux cd) and copy your data off the drive or image the systems to an external drive (becaure with restoring the data as well as an image will also may contain the virus as well as your backed up documents..
format and reload the system, thats the best way to know its gone. Make sure you have a very good antivirus installed prior to restoring your data andreinstalling your applications.

Collapse -

Files missing are probably hidden

by terry.baresh In reply to HELP! Where did my deskto ...

I've recently cleaned up a few computers that were attacked in the same manner you described above; only to discover that the malicious software apparently modified the attributes of several files and folders. All the Desktop icons were "hidden." The Users folders also were "hidden" and the Startup apps were removed. In both cases, a new partition was created on the hard drive requiring additional partition management before I could "image" the drive. Following the partition repairs, I performed a complete System Restore.

Collapse -

I fixed a problem like this recently

by Spitfire_Sysop In reply to HELP! Where did my deskto ...

It sounds like the behaviour of "Win 7 Anti-Virus 2011" but it's a chameleon it will match your OS so it could be called "Win XP Anti-Virus 2011". It's also armoured so it will protect itself like a rootkit while it is running. It has the ability to defeat common anti-virus programs. MBAM will find it but you have to stop it from running first.

I found and deleted the files from Linux because it cannot hide in Linux.

If you don't know how to do this there are instructions on the web for manual removal.

Use "RKILL.EXE" to close it. (Google this)
The files you need to delete are in the "documents and settings" tree.

Once you can kill the process and delete the hidden files you need to clean up temp files and broken registry links. Use CCleaner to do this.


Then your desktop icons will magically return.

Related Discussions

Related Forums